Could you confirm two emails are same person with IP?

[mr2mike]

Hey just wondering if you can determine if one person is using two different emails?

Like Person X has a live.com email, then a supposed person Y has hotmail.com email.

Can you find out if this person X is also Person Y through an IP lookup?

[you&me]

Originally posted by mr2mike
Hey just wondering if you can determine if one person is using two different emails?

Like Person X has a live.com email, then a supposed person Y has hotmail.com email.

Can you find out if this person X is also Person Y through an IP lookup?

All that would prove is that the two emails were sent from the same IP... not necessarily the same person, or same computer, or even from the same location...

[mr2mike]

So is there any way to confirm if the same person is using two different emails?

Or could you confirm through the IP that he logged onto beyond with and determine which email is his?

It is in reference to this thread. Just trying to help out. See the last page, he's got multiple emails going, we think. As he's also logged into beyond too to respond.
http://forums.beyond.ca/showthread.php?s=&threadid=258861

[kenny]

Yes, there are ways to determine if the same person is using multiple anonymous e-mails but posting how to do it will make it extremely easy for someone to prevent detection.

[Zero102]

When people post through hotmail their IPs are logged with Microsoft, but in the email headers it will only show the microsoft mail server IPs (and domain names). From your end you cannot tell if it is the same person, and you can bet your ass the guys who handle these types of issues for microsoft are not going to share this information with you.

If people are using a mail client to send the emails then you can tell their IP address and that would be a start, although since IPs are assigned by ISPs typically in a random (or first-come-first-serve) fashion and are re-assigned frequently you can't prove it for sure. Also, it could be a gateway IP or shared machine as well, that would complicate things further.

[GQBalla]

i learned how to do this in school, but for the life of me i can`t remember how.

[dubbster]

Originally posted by GQBalla
i learned how to do this in school, but for the life of me i can`t remember how.

well that was a waste of time, now wasn't it?

[sputnik]

Originally posted by Zero102
When people post through hotmail their IPs are logged with Microsoft, but in the email headers it will only show the microsoft mail server IPs (and domain names). From your end you cannot tell if it is the same person, and you can bet your ass the guys who handle these types of issues for microsoft are not going to share this information with you.

If people are using a mail client to send the emails then you can tell their IP address and that would be a start, although since IPs are assigned by ISPs typically in a random (or first-come-first-serve) fashion and are re-assigned frequently you can't prove it for sure. Also, it could be a gateway IP or shared machine as well, that would complicate things further.

So much misinformation in this thread.

Here is the CORRECT answer.

When someone sends using hotmail.com/live.com, their IP address is in the headers.

It will be in the headers next to...

"X-Originating-IP"

[Zero102]

I suppose that is true for hotmail. I am used to dealing with other webmail services (horde, etc.) and they do not do this. To show what he is talking about, here is one I received lately:


Received: by 10.142.255.6 with SMTP id c6cs266306wfi;
Tue, 17 Mar 2009 21:22:15 -0700 (PDT)
Received: by 10.115.14.1 with SMTP id r1mr456442wai.171.1237350135303;
Tue, 17 Mar 2009 21:22:15 -0700 (PDT)
Return-Path: <[email protected]>
Received: from snt0-omc1-s7.snt0.hotmail.com (snt0-omc1-s7.snt0.hotmail.com [65.55.90.18])
by mx.google.com with ESMTP id m27si3534186pof.13.2009.03.17.21.22.15;
Tue, 17 Mar 2009 21:22:15 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.90.18 as permitted sender) client-ip=65.55.90.18;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.90.18 as permitted sender) [email protected]
Received: from SNT104-W81 ([65.55.90.9]) by snt0-omc1-s7.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 17 Mar 2009 21:22:14 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_76526961-f7cd-474a-b11b-4938a57ef0aa_"
X-Originating-IP: [68.147.149.181]

Good to know :)