IRC Bouncer (BNC) Detection

This script is Copyright (C) 2008-2011 Tenable Network Security, Inc.


Synopsis :

An IRC bouncer is running on this port.

Description :

An IRC bouncer (aka BNC) is running on this port. It proxies
communications between IRC clients and servers. This may be done to
allow clients without direct network access to connect to servers or
to hide client addresses.

Legimate use of such proxies is rare. They are often installed by
attackers in order to avoid detection while controlling a 'botnet'.

See also :

http://en.wikipedia.org/wiki/Bouncer_(networking)
http://en.wikipedia.org/wiki/Botnet#Formation_and_exploitation

Solution :

Make sure that use of this software is in agreement with your
organization's security policy.

Risk factor :

None

Family: Service detection

Nessus Plugin ID: 34238 (irc_bouncer.nasl)

Bugtraq ID:

CVE ID: