判断邮件源 ip 地址

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

现在注册

已注册用户请登录

V2EX 提问指南

这是一个创建于 2858 天前的主题，其中的信息可能已经有所发展或是发生改变。

对方是通过 web 方式发送的邮件，如何能够通过邮件找到他登录 web 邮箱界面的 ip 地址？

邮件

Web

地址

邮箱

14 条回复 • 2017-02-14 14:04:31 +08:00

lihua

2017-02-14 10:21:47 +08:00

没有办法吧

baiyun888

2017-02-14 10:33:43 +08:00

可以查看邮件原文，从原文里可以看到对方发信 IP
里面有句 Received: from

yangqi

2017-02-14 10:34:05 +08:00

这你得去邮件服务器上查

alect

2017-02-14 10:35:10 +08:00

web 方式应该是查不到的

shoaly

2017-02-14 10:45:21 +08:00

你想要的东西正好是设计邮件系统的人想要隐藏的.

lnzyc

2017-02-14 10:57:51 +08:00

原文里只是发出邮件的服务器地址，不是客户端登录的地址

lnzyc

2017-02-14 10:58:15 +08:00

除了上服务器查，真的没有办法吗？

miyuki

2017-02-14 11:06:00 +08:00 via Android

有些国内邮箱是会暴露发信者 IP 的

shiji

2017-02-14 12:59:00 +08:00

@lnzyc 以上大家把能说的都说了。实在不行主动点，回信，然后插一个带尾巴的小图片，有一定的概率他会点开。

EIlenZe

2017-02-14 13:13:31 +08:00 via iPhone

Mac 上有个 App 叫 Mail Detective

Mail Detective tries to determine the geographical origin of email messages in your INBOX via geolocation by parsing the message headers for the sender's IP address, which makes it easier for you to check how plausible the message is. Simply drag the email from your mail program and drop it onto the app ’ s window - Mail Detective will tell you the country and, if this information is available, the city from which the email was sent.

If your mail program does not support Drag and Drop of messages, you can also copy the email headers and paste it into the app.

Please note that Mail Detective will need internet access to work. If the message is older than 24 hours, the city of origin may be outdated and no longer be correct. In the cases where the sender has used a generic email provider, such as Gmail, Mail Detective may not always be able to trace the email back to the sender. In those cases, the location of the webmail service will be displayed.

azh7138m

2017-02-14 13:28:00 +08:00 via Android

@EIlenZe 都知道 IP 了，还要这种玩意干嘛

cos

2017-02-14 13:32:48 +08:00

如果能查看邮件源码，肯定就能找到发件 ip 。

lnzyc

2017-02-14 13:50:30 +08:00

邮件源码只有发出服务器的地址，这个用处不大

bellchu

2017-02-14 14:04:31 +08:00

邮件头看一下就行了...................................
不想自己看就用 Analyzer ，比如 https://mxtoolbox.com/EmailHeaders.aspx

Delivered-To: [email protected]
Received: by 10.129.102.212 with SMTP id a203csp1271282ywc;
Mon, 13 Feb 2017 11:51:54 -0800 (PST)
X-Received: by 10.84.168.131 with SMTP id f3mr32060629plb.163.1487015514176;
Mon, 13 Feb 2017 11:51:54 -0800 (PST)
Return-Path: <bounces+30983-2c42-xxx=gmail.com@email.fitbit.com>
Received: from o3.cs.fitbit.com (o3.cs.fitbit.com. [198.21.0.21])
by mx.google.com with ESMTPS id a125si10930544pgc.9.2017.02.13.11.51.53
for <[email protected]>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 13 Feb 2017 11:51:54 -0800 (PST)
Received-SPF: pass (google.com: domain of bounces+30983-2c42-xxx=gmail.com@email.fitbit.com designates 198.21.0.21 as permitted sender) client-ip=198.21.0.21;
Authentication-Results: mx.google.com;
dkim=pass [email protected];
dkim=pass [email protected];
spf=pass (google.com: domain of bounces+30983-2c42-xxx=gmail.com@email.fitbit.com designates 198.21.0.21 as permitted sender) smtp.mailfrom=bounces+30983-2c42-xxx=gmail.com@email.fitbit.com;
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=fitbit.com
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=email.fitbit.com; h=content-type:from:mime-version:subject:to; s=smtpapi; bh=ci5se7jP8+YsKFsRREEzHIXw+aE=; b=uTpAP4G2ozdqMzXaG8 73yVEQJaOEOYSkpm6buSlCiPwnZhVMqzhivkWPvL4EissyS1+c43H5iT//XCD2g2 UhZpG3U+GWp+wpor8QlTT1wX1FWtUp0+ueZEkXBZKdH2O0XweXk2Jj2DYGUaWQz3 Q4Qltrrj0/yPNosvbpowpULT8=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=sendgrid.info; h=content-type:from:mime-version:subject:to:x-feedback-id; s=smtpapi; bh=ci5se7jP8+YsKFsRREEzHIXw+aE=; b=cYpRiMGqJeXxbt0Nr4 H5CMhqCfeTBIbu8odkg1vKEVTlbBER8tEMX+0CohHhFpCT+/KQ381q4jEyFqqUbo mRcY8vg+WiPp9w2qpR7fS/xRjHQXsfca1ISRqU/GCClBFTv+Ozjtl6EEpfLSTbHZ 6rScoTLTrnFEjLWM9EkmCuqS8=
Received: by filter0013p1las1.sendgrid.net with SMTP id filter0013p1las1-17681-58A20E58-9A
2017-02-13 19:51:53.001094168 +0000 UTC
Received: from MzA5ODM (a9.fe.a86c.ip4.static.sl-reverse.com [108.168.254.169]) by ismtpd0004p1sjc2.sendgrid.net (SG) with HTTP id wyymutt1TDOAwWauwxsDZg for <xxxxxxxxxxx>; Mon, 13 Feb 2017 19:51:53.021 +0000 (UTC)
Content-Type: multipart/alternative; boundary=1fbcd86a2d9277cf33df6ef0f8931aa7c550147ff806583f4af17f06ff56
Date: Mon, 13 Feb 2017 19:51:53 +0000