BNC Detection

This script is Copyright (C) 2008-2011 Tenable Network Security, Inc.


Synopsis :

An IRC bouncer is running on this port.

Description :

BNC, an IRC bouncer from The BNC Project, is running on this port. It
proxies communications between IRC clients and servers. This may be
done to allow clients without direct network access to connect to
servers or to hide client addresses.

Legimate use of such proxies is rare. They are often installed by
attackers in order to avoid detection while controlling a 'botnet'.

See also :

http://www.gotbnc.com/
http://en.wikipedia.org/wiki/Bouncer_(networking)

Solution :

Make sure that use of this software is in agreement with your
organization's security policy.

Risk factor :

None

Family: Service detection

Nessus Plugin ID: 34236 (bnc_detect.nasl)

Bugtraq ID:

CVE ID: