I can show you 6+ megs daily of incoming connections in a text file that are blocked at my firewall at work.

Being "attacked" is a fact of life if you are connected to the internet. If you don't like it then disconnecting entirely from it will help.

Being scanned is _not_ being attacked..... Scanning is recon.... they are looking for potential targets.... with emphasis on the "potential".... Don't worry about it..... Look for the things that are actual attacks..... That implies that he found a vulnerability.... That means you need to look at the service attacked and determine what your mitigation technique should be. Of course, if they already "squirted" the code at you then they probably succeeded because they had already determined that you were vulnerable.... but that's a whole other issue.....