Worm probes

  I think it scans your local /16

  I've seen other scans from the /16 that my machines reside in.

I believe it also moves up to the /8 level. The overwhelming majority of
our scans correspond to the same /8 our netblocks are in, as well as the
same /16 blocks.

Kevin