Re: Worm probes

[sigma () pair com]

>       I think it scans your local /16
>
>       I've seen other scans from the /16 that my machines reside in.

I believe it also moves up to the /8 level.  The overwhelming majority of
our scans correspond to the same /8 our netblocks are in, as well as the
same /16 blocks.

Kevin