OVH seemed to have upped their game with more information than just throwing all traffic into “mitigation” which can result in bad exit status, with no information as to what their systems are detecting as a threat of denial of service attack.
For the first time I got an email…no mitigation. |
| ||
Dear Customer,
Abnormal activity has been detected on your VPS
Attack detail : 4Kpps/2Mbps
dateTime srcIp:srcPort dstIp:dstPort protocol flags bytes reason
2020.09.15 19:02:21 CEST my ip:42845 212.22.93.124:25565 TCP SYN 60 ATTACK:TCP_SYN
2020.09.15 19:02:21 CEST my ip:39673 212.22.93.124:25565 TCP SYN 60 ATTACK:TCP_SYN
Etc
Gerry