Years ago in a university IT dept, I'd have to occasionaly serve copyright violation take-downs (we would handle them internally, and just remove the offending matter from the network. No one was ever outed). One time, looking for a machine serving up some movies or something, I tracked it down to a graduate student office, in a _network systems_ lab. When I finally found the grad student owner of said server, he was comletely dumbfounded that I could physically locate the machine by its IP address.