In your experience, what signs would you be looking out for that an order could be an attempt to steal IP?

Look for unusual buying patterns or names or addresses that you recognise. Sometimes the stupidity of human nature is astounding. But otherwise you just need to monitor your competitors, social media, and market place sites and so on.