When that SQL Server worm was going around I had three or four different machines spamming my firewall trying to search for more victims, but I was only able to track one of the IP addresses back to contact information.

That person was very grateful for the heads up, but the other three were SOL.