It seems like someone is checking response time for some major attack. If it was being set up by TTP pigs, they would have start by blast and later on they can try to penetrate the security walls. I personally think that letting them go is a good option, until or unless they can be tracked with...