Relayed by ip: Blockchain.info - does this not mean that the hacker's IP has been relayed by a provider known to Blockchain.info?

Yes, definitely next time I ask money to paperwallet directly.

I can raise the bar, if a part of the money is returned, as long as I'm not running on a loss just to prove a point.