A survey finding about anonymized infrastructure points to a familiar weakness in incident response: security teams can collect more IP data than ever and still lack the context needed to act early.