they are spoofed. Unless you have some major idiot scanning off of 5 public IP addresses. Any "large american company" would have internal IP addresses on nearly all of their desktops so you would only see 1 IP addresses. unless of course someone got on to 5 servers with public IP addresses, but then again what are the chances that they would be in perfect sequence.