I wish this had a bit more technical information, because I don't think I learned much here other than some people are looking into it, and apparently shouldn't subpoena IPs or anything.

Is there a time zone misalignment, perhaps? If it's one or two searches, could it be the shooter searching their own name? Unless there's a clear technical reason showing these to be artifactual, why is a subpoena premature?