SYN flood coming from apparent Twitter IP addresses


For almost a week now I have been having serious problem on with timeouts and connections due to high Apache load which my host (Rackspace) has analysed and diagnosed as what appears to be a SYN flood, resulting in hundreds of embryonic connections from the 199.59.x.x block assigned to Twitter and identifying as “Twitterbot/1.0”

Is there any possibility that there’s a crawler out of control/misconfigured at your end? The alternative is someone spoofing Twitter IP addresses to mount a (remarkably small but quite effective) denial of service attack.

Any info you can provide would be very helpful.