Hi Team, FYI - Two prefixes from the DNS Changer/Rover Digital take down have been re-allocated. One of the prefixes - 85.255.112.0/20 - was advertised Friday morning. There is a blog post with some of the details here: "Beware! DNS Changer’s IP Blocks are re-allocated and advertised!" - http://www.senki.org/archives/930 A general feeling of surprise summarizes several of the behind the scenes security conversation. A general recommendation of "be careful of the traffic going to and from these netblocks" is the best advice at this time. Barry