An IP is not a person. NSA knows the entrance to internet, but they dont know who uses this entrance.
The sweet thing about secret agencies is that they don't need to KNOW who uses that ip, they only need to guess correctly. And even when they don't guess correctly, you still can be catched in their net wrongly.
They are not the police. They don't need to prove that you are guilty. They catch you away and you rot in some hidden prison. If they are not so sure about you then they will ask you, maybe abu ghraib style?
I mean you never heard how the US targets their drone bomb targets? Metadata. And sim cards from phones and so on. Great, right?
The funny thing is, terrorists then started to throw simcards into a bag and everyone draws one. Guess it is no fun being the fan of a terrorist leader.
Anyway... they know way enough.