Active Inbound Connection From Host Listed in Known Bot Database

This script is Copyright (C) 2012-2015 Tenable Network Security, Inc.

Synopsis :

According to a third-party database, the remote host is receiving an
inbound connection from a host that is listed as part of a botnet.

Description :

According to the output from netstat, the remote host has an inbound
connection from one or more hosts that are listed in a public database
as part of a botnet.

Solution :

Determine which services the botnet hosts are connected to, and
investigate further if necessary.

Risk factor :


Family: General

Nessus Plugin ID: 59713 ()

Bugtraq ID:


Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now