On Sat, 15 Jul 95 23:06:05 CDT you said:
>   We had at least two flurries of bogus (probably forged) subscriptions
>to many lists here today.  They arrived here as "X-FOR" jobs from other
>LISTSERV servers (as shown below) so I couldn't track the real IP origins.
>Both addresses bounced as "User unknown".
>
>   I did a quiet serve off and quiet delete * for these addresses here but
>I suspect they may have hit other places too.
>
>Bogus Address                   X-For From       Arrived at NDSUVM1
>
>[log in to unmask]  LISTSERV@MARIST  7/15 04:23 CDT (0923 GMT)
>      (hit about 86 lists)
LISTSERV here was down Saturday am from about 2am-5am EDT while a backups
were done.  At 2:21am EDT, SMTP received a file from io.org (142.77.70.2)
that was processed by LISTSERV at 5:12am EDT with these subscriptions.
There were about 2700 individual subscribe request followed by reviews
in the list.  The requests used the 'subscribe listname@fqdn full name'
format.
 
>
>[log in to unmask]              LISTSERV@RPITSVM 7/15 22:06 CDT (0306 GMT 7/16)
>
>-----------
>Marty Hoag   [log in to unmask]            US Mail: NDSU ITS
/ahw