Active Inbound Connection From Host Listed in Known Bot Database

This script is Copyright (C) 2012 Tenable Network Security, Inc.


Synopsis :

According to a third-party database, the remote host is receiving an
inbound connection from a host that is listed as part of a botnet.

Description :

According to the output from netstat, the remote host has an inbound
connection from one or more hosts that are listed in a public database
as part of a botnet.

Solution :

Determine which services the botnet hosts are connected to, and
investigate further if necessary.

Risk factor :

None

Family: General

Nessus Plugin ID: 59713 ()

Bugtraq ID:

CVE ID: