IP Address | Port | Hostname | |
---|---|---|---|
Source | (local) | 61143 | |
Destination | 172.229.211.27 (United States) | http (80) |
Description:
See the following:
- http://www.networkworld.com/article/2329380/software/no-fun-with-funwebproducts.html
- http://funwebproducts.com/
- https://blog.sucuri.net/2015/08/funwebproducts-useragent-bloating-traffic.html
False Positive:
- PROBABLY NOT
- FunWebProducts is a real company peddling junkware/spyware. However, see the sucuri blog post and some of the comments.
- There is possible something else is going on here, particularly in light of the other User-Agents showing up on that system.
- The involved IP is from a CDN (Akamai), so nothing conclusive there.
- The target domain for this request is www.cars.com.
Action:
- Alarm
- Scan asset to ensure it is not infected with a Browser Hijacker
Comments