in reply to Retrieve an email address of sysadmin only knowing the IP address

When all else fails, or maybe as your first option (it's your option!), if the IP address responds to SMTP (port 25), you can always try to send an email message to

postmaster@[x.y.z.k]

where the square brackets have to be copied verbatim. Other good usernames to try are root and administrator.

-- TMTOWTDI