Security Incidents: Re: Gateway.dll?

[QNT Beheer/NOC <beheer () qnt net>]

>         Sorry if this one's totally obvious, it's Monday...
>         Getting an awful pile of hits to http://64.4.13.172/gateway/gateway.dll
> in my Squid logs... anyone see similar stuff?  It's coming from a couple
> of extra IP's as well, same subnet tho... Is it just someone's ad
> engine, or something worse?
Connected to 64.4.13.172.
Escape character is '^]'.
HEAD /gateway/gateway.dll

HTTP/1.1 400 Bad Request
Server: Microsoft-IIS/5.0
Date: Tue, 20 Mar 2001 07:44:04 GMT
X-MSN-Messenger: Session=close
Content-Length: 0
Content-type: application/x-msn-messenger

Microsoft messenger, from (at least) 64.4.13.171 to 64.4.13.177.
Just add an 'deny' acl to squid, and your employees will not be able to use
MSN chat anymore.

--------------------------------------------------------------------------------
Beheer/NOC QNT Internet                 QNT BV
beheer () qnt-internet nl                  http://www.qnt-internet.nl
P.O. 1116    - 8900 CC  Leeuwarden (NL)
Zaailand 94  - 8911 BN  Leeuwarden (NL)
--------------------------------------------------------------------------------