Global vs. Local protection
   Source blocking:

    Content blocking:

Using content blocking with simple inbound filtering (i.e.,
traditional firewall) can protect internal hosts, even when
global spread is extensive.
However, simulations are for random choice in IPv4 space.
Self-propagating code with a bias towards the same /24 or /16
may not be blocked once there is an internal infection.