Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> Backdoors >> IRC bot detection

Vulnerability Assessment Details

IRC bot detection

Vulnerability Assessment Summary
Fake IDENT server (IRC bot)

Detailed Explanation for this Vulnerability Assessment

This host seems to be running an ident server, but before any
request is sent, the server gives an answer about a connection
to port 6667.

It is very likely this system has heen compromised by an IRC
bot and is now a 'zombi' that can participate into 'distributed
denial of service' (DDoS).

Solution: desinfect or re-install your system
Risk factor: High

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2005 Michel Arboi

Cables, Connectors