I'm sorry if this question have already been asked but reading different messages it made me confuse.
I'm trying to track a mail from a friend.
He used a hotmail addres (so he probably sent it from hotmail's website).
I tried to look at the header and find some IP adress which belonged to server.
I then looked at the x-originating IP and it pin pointed near the place where he lives but it seems like it's the IP of a server. So I wondered is it possible to track it fown further or am I stuck at that server?
I know I probably won't be able to do so but it's important to me(I have no bad motives).
Thank you for answering and I'm sorry if the thread isn't uselful.
Is it possible for servers to have differents names but same id?
Here a line from the header of a mail :
Received: from BAY161-W29 ([18.104.22.168]) by bay0-omc2-s14.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
and here from another mail :
Received: from BAY161-W2 ([22.214.171.124]) by bay0-omc2-s9.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Seems like BAY161-W29 and BAY161-W2 have the same IP. Is it normal?
Thanks for your question fullmetal20.
Email can usually only be tracked to a general location, in this case the hotmail server. Microsoft owns Hotmail and I'm sure they have many email servers around the world which can mean that the IP of the server has no bearing at all on the location of the user.
The x-originating IP can sometimes be used to gain a general location as well but the user could be using a proxy.
Where no laws are broken, it is generally impossible to prove who did or did not send an email or where they sent it from.