I designed an IPS that eventually started to detect if other computers were hacked (found a few systems that were confirmed hacked – always got the “How did you know this?”). I was getting brute forced from an IP from an SBC colo. I was able to get the name and contact information of what turned out to be a Fortune 500 employee. He had a small block of IP’s that he was using for personal reasons. After getting into a conversation with the IP scape owner (him) about the source IP and time stamp of the brute force attempts (IPS blocked the attach in a few short minutes) he told me something I hope to never forget. He said that he lets his son use that IP address and he was supposed to be at school doing school work, not brute forcing. One of the last things he said was.. Thank you, I will be speaking with my son as soon as he gets home.