For a couple of days now i have been getting wierd errors in my Apache logs, mostly people doing a GET /dir/cmd.exe, or root.exe don't these people check the server strings? I may be inexperienced but i am not brain dead enough to run IIS. or just even plain windows. but most importantly: should i report the IPs to someone? (i have about 10 different IPs so far) is there anything in particular i should do about this? -munir