need help finding the actual location of this hacker

Post your questions about tracing the source IP address of an email here.
Locked
bonnie_rex
New Member
Posts: 2
Joined: Thu May 21, 2015 10:41 am

need help finding the actual location of this hacker

Post by bonnie_rex » Thu May 21, 2015 10:45 am

The person said they are from Australia but when I do an IP check it says California?



Delivered-To: {removed}@gmail.com
Received: by 10.107.59.204 with SMTP id i195csp551965ioa;
Thu, 21 May 2015 09:54:28 -0700 (PDT)
X-Received: by 10.68.191.101 with SMTP id gx5mr7457272pbc.148.1432227268554;
Thu, 21 May 2015 09:54:28 -0700 (PDT)
Return-Path: <{removed}@outlook.com>
Received: from COL004-OMC2S6.hotmail.com (col004-omc2s6.hotmail.com. [65.55.34.80])
by mx.google.com with ESMTPS id q9si25780239pdn.241.2015.05.21.09.54.28
for <{removed}@gmail.com>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 21 May 2015 09:54:28 -0700 (PDT)
Received-SPF: pass (google.com: domain of {removed}@outlook.com designates 65.55.34.80 as permitted sender) client-ip=65.55.34.80;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of {removed}@outlook.com designates 65.55.34.80 as permitted sender) smtp.mail={removed}@outlook.com...;
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from COL130-W8 ([65.55.34.72]) by COL004-OMC2S6.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751);
Thu, 21 May 2015 09:54:28 -0700
X-TMN: [rhZDHPw3opWdWYgPluJz8mnrUhtW2FgU]
X-Originating-Email: [{removed}@outlook.com]
Message-ID: <COL130-W8BA9A04937D519AB36E0DDEC10@phx.gbl>
Return-Path: {removed}@outlook.com
Content-Type: multipart/alternative;
boundary="_04f4e8eb-7d25-46d4-ad3f-838913320953_"
From: sam shutlot <{removed}@outlook.com>
To: Bonnie Rexeus <{removed}@gmail.com>
Subject: RE: I wonder if you sent an email to me?
Date: Thu, 21 May 2015 18:54:27 +0200
Importance: Normal
In-Reply-To:
<CAGgTSP2Odmz044B=UENeo3p6bG6C2bfsthbbbK+TZHUOCS+Tow@mail.gmail.com>
References:
<CAGgTSP2Lav-2J8S3spori3kcTN_4dRrDLopTp2qiX1d2=QhaLw@mail.gmail.com>,<COL130-W68E459BD9AF8EEF88F1E47DEC10@phx.gbl>,<CAGgTSP2Odmz044B=UENeo3p6bG6C2bfsthbbbK+TZHUOCS+Tow@mail.gmail.com>
MIME-Version: 1.0
X-OriginalArrivalTime: 21 May 2015 16:54:28.0008 (UTC) FILETIME=[CCB77280:01D093E6]

User avatar
Chrispcritters
Forum Administrator
Posts: 2463
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: need help finding the actual location of this hacker

Post by Chrispcritters » Thu May 21, 2015 11:48 am

Unfortunately Microsoft no longer includes the sources IP address in the headers. You're seeing the mail server's IP address, not the senders.

If you don't know the person I suggest that you do not communicate with them.
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.

bonnie_rex
New Member
Posts: 2
Joined: Thu May 21, 2015 10:41 am

Re: need help finding the actual location of this hacker

Post by bonnie_rex » Thu May 21, 2015 3:04 pm

They hacked a friends account.. Thanks for the answer it is appreciated

Locked

Who is online

Users browsing this forum: No registered users and 2 guests