I would imagine that a large portion of visits to GeoHot's website was due to the publicity of Sony's legal case. If Sony is trying to provably demonstrate “defendant’s distribution”, shouldn't there be a distinction based on the intent of access?

E.g. IP hits from Google's bots out of Mountain View should not count as "those who downloaded Hotz’ hack reside in Northern California".