What is This?

Micro$oft?

[frontpage]

While searching through my logs today I came across this:

[Thu Apr 18 10:51:27 2002] [error] [client 131.107.3.86] File does not exist: /usr/local/psa/home/vhosts/mydomain.com/httpdocs/instmsg/aliases/email

Whois on 131.107.3.86 reveals:

04/18/02 11:28:52 IP block 131.107.3.86
Trying 131.107.3.86 at ARIN
Trying 131.107.3 at ARIN
Microsoft Corporation (NET-MICROSOFT)
One Redmond Way
Redmond, WA 98052
US

Netname: MICROSOFT
Netblock: 131.107.0.0 - 131.107.255.255

Coordinator:
Microsoft (ZM39-ARIN) [e-mail]
425-936-4200

Domain System inverse mapping provided by:

DNS1.CP.MSFT.NET 207.46.138.20
DNS2.CP.MSFT.NET 207.46.138.21
DNS1.TK.MSFT.NET 207.46.232.37
DNS1.DC.MSFT.NET 207.68.128.151
DNS1.SJ.MSFT.NET 207.46.97.11

Record last updated on 20-Jun-2001.
Database last updated on 17-Apr-2002 19:59:25 EDT.

The ARIN Registration Services Host contains ONLY Internet
Network Information: Networks, ASN's, and related POC's.
Please use the whois server at rs.internic.net for DOMAIN related
Information and whois.nic.mil for NIPRNET Information.

=========

Why is Micro$oft looking on my server for instant messages? My server is a webhost and does not have instant messaging. I have not run across this before. Can anyone enlighten me?

[littleman]

No enlighten, but a speculation. Could this be an infected computer looking for a new vulnerability that hasn't got any attention yet?

[frontpage]

Possibly. It seems odd that the request came from Micro$oft and was looking for a very specific folder.

I don't do any business with that company and try not use its software (especially instant messenger).

I will check my logs again today for similar requests.