Check this out... http://vil.nai.com/vil/content/v_136821.htm I've noticed some scans on one of my servers, looking for awstats (which I don't have installed), but nothing indicating an intrusion. -dc