Look into further is far, far different than using it as sole evidence for a raid. IP address coupled with additional evidence would be perfectly valid.