Please I really, really, really need help. Dealing with a really sick person

Post your questions about tracing the source IP address of an email here.
Locked
fight4mom
Active Member
Posts: 11
Joined: Thu Aug 31, 2017 8:47 am

Please I really, really, really need help. Dealing with a really sick person

Post by fight4mom » Thu Aug 31, 2017 9:10 am

hey guys new here. I'm real desperate here. So My mom passed last year. I have had issues with my brother and mainly his wife who is a control freak psychopath. We are executors of her will. Before my brother and I became executors, 2 other people had to resign. Also, because my brother lets his wife, (who treated my mother horribly) control his life, (he gave her power of attorney over him so she could handle my mom's estate). Before we became executors, he signed an agreement stating that his wife cannot act as him. SO of course they cannot play by the rules. instead, she created a fake email and is pretending to be him. I know its her. There is no question. I need to prove it is her. I got the headers off the email but since its send through outlook the IP is Private. That doesn't help me obviously. I just want to know if there is anything in these two email headers that suggest the emails are originating from two different people. I thought the different IP addresses proved it until I realized, Outlook assigns different IP's to different accounts. This stuff is a little out of my realm!

Thank you to anyone who answers!


This is my brother's real account

Return-path: <[email protected]>
Return-path: <[email protected]>
Received: from in-mta3.srv.hcvlny.cv.net
(in-mta3.srv.hcvlny.cv.net [167.206.5.69]) by mstr30.srv.hcvlny.cv.net
(Sun Java System Messaging Server 6.2-9.20 (built Jul 15 2010))
with ESMTP id <[email protected]> for
[email protected]; Thu, 30 Mar 2017 22:02:01 -0400 (EDT)
Received: from [40.92.11.95]
([40.92.11.95:45985] helo=NAM04-SN1-obe.outbound.protection.outlook.com)
by in-mta3.srv.hcvlny.cv.net (envelope-from <[email protected]>)
(ecelerity 3.5.9.42398 r(Platform:3.5.9.0))
with ESMTPS (cipher=AES256-SHA256 subject="/C=US/ST=WA/L=Redmond/O=Microsoft
Corporation/OU=Microsoft Corporation/CN=mail.protection.outlook.com")
id 40/E6-07606-698BDD85; Thu, 30 Mar 2017 22:02:00 -0400
Received: from BN3NAM04FT038.eop-NAM04.prod.protection.outlook.com
(10.152.92.52) by BN3NAM04HT079.eop-NAM04.prod.protection.outlook.com
(10.152.93.126) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384)
id 15.1.977.7; Fri, 31 Mar 2017 02:01:54 +0000
Received: from DM5PR13MB1625.namprd13.prod.outlook.com (10.152.92.54)
by BN3NAM04FT038.mail.protection.outlook.com (10.152.92.242)
with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256)
id 15.1.1005.5 via Frontend Transport; Fri, 31 Mar 2017 02:01:54 +0000
Received: from DM5PR13MB1625.namprd13.prod.outlook.com ([10.175.111.16])
by DM5PR13MB1625.namprd13.prod.outlook.com ([10.175.111.16])
with mapi id 15.01.1005.014; Fri, 31 Mar 2017 02:01:54 +0000
Date: Fri, 31 Mar 2017 02:01:53 +0000
From: XXXXXX XXXX <[email protected]>
Subject: Court
To: "[email protected]" <[email protected]>
Message-id:
<[email protected]od.outlook.com>
MIME-version: 1.0
Content-type: multipart/mixed;
boundary=_005_DM5PR13MB162540E44354198FF513429FC9370DM5PR13MB1625namp_
Content-language: en-US
Accept-Language: en-US
Thread-topic: Court
Thread-index: AdKpwjIDLqq7MvUuRkKBlUzl2Gbx0w==
Authentication-Results: in-mta3.srv.hcvlny.cv.net
x-tls.subject="/C=US/ST=WA/L=Redmond/O=Microsoft Corporation/OU=Microsoft
Corporation/CN=mail.protection.outlook.com"; auth=pass (cipher=AES256-SHA256)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=uwTrjsfohpIeEMW+sSEgBocSKT6RIsKXLB5iabq22JE=;
b=tFt+X19bC/PV+3XOY//55AFmrSmCv0/3COhCJ+OqA9utRSVrSaDN9/1nj85NjNEReiB+ZNSb6zRGYRr5qwMDyyluX0cvpgwrJWbyBgfc6f6E9KWSTXqrn/lmnajHAQxPymPczpLmsIe4OpM9h2K8knoGBH8wBIEPVIxI5ohp3P8FtG+RYhdOmSKlw2QUXdbH3zjJ5Ju5L1Zi7/E2dYnAFSvUwRPG0vTOAqCoeRkYRE/4FwKSaycd9DmsKB1+9iAEVnBLnUMq0RO4MPXNfj50c2woxY331IAeF46OHsu8Y0mQZOT9Jk66VDN4jBCoeogP8l4vJuOFAvoNafikzoRSdQ==
authentication-results: optonline.net; dkim=none (message not signed)
header.d=none;optonline.net; dmarc=none action=none header.from=outlook.com;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
X-Flow-Tag: default
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-slblob-mailprops:
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
x-incomingtopheadermarker:
OriginalChecksum:EA8F746757FB96A7E6B2E94E827757B44482244EA09EF17890749946D67C3E54;UpperCasedChecksum:18884BEF187C0B07EE9FFB1D41B804182E91894639A5F6FADDA594B833149C5F;SizeAsReceived:8901;Count:40
x-tmn: [4tu/al7mUVSdB2phCIgTTN6hXXfz4bRD]
x-microsoft-exchange-diagnostics:
1;BN3NAM04HT079;5:/3OtB9lmBswrtFs4K3dw7dC93Uhh8mqKNdz82T26cktrYc7ADaCbnfWGMxIXaOstek7m+hu+93V/Vic70oPCaWvmO2Ddu6SKTPIWNavYN/CB6spngw+4wNSXUpjd8RX5p6H3ltJSYCaDbINL5tGybw==;24:ZSAZAbDZDSyr50h7aykup+5KzcAzshrbIGek0hDlHd9KLhirEo/Zs6/uHmiAEojz6rptxPJFUawF5xcjUh6LlVv6xAVaFo/RmqfeNNCy27w=;7:1HL0KyyQq1y/E+ftd003rAdSj6EVenh4sMJDYp9WDdPPxxJ6Zu0lTt9RXkz0rQksqIBeIyhRsDr6zHCiGesq+k8ZIy61ZHGkRju+2dfjRFAKxPChqous3H3RHZ4PsfohyUZTPemF3fviqIV0PDcB2IJUhvTfamKQZCuqtMbs7jlG94f3t16oKkt3c26ZAAiWOGDXCkhB2AwoAEkomCwSiQYwjbunlNZy5tq9tKylY0162p8rJFck3oyqxYnsB+utUmBp+wT4FZzBJWipvBvi00oXKask7B6lPtzbxAOAXFHo/ldmwpjoQqA7Te05naSc
x-incomingheadercount: 40
x-eopattributedmessage: 0
x-forefront-antispam-report:
EFV:NLI;SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:BN3NAM04HT079;H:DM5PR13MB1625.namprd13.prod.outlook.com;FPR:;SPF:None;LANG:en;
x-ms-office365-filtering-correlation-id: 76c12d4e-ecab-4def-b424-08d477d9e770
x-microsoft-antispam:
UriScan:;BCL:0;PCL:0;RULEID:(22001)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031322274)(201702181274)(1603101448)(1601125374)(1701031045);SRVR:BN3NAM04HT079;
x-ms-exchange-slblob-mailprops:
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
x-exchange-antispam-report-cfa-test:
BCL:0;PCL:0;RULEID:(444000031);SRVR:BN3NAM04HT079;BCL:0;PCL:0;RULEID:;SRVR:BN3NAM04HT079;
x-forefront-prvs: 02638D901B
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Mar 2017 02:01:53.9022 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3NAM04HT079
X-Optimum-Rcpt: [email protected]
Original-recipient: rfc822;[email protected]

AND THE FAKE ADDRESS


X-Exchange-Antispam-Report-Cfa-Test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(444000031);SRVR:BY2NAM03HT087;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:BY2NAM03HT087;
X-Incomingheadercount: 44
X-Ms-Exchange-Crosstenant-Originalarrivaltime: 30 Aug 2017 15:47:19.8426 (UTC)
X-Flow-Tag: default
X-Originatororg: outlook.com
X-Ms-Exchange-Transport-Crosstenantheadersstamped: BY2NAM03HT087
X-Forefront-Antispam-Report: SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:BY2NAM03HT087;H:MWHPR13MB1839.namprd13.prod.outlook.com;FPR:;SPF:None;LANG:;
X-Exchange-Antispam-Report-Test: UriScan:(25950854126504)(209352067349851);
Authentication-Results: in-mta3.srv.hcvlny.cv.net x-tls.subject="/C=US/ST=WA/L=Redmond/O=Microsoft Corporation/OU=Microsoft Corporation/CN=mail.protection.outlook.com"; auth=pass (cipher=AES256-SHA256)
Authentication-Results: outbound.protection.outlook.com; spf=skipped (originating message); dkim=none (message not signed) header.d=none; dmarc=none action=none header.from=outlook.com;
Return-Path: <[email protected]>
Return-Path: <[email protected]>
X-Ms-Exchange-Crosstenant-Fromentityheader: Internet
Spamdiagnosticoutput: 1:99
X-Ms-Tnef-Correlator:
X-Ms-Exchange-Crosstenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
Spamdiagnosticmetadata: NSPM
X-Ms-Publictraffictype: Email
Original-Recipient: rfc822;[email protected]
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(300000503095)(300135400095)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(2017031322404)(1601125374)(1603101448)(1701031045)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:BY2NAM03HT087;
Thread-Index: AQHTIadD5G544MDH0kmubaLKa25vBA==
Accept-Language: en-US
Message-Id: <[email protected]od.outlook.com>
Content-Language: en-US
Mime-Version: 1.0
X-Ms-Office365-Filtering-Correlation-Id: 2bfd5850-97dd-4391-4a18-08d4efbe659b
X-Eopattributedmessage: 0
Thread-Topic: ??
X-Ms-Has-Attach:
Content-Type: multipart/alternative; boundary=_000_MWHPR13MB1839CF95583857A6FC56351EDD9C0MWHPR13MB1839namp_
Received: from in-mta3.srv.hcvlny.cv.net (in-mta3.srv.hcvlny.cv.net [167.206.5.69]) by mstr30.srv.hcvlny.cv.net (Sun Java System Messaging Server 6.2-9.20 (built Jul 15 2010)) with ESMTP id <[email protected]> for [email protected]; Wed, 30 Aug 2017 11:47:21 -0400 (EDT)
Received: from [40.92.7.72] ([40.92.7.72:2465] helo=NAM03-CO1-obe.outbound.protection.outlook.com) by in-mta3.srv.hcvlny.cv.net (envelope-from <[email protected]>) (ecelerity 3.5.9.42398 r(Platform:3.5.9.0)) with ESMTPS (cipher=AES256-SHA256 subject="/C=US/ST=WA/L=Redmond/O=Microsoft Corporation/OU=Microsoft Corporation/CN=mail.protection.outlook.com") id 1A/F6-27823-80ED6A95; Wed, 30 Aug 2017 11:47:21 -0400
Received: from BY2NAM03FT034.eop-NAM03.prod.protection.outlook.com (10.152.84.57) by BY2NAM03HT087.eop-NAM03.prod.protection.outlook.com (10.152.85.209) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1385.11; Wed, 30 Aug 2017 15:47:20 +0000
Received: from MWHPR13MB1839.namprd13.prod.outlook.com (10.152.84.60) by BY2NAM03FT034.mail.protection.outlook.com (10.152.84.211) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1385.11 via Frontend Transport; Wed, 30 Aug 2017 15:47:19 +0000
Received: from MWHPR13MB1839.namprd13.prod.outlook.com ([10.171.146.9]) by MWHPR13MB1839.namprd13.prod.outlook.com ([10.171.146.9]) with mapi id 15.20.0035.002; Wed, 30 Aug 2017 15:47:19 +0000
X-Ms-Exchange-Messagesentrepresentingtype: 1
X-Ms-Traffictypediagnostic: BY2NAM03HT087:
X-Tmn: [+EbSImX9l5d3yW2LXyt35RwNaHBQSk8v]
X-Incomingtopheadermarker: OriginalChecksum:9BAE69D409E9AE703C78593F18B241F6A3AF463383CC32F622821A0086D6E8BD;UpperCasedChecksum:11A14ACF4AE4198BF692EC49FC8AB7B32EC9241FB96298E2B4F26BEC4615C6D1;SizeAsReceived:6763;Count:44
X-Microsoft-Exchange-Diagnostics: 1;BY2NAM03HT087;6:dKYcm4088iBv9z4aDoMzBITYA58k6lH1B4YfY4FZpL0RJFd7PuhThz/j7ysF1HjHfrZUoFWzbcMPQSoTrNC50QLpG0lKw/e4Q+fX4zRM67oKtv7YqxlkOYb15ChoUgDDH3DP4KJRkEiqnmG8z9q16gnMqoeBQS9XNN9TcAbJJnxTf4RIdn/tHYGmSkjynoB06QogcopTU1fIa8Sxxifsk18pHVSxfMonJ+nUU6sdlWK9RxdrPQ74p4FR69LgDNmUegbsElloYLB0UbF61nxsyS61yBdukiCtWiwkuSeOdJrmDuUvVLLmVj+u1zmBdhlzTvwb0nP8QxUHWerkT9ARXg==;5:vttFI0uHjAQk3kL8iPFQDVdGnZsILJPF5pokUwN15pTh0NKmFzi8bkBIUFCSN/Pr+HmWjaTDEdNbd12Ntp2fki2kFoEvHaEe4fsyBeDexfaFoUu8HEtKnox5g2RZ03RjpBwl5yMVxTWdYywrVdJViA==;24:WdUwA10wR+tazS8aClLpe0yroV7L0dQ9M03IeYwITmR0jMIv4vPJuUF6R02N/f+8OZEKwjx7UqQjFDZ9a56/fHAhVPVpH5oxzs8YX1qIkds=;7:zPDtCXpqOeIcz9I+FBGyTV00CPzEJE0Slnk93AIdWohimBvG7nSj6vTsNtiA2GvKHvyBwCvt/dkk41zVO4Zp1BxB8P2hoIRZFEyS13hTO0yPaDF9Xgp1fjlXB2YQMa8+DINrTLU+hO8SKxKIH9UH6V2alS+9tefg8ycdOyxXgtiBeC85I89Jl5vLh78/cpEEACOUnyvhPSfOJI1pybfYEubACZUiexXJQBD+WeQL15k=
X-Optimum-Rcpt: [email protected]
X-Forefront-Prvs: 041517DFAB
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=XSm4tdKeFSMnUQ8FDEQkK3FCz6jfOMVXklXygfiX1es=; b=Wtrwffmh1WkX3yhZdSqgQDMMOkbwuqJrYEGmQMkw2e5JN1V09/HmDOPdVGDb9tlhtGlQ8d8hwcpQidYDNgwgpyNIqCT43BmFJt8zU/hG+O9jIcq3izc9lrwuJbMpE6Fnqv/DbEl8Dkkbu/qigzYvfAyEwA+f2SlWI3l7ufZLKJ8m0SFEulqe4Ulb6gkCSWc4X8Z5PvK+wv0rQx7YJAmfQvcQ47Mkvn53RZkrWD9EGNpmkQyJ0dXX42OLUFynk4kOCeAA91L9CDrborAHwK1T9+VDIuBf69YRU34RmVExWwDa8ekHaNKsEuxg3Ojq9W4H+4o9r2pkX5qJIdPsjA7f4g==

User avatar
Chrispcritters
Forum Administrator
Posts: 2538
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: Please I really, really, really need help. Dealing with a really sick person

Post by Chrispcritters » Thu Aug 31, 2017 9:58 am

Outlook does not include the sender's IP address.

If they share the same residence they share the same internet connection and the same IP address -- unless she is accessing the account from her work.

You could try one or more of the techniques here: http://whatismyipaddress.com/get-ip
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.

fight4mom
Active Member
Posts: 11
Joined: Thu Aug 31, 2017 8:47 am

Re: Please I really, really, really need help. Dealing with a really sick person

Post by fight4mom » Thu Aug 31, 2017 11:41 am

well i did a comparison of a bunch of headers and the times they were sent to me. i can see when she is at home and at work, as there are two different IP's on her emails and so I know one is home and one is work. I did the same with my brother's emails from his actual real email. After that I made myself 2 different outlook accounts and sent myself two emails. I thought my IP address would be the same on both since I was sending them both from the same phone, on the same wifi, but to my surprise they were different. I just want to know is there anything else in these two headers that would signify that these emails are being sent from two different locations or two different devices??? Like how do Mapi id's work? I compared those as well. Sometimes they are consistent sometimes they aren't.

fight4mom
Active Member
Posts: 11
Joined: Thu Aug 31, 2017 8:47 am

Re: Please I really, really, really need help. Dealing with a really sick person

Post by fight4mom » Thu Aug 31, 2017 11:42 am

ps thank you for your response

fight4mom
Active Member
Posts: 11
Joined: Thu Aug 31, 2017 8:47 am

Re: Please I really, really, really need help. Dealing with a really sick person

Post by fight4mom » Thu Aug 31, 2017 11:48 am

oh and their ip's are actually different at home. That along with my test, lead me to believe that outlook assigns the IP's to the emails, not their network. My brother is a software programmer which makes me think he may have done something to mess with the IP's. Perhaps he is routing them through some other server. I believe his outlook email goes through more servers than mine. I'm actually going to check it out.

User avatar
Chrispcritters
Forum Administrator
Posts: 2538
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: Please I really, really, really need help. Dealing with a really sick person

Post by Chrispcritters » Thu Aug 31, 2017 11:52 am

Outlook does not assign IP addresses.

Yes, it's possible they are using different internet connections, VPN, proxies, who knows.

If you believe someone in impersonating your brother for fraudulent purposes I suggest that you work with a lawyer to handle the will/estate.
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.

fight4mom
Active Member
Posts: 11
Joined: Thu Aug 31, 2017 8:47 am

Re: Please I really, really, really need help. Dealing with a really sick person

Post by fight4mom » Thu Aug 31, 2017 1:37 pm

with all due respect, if outlook doesnt assign the IP, who does? How do you suppose that when I made 2 different accounts for myself and then emailed myself from the same place, using the same internet service, that I ended up with two different IP addresses? If I am identifying my IP address correctly you can see below that they are two different ones. I know Email services like Gmail hide their users personal IP's. this is quite the mystery because their IP's are static at home and at work on every email they send. I would love to have this further investigated by law enforcement but an accusation really isn't enough to work with. I need solid evidence.

Received: from in-mta8.srv.hcvlny.cv.net (in-mta8.srv.hcvlny.cv.net [167.206.5.113]) by mstr30.srv.hcvlny.cv.net (Sun Java System Messaging Server 6.2-9.20 (built Jul 15 2010)) with ESMTP id <[email protected]> for [email protected]; Sun, 27 Aug 2017 23:30:03 -0400 (EDT)
Received: from [40.92.7.51] ([40.92.7.51:45616] helo=NAM03-CO1-obe.outbound.protection.outlook.com) by in-mta8.srv.hcvlny.cv.net (envelope-from <[email protected]>) (ecelerity 3.5.9.42398 r(Platform:3.5.9.0)) with ESMTPS (cipher=AES256-SHA256 subject="/C=US/ST=WA/L=Redmond/O=Microsoft Corporation/OU=Microsoft Corporation/CN=mail.protection.outlook.com") id 8F/5F-11137-B3E83A95; Sun, 27 Aug 2017 23:30:03 -0400
Received: from DM3NAM03FT013.eop-NAM03.prod.protection.outlook.com (10.152.82.58) by DM3NAM03HT094.eop-NAM03.prod.protection.outlook.com (10.152.83.81) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1385.11; Mon, 28 Aug 2017 03:30:01 +0000
IP address 10.152.82.58 was ignored because it is a Private-Use Network address.
Received: from DM5PR19MB1420.namprd19.prod.outlook.com (10.152.82.51) by DM3NAM03FT013.mail.protection.outlook.com (10.152.82.79) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1385.11 via Frontend Transport; Mon, 28 Aug 2017 03:30:02 +0000
IP address 10.152.82.51 was ignored because it is a Private-Use Network address.
Received: from DM5PR19MB1420.namprd19.prod.outlook.com ([10.175.220.151]) by DM5PR19MB1420.namprd19.prod.outlook.com ([10.175.220.151]) with mapi id 15.01.1385.013; Mon, 28 Aug 2017 03:30:02 +0000
IP address 10.175.220.151 was ignored because it is a Private-Use Network address.


Received: from in-mta3.srv.hcvlny.cv.net (in-mta3.srv.hcvlny.cv.net [167.206.5.69]) by mstr30.srv.hcvlny.cv.net (Sun Java System Messaging Server 6.2-9.20 (built Jul 15 2010)) with ESMTP id <[email protected]> for [email protected]; Sun, 27 Aug 2017 23:20:59 -0400 (EDT)
Received: from [40.92.0.106] ([40.92.0.106:11599] helo=NAM01-BN3-obe.outbound.protection.outlook.com) by in-mta3.srv.hcvlny.cv.net (envelope-from <[email protected]>) (ecelerity 3.5.9.42398 r(Platform:3.5.9.0)) with ESMTPS (cipher=AES256-SHA256 subject="/C=US/ST=WA/L=Redmond/O=Microsoft Corporation/OU=Microsoft Corporation/CN=mail.protection.outlook.com") id ED/95-27823-B1C83A95; Sun, 27 Aug 2017 23:20:59 -0400
Received: from BN3NAM01FT004.eop-nam01.prod.protection.outlook.com (10.152.66.57) by BN3NAM01HT119.eop-nam01.prod.protection.outlook.com (10.152.66.118) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1341.15; Mon, 28 Aug 2017 03:20:58 +0000
IP address 10.152.66.57 was ignored because it is a Private-Use Network address.
Received: from MWHPR2201MB1344.namprd22.prod.outlook.com (10.152.66.51) by BN3NAM01FT004.mail.protection.outlook.com (10.152.66.174) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1341.15 via Frontend Transport; Mon, 28 Aug 2017 03:20:58 +0000
IP address 10.152.66.51 was ignored because it is a Private-Use Network address.
Received: from MWHPR2201MB1344.namprd22.prod.outlook.com ([10.174.162.147]) by MWHPR2201MB1344.namprd22.prod.outlook.com ([10.174.162.147]) with mapi id 15.01.1385.013; Mon, 28 Aug 2017 03:20:58 +0000
IP address 10.174.162.147 was ignored because it is a Private-Use Network address.

fight4mom
Active Member
Posts: 11
Joined: Thu Aug 31, 2017 8:47 am

Re: Please I really, really, really need help. Dealing with a really sick person

Post by fight4mom » Fri Sep 01, 2017 6:59 pm

Chrispcritters wrote:
Thu Aug 31, 2017 9:58 am
Outlook does not include the sender's IP address.

If they share the same residence they share the same internet connection and the same IP address -- unless she is accessing the account from her work.

You could try one or more of the techniques here: http://whatismyipaddress.com/get-ip
Hey man I have to say thank you to you for sharing this link with me. I used that email tracker and it got me exactly what I needed. just know that if we weren't on the internet I would totally give you a high five and maybe even buy you a beer...if you like beer. If not Id buy you a pizza or some other food you enjoy. You helped a sister out.

Locked

Who is online

Users browsing this forum: No registered users and 1 guest