As I posted yesterday on my @MilcomMP twitter feed. most of those 30c 5C/TI preamble EAM messages were for the 26 KC-135/KC-10 tankers late morning conducting routine CONUS Refueling/Coronet mission support. You will see suraes like that from time to time and if you examine the latest Mode-S intercepts at a site like Currently Airborne Military Aircraft – ADS-B Exchange, you can pretty much tell where things are happening at.