IIS is the only server which probes my apache server. I get these probes at least three times a day, all from different servers. Why is this allowed to go on? But I have a plan: I run a shell script using cron and every time I get a log entry requesting root.exe or some other Microsoft product, my server will send them an oversized ping, ala The Ping of Death. Yeah, that's the ticket. Teach those bastards to patch their servers and leave mine alone.