whatismyip.com Client Detection

info Nessus Network Monitor Plugin ID 5280

Synopsis

The remote client was just observed connecting to 'whatismyip.com'.

Description

The remote client was just observed connecting to 'whatismyip.com'. This sort of query is often used by Botnet clients to determine their external (routable) IP address.

Solution

N/A

Plugin Details

Severity: Info

ID: 5280

Family: Policy

Published: 12/18/2009

Updated: 6/1/2015