Take the tour ×  Do the IP addresses in an email header include
information from the device from which the mail is being sent,
or from the mail server?  share|improve this question add
comment  4 Answers  up vote 6 down vote accepted  Usually, each
machine on which the mail transits:    • adds a Received: header
stating from where the email seems to come;   • announces its
name (which could be an IP address) to the next machine, which
may or may not include that information in its own Received:
header.  Here is an example in one of the 100+ spams that I
daily receive:  X-Original-To: pornin@bolet.org Delivered-To:
pornin@bolet.org Received: from davisandsons.net
(213-238-65-230.adsl.inetia.pl [])         by arges.bolet.org
(Postfix) with ESMTP id 7951068C0D4         for
<pornin@bolet.org>; Fri,  7 Oct 2011 21:49:22 +0200 (CEST)
Received: from apache by davisandsons.net with local (Exim 4.67)
(envelope-from <minusculesxdl3@kurdogluholding.com.tr>)
id XD1AV6-73T5L6-H9         for <pornin@bolet.o