whatismyip.com Client Detection

Info Nessus Network Monitor Plugin ID 5280

Synopsis

The remote client was just observed connecting to 'whatismyip.com'.

Description

The remote client was just observed connecting to 'whatismyip.com'. This sort of query is often used by Botnet clients to determine their external (routable) IP address.

Solution

N/A

Plugin Details

Severity: Info

ID: 5280

File Name: 5280.prm

Family: Policy

Published: 2009/12/18

Modified: 2015/06/01

Dependencies: 1735, 8314

Risk Information

Risk Factor: Info