Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Recently our website started to get a lot of requests for /fqexpack url from devices with user agent, somehow connected to Android, like

Dalvik/1.6.0 (Linux; U; Android 4.0.4; GT-S5303 Build/IMM76D)
Dalvik/1.6.0 (Linux; U; Android 4.0.3; M532 Build/IML74K)
Dalvik/1.2.0 (Linux; U; Android 2.2; SAMSUNG-SGH-I897 Build/FROYO)

These requests has fairly uniform day time distribution.

Of course, our site doesn't have page with that address, and also we have not published any links with this substring.

Google knows nothing about it.

Our site is targeted to Russian audience, but these requests happens even when it is night in Russia.

Also we have IP-addresses of these users.

What do you think this link may mean?

Site is hosted at Amazon, it is a .NET IIS-hosted application.

share|improve this question
By the way, I have noticed, that all user agents are not of mobile browsers, that have user agent like Mozilla/5.0 (Linux; Android 4.1.2; Boost Build/JZO54K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.57 Mobile Safari/537.36 OPR/18.0.1290.67495 – Mikhail Brinchuk Jan 17 '14 at 12:12
And also it seem that all these requests are made not using host name of site, but its public ip-address. – Mikhail Brinchuk Jan 17 '14 at 12:17
up vote 0 down vote accepted

I have written an email to developers of enter link description here, they have not replied yet.

And also we've deleted elastic ip, that had those requests.

So for now we do not have this problem.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.