By "hits" I meant attempts to negotiate the firewall as per  the intrusion 
detection logs. Sorry if I was not clear.

On Tuesday 11 June 2002 13:32, you wrote:
> How are you defining "hits"?
>
>
> On Wed, Jun 12, 2002 at 12:18:36AM -0700, User wrote:
>  Lately we have noticed that our friendly firewall is taking hits  from
>  what seems to be Russia. At least today it seems to be Russia.
>  Novoisvirsk, it seems like, according to traceroute.
>  I don't know a whole lot about probes like this but am thankful to you
>  folks for your guidance with regard to firewalls.
>
>  Is there something that we can do with regard to this type of thing?
>  Maybe, just track them down for fun. Where would be a good place to
>  start reading about this sort of thing.
>
>  We trace routed them throught 25 hops to 217.70.107.151
>
>  p151.rnttu.sinor.ru was the last hop on the list.
>
>  Thank you
>  Roger
>
>  ________________________________________________
>  See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't
> post to the list quickly and you use Netscape to write mail.
>
>  PLUG-discuss mailing list  -  PLUG-discuss@lists.plug.phoenix.az.us
>  http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't
> post to the list quickly and you use Netscape to write mail.
>
> PLUG-discuss mailing list  -  PLUG-discuss@lists.plug.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss