I keep getting a pop up balloon at least 5 or 6 times a day. McAfee Firewall blocked an attempt to attack your machine using a "SYN Port Scan" attack. When I do a visual trace it always ends up being my Internet provider BT Openworld (UK) They always try to scan 5 or 6 different ports in one session. Is this a normal thing for a provider to do attack your PC and why. I did a bit of a search for SYN Port Scan but didn't find much. Any info or comments would be good Thanks PhilC

This was part of checklist at Microsoft: Operating System Security ... Daily Port scan server addresses and addresses you assign to DSL and dial-up. Scanning dial-up addresses enables you to find home users that are infected with Code Red and other viruses. If you detect infection on a user's computer, disable the account and help the user to clean up the computer before allowing reconnection. This tough policy is particularly necessary now that viruses like Nimda and Code Red are out in the wild. Use nmap and strobe.