We have a web site builder in use by thousands of users, and for some reason, our web servers are receiving a glut of requests to the urls "inherit" and "null". We have no idea what is carrying out these requests. It's happening pretty frequently, though still for a minority of the time, and they come from multiple customers. Here's what we've ruled out:
Our web sites do not appear to contain any links to "inherit" or "null" URLs, so we don't think our AJAX code is making the requests. None of us are able to get this to happen from our web browsers. Our belief that there are no links to these URLs in our page is boosted by the fact that some of the bad URLs are appended to the ends of URLs that appear to have belonged to web sites that used to be hosted elsewhere.
We don't think a bot is responsible. Most of the bad requests are from authenticated customers.
We don't think a common web browser is performing these requests. I've visited the site in IE 8, IE 6, Firefox, Chrome, Safari (both Windows and Mac), and Opera.
My favored theory is that there is a very common browser plugin/extension, an uncommon-but-common-enough web browser, or some malware that is making these requests as users browse/admin their sites. Have any of you seen requests of this form before? Where are these coming from?