A quick parse of my logs suggests that it's a spam-only operation, so
likely won't correlate to any particular front-end mail service. I mean
just 100% correlation with spam in my logs, and not a small amount of
logs either.
On 2023-03-03 17:12, Jan Schaumann via mailop wrote:
Hey,
Does anybody here know who h-email.net is? I see
mail.h-email.net listed as the MX for a large number
of domains, but can't identify the organization behind
it. (Registered through Amazon, but whois privacy...)
There are some indicators on the web that this might
be used for disposable mails, but it's not clear to me
if that is the sole use.
The other curious thing is that mail.h-email.net has
only IPv4 addresses (in Digital Ocean and Hetzner),
but h-email.net has an SPF policy that only allows
IPv6 connections:
$ host mail.h-email.net
mail.h-email.net has address 178.62.199.248
mail.h-email.net has address 165.227.156.49
mail.h-email.net has address 165.227.159.144
mail.h-email.net has address 5.75.171.74
mail.h-email.net has address 5.161.98.212
mail.h-email.net has address 167.235.143.33
$ host -t txt h-email.net
h-email.net descriptive text "v=spf1 ip6:fd96:1c8a:43ad::/48 -all"
Any thoughts?
-Jan
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
