Apparently some security scanner tests some php vulnerability based on fopen trying to load that.
Reply on news.ycombinator.com