Exactly. Years ago, I did due diligence on a company that targets ads using IP address. They buy IP address data from ISPs, target ads based on demographics, and then use cookies to retarget. Not that far off of what you're describing.