Re: FW: Question for DNS pros

[Paul Schmehl <pauls () utdallas edu>]

Frank, I've only checked two of the "attacking" IPs, but they are both 
BigIP load balancers.  I'd bet that they all are, and these packets are 
some sort of probe to see if a host that contacted them before is still 
alive.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/ir/security/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html