On Oct 21, 2016, at 12:40 PM, David Hubbard <dhubbard at dino.hostasaurus.com> wrote: > > Do we know the attack destinations so we can watch transit traffic destined for it to help sources that may be unaware? My guess is you should track anything to as33517. -- TTFN, patrick