Anyone want to fess up?

[Anonymous]

Code:

[Thu Dec 22 21:19:43 2011] [error] [client 70.38.71.77] File does not exist: /var/www/w00tw00t.at.blackhats.romanian.anti-sec:)
[Thu Dec 22 21:19:43 2011] [error] [client 70.38.71.77] File does not exist: /var/www/phpMyAdmin
[Thu Dec 22 21:19:43 2011] [error] [client 70.38.71.77] File does not exist: /var/www/phpmyadmin
[Thu Dec 22 21:19:43 2011] [error] [client 70.38.71.77] File does not exist: /var/www/pma
[Thu Dec 22 21:19:44 2011] [error] [client 70.38.71.77] File does not exist: /var/www/myadmin
[Thu Dec 22 21:19:45 2011] [error] [client 70.38.71.77] File does not exist: /var/www/MyAdmin

It was someone from this forum most likely because this is the only place www.btcquiz.info is discussed. Who tried it? 

[btc_artist]

I think they identified themselves with the path requested in the first hit. Probably it was an auto-scanner that just follows links?

[Anonymous]

Andrew Bitcoiner told me that it was blackhat anti-sec

14:43 <andrew_wmf> anti-sec is a group of hackers that likes to hack security companies
14:43 <andrew_wmf> ban em

Thanks.

[smickles]

Code:

[Thu Dec 22 21:19:43 2011] [error] [client 70.38.71.77] File does not exist: /var/www/w00tw00t.at.blackhats.romanian.anti-sec:)
[Thu Dec 22 21:19:43 2011] [error] [client 70.38.71.77] File does not exist: /var/www/phpMyAdmin
[Thu Dec 22 21:19:43 2011] [error] [client 70.38.71.77] File does not exist: /var/www/phpmyadmin
[Thu Dec 22 21:19:43 2011] [error] [client 70.38.71.77] File does not exist: /var/www/pma
[Thu Dec 22 21:19:44 2011] [error] [client 70.38.71.77] File does not exist: /var/www/myadmin
[Thu Dec 22 21:19:45 2011] [error] [client 70.38.71.77] File does not exist: /var/www/MyAdmin

It was someone from this forum most likely because this is the only place www.btcquiz.info is discussed. Who tried it? 

one of my machines got that too

[Red Emerald]

I've seen "w00tw00t.at.blackhats.romanian.anti-sec:)" scan a couple of my systems.  One time the list of phpmyadmin 404s was hundreds of lines long since they tried every version 1.0 to 2.something.  Of course, my system didn't even have pma installed, but they were just scanning with some simple script.  I wouldn't be too concerned about it.

[DeepBit]

You can get LOTS of such strings in logs of any public website.
There are script kiddies who point vulnerability scanners to every site they know.

[ZodiacDragon84]

maybe the favor should be returned

[stcupp]

lol probably a skid from http://hackforums.net/

most of them don't know how to code or anything they just buy scanners and trojans from other people heck most of the time they dont even know how to set them up lmao

[chsados]

lol probably a skid from http://hackforums.net/

most of them don't know how to code or anything they just buy scanners and trojans from other people heck most of the time they dont even know how to set them up lmao

or blackhatworld.com