I've seen seeing an increase in referalls that look like this: "GET /SOMERANDOMURL/ HTTP/1.0" 200 7121 "http://www.altavista.com/image/randomlink" "webcollage/1.104" They are coming from a variety of addresses (and the webcollage version number moves around a bit), so it's not a proxy or something. Looking around on Alta Vista didn't yield anything interesting, nor did a google search on this ... until I used "webcollage" as the search term - looks like someone has a Perl program that slurps in a random image. Just thought I'd pass this on in case other folks see it ... alek