Re:Stealthy Linux rootkit found in the wild after going unde...
by vitus on Sunday December 10, 2023 @10:24AM
(#38592115)
> Or are those ports for control inside the firewall only?
It seems so. This traffic likely will not even traverse a firewall -- the article lists the IP addresses used with port 52699, which are all RFC1918 space (172.16.0.0/12).
It seems so. This traffic likely will not even traverse a firewall -- the article lists the IP addresses used with port 52699, which are all RFC1918 space (172.16.0.0/12).