Detections
Analytics
IRC Bouncer (BNC) Detection
info Nessus Plugin ID 34238
Language:
Synopsis
An IRC bouncer is running on this port.Description
An IRC bouncer (aka BNC) is running on this port. It proxies communications between IRC clients and servers. This may be done to allow clients without direct network access to connect to servers or to hide client addresses.Legimate use of such proxies is rare. They are often installed by attackers in order to avoid detection while controlling a 'botnet'.
Solution
Make sure that use of this software is in agreement with your organization's security policy.See Also
https://en.wikipedia.org/wiki/Bouncer_(networking)
https://en.wikipedia.org/wiki/Botnet#Formation_and_exploitation
Plugin Details
Severity: Info
ID: 34238
File Name: irc_bouncer.nasl
Version: Revision: 1.8
Type: remote
Family: Service detection
Published: 9/17/2008
Updated: 5/16/2017
Supported Sensors: Nessus