Reply #10: That's no hack attempt imho.

[McKenzie]

did you just get random port scans, which port were they against, which protocol - HTTP/FTP/ etc? Were the scans run against port numbers higher than 1027? etc etc.

And, no savvy hacker would use a US-based IP unless they were bouncing through the server. They'd have an anon proxy in a country where server log details aren't kept, which had no reciprocal arrangement with US LEA's and so on. Even then their true IP would show up in the server log unless they had a proxy chain.

I looked at the netblock range that IP is off and it's very small, suggesting it's a corporate network. Background traffic methinks.