Hello! I recently ran into a situation where someone believes he is being hacked.... long story short, I found ssh connection and pinging records to IPs from these ranges: 192.168.27.xx, 192.168.17.xx, 192.168.123.xx, 192.168.66.xx and 192.168.77.xx. I am not a network expert by any means but I'm inclined to believe any IP with 168 is just a local network range that is just not as common as 192.168.1.xx. Can I get some answers and direction with sources if possible please?
No comments:
Post a Comment