Worse, I've also been given information that could help me find out who's looking. If I was a well connected criminal org, I'd probably be leaning on contacts in the customer's ISP to find out who has that IP (I can see it's a static allocation), or having someone pop Wowza