<original_message> From: thelist-admin at lists.evolt.org [mailto:thelist-admin at lists.evolt.org] On Behalf Of Pat Meeks I just started getting these strange entries in my logs: Under 302 Found I am getting http://www.practicalcomponents.com/scripts/..Ã?¯../winnt/system32/cmd.e xe?/ c+dir c: http://www.practicalcomponents.com/scripts/..À¯../winnt/system32/cmd.exe ?/c+ dir c: And under "submitted forms", I'm seeing: http://www.practicalcomponents.com/scripts/..À¯../winnt/system32/cmd.exe 6 11.76% 4 http://www.practicalcomponents.com/scripts/..Ã?¯../winnt/system32/cmd.e xe I'm not using "any" scripts on my site. Thanks for any insight to this...Pat Meeks pmeeks at msn.com </original_message> Looks like someone is trying to find ways to hack your server... As long as they're not getting thru to anything, you're fine... You may want to try to trace those ip addresses back to host: and if you feel it appropriate, perhaps turn those records over to someone for further investigation... -m