Well.... It could be forced to fit the pattern..... Ping the host, see the denied, try the exploit, ping the host see it allowed, Bingo....

However the extended pinging "post-exploit" would be illogical, that and the fact that I learned many years ago in another field that it's too easy to have a theory fit a series of circumstances and allow yourself to believe that you have found "the truth" and move on. You are only conning yourself.

I have to admit though that this one has me pretty baffled as to the reason. It is clearly intentional, I don't believe for a second that there is any "coincidence" in it.... Good job it doesn't worry me too much or I might lose sleep.... But then again, maybe I should be worried....