Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I haven't been able to test this extensively yet, so bear with me.

The scenario is like so: I created a temporary file on my web server, downloaded the file, deleted the file. About 3 minutes later I noticed a 404 error for that file. It was never linked, and only existed for a matter of seconds.

So, I started running tests. I created an empty file, navigated to it, deleted it. Again about 3 minutes later, a 404 error for that file. Next, I just typed in a url for a non-existent file. Again 3 minutes later, a 404 error.

I ran a virus scan with Trend Micro Internet Security on my system (which is a 2 week old fresh Vista install, fully up to date) that turned up nothing (not that it rules out the possibility). Interestingly, I am in the Eastern US, the IP for the offender is in Japan.

Does anybody have ideas or suggestions for me to track down why my HTTP requests are being mimicked by somebody in Japan?

share|improve this question

migrated from superuser.com Feb 1 '12 at 22:31

This question came from our site for computer enthusiasts and power users.

    
Would ServerFault be better for this question? –  music2myear Jan 26 '12 at 23:02
1  
Possibly. I mostly only use StackOverflow, and StackExchange runs alot of sites, hard to keep up with them all. –  steveo225 Jan 26 '12 at 23:06
    
Maybe it's your Trend Micro (or some other browser plug-in) doing link-checking (or alike)? Have you tried Googling the IP? Does it do this with Trend (and as much other stuff as possible) stopped via MSConfig? Perhaps try the same tests from different browser, or another computer, to figure out if it's tied to your browser's requests, or to the server. –  techie007 Jan 26 '12 at 23:22
1  
What makes you think Trend Micro doesn't have servers in Japan? :) –  techie007 Jan 26 '12 at 23:56
1  
Wow. Spent a lot of time tracking it down, turns out it is Trend Micro. They are sending all my requests to a server in California, then somehow routing it to Japan, then re-requesting every url I request. Seems a bit dodgy to me. Might need to get a new virus scanner. –  steveo225 Jan 28 '12 at 0:59
show 2 more comments

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.