WOL + Google Analyicts + AWStats led to noting the abuse; as they where hammering the hell out of the server...
Additionally, I have server information logged out to all of the ip's accessing the server and their hostname; twinceler was listed constantly.
It all added up to me ending up banning the hell out of them