Active Inbound Connection From Host Listed in Custom Netstat IP Threat List

Info Nessus Plugin ID 102425

Synopsis

According to a custom netstat IP threat list, the remote host is making an inbound connection to a host that is listed as a threat.

Description

This plugin has been temporarily disabled.

According to the output from netstat, the remote host has an inbound connection to one or more hosts that are listed in the custom netstat IP threat list.

Solution

Determine which services the hosts are connected to, and investigate further if necessary.

Plugin Details

Severity: Info

ID: 102425

File Name: ipthreat_lookup_netstat_custom_inbound.nasl

Version: 1.3

Type: local

Agent: windows, macosx, unix

Family: General

Published: 2017/08/11

Modified: 2018/08/14

Dependencies: 58430

Risk Information

Risk Factor: Info

Vulnerability Information

Required KB Items: ipthreat/lookup/custom/inbound