Here's something I just noticed. It is reproducible. When I run netstat -nt in a command shell, the final octet of the remote address often is missing. Sample output: Code: Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 127.0.0.1:35753 127.0.0.1:80 TIME_WAIT tcp 0 0 xxx.xxx.xxx.xxx:80 yyy.yyy.yyy.yyy:1914 ESTABLISHED tcp 0 0 xxx.xxx.xxx.xxx:110 yyy.yyy.yyy.:1912 TIME_WAIT tcp 0 0 xxx.xxx.xxx.xxx:110 yyy.yyy.yyy.:1913 TIME_WAIT Note that the foreign address in the botton 2 rows is yyy.yyy.yyy. instead of yyy.yyy.yyy.yyy . I think it happens only for incoming pop connections on port 110. Other ports display all four octets. From the same IP address, the longer 4 digit WHM port of 2087 does not drop the final octet, nor does the shorter 2 digit HTTP 80. Has anyone else seen this? Any ideas as to possible causes? Thanks.