x.n-0-r-1.org (ngr irc botnet hosted by Russian Federation Saint Petersburg Selectel Ltd.)

This botnet has lots of domains, none of which are resolving at the moment.

x.n-0-r-1.org
x.n0r1.org
x.n2rx.asia
x.n1rx.asia
x.n0r2.asia
x.n0r1.asia
x.dload.ws
x.xd11.in

You can still connect to the server using it’s ip address though..

Server:  31.186.102.189
Port:  80
Server password:  666666
Channel:   ##CBC-x01##
* Topic for ##CBC-x01## is: !m on !mod usbi on !NAZEL hxxp://www5.0zz0.com/2012/12/20/12/958748231.gif !NAZEL hxxp://www.wata.cc/up/2012/12/images/w-5507065c57.gif
* Topic for ##CBC-x01## set by xXxXx at Thu Dec 20 08:25:28 2012

The server requires ssl and for you to accept self signed certificates to connect. It’s the botnet loading the previously posted bitcoin mining bot that connects to the same ip.

Hosting information: http://whois.domaintools.com/31.186.102.189

Categories: Uncategorized