I guessing he probably tried googling for the IP address of the wannabe pirates in question, or their email addresses. Collecting email is normal for software s

I guessing he probably tried googling for the IP address of the wannabe pirates in question, or their email addresses. Collecting email is normal for software sales, particularly when delivered over the internet and your IP address is logged pretty much anywhere you go online. If you aren't actively hiding yourself behind a proxy or using fake email accounts etc... it shouldn't be to hard to get some idea of who or what company or at least their ISP that you're dealing with.