I observed one day's log was 3-4 times normal size, and inspection
revealed the following repeated over and over, often at 1 second
intervals from about 8:40 am until precisely 8 pm. Subscription to an
open,confirm list at 8:40:13 and the following started at 8:40:53. They
are subscribed to one list. This is clearly an automated process.

Jan 2007 19:57:53 To   [ANONYMOUS]@LISTSERV.SYR.EDU: ***LOGIN***
5 Jan 2007 19:57:53 From [ANONYMOUS]@LISTSERV.SYR.EDU: X-LOGIN
[log in to unmask] 64.132.204.48 PW=[redacted]
5 Jan 2007 19:57:53 To   [ANONYMOUS]@LISTSERV.SYR.EDU: ***OK***
4252C20F6D280524C9
5 Jan 2007 19:57:53 From [ANONYMOUS]@LISTSERV.SYR.EDU: X-LOGCK
4252C20F6D280524C9 AUTHINFO(64.132.204.48) ORGINFO(64.132.204.48)
5 Jan 2007 19:57:53 To   [ANONYMOUS]@LISTSERV.SYR.EDU: ***OK*** 0 0
5 Jan 2007 19:57:53 From [ANONYMOUS]@LISTSERV.SYR.EDU: X-LOGCK
4252C20F6D280524C9 AUTHINFO(64.132.204.48) ORGINFO(64.132.204.48) NOTEBO
(...)
5 Jan 2007 19:57:53 To   [ANONYMOUS]@LISTSERV.SYR.EDU: ***OK*** 0 0 0
5 Jan 2007 19:57:54 From [ANONYMOUS]@LISTSERV.SYR.EDU: X-LOGCK
4376607949CE0C034D AUTHINFO(64.132.204.48) ORGINFO(64.132.204.48)

Anyone shed any additional light on this? The ip belongs to Time Warner
Telecom. That "he" could confirm means it's a real email.

Thanks in advance for help.
Nelson

-- Syracuse University Listserv List Manager
-- Listserv webpage: http://listserv.syr.edu