Suspicious Scan Loop Network — Detection Rule

Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system

Read the full analysis on IntelFusions