I've gotten enough answers from Computing.net that I thought it about time to start posting a few myself. Anyway, This may be old news to some but, My laptop was probing 5 ip addresses every 10 minutes or so. It struck me as odd because the laptop is my personal laptop and it was probing work IP addresses. I do use it at work also. To make a long story shorter, it was probing port 161. After a little google'ing, I came accross a Computing.net post from Mike Clark dated 9/16/2004. Reading further was a responce by AJ Weber pointing to a location in the registry. When seeing those ip's in the registry, for some reason, I remembered 161 is often used for connecting to print devices (Often HP Jet Direct boxes). Sure enough, those 5 ip's were printers. Using XP Pro, I had set them up thusly; Settings Printers and Faxes Add Printer Local Printer Create New Port Selected Standard TCP/IP Port and entered the ip address of the printer. Looking at that registry setting and my 'Wallwatcher' logs verified that, yes, the pc is trying to connect to each printer. Here's the Registry entry AJ refered to; HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors\Standard TCP/IP Port\Ports named: "IP_xxx.xxx.xxx.xxx" (with the IP address). ...all 5 of mine were listed in there. If your attack is going really well?...it's probably an ambush.