it seems my isa server is doing its job detecting and blocking these scans, but now what? Is there someway I can let this address know we are on to him. Is there a watch dog service I could report it to. Any suggestions on what I can do beyond discarding the attack? Thanx in advance Todd L. Bentley MCSE Rupert Technologies