[As posted to news.admin.misc, news.admin.net-abuse.misc,
alt.current-events.net-abuse, and panix.questions on 6 July 95]

The types of mailing lists that were hit (small and private ones as
well as large ones) makes me think that the Olga-Spammer got his
attack list by sending the "lists" command to majordomo servers at
many sites.

It might be possible to track where this person came from (or at least
where he picked up the replies from) if I can analyze the majordomo
logs of a number of sites who were attacked in this manner.

If you are a majordomo admin at your site and you were attacked and
you wish to help find the person, please send me the log entries of
all people who sent the "lists" command from June 20 1995 until today.
Please be sure to grep it down to just the lists commands, or you'll
flood my mailbox!

If you aren't an admin, but wish to help, please forward this to the
administrators of your lists that were attacked.  (Please take care
not to bomb them with this, however.)

Thanks...  I'll keep people updated via: 
http://www.panix.com/~lan

--Larry
lan@panix.com