I am contacting you following a connection which I would like to know if it could be malicious.
Following a customer satisfaction study concerning support from a well-known company, I clicked on the address below to answer a questionnaire:
https://survey.simplesat.io/
I responded, but when I wanted (in the browser) to validate the active content with "NoScript", the address to validate in NoScript was different,
at that time it had been changed to:
0.0.1.148
This is not an IP address commonly used by websites.
This is the first time I've seen this address in NoScript, which I've been using for a long time (its beginnings in fact).
I would like to know if the questionnaire Internet page was able, via active content, to use a local proxy or act locally,
by registering internally on the LAN for example?
What is possible to do from outside (Internet for example) on a remote machine using the IP address 0.0.1.148?
This is the first time I've seen this, which is why I'm worried.
Thanking you in advance for your response, as well as your help.
The IP address "0.0.1.148" is a "reserved" IP for local intranet use, not public assigned nor private. It poses no risk and was most likely a device on the network being served that was responsible for that transaction.
Following a customer satisfaction study concerning support from a well-known company, I clicked on the address below to answer a questionnaire:
Had you recently had an interaction with this 'well-known' company, and were you expecting a customer satisfaction survey? If not this could be some kind of scam/phishing attempt.
Sec.Info.Junior:
however, this does not tell us how and why a site external to my PC, i.e. a website, calls an IP which seems to be on my private network?
I appreciate it, however, this does not tell us how and why a site external to my PC, i.e. a website, calls an IP which seems to be on my private network?
I appreciate it, however, this does not tell us how and why a site external to my PC, i.e. a website, calls an IP which seems to be on my private network?
Malware Removal Help Forums dedicated to cleaning infected devices. Get personalized help removing adware, malware, spyware, ransomware, trojans, viruses and more from tech experts. Follow the instructions in the pinned topics first. All assistance here is used at your own risk and we take no responsibility should there be damage to the system in question.
We resolved the domain survey.simplesat.io to IP address 54.84.236.175
IP Abuse Reports for 54.84.236.175:
This IP address has been reported a total of 3 times from 2 distinct sources. 54.84.236.175 was first reported on March 4th 2023, and the most recent report was 6 months ago.
Old Reports: The most recent abuse report for this IP address is from 6 months ago. It is possible that this IP is no longer involved in abusive activities.
0.0.1.148 is a private IP address, and is only used in internal network environments. Any abusive activity you see coming from an internal IP is either coming from within your network itself, or is the result of an error or misconfiguration.
