netstat shows over 300 connections and they are consistantly getting blocked, but once they are blocked then new ip's connect. There are no strange ports in use its all http traffic.
I don't have to go through my firewall logs i get a email every morning saying who connected or tried to connect to ssh ftp, sftp etc. etc. and and im the only one connecting. People are trying to connect but they can't