Brian Hechinger wrote: > > I think it's more likely that this worm is limiting itself to the /8 > > that it finds itself being hosted in. > > good guess, but i've seen probes from outside my /8 so that's not it. Yep, I was about to write the same. I'm getting them from all over. ---sambo