Jump to content

HotSpot login wrongly detected


Gregecslo

Recommended Posts

Hi!

Today we had to connect to guest WiFi hotspot and we encountered this:
 

Uniform Resource Identifier (URI): hXXp://2.2.2.2/fs/customwebauth/login.html?switch_url=hxxp://2.2.2.2/login.html&ap_mac=00:44:33:04:5d:41&client_mac=00:22:33:ea:c2:41&wlan=COM-Guest&redirect=www.msftconnecttest.com/redirect

Process name: C:\Program Files\Google\Chrome\Application\chrome.exe

Event: An attempt to connect to URL

Rule: Blocked by internal IP blacklist

Scanner: HTTP filter

Target address: 2.2.2.2

 

As a result, people were unable to attend meeting on time.

Can you please explain why is this blocked and how to prevent connectivity issues in the future?

 

Thanks!

Link to comment
Share on other sites

  • Administrators

Not sure whether it's really FP: https://www.abuseipdb.com/check/2.2.2.2
https://www.virustotal.com/gui/url/e58ffd65b10755b7d8a3e0288becb4773ba31b4719bd8a12f91a3179144936c0?nocache=1

Please contact samples[at]eset.com if you believe it should not be blocked.

Link to comment
Share on other sites

Hi.

I did contact them, waiting for response.

But I think (have limited info here) that 2.2.2.2 does not belong to actual organisation that owns the hotspot I believe that they just used/abused this IP address (and addressing) in their INTERNAL network...

Because this IP is owned by Orange and it`s located is Egypt, faaar from country our people had problems...

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...