I've noticed recently a lot of scans from Morpheus for soapCaller.bs; eg, 208.40.33.20 - - [27/Sep/2008:17:46:53 -0400] "GET /user/ soapCaller.bs HTTP/1.1" 404 216 "-" "Morfeus Fucking Scanner" Does anyone know what vulnerability the scanner's trying to exploit? George -- theall at tenablesecurity.com