It could also be done intentionally, as someone with the knowledge to do large-scale exploit detection could have their own servers and therefore wanted a way to easily add a way to detect his own creation when he was being scanned by others.