+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: How to tell if your OVH server has DDoS Protection. (/showthread.php?tid=5442111)
How to tell if your OVH server has DDoS Protection. - BannedOffline - Oct 23, 2016
OVH is a good host. When you setup server wrong you're fucked (simple as that)
Most ddos protection providers that use ovh have reactionary mitigation on which only activates permanent mode if a threat is detetcted which their sensor can be bypassed with priv8 scripts and certain tcp based attacks.
You will need a vps with permanent mitigation on by default in order to stop all L4 floods and receive the full protection.
Examples of hosts with reactionary mitigation are SoYouStart and Kimsufi.
1. Traceroute IP
You will see a few hops (the ISP of server your using to traceroute).
Near the bottom of the list you will get something like.
be1-1171.sbg-g2-a9.fr.eu 37.187.232.94 fr 8.224 ms
be1-1170.sbg-g1-a9.fr.eu 37.187.232.86 fr 8.236 ms 8.281 ms
vac2-0-a9.fr.eu
^ means your server has no ddos protection and you areeee fukdddddd.
2. Traceroute IP
Near the bottom of the list you will get something like.
be1-1170.sbg-g1-a9.fr.eu 37.187.232.86 fr 8.299 ms 8.284 ms
be1-1171.sbg-g2-a9.fr.eu 37.187.232.94 fr 8.261 ms
vac2-0-a9.fr.eu 178.33.100.97 8.648 ms
vac2-0-a9.fr.eu 178.33.100.155 8.670 ms
vac2-0-a9.fr.eu 178.33.100.97 8.648 ms
vac2-1-n7.fr.eu.firewall 178.33.100.98 8.134 ms 8.221 ms 8.314 ms
vac2-2-n7.fr.eu.tilera 37.187.36.247 fr 8.283 ms 8.584 ms 8.670 ms
vac2-3-n7.fr.eu 91.121.215.111 fr 8.191 ms 8.606 ms 9.101 ms
This means your traffic is permanently routing through VAC and no priv8 script or power can take you down. (Unless they hack your server or you have unnecessary ports open).
This thread is referring to Virtual Private Servers
A Anti DDoS GAME server will have 1 or 2 hops that link back to OVH ISP.
(No one can down Anti DDoS GAME if they claim they did it, they are mistaking it for a vps)
I'm not sure if VAC filters layer 7 so you will need to block bots (browser check) or setup caching. If you need list of OVH resellers PM me.
* - Derfish - Oct 23, 2016
All OVH servers have VAC. Who cares if you down a server for 30 seconds before VAC kicked in for the people who don't have permanent.
* - BannedOffline - Oct 23, 2016
(Oct 23, 2016 12:49 PM)Derfish Wrote: All OVH servers have VAC. Who cares if you down a server for 30 seconds before VAC kicked in for the people who don't have permanent.
VAC doesn't detect all attacks when permanent mode isn't on retard. Why do you think there are 2 DDoS modes
* - Sift - Oct 23, 2016
Damn all your threads have OVH in the title...
* - Derfish - Oct 23, 2016
(Oct 23, 2016 12:52 PM)BannedOffline Wrote: VAC doesn't detect all attacks when permanent mode isn't on retard. Why do you think there are 2 DDoS modes
There're 2 DDoS modes (automatic and permanent) because of the people who need 100% 24/7 uptime and don't care about any latency increases that may arise from the VAC.
Originally, the permanent mitigation was for the customers who actually paid extra for it while ordinary customers would only get automatic mitigation. That has since changed.
/thread
* - Horny - Oct 23, 2016
http://www.spoofit.org/harambe-or-not-harambe/
Teach me more master.
And no, ovh dosent filter any layer7 attacks, browser checking and rate limiting will do the trick.
* - Derfish - Oct 23, 2016
(Oct 23, 2016 01:06 PM)Horny Wrote: http://www.spoofit.org/harambe-or-not-harambe/
Teach me more master.
Quote:tool known as Hulk.
🤣
rip dey dont allow images
ded
"Akamai Free Plan"
* - LowKeyYourDaddy - Oct 23, 2016
Or you can just DDos it and see if it goes offline LMAO
* - Globaldealer - Oct 23, 2016
wow very good method
tracerouting111
* - BankBro - Oct 23, 2016
This helps people hardly any -_-
* - Inked ๖ۣۜFeather - Oct 23, 2016
(Oct 23, 2016 01:06 PM)Horny Wrote: http://www.spoofit.org/harambe-or-not-harambe/
Teach me more master.
And no, ovh dosent filter any layer7 attacks, browser checking and rate limiting will do the trick.
kek
* - _MarTin_ - Oct 23, 2016
(Oct 23, 2016 01:06 PM)Horny Wrote: http://www.spoofit.org/harambe-or-not-harambe/
Teach me more master.
And no, ovh dosent filter any layer7 attacks, browser checking and rate limiting will do the trick.
dude ovh have a l7 mitigate , but can be bypassed , the target i've sent you before use ovh extra mitigate system
* - Conor McGregor™ - Oct 23, 2016
Pretty interesting thanks.
///////
* - chlec - Oct 24, 2016
vac doesn't filter layer 7 unfortunately