Knowledgebase
ovh ip problem
| Posted by alibabahost, 03-03-2012, 01:29 PM | | Hi,
Did any one facing problem with ovh Ip's .I have been using ovh server for window node but recently those ip's stop working after i got email form ovh, below is email i got from OVH.
Can any one help me regarding this.
Hello,
We have detected that your server ns229012.ovh.net unnecessarily sending
a large number of requests over the network via its IP failover 37.59.80.102
This is due to a misconfiguration.
We've asked you several times to reconfigure your IP failover
and we still see no change.
Thus, we have acted and blocked your IP failover 37.59.80.102.
We ask you kindly to reconfigure the IP failover.
Once done, you will be able to unblock it in your manager, section
"Dedicated Servers"> "ns229012.ovh.net"> "Server Status"> "Blocked IP Addresses"
You can use the following guide to help you with the reconfiguration:
http://guides.ovh.com/AjouterAliasIp/
http://guides.ovh.com/BridgeClient/
You will find below a sample of queries sent by your server:
------- EXTRACT OF REQUESTS -------
Thu Mar 1 18:06:54 2012 : arp who-has 37.59.80.110 tell 37.59.80.102
Thu Mar 1 18:06:54 2012 : arp who-has 37.59.80.110 tell 37.59.80.102
Thu Mar 1 18:06:58 2012 : arp who-has 37.59.80.110 tell 37.59.80.102
Thu Mar 1 18:06:58 2012 : arp who-has 37.59.80.110 tell 37.59.80.102
Thu Mar 1 18:06:58 2012 : arp who-has 37.59.80.110 tell 37.59.80.102
Thu Mar 1 18:07:01 2012 : arp who-has 37.59.80.110 tell 37.59.80.102
Thu Mar 1 18:07:01 2012 : arp who-has 37.59.80.110 tell 37.59.80.102
Thu Mar 1 18:07:01 2012 : arp who-has 37.59.80.110 tell 37.59.80.102
Fri Mar 2 10:07:02 2012 : arp who-has 37.59.80.110 tell 37.59.80.102
Fri Mar 2 10:07:04 2012 : arp who-has 37.59.80.110 tell 37.59.80.102
------- END OF EXTRACT -------
|
| Posted by Wintereise, 03-03-2012, 01:37 PM | | Could be anything, probably a malware trying to use ARP to find neighboring hosts though.
Run a malware scan first, then go from there. Next step would be installing Wireshark and filtering the ARP requests to see where they originate.
|
|
 Add to Favourites
 Print this Article
|
Also Read
