here is our top 20 since Jan 1st
Code:
1. au.download.windowsupdate.com 137351
2. images.google.com 48226
3. images.google.co.uk 41519
4. www.bbc.co.uk 40402
5. securityresponse.symantec.com 32896
6. www.google.com 30793
7. liveupdate.symantecliveupdate.com 27011
8. update.gfi.com 25344
9. www.skysports.com 20133
10. www.google.co.uk 18841
11. www.mymaths.co.uk 18550
12. www.apple.com 17223
13. images.apple.com
14. www.washingtonpost.com
15. news.bbc.co.uk 11968
16. ax.phobos.apple.com.edgesuite.net 11729
17. www.macromedia.com 11098
18. en.wikipedia.org 9929
19. maps.google.com 8466
20. www.wired.com 7903
windowsupdate is easy to explain seems 90% of our laptops decided it was good time to ignore our GPO for wsus.
symantec surprised me though as we should only have 3 Parent servers for updates.