I received a threatening email from an IP that was nearly identical to one from an acquaintance. How likely is it that this threatening message originated from him or from his computer?

The IP is 69.147.65.172 (threat) his inncouous emails come from 69.147.65.152 ... HELP? I am seeking some proof to confront him.