Hi,
The above IP is/was abnormally initiating tcp.syn packets to various ports, denying some legitimate use of our web servers. We are a hosting company www.activehost.com , and that IP had to be blocked because it was affecting our services, on shared web servers.
If possible, please hunt down the perpetrators, like the demons they are.
Thanks,
Quinn
Please filter on 71.166.123.0/24 I believe this is enough information, it's the packet capture of the attack.
I want his connection traced, whatever needs to be done, proxy logs checked, etc. This got me out of bed!!