IRC Bouncer (BNC) Detection

info Nessus Plugin ID 34238

Synopsis

An IRC bouncer is running on this port.

Description

An IRC bouncer (aka BNC) is running on this port. It proxies communications between IRC clients and servers. This may be done to allow clients without direct network access to connect to servers or to hide client addresses.

Legimate use of such proxies is rare. They are often installed by attackers in order to avoid detection while controlling a 'botnet'.

Solution

Make sure that use of this software is in agreement with your organization's security policy.

See Also

https://en.wikipedia.org/wiki/Bouncer_(networking)

https://en.wikipedia.org/wiki/Botnet#Formation_and_exploitation

Plugin Details

Severity: Info

ID: 34238

File Name: irc_bouncer.nasl

Version: Revision: 1.8

Type: remote

Published: 9/17/2008

Updated: 5/16/2017

Supported Sensors: Nessus