mailing list archives
Re: Worm probes
From: sigma () pair com
Date: Tue, 18 Sep 2001 14:21:35 -0400 (EDT)
I think it scans your local /16
I've seen other scans from the /16 that my machines reside in.
I believe it also moves up to the /8 level. The overwhelming majority of
our scans correspond to the same /8 our netblocks are in, as well as the
same /16 blocks.