The remote host appears to be running a machine that is being used to control a botnet.  A botnet is a network of compromised computers that are remotely controlled by a malicious bot administrator.  Botnets are commonly used for
sending spam
running Denial of Service (DoS) attacks against other networks
scanning and compromising new systems
Installing sniffers
Installing keyloggers
Identify theft

The remote host is running an ignitionServer IRC server. This version of ignitionServer is reported to be prone to a remote remote denial of service in the way that the server handles channel locking.  Specifically, a non-operator can create a locked channel which cannot be unlocked by an authorized operator.  The only way to clear the channel would be to reboot the server.  This can cause a loss of availability.

The remote host is running a version of BNC, an IRC proxy, that is vulnerable to an authentication bypass vulnerability. An attacker may use this issue to access the remote IRC proxy server.

The remote host is running a version of BNC, an IRC proxy that is vulnerable to a remote buffer overflow. An attacker may use this issue to execute code on remote server.

The remote host is running an ignitionServer IRC server. This version of ignitionServer is reported to be prone to a remote denial of service in the processing of the SERVER IRC command. An attacker may crash or hang the remote server, denying service to legitimate users. 

The remote host is running a version of Unreal IRCD that is vulnerable to a remote denial of service. It is reported that Unreal IRCD may crash when a client sends a raw message to OperServ to join a channel. An attacker may use this issue to deny service to legitimate users. 

The remote host is running a version of Unreal IRCD that is prone to a cloaked IP address disclosure issue. An attacker may use its own IP and the corresponding hash in order to find the server cloak keys. This vulnerability could permit an attacker to gather valid IP addresses in order to carry out attacks on them.

ID	Name	Severity
3149	Generic Botnet Server Detection (disconnect) (deprecated)	critical
3148	Generic Botnet Server Detection (waste) (deprecated)	critical
3147	Generic Botnet Server Detection (harvest) (deprecated)	critical
3146	Generic Botnet Server Detection (redirect) (deprecated)	critical
3145	Generic Botnet Server Detection (pctrl) (deprecated)	critical
3144	Generic Botnet Server Detection (rsl) (deprecated)	critical
3143	Generic Botnet Server Detection (http) (deprecated)	critical
3142	Generic Botnet Server Detection (ftp) (deprecated)	critical
3141	Generic Botnet Server Detection (inst) (deprecated)	critical
3140	Generic Botnet Server Detection (cvar) (deprecated)	critical
3139	Generic Botnet Server Detection (plugin) (deprecated)	critical
3138	Generic Botnet Server Detection (shell) (deprecated)	critical
3137	Generic Botnet Server Detection (bot command) (deprecated)	critical
3136	Generic Botnet Server Detection (port scan) (deprecated)	high
3135	Generic Botnet Server Detection (ddos) (deprecated)	critical
3134	Generic Botnet Server Detection (scan) (deprecated)	critical
3107	IRC Server Detection	info
2919	ignitionServer < 0.3.6p1 Channel Locking Remote DoS	high
2404	BNC IRC Server < 2.9.1 Authentication Bypass	high
2403	BNC < 2.9.1 getnickuserhost IRC Server Response Buffer Overflow	critical
2152	ignitionServer < 0.3.2 SERVER Command Remote DoS	high
2154	Unreal IRCD OperServ Raw Message Channel Join DoS	high
2153	Unreal IRCD < 3.2.1 Cloak IP Address Disclosure	medium

Detections

Analytics

IRC Servers Family for Nessus Network Monitor

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high

critical

critical

info

high

high

critical

high

high

medium