Sadly so. And everyone's guessing because they've almost certainly no idea what equipment and services are configured in Sunrise's network.

Interesting, I don't remember reading anything about that.

Pretty much the same as any other ISP and pretty much configured to maintain legal requirements in terms of what they can hold, for how long and under what circumstances they can reveal it.

exactly, no matter what provider equipment exists, the same legal and regulatory requirements for ISP remain the same

My point is, you have no idea what other logging they may be doing for their own purposes. I have no idea what they do either, but I do know that the company I work for does have other capabilites in place than those required simply to satisfy their legal responsibilities.

Given the volume of storage require to log extra data, and the administrative overhead in managing that data, plus the extra cost of equipment required to soak up the extra processing of that data, and the increase in license and management fees to enable these features, it is a fair bet they do not perform anything more than the legal minimum as anything else would be economically unjustifiable.

It wasn't hugely over-publicised since, following 9/11, Switzerland was seen to be "sorting it out": there was an emergency decree regarding "suspicious data", followed by a new law on communications interceptions, both in 2001. Then came compulsory registration of PAYG mobiles in 2003.

The victim can be exonarated without finding the culprit. Rather than prove that someone else was on the ip address, have a look at (or edit ) the victim's logs, at the time the fraudulent email was sent. If the IP address doesn't appear, then that would seem reasonable evidence that they're not responsible for the email.

The suspect email should also be carefully checked. It might not have come from the gmail account, but rather have a spoofed heading so it looks like it did.

If it really did come from the gmail account, check the style and compare with usually language usage of the victim. If there's lots of txtmsg speak, for example, and he never uses it, at least it's an indication that it's not genuine.

__________________
Down with racism. Long live miscegenation!

I should have said, looks like a bot has run from that IPA and that an Iphone and Windows machine have also connected from it.

Edit:
Also 2 people have used that IP address this year to play CS
http://cs-stat.citynet.dp.ua/player.php?id=419
http://langames.lt/stat/player.php?i...nk&vorder=desc

Maybe check their steam profile and see if you know them.

and a fella called Heinz Mahler aus Schweiz schrieb am 27.Mai 2011 um 08:09 Uhr:
E-Mail: h.mahler at gmx.ch
Homepage: http://www.heinzmahler-tanzmusik.beepworld.de
IP Adresse: 194.230.155.12

It is a DHCP address so it could be none of these people of course.
Do a google search for the IP and filter by time...might get lucky.

Yes, but back then, you didn't need one here either.

I got pre-paid for my kids ten years or so ago, and only had to register them years later.

Tom

As many have said before, getting the name of the person behind that IP address will require a court order. At the moment the only thing you can learn from it is that it was assigned to a device using Sunrise's mobile network.

As I understand it, you are trying to demonstrate that a certain email was not written by the owner of the allegedly hacked Gmail account. You might want to investigate the possibilities of forensic linguistics for forensic authorship identification. This paper lists and evaluates a number of tools available for that task.

Look, all this digging around yourself is for naught. If you want to persue the whole thing take it up with Google and the local authorities...but I have a feeling if it was just hacking your friends account to send some email, not much is going to be done unless it can be connected to a "real world" crime of some sort.