I've seen this as well - I believe it can also come from a user trying to open a database from either a doclink, bookmark or workspace icon, where the server/database no longer exists. The user's client then starts searching the catalog.nsf (if it exists) for every server in the domain for the database.
If that's the only activity that you see on the server I'd say it's safe to decommission.