Ack! No! :P The best idea? Contact the people that are in control of the IP addresses that are being used. If they don't shut them off, contact their upstream provider and have *them* shut them off.... It works, most of the time. Friend of mine got hit with that t0rnkit thing.. found that it was downloading tainted .rpm files from some FTP space in Canada. Turns out it was some kid, using the family ISP account that was storing tainted .rpm files. A quick call to the hosting company, and the FTP site mysteriously vanished... and hopefully, someone got a good punishment at home. ;)> 211.174.58.76211.218.145.88 different services but both from Korea.i had an entry in my ftp logs from Korea. the only unknown entry.I don't know about the rest of you but I don't like taking this from others, anything we can do as a group..... even offensively? Fight fire with fire???