判断邮件源 ip 地址

[lnzyc]

对方是通过 web 方式发送的邮件，如何能够通过邮件找到他登录 web 邮箱界面的 ip 地址？

[lihua]

没有办法吧

[baiyun888]

可以查看邮件原文，从原文里可以看到对方发信 IP
里面有句 Received: from

[yangqi]

这你得去邮件服务器上查

[alect]

web 方式应该是查不到的

[shoaly]

你想要的东西 正好是设计邮件系统的人想要隐藏的.

[lnzyc]

原文里只是发出邮件的服务器地址，不是客户端登录的地址

[lnzyc]

除了上服务器查，真的没有办法吗？

[miyuki]

有些国内邮箱是会暴露发信者 IP 的

[shiji]

@lnzyc 以上大家把能说的都说了。 实在不行主动点，回信，然后插一个带尾巴的小图片，有一定的概率他会点开。

[EIlenZe]

Mac 上有个 App 叫 Mail Detective

Mail Detective tries to determine the geographical origin of email messages in your INBOX via geolocation by parsing the message headers for the sender's IP address, which makes it easier for you to check how plausible the message is. Simply drag the email from your mail program and drop it onto the app ’ s window - Mail Detective will tell you the country and, if this information is available, the city from which the email was sent.

If your mail program does not support Drag and Drop of messages, you can also copy the email headers and paste it into the app.

Please note that Mail Detective will need internet access to work. If the message is older than 24 hours, the city of origin may be outdated and no longer be correct. In the cases where the sender has used a generic email provider, such as Gmail, Mail Detective may not always be able to trace the email back to the sender. In those cases, the location of the webmail service will be displayed.

[azh7138m]

@EIlenZe 都知道 IP 了，还要这种玩意干嘛

[cos]

如果能查看邮件源码，肯定就能找到发件 ip 。

[lnzyc]

邮件源码只有发出服务器的地址，这个用处不大

[bellchu]

邮件头看一下就行了...................................
不想自己看就用 Analyzer ，比如 https://mxtoolbox.com/EmailHeaders.aspx

Delivered-To: [email protected]
Received: by 10.129.102.212 with SMTP id a203csp1271282ywc;
Mon, 13 Feb 2017 11:51:54 -0800 (PST)
X-Received: by 10.84.168.131 with SMTP id f3mr32060629plb.163.1487015514176;
Mon, 13 Feb 2017 11:51:54 -0800 (PST)
Return-Path: <bounces+30983-2c42-xxx=[e-mail]>
Received: from o3.cs.fitbit.com (o3.cs.fitbit.com. [198.21.0.21])
by mx.google.com with ESMTPS id a125si10930544pgc.9.2017.02.13.11.51.53
for <[email protected]>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 13 Feb 2017 11:51:54 -0800 (PST)
Received-SPF: pass (google.com: domain of bounces+30983-2c42-xxx=[e-mail] designates 198.21.0.21 as permitted sender) client-ip=198.21.0.21;
Authentication-Results: mx.google.com;
dkim=pass [email protected];
dkim=pass [email protected];
spf=pass (google.com: domain of bounces+30983-2c42-xxx=[e-mail] designates 198.21.0.21 as permitted sender) smtp.mailfrom=bounces+30983-2c42-xxx=[e-mail];
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=fitbit.com
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=email.fitbit.com; h=content-type:from:mime-version:subject:to; s=smtpapi; bh=ci5se7jP8+YsKFsRREEzHIXw+aE=; b=uTpAP4G2ozdqMzXaG8 73yVEQJaOEOYSkpm6buSlCiPwnZhVMqzhivkWPvL4EissyS1+c43H5iT//XCD2g2 UhZpG3U+GWp+wpor8QlTT1wX1FWtUp0+ueZEkXBZKdH2O0XweXk2Jj2DYGUaWQz3 Q4Qltrrj0/yPNosvbpowpULT8=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=sendgrid.info; h=content-type:from:mime-version:subject:to:x-feedback-id; s=smtpapi; bh=ci5se7jP8+YsKFsRREEzHIXw+aE=; b=cYpRiMGqJeXxbt0Nr4 H5CMhqCfeTBIbu8odkg1vKEVTlbBER8tEMX+0CohHhFpCT+/KQ381q4jEyFqqUbo mRcY8vg+WiPp9w2qpR7fS/xRjHQXsfca1ISRqU/GCClBFTv+Ozjtl6EEpfLSTbHZ 6rScoTLTrnFEjLWM9EkmCuqS8=
Received: by filter0013p1las1.sendgrid.net with SMTP id filter0013p1las1-17681-58A20E58-9A
2017-02-13 19:51:53.001094168 +0000 UTC
Received: from MzA5ODM (a9.fe.a86c.ip4.static.sl-reverse.com [108.168.254.169]) by ismtpd0004p1sjc2.sendgrid.net (SG) with HTTP id wyymutt1TDOAwWauwxsDZg for <xxxxxxxxxxx>; Mon, 13 Feb 2017 19:51:53.021 +0000 (UTC)
Content-Type: multipart/alternative; boundary=1fbcd86a2d9277cf33df6ef0f8931aa7c550147ff806583f4af17f06ff56
Date: Mon, 13 Feb 2017 19:51:53 +0000