Likely a guest or spider is attempting to submit the add to fav page; in the past user firewalls have also filtered some variables from being passed, so it's possible it could be one of these events if it is a legitimate user request.