Best way to track what IP address a user is sending from.
Question asked by David Meller - 1/24/2019 at 7:52 AM
We are looking to find a way to locate what IP address a user is sending SMTP traffic from. 

We have a domain that has one user who sends via SMTP out our server. What is the best way to track and find the IP of each session?

4 Replies

Reply to Thread
Matt Petty Replied
Employee Post Marked As Answer

Yes there is! You can get this information by using the SMTP Logs. Login as System Admin, Go to Troubleshooting on the left. In the Options tab find SMTP In protocol logging, set that to Detailed.

Wait for the user to send their mail.

Now you can check the log, same area but in the View Logs tab you can search the SMTP logs for
Authenticating as <the email address of the user>
This will return the Time, Session ID, and their IP.

Matt Petty
Software Developer
SmarterTools Inc.
(877) 357-6278
echoDreamz Replied
I use a C# app I created, select a date range, the username and it will produce a report that gives all IPs and how many emails were sent from each IP, the date/time and hostname of the IP (if available).

If you are interested, I can strip the feature out of the app and put it together for community use.
David Meller Replied
That would be great!

Thanks again

David Meller Replied
Thanks Matt

Reply to Thread