No shit sherlock, but that's is irrelevant to my question. He claims "this box was not public facing", then provides an ip that the attacker connected from. So which is it? How did the attacker connect to a box that was not accessible?
there are no proof that hacker hack his site maybe some other problem he faced but hacker didnot hack his website no record of hacker or hacking