On 16/09/2022 04:46, Bill Cole via mailop wrote: >> Anyone recognize them? > > Looks like the same vt.edu bozos who have at least 2 prior rounds of bad > research behavior.
I've blocked them previously: 2020-03-17 3.104.129.119 comment "proxy-research.com" 2020-03-17 15.164.73.143 comment "proxy-research.com" 2020-03-17 15.188.24.147 comment "proxy-research.com" 2020-03-17 34.227.19.103 comment "proxy-research.com" 2020-03-17 54.94.237.221 comment "proxy-research.com" 2020-03-17 54.187.79.149 comment "proxy-research.com" 15.164.73.143 may have been discontinued since then: 143.73.164.15.in-addr.arpa domain name pointer ec2-15-164-73-143.ap-northeast-2.compute.amazonaws.com. 34.227.19.103 is the first one to use the new domain: 119.129.104.3.in-addr.arpa domain name pointer starttls-sydney.proxy-research.com. 147.24.188.15.in-addr.arpa domain name pointer starttls-paris.proxy-research.com. 103.19.227.34.in-addr.arpa domain name pointer starttls-virginia.securing-email.com. 221.237.94.54.in-addr.arpa domain name pointer starttls-saopaulo.proxy-research.com. 149.79.187.54.in-addr.arpa domain name pointer starttls-oregon.proxy-research.com. I think it's just a coincidence that the one you mention is named "virginia" because it's hosted at AWS. I don't think this is vt.edu. -- Simon Arlott _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
