In article , Carlos E.R.
wrote:
There was a high profile case in the USA, some whistle blower, that used
TOR to connect somewhere and post information. But once he connected
without TOR, so they investigated that IP and found him.

if that's the case i'm thinking of, he wasn't found by tracking his ip,
but rather that he made a threat to a school and there was a single tor
connection from that school at the same time as the threat was made.

it doesn't take a lot to figure out that those were related.

they knocked on his door and he confessed.

No, it was a different case. Someone high in the military.

link it.

Do your own research, it is a known case :-D

you made the claim.

Example, Chelsea Manning

https://www.theguardian.com/commenti...anning-wikilea
ks-security
But the reason Manning is now in military detention, awaiting court
martial, perhaps ultimately lies in a smaller action still, an error
thousands of email users make daily: choosing "cc" rather than "bcc".

In a plea for donations sent in 2009, that simple error led Julian
Assange to inadvertently reveal the identities of WikiLeaks' first 58
supporters to each other. One, ex-hacker Adrian Lamo, decided to use
this as an opportunity to test the whistleblowing site's honesty *
and "leaked" the email list to WikiLeaks.
....
Lamo turned over the chatlogs to US authorities

that wasn't tracing ip addresses.

https://blogs.cornell.edu/newmediaandsociety2015bhv6/2015/04/20/infrastructure-of-manning-leak/

that doesn't say anything about how.