DOE-HQ/CounterIntelligence is interested in anything on attacks launched from 41.111.115.77 on Oct 12, between 7:20 and 7:22 AM. It looks like they were going after 140.221.6.95 with various SQL attempts against http://www.mcs.anl.gov/research/LANS/events/listn/detail.php with a variety of options at the end... Mainly this is just FYI in case the query loops back around and you hear of others asking questions. I think this page has been poked at in the past as well without success. I'm going under the assumption that is the case again. The few tests I've tried do not show exploit. I'm going to report this as just a scan with no indication of breach. Let me know if that is not the case. --Gene