We're regularly getting an intrusion detection message from our virus guard, broadcasting on 10.5.3.255. You can actually ping this address and get a reply of a proper ip address (although this keeps changing, one minute its that of a network printer...