Packet loss on hetzner vServer kvm

Portal Home > Knowledgebase > Industry Announcements > Web Hosting Main Forums > Providers and Network Outages and Updates > Packet loss on hetzner vServer kvm

Posted by fvillalba, 08-17-2012, 01:43 AM
Hi i im vServer Q7 kvm on hetzner

PING xx.xx.xx.xxx
xx.xx.xx.xxx
xx.xx.xx.xxx
xx.xx.xx.xxx
xx.xx.xx.xxx
xx.xx.xx.xxx
xx.xx.xx.xxx (xx.xx.xx.xxx): 56 data bytes
Request timeout for icmp_seq 0
Request timeout for icmp_seq 1
Request timeout for icmp_seq 2
Request timeout for icmp_seq 3

--- xx.xx.xx.xxx
xx.xx.xx.xxx
xx.xx.xx.xxx
xx.xx.xx.xxx
xx.xx.xx.xxx
xx.xx.xx.xxx
xx.xx.xx.xxx ping statistics ---
5 packets transmitted, 0 packets received, 100.0% packet loss

Tracert

traceroute to xx.xx.xx.xxx (xx.xx.xx.xxx), 64 hops max, 72 byte packets
1 192.168.1.1 (192.168.1.1) 1.988 ms 1.384 ms 1.333 ms
2 116.red-80-58-67.staticip.rima-tde.net (xx.xx.xx.xxx) 29.162 ms 27.710 ms 28.041 ms
3 221.red-80-58-88.staticip.rima-tde.net (xx.xx.xx.xxx) 29.896 ms 30.176 ms 31.363 ms
4 65.red-81-46-1.staticip.rima-tde.net (xx.xx.xx.xxx) 31.740 ms 28.705 ms 31.500 ms
5 et7-0-0-1-grtbcnes1.red.telefonica-wholesale.net (94.142.103.197) 27.310 ms 29.032 ms 27.741 ms
6 xe2-0-4-0-grtmadde2.red.telefonica-wholesale.net (84.16.12.53) 53.161 ms
xe0-1-8-0-grtbcntb1.red.telefonica-wholesale.net (84.16.12.202) 27.878 ms 28.367 ms
7 xe1-0-6-0-grtmadpe3.red.telefonica-wholesale.net (84.16.12.49) 38.461 ms
xe1-1-6-0-grtmadpe3.red.telefonica-wholesale.net (84.16.12.141) 38.523 ms
xe1-0-6-0-grtmadpe3.red.telefonica-wholesale.net (84.16.12.49) 37.844 ms
8 xe7-1-3-0-grtmadno1.red.telefonica-wholesale.net (84.16.13.213) 37.173 ms 37.469 ms 37.505 ms
9 level3-4-1-0-0-grtmadno1.red.telefonica-wholesale.net (213.140.55.134) 53.686 ms 50.206 ms
level3-1-0-0-grtmadno1.red.telefonica-wholesale.net (213.140.55.178) 51.082 ms
10 ae-7-7.ebr1.frankfurt1.level3.net (4.69.148.217) 63.280 ms 62.733 ms 62.779 ms
11 ae-61-61.csw1.frankfurt1.level3.net (4.69.140.2) 63.090 ms 62.838 ms 67.639 ms
12 ae-1-60.edge7.frankfurt1.level3.net (4.69.154.11) 63.312 ms
ae-4-90.edge7.frankfurt1.level3.net (4.69.154.203) 63.102 ms
ae-1-60.edge7.frankfurt1.level3.net (4.69.154.11) 63.185 ms
13 as33891-net.edge7.frankfurt1.level3.net (195.16.162.94) 63.345 ms 62.491 ms 63.078 ms
14 hos-bb1.juniper3.rz12.hetzner.de (213.239.240.250) 67.191 ms 67.454 ms 67.740 ms
15 hos-tr4.ms-ex3k1.rz15.hetzner.de (213.239.236.119) 72.408 ms 70.136 ms 71.056 ms
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
Posted by SPINIKR-RO, 08-17-2012, 02:49 AM
Did you contact their support?

No one here can really help you. Specially since the IP is masked and no one can trace it.
Posted by fvillalba, 08-17-2012, 03:55 AM
Hi,

Support tells me that resolves and has connectivity.

IP: 78.47.88.218

lfd advise:

lfd on fqdn.domain.tld: Suspicious process running under user usr

Uptime: 111 seconds
Executable:
/usr/bin/php
Command Line (often faked in exploits):

php -q /home/usr/public_html/path/pipe/pop.php

Network connections by the process (if any):

tcp: 78.47.88.218:46060 -> 78.47.88.218:110

Files open by the process (if any):

/tmp/sess_686fe034fdcca27b6e6593f7076f4099

Memory maps by the process (if any):

00110000-00285000 r-xp 00000000 08:03 3583 /usr/lib/libcrypto.so.1.0.0
00285000-00286000 ---p 00175000 08:03 3583 /usr/lib/libcrypto.so.1.0.0
00286000-00294000 r--p 00175000 08:03 3583 /usr/lib/libcrypto.so.1.0.0
00294000-0029a000 rw-p 00183000 08:03 3583 /usr/lib/libcrypto.so.1.0.0
and continue...

Thanks,
Posted by fvillalba, 08-17-2012, 04:00 AM
Telefónica routing or Command Line (often faked in exploits):
problems? mmm
Posted by fvillalba, 08-17-2012, 04:10 PM
Hi,

Error ping:

Unknown error: 1214

Any ideas?
Posted by fvillalba, 08-17-2012, 05:23 PM
Hi,

Issue it's resolve

15 hos-tr2.ms-ex3k1.rz15.hetzner.de (213.239.236.87) 73.046 ms 72.215 ms 73.433 ms
16 fqdn.domain.tld (78.47.xx.xxx) 72.161 ms 72.206 ms 72.388 ms