 You can try an idle scan using each available host from the ping sweep results until you find one that works.As usual, it is best to ask permission before using someone's machines for unexpected purposes such as idle scanning.Simple network devices often make great zombies because they are commonly both underused (idle) and built with simple network stacks which are vulnerable to IP ID traffic detection.