Hm, I'd try timing the request so that it's the middle of the night wherever the thief lives. Try once assuming that he lives in America, once assuming Eastern Europe.
This may not be the quickest result, but the basic idea of just trying & trying & trying... until you eventually beat the hacker sounds almost like a game.