Hi, a new version of MSIISProbes.pm is available at http://www.tonkinresolutions.com/MSIISProbes.pm.tar.gz This version provides support for statistics on each of the worms bugging you, thanks to Paul DuBois for the suggestion. >From the docs: B<Statistics> You may wish to see the statistics for the various worms you are catching with MSIISProbes.pm. The module supports this through setting the value of the query string argument 'stats' to one of the worm names you defined in httpd.conf, for example like this: http://my.server.com/cmd.exe?stats=CodeRed or http://my.server.com/foo.bar?/c+dir&stats=Nimda Just make sure to attache the query string to a URL that will be caught by your configuration of the module! Enjoy, -- nick ~~~~~~~~~~~ Nick Tonkin