IP triage

Is this address scanning everyone, sitting in known command-and-control indicators, or exiting Tor? Three questions answered at once — enough to tell background noise from something worth your afternoon.