Intuit checking up on us?

Today I was checking our firewall logs and spotted this little goodie:
—
Date: 07/25 14:41:50 Name: Portscan detected from 12.149.161.16 Talker(fixed: 0 sliding: 0) Scanner(fixed: 16 sliding: 16)
—

So of course I went to see who this could be and found the offender
is Intuit and here is more on that address.

Now I figure that this could have had of four causes:
1) There is a rogue technician inside Intuit looking for computers to break in to.
2) Intuit is pissed off because we’ve disabled QuickBooks constant (every 5 seconds) “phone home” traffic and we do not allow QuickBooks to communicate to the Internet in any way except when we decide an update should be run.
3) Someone spoofed an Inuit address.
4) An Intuit computer had been taken over and was running code for an external hacker/cracker.

Only one of the above make me feel at all comfortable about this incident…