Jamie, Yep. I'm seeing the same list of suspects hitting various destinations. I have multiple backbone connections and the traffic from these nodes is comming from GTEI, IBN, and over MAE-LA. I can't tell if the source addresses are spoofed. Walt