can this be some sort of botnet checking whether a host is connected to the internet or not?