nearly all are winxp pro…couple of nt/winme versions. all are up to date and all av software is up to date.

all servers are running SuSE Linux (varying versions from 8 - 9.1).

the problem with identifying the machines is that the ip from which the scan comes from keeps changing…and even comes from/scans ip’s that dont exist…very odd!

thanks for the info tho.