0

I already made some researches about this subject on the interwab, but I couldn't find what I wanted.

Here is the point.

I'm a beginner highly interested onto web security and something blew my mind.

I had a mail from someone (so I know that this is a living person) and I tried to get his IP address.

I found some useless IP like his server (google) and some other, but, some of them were interesting.

They were part of the 10.0.0.0 - 10.255.255.255 range

So far, the trackers I used either show me the ocean, or told me that they were untraceable.

Could someone light my head up on this ? What are those IP address, and why can't I track them down ?

Here is the source code I extracted from the mailing page :

Return-Path: [email protected] //adress and IP voluntary hidden.
Received: from 10.xxx.xx.xx (LHLO lpn-prd-vrin019) (10.xx.xx.xx) by
 lpn-prd-mstr050 with LMTP; Wed, 19 Aug 2015 00:36:01 +0200 (CEST)

This is the very first time I'm seeing this kind of thing..

Thanks for your consideration!

5
  • 2
    10.xxx.xx.xx is a private IP address so you cannot locate it.
    – DavidPostill
    Aug 19, 2015 at 10:00
  • If someone sends email using mail.google.com you cannot find their location.
    – DavidPostill
    Aug 19, 2015 at 10:01
  • But, why does Google hides their IP address while other email providing services does not ?
    – Xcrowzz
    Aug 19, 2015 at 10:02
  • I guess for sender's privacy
    – burtek
    Aug 19, 2015 at 11:02
  • send them an email (perhaps from a different account) with a link to a website that you control. If they click the link, you can get their (router's) IP Aug 19, 2015 at 18:49

1 Answer 1

1

The Received headers in an email only track the mail servers that an email passes through. Mail servers run software like sendmail, exim, qmail, postfix, and such.

When a user access gmail, he is accessing a web site, not a mail server. The gmail web site runs some kind of mail server software and sends email. The gmail mail server becomes the first (or last, depending on how you look at it) server in the email chain.

10.X.X.X IP addresses are reserved by RFC1918 for internal use. Anybody can use those IP addresses, as long as they are kept internal and network-address-translated to a public IP address before traversing the Internet.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .