Could you be guarding (via ACL) against SSH from the Internet, but allowing access to a wider group of internal addresses than intended. Could somebody be half-opening many SSH sessions programmatically, doing a sort of SSH DDOS from an internal hos...
Maybe a couple of years late, but I think the syntax it is looking for in the removal would be:
> acs patch remove 5-1-0-44-6
It seems to identify the patches like that. I would guess that it likes the ".tar.gpg" on a patch installation, but it pro...