Weird bot hits on a website

[eKstreme]

On a website I know (call it domain.com), over 800 hits were registered with some seriously weird details:

All the hits came were done using the GET method, but the requested URLs were all full URLs pointing to subdomains of Yahoo.com. Examples are:

http://login.tpe.yahoo.com
http://login.bjs.yahoo.com
http://login.korea.yahoo.com

Again, those were the GET REQUEST_URI values - that is, the bot was requesting a URL from another domain name, not from domain.com. These were not HTTP referrer values.

All the hits came from same remote host, a subdomain name from charter.com.

It could be a hacking attempt (this is after all a deliberate request for a clearly wrong page), but I am not 100% convinced of this theory.

This is baffling me, as I have never seen such behavior. Any help would be appreciated.

Thanks!

[Wired]

PM me which sub-domain. used to work for a spin-off of charter (and charter directly at one point), I recall some of their stuff still, and if needed, I think I remember some of their email addresses.

Sounds like a zombie PC.