Well, if they're snooping your net traffic, then you don't have to say anything on those forums or sites, simply hitting them on port 80 more than a handful of

Well, if they're snooping your net traffic, then you don't have to say anything on those forums or sites, simply hitting them on port 80 more than a handful of times is probably sufficient. They're trying to differentiate "guy who got botted" from "guy who's doing this manually", and even visiting those sites is probably differentiation enough to establish the probable cause or reasonable suspicion they need for a search warrant.