more IP target sanity checks