But the Georgia man who runs the proxy service used to mask the hacker's identity said that the IP address he's traced "doesn't look consistent" with reports in the media that have focused on David Kernell.

According to a report by WBIR, Knoxville's NBC affiliate, agents served the warrant early Sunday at the residence of Kernell, 20. He is the son of Mike Kernell, a Democratic state legislator from Memphis.

A witness told WBIR that the agents arrived at The Commons of Knoxville and spent about one and a half to two hours searching Kernell's apartment. The witness also said that Kernell's roommates were subpoenaed and must testify this week in Chattanooga.

Kernell, a student at the University of Tennessee-Knoxville, was linked to the hack of Palin's account on blogs and message boards after someone identified only as "Rubico" posted a message on a popular board claiming to have accessed Palin's account by using Yahoo Inc.'s password reset feature. Others subsequently connected the Rubico handle to the e-mail address "rubico10@yahoo.com," which was in turn linked to Kernell through Internet searches that uncovered connections between him, the username and the e-mail address on sites such as YouTube.

Last week, Kernell's father confirmed that his son was the person being named on blogs and boards in connection with the Palin hack.

The U.S. Department of Justice also confirmed there has been "investigatory activity" in Knoxville regarding the Palin case, according to the WBIR report. However, no charges have been filed, and the warrant was not publicly available, the DOJ spokeswoman told the television station.

A search conducted on Sunday by Computerworld on the federal court system's electronic database revealed no complaints or warrants issued against Kernell.

And Gabriel Ramuglia, the webmaster of Ctunnel, an Athens, Ga.-based proxy service used by the hacker, said Sunday that he wasn't sure the FBI was investigating the right man.

At the FBI's request, Ramuglia had searched the Ctunnel logs for evidence of the Palin account hack. He reported his findings to the agency Saturday.

On Sunday, Ramuglia confirmed he had identified the IP address used by the person who broke into the Palin account. "It seems that the user in question did access the account using Ctunnel," Ramuglia said, "and I have the IP address of that user."