I managed to track this down to a 3rd party library we were using.
We were using a Filepicker widget to provide image uploading, and the Filepicker library will revert to a HashTransport communication setup for IE6 and IE7. This requires that the iframe open a location on the hosting server. They defaulted to the location '/404', hence causing a request to happen. This led to the issue I was seeing.