I've noticed a huge jump in the last 1 1/2 hours some 314 hits at the fire wall while some are the Welchia worm most are a wide TCP scan of all ports. Then again may be my ISP they were hit big but I'd guess Sobig had an alt on those 20 IP addys. Anyone else see the spike?