Hi Farshad, in these weeks a huge amount of computers connected to the internet are being infected by a worm called OPASERV . It goes thru opened NetBios ports over the internet, and then he tries to send itself on other computers... that's probably why you get so many requests to port 137, but since you have the firewall closing the Netbios access you don't have to worry about :-) I hope this can help Danny