Unknown private IP tries to get into network



  • I came across the following in the firewall log:

    192.168.7.0/24 is not a known subnet anywhere in my network. Tracing to it fails. 192.168.120.22 is a webserver with a NAT to a public IP.

    As far as I know, nobody can use such an IP on the public internet. Is this an attempt to hack into my network. Should I be worried?



  • What is your WAN port connected to? Who is your ISP?

    And your firewall is blocking it, so i wouldnt worry too much about it. It's doing what it's supposed to do.



  • If it's an attempt to hack into any network, it's a really bad one. TCP RST packets aren't going to get you anything. Hard to say what that might be exactly, but if it's truly coming in from your ISP, just treat it like any general Internet noise - ignore it.


Log in to reply