[Neil]

Hi

The DDOS Protection has been disabled now, are you able to connect to the server?

[damo1995]

Hi,

I currently have a OVH Cloud VPS Server which was working fine for a few days then I started to get hit with a DDOS attack which lasted over 9 days (Part of the reason I moved to OVH for the DDOS protection infrastructure) .

Im currently having big issues when it comes to the connectivity of the server, It was working perfectly fine, now after the attack has finished, i've checked firewall this is disabled, check migration this is also set to automatic but is currently disabled, I can connect from some IP's but not others, the Web panel states that the server is currently pinging, ssh is active and HTTP. Now this is where the problem occurs, I can then ping the server using either terminal or CMD within windows, and the server responds not a problem, I then attempt ssh from the same ip using both windows and linux, Nothing, Nada. It just sits there and eventually times out as it the server is not even responding. I move to a different external network, E.G my mobile broadband, and it works fine. But then from another location with the same ISP and again, works fine. I am confused in regards to this as it WAS working fine before the attack, I've had other people also who were connecting DURING the attack state now they cannot connect and are also having issues with connecting to certain ports, BUT can ping and traceroute which is fine,

Here is an example trace route to show IT IS currently connecting but something is either blocking(Firewall?) or the server is just refusing, I've also checked my IP tables and there is nothing in there blocking at all.

Example Tracert:

C:\Windows\System32>tracert -h 225 mc.cedarcraft.org

Tracing route to 37.187.34.121 
over a maximum of 225 hops:

  1    <1 ms    <1 ms    <1 ms  suddenlink.net [192.168.0.1]
  2     *        *        *     Request timed out.
  3     6 ms     6 ms     6 ms  173-219-234-168-link.sta.suddenlink.net [173.219
.234.168]
  4    28 ms    25 ms    25 ms  173-219-247-46-link.sta.suddenlink.net [173.219.
247.46]
  5    25 ms    24 ms    25 ms  173-219-247-59-link.sta.suddenlink.net [173.219.
247.59]
  6    25 ms    25 ms    25 ms  173-219-247-44-link.sta.suddenlink.net [173.219.
247.44]
  7    25 ms    30 ms    28 ms  173-219-231-156-link.sta.suddenlink.net [173.219
.231.156]
  8    47 ms    48 ms    54 ms  bhs-g1-6k.qc.ca [198.27.73.205]
  9    50 ms    48 ms    49 ms  vac3-0-a9.qc.ca.vaccum [198.27.73.245]
 10    73 ms    69 ms    69 ms  vac3-1-n7.qc.ca.firewall [198.27.73.242]
 11    70 ms    71 ms    70 ms  vac3-2-n7.qc.ca.tilera [198.27.73.247]
 12    69 ms    70 ms    70 ms  vac3-3-n7.qc.ca.arbor [198.27.73.58]
 13     *        *        *     Request timed out.
 14     *        *        *     Request timed out.
 15     *        *        *     Request timed out.
 16   147 ms   143 ms   143 ms  121.ip-37-187-34.eu [37.187.34.121]

And again, i can ping in and out, Here are the server Details,

Server: vps108952.ovh.net
Location: Roubaix DC2
OS: Debian 7 (Wheezy) (64 bits)
NIC Handle: dd65837-ovh

I do currently have an open ticket which has been open for about a week now, and still no resolution to this,
Ticket ID: 1902988

If anybody here has any ideas of what i could possibly try or an other diagnostics, please let me know.

Best regards
Damo1995