OVH Community, your new community space.

Port scanning from OVH?


marks
18-02-2015, 12:18
these IPs are our monitoring system, as you can see here:

marc@markus ~ $ host 167.114.37.1
1.37.114.167.in-addr.arpa domain name pointer netmon-1-bhs.ovh.ca.
marc@markus ~ $ host 92.222.186.1
1.186.222.92.in-addr.arpa domain name pointer netmon-1-gra.ovh.net.
marc@markus ~ $ host 92.222.184.1
1.184.222.92.in-addr.arpa domain name pointer netmon-1-rbx.ovh.net.
marc@markus ~ $

These monitoring system servers are only checking whether your server is online and whether certain services are open, but not trying to break into your server or anything dangerous.

The monitoring system does ping your server to keep the SLA (so if it's stop pinging, we'll program an interevention). To see whether the ports are open is not necessary for that, it's only information and it does appear in your manager, so you can block the scans if you want. That's up to you, but it's definitely not an attack.

Thanks

Wajdan
18-02-2015, 12:03
My firewall has recently blocked 3 OVH Ips for port scanning.

167.114.37.1 (CA/Canada/netmon-1-bhs.ovh.ca) blocked for port scanning
Time: Wed Feb 18 10:59:53 2015 +0000
IP: 167.114.37.1 (CA/Canada/netmon-1-bhs.ovh.ca)
Hits: 11
Blocked: Temporary Block
------------
92.222.186.1 (FR/France/netmon-1-gra.ovh.net) blocked for port scanning
Time: Wed Feb 18 11:00:12 2015 +0000
IP: 92.222.186.1 (FR/France/netmon-1-gra.ovh.net)
Hits: 11
Blocked: Temporary Block
-----------
92.222.184.1 (FR/France/netmon-1-rbx.ovh.net) blocked for port scanning
Time: Wed Feb 18 11:00:13 2015 +0000
IP: 92.222.184.1 (FR/France/netmon-1-rbx.ovh.net)
Hits: 11
Blocked: Temporary Block