IchNiSan, did you check any of the ips out to see if they were web sites, or just the result of iis being turned on by default on win2k computers?