Active Inbound Connection From Host Listed in Known Bot Database

This script is Copyright (C) 2012-2015 Tenable Network Security, Inc.

Synopsis :

According to a third-party database, the remote host is receiving an
inbound connection from a host that is listed as part of a botnet.

Description :

According to the output from netstat, the remote host has an inbound
connection from one or more hosts that are listed in a public database
as part of a botnet.

Solution :

Determine which services the botnet hosts are connected to, and
investigate further if necessary.

Risk factor :


Family: General

Nessus Plugin ID: 59713 ()

Bugtraq ID:


Ready to Scan Unlimited IPs & Run Compliance Checks?

Upgrade to Nessus Professional today!

Buy Now

Combine the Power of Nessus with the Ease of Cloud

Start your free Nessus Cloud trial now!

Begin Free Trial