One common mistake we see folks make is that they'll trace to their ISP's border router. This is a bad thing. If you're tracing to the border router and your route changes (i.e. they take that router ...
Rhodes> I would trace you to your isp. <Rhodes> then I would portscan the isp to determine what ports are open and I would check the banner to see what daemons are running.