Oct 23, 2016 12:40 PM
(This post was last modified: Oct 23, 2016 05:40 PM by BannedOffline.)
OVH is a good host. When you setup server wrong you're fucked (simple as that)
Most ddos protection providers that use ovh have reactionary mitigation on which only activates permanent mode if a threat is detetcted which their sensor can be bypassed with priv8 scripts and certain tcp based attacks.
You will need a vps with permanent mitigation on by default in order to stop all L4 floods and receive the full protection.
Examples of hosts with reactionary mitigation are SoYouStart and Kimsufi.
1. Traceroute IP
You will see a few hops (the ISP of server your using to traceroute).
Near the bottom of the list you will get something like.
be1-1171.sbg-g2-a9.fr.eu 37.187.232.94 fr 8.224 ms
be1-1170.sbg-g1-a9.fr.eu 37.187.232.86 fr 8.236 ms 8.281 ms
vac2-0-a9.fr.eu
^ means your server has no ddos protection and you areeee fukdddddd.
2. Traceroute IP
Near the bottom of the list you will get something like.
be1-1170.sbg-g1-a9.fr.eu 37.187.232.86 fr 8.299 ms 8.284 ms
be1-1171.sbg-g2-a9.fr.eu 37.187.232.94 fr 8.261 ms
vac2-0-a9.fr.eu 178.33.100.97 8.648 ms
vac2-0-a9.fr.eu 178.33.100.155 8.670 ms
vac2-0-a9.fr.eu 178.33.100.97 8.648 ms
vac2-1-n7.fr.eu.firewall 178.33.100.98 8.134 ms 8.221 ms 8.314 ms
vac2-2-n7.fr.eu.tilera 37.187.36.247 fr 8.283 ms 8.584 ms 8.670 ms
vac2-3-n7.fr.eu 91.121.215.111 fr 8.191 ms 8.606 ms 9.101 ms
This means your traffic is permanently routing through VAC and no priv8 script or power can take you down. (Unless they hack your server or you have unnecessary ports open).
This thread is referring to Virtual Private Servers
A Anti DDoS GAME server will have 1 or 2 hops that link back to OVH ISP.
(No one can down Anti DDoS GAME if they claim they did it, they are mistaking it for a vps)
I'm not sure if VAC filters layer 7 so you will need to block bots (browser check) or setup caching. If you need list of OVH resellers PM me.
Most ddos protection providers that use ovh have reactionary mitigation on which only activates permanent mode if a threat is detetcted which their sensor can be bypassed with priv8 scripts and certain tcp based attacks.
You will need a vps with permanent mitigation on by default in order to stop all L4 floods and receive the full protection.
Examples of hosts with reactionary mitigation are SoYouStart and Kimsufi.
1. Traceroute IP
You will see a few hops (the ISP of server your using to traceroute).
Near the bottom of the list you will get something like.
be1-1171.sbg-g2-a9.fr.eu 37.187.232.94 fr 8.224 ms
be1-1170.sbg-g1-a9.fr.eu 37.187.232.86 fr 8.236 ms 8.281 ms
vac2-0-a9.fr.eu
^ means your server has no ddos protection and you areeee fukdddddd.
2. Traceroute IP
Near the bottom of the list you will get something like.
be1-1170.sbg-g1-a9.fr.eu 37.187.232.86 fr 8.299 ms 8.284 ms
be1-1171.sbg-g2-a9.fr.eu 37.187.232.94 fr 8.261 ms
vac2-0-a9.fr.eu 178.33.100.97 8.648 ms
vac2-0-a9.fr.eu 178.33.100.155 8.670 ms
vac2-0-a9.fr.eu 178.33.100.97 8.648 ms
vac2-1-n7.fr.eu.firewall 178.33.100.98 8.134 ms 8.221 ms 8.314 ms
vac2-2-n7.fr.eu.tilera 37.187.36.247 fr 8.283 ms 8.584 ms 8.670 ms
vac2-3-n7.fr.eu 91.121.215.111 fr 8.191 ms 8.606 ms 9.101 ms
This means your traffic is permanently routing through VAC and no priv8 script or power can take you down. (Unless they hack your server or you have unnecessary ports open).
This thread is referring to Virtual Private Servers
A Anti DDoS GAME server will have 1 or 2 hops that link back to OVH ISP.
(No one can down Anti DDoS GAME if they claim they did it, they are mistaking it for a vps)
I'm not sure if VAC filters layer 7 so you will need to block bots (browser check) or setup caching. If you need list of OVH resellers PM me.




![[Image: Advanced-Investigation-650x200.gif]](https://i.ibb.co/8tq9Jrk/Advanced-Investigation-650x200.gif)

