Well, I doubt Facebook will share their log files with you and show you what the IP is that is coming to her page. :confused: If she is still the owner of the original e-mail that was used to create the account or the e-mail prior to the new one, perhaps Facebook will change her e-mail for her or cancel her account altogether.
https://www.whatismyip.com/questions/facebook-account-hacked/