So I have the IP address of someone who hacked into my gmail gained access to an exchange account and then stole a significant amount of BTC.  Long story short they did not use TOR the first time they logged into my gmail and based on the public information I have acquired so far everything points to it being a residential IP address of someone who has run a node in the recent past.  Meaning it is unlikely this is a VPN, proxy, public network, etc.  Short of subpoenaing the ISP (which I am currently pursuing as well) is there any other avenue I have to obtain the identity of the owner of the IP?  I want to make sure I am aware of all my options.