Gootkit auto-rooter scanner – hello

First time I have seen something identify as “Gootkit auto-rooter scanner”.
As a sidenote, this is also an example of why I prefer to block afrinic.
Too much rotten stuff coming from that space.

All these came via 41.129.63.65:

 [21/Sep/2011:09:28:13 -0400] "GET / HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:14 -0400] "GET /phpmyadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:14 -0400] "GET /phpMyAdmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:14 -0400] "GET /PHPMYADMIN/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:14 -0400] "GET /db/phpmyadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:14 -0400] "GET /db/phpMyAdmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:15 -0400] "GET /pma/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:15 -0400] "GET /myadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:15 -0400] "GET /admin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:15 -0400] "GET /mysql/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:15 -0400] "GET / HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:16 -0400] "GET /3rdparty/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:16 -0400] "GET /3rdparty/admin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:16 -0400] "GET /3rdparty/dbadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:16 -0400] "GET /3rdparty/myadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:16 -0400] "GET /3rdparty/phpMyAdmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:16 -0400] "GET /3rdparty/pma/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:17 -0400] "GET /3rdparty/pma2005/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:17 -0400] "GET /3rdparty/setup.php HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:17 -0400] "GET /~/admin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:17 -0400] "GET /admin/db/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:17 -0400] "GET /administrator/admin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:18 -0400] "GET /administrator/db/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:18 -0400] "GET /administrator/phpmyadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:18 -0400] "GET /administrator/phpMyAdmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:18 -0400] "GET /administrator/pma/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:18 -0400] "GET /administrator/PMA/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:19 -0400] "GET /administrator/web/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:19 -0400] "GET /admin/phpmyadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:19 -0400] "GET /admin/phpMyAdmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:19 -0400] "GET /admin/pma/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:19 -0400] "GET /admin/pMA/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:19 -0400] "GET /admin/sqladmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:20 -0400] "GET /admin/sysadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:20 -0400] "GET /admin/web/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:20 -0400] "GET /bbs/data/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:20 -0400] "GET /cpadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:20 -0400] "GET /cpadmindb/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:21 -0400] "GET /cpanelmysql/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:21 -0400] "GET /cpanelphpmyadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:21 -0400] "GET /cpanelsql/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:21 -0400] "GET /cpdbadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:21 -0400] "GET /cpphpmyadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:21 -0400] "GET /database/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:22 -0400] "GET /database/database/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:22 -0400] "GET /database/phpmyadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:22 -0400] "GET /database/phpMyAdmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:22 -0400] "GET /database/phpmyadmin2/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:22 -0400] "GET /database/phpMyAdmin2/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:23 -0400] "GET /db/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:23 -0400] "GET /dbadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:23 -0400] "GET /db/db-admin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:23 -0400] "GET /db/dbadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:23 -0400] "GET /db/dbweb/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:23 -0400] "GET /db/myadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:24 -0400] "GET /db/phpmyadmin2/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:24 -0400] "GET /db/phpMyAdmin-2/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:24 -0400] "GET /db/phpMyAdmin2/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:24 -0400] "GET /db/webadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:24 -0400] "GET /db/webdb/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:25 -0400] "GET /db/websql/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:25 -0400] "GET /~/myadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:25 -0400] "GET /MyAdmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:25 -0400] "GET /mysql-admin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:25 -0400] "GET /mysql/admin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:26 -0400] "GET /mysqladmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:26 -0400] "GET /mysqladminconfig/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:26 -0400] "GET /mysql/db/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:26 -0400] "GET /mysql/dbadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:26 -0400] "GET /mysqlmanager/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:26 -0400] "GET /mysql/mysqlmanager/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:27 -0400] "GET /mysql/pma/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:27 -0400] "GET /mysql/pMA/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:27 -0400] "GET /mysql/sqlmanager/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:27 -0400] "GET /mysql/web/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:27 -0400] "GET /~/phpadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:28 -0400] "GET /phpadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:28 -0400] "GET /~/phpmanager/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:28 -0400] "GET /phpmanager/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:28 -0400] "GET /phpmy/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:28 -0400] "GET /phpmya/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:28 -0400] "GET /php-my-admin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:29 -0400] "GET /php-myadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:29 -0400] "GET /phpmy-admin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:29 -0400] "GET /phpmyadmin1/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:29 -0400] "GET /phpmyadmin2/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:29 -0400] "GET /phpMyAdmin-2/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:30 -0400] "GET /phpMyAdmin2/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:30 -0400] "GET /phppma/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:30 -0400] "GET /p/m/a/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:30 -0400] "GET /PMA/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:30 -0400] "GET /pma2005/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:30 -0400] "GET /PMA2005/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:31 -0400] "GET /program/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:31 -0400] "GET /qql/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:31 -0400] "GET /roundcube/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:31 -0400] "GET /sl2/data/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:31 -0400] "GET /SQL/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:32 -0400] "GET /sqladmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:32 -0400] "GET /sqlmanager/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:32 -0400] "GET /sql/myadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:32 -0400] "GET /sql/phpmanager/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:32 -0400] "GET /sql/php-myadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:33 -0400] "GET /sql/phpmy-admin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:33 -0400] "GET /sql/phpMyAdmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:33 -0400] "GET /sql/phpmyadmin2/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:33 -0400] "GET /sql/phpMyAdmin2/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:33 -0400] "GET /sql/sql/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:33 -0400] "GET /sql/sql-admin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:34 -0400] "GET /sql/sqladmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:34 -0400] "GET /sql/sqlweb/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:34 -0400] "GET /sqlweb/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:34 -0400] "GET /sql/webadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:34 -0400] "GET /sql/webdb/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:35 -0400] "GET /sql/websql/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:35 -0400] "GET /typo3/phpmyadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:35 -0400] "GET /web/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:35 -0400] "GET /webadmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:35 -0400] "GET /webdb/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:35 -0400] "GET /web/phpMyAdmin/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
 [21/Sep/2011:09:28:36 -0400] "GET /websql/ HTTP/1.1" 403 603 "-" "Gootkit auto-rooter scanner"
Posted in hackers. Comments Off on Gootkit auto-rooter scanner – hello