Active Inbound Connection From Host Listed in Custom Netstat IP Threat List

info Nessus Plugin ID 102425

Language:

Synopsis

According to a custom netstat IP threat list, the remote host is making an inbound connection to a host that is listed as a threat.

Description

According to the output from netstat, the remote host has an inbound connection to one or more hosts that are listed in the custom netstat IP threat list.

Solution

Determine which services the hosts are connected to, and investigate further if necessary.

Plugin Details

Severity: Info

ID: 102425

File Name: ipthreat_lookup_netstat_custom_inbound.nasl

Version: 1.4

Type: local

Agent: windows, macosx, unix

Family: General

Published: 8/11/2017

Updated: 3/8/2021

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

Required KB Items: ipthreat/lookup/custom/inbound

Detections

Analytics