Maybe it's in a known/suspected Datacenter IP range?