OVH Community, your new community space.

Flood attack from ovh network


Maki187
05-01-2015, 22:10
Yea, but they detect only some of simple udp floods etc..

heise
05-01-2015, 17:01
and the filters will not detect it.
They also have internal filters to detect abuse.

Etrail
05-01-2015, 15:11
Ok I send the report to abuse(at)ovh.net.

Yes the problem is you can simply buy a server by OVH and dos/flood other servers without any problem and the filters will not detect it.

Maki187
05-01-2015, 02:03
I found online stresser that uses OVH servers for it's activity (Alredy reported to OVH)

These are that IP's

198.27.125.36
94.23.9.200
176.31.104.185
167.114.64.204
198.27.74.119
94.23.112.110

It's shame that OVH is getting worse evry day about protection.
VAC 1 not working, FREE stresser on internet can take down ovh servers with Anti DDoS Pro... No comment anymore.

heise
05-01-2015, 01:52
Forward to abuse(at)ovh.net .

Etrail
04-01-2015, 23:24
Toddy we have an attack from one of ovh server why ovh allow this ?

The attack coming from the ip 188.165.106.49 and exceeds 900mb, also the anti-ddos not work because I think this bandwidth does not go through the Arbor and other filters. This is not good everyone can buy a server by ovh and flood other servers hosted by ovh.

Here the image of the graph





I caught the attack with tcpdump here you can see/download the full logs http://host2.e-trail.eu/188-165-106-49log.tgz



Please take action and stop it thanks.

Nic: mn59630-sys