I dunno if you guys already got this trying to sniff your servers but on mine is the plate of the day.
Everyday new cmds, new bots, new malware knocking at the door…
Bots are getting smarter and smarter upgraded every day… Just take a look into the new FeeLCoMz RFI Scanner Bot v5.0 – last updated at Feb. 2009, this bot features:
- RFI Scanner
- RFI Scan & Exploit
- Joomla RFI Scan & Exploit
- Milw0rm Search
- Google bypass
- Message Spy & Save
- Auto Spreading
It’s almost a All-In-One tool. Even a script kiddie, with few knowledge could run this and get hundreds of server… If they root them or not, it all depends if they know how to run public local exploits or even use terminal commands…
With this and spreader Fx29Spreadz v1.0 (Apr. 2009) that has a couple of mods:
- PHP bot
- Upload PHP shell
- Run RFI scanner
- Run psyBNC
Lot’s of IRC server already running this bots and targetting millions of server everyday.




[...] FeeLCoMz RFI scanner is again scanning for possible injection on a couple of my websites. [...]