Read the forum guidelines
So I'm researching a breach in my home network earlier in the year and kept getting the first 4 hops to be the same. No matter where I pointed the tracert to. I would search for the second hop (10.96.248.1) and it would tell me it is a private IP. But it also had a link to a member here (talrah) who had the exact same first four hops. Their concern is with dropped packets, my concern is unauthorized IP cameras. The only difference in the trace is the first entry... My router as 192.168.1.1 and their router as 192.168.0.1.
Is it normal to have the same traceroute?
Where should I focus my attention in this traceroute, if at all, to pinpoint a network intusion. Possibly a MITM attack?
Is this normal?
here is a shot. youre gonna have to take my word on the 2nd hop. I didnt feel like searching for each jpg I have of the traces.
Talrah and the Screenshot from their LAG
I don't understand the question. Why would you think the first 4 hops should be different? Your on the same ISP and connection each time you go online. Also, if someone is in your same neighborhood, their tracert will look similar.