Hi all, during the last one minute time frame, I have received more than 390 Intrusion allert message from ISA Server from the following 'ISA Server detected an all port scan attack from Internet Protocol (IP) address 63.210.101.141.' What do you people do with this? Any suggestion is appreciated. I used to receive less than five/ten of these message a day and I presume it is normal. Many thanks Eddie