Server IP blocked on hetzner

Portal Home > Knowledgebase > Industry Announcements > Web Hosting Main Forums > Providers and Network Outages and Updates > Server IP blocked on hetzner

Posted by hostfeat, 02-23-2012, 01:40 PM
It's like 48 hours that our server IP has been blocked in hetzner.
We tried to transfer our server to another server but hetzner couldn't give us access to our old server and they do not response to the tickets .. the reason they told about the server blocking is that there was a attack to our server, instead of resolving network issue from their end they blocked my server IP and the point is that they are not going to answer emails.
Any one knows any other way to contact them (I tried phone call- to the number on their website- but the guy didn't help me at all and he told that he can not response on the phone). how to contact to the network department ?
Posted by cd/home, 02-23-2012, 01:43 PM

Quote:

Originally Posted by hostfeat

the reason they told about the server blocking is that there was a attack to our server, instead of resolving network issue from their end they blocked my server IP

If your server comes under a big enough attack they simply null route your IP thats understandable as their a budget provider and simply dont make enough per server to let bandwidth burn away nor are they a DDoS protection provider...
Posted by hostfeat, 02-23-2012, 01:50 PM

Quote:

Originally Posted by cd/home

If your server comes under a big enough attack they simply null route your IP thats understandable as their a budget provider and simply dont make enough per server to let bandwidth burn away nor are they a DDoS protection provider...

the blocking is not the main issue as it's reasonable as you told.
but! using the logs they provided we can not prevent the issue, I called lot's of any ddos protection companies : http://www.zenprotection.com
http://www.dosarrest.com
http://www.arbornetworks.com
They all said that I have to know the exact log so they can protect a domain!, here is the log they provided and they just keep saying that I have to wait till the attack goes down:

Quote:

Threshold Traffic 200 MBit/s
Sum 133,458 GByte/300s (3.644 MBit/s), 101.420.000 packets/300s (338.066 packets/s), 96.364 flows/300s (321 flows/s)
External 184.171.245.160, 9,687 GByte/300s (264 MBit/s), 7.284.000 packets/300s (24.280 packets/s), 6.673 flows/300s (22 flows/s)
External 217.66.226.38, 8,420 GByte/300s (229 MBit/s), 6.331.000 packets/300s (21.103 packets/s), 5.857 flows/300s (19 flows/s)
External 66.197.196.21, 6,974 GByte/300s (190 MBit/s), 5.245.000 packets/300s (17.483 packets/s), 4.794 flows/300s (15 flows/s)
External 62.65.133.10, 6,917 GByte/300s (188 MBit/s), 5.247.000 packets/300s (17.490 packets/s), 4.701 flows/300s (15 flows/s)
External 72.29.90.67, 6,729 GByte/300s (183 MBit/s), 5.060.000 packets/300s (16.866 packets/s), 4.582 flows/300s (15 flows/s)
External 176.31.87.205, 5,030 GByte/300s (137 MBit/s), 3.782.000 packets/300s (12.606 packets/s), 3.620 flows/300s (12 flows/s)
External 88.84.137.175, 4,463 GByte/300s (121 MBit/s), 3.356.000 packets/300s (11.186 packets/s), 3.096 flows/300s (10 flows/s)
External 213.160.86.91, 4,317 GByte/300s (117 MBit/s), 3.246.000 packets/300s (10.820 packets/s), 3.036 flows/300s (10 flows/s)
External 178.162.190.116, 4,294 GByte/300s (117 MBit/s), 3.229.000 packets/300s (10.763 packets/s), 2.984 flows/300s (9 flows/s)
External 64.37.55.60, 3,671 GByte/300s (100 MBit/s), 2.760.000 packets/300s (9.200 packets/s), 2.583 flows/300s (8 flows/s)
External 195.74.38.18, 3,427 GByte/300s (93 MBit/s), 2.577.000 packets/300s (8.590 packets/s), 2.441 flows/300s (8 flows/s)
External 217.16.2.55, 3,212 GByte/300s (87 MBit/s), 2.415.000 packets/300s (8.050 packets/s), 2.353 flows/300s (7 flows/s)
External 217.26.210.29, 2,918 GByte/300s (79 MBit/s), 2.194.000 packets/300s (7.313 packets/s), 2.109 flows/300s (7 flows/s)
External 94.102.11.47, 2,672 GByte/300s (72 MBit/s), 2.009.000 packets/300s (6.696 packets/s), 1.930 flows/300s (6 flows/s)
External 78.138.99.177, 2,305 GByte/300s (62 MBit/s), 1.733.000 packets/300s (5.776 packets/s), 1.682 flows/300s (5 flows/s)
External 50.97.154.162, 2,299 GByte/300s (62 MBit/s), 1.729.000 packets/300s (5.763 packets/s), 1.583 flows/300s (5 flows/s)
External 209.236.117.158, 2,150 GByte/300s (58 MBit/s), 1.617.000 packets/300s (5.390 packets/s), 1.587 flows/300s (5 flows/s)
External 217.16.2.6, 2,057 GByte/300s (56 MBit/s), 1.547.000 packets/300s (5.156 packets/s), 1.517 flows/300s (5 flows/s)
External 199.26.85.90, 2,056 GByte/300s (56 MBit/s), 1.546.000 packets/300s (5.153 packets/s), 1.524 flows/300s (5 flows/s)
External 88.151.103.202, 2,016 GByte/300s (55 MBit/s), 1.516.000 packets/300s (5.053 packets/s), 1.489 flows/300s (4 flows/s)
External 194.109.22.114, 1,992 GByte/300s (54 MBit/s), 1.498.000 packets/300s (4.993 packets/s), 1.185 flows/300s (3 flows/s)
External 50.22.240.195, 1,681 GByte/300s (45 MBit/s), 1.264.000 packets/300s (4.213 packets/s), 1.207 flows/300s (4 flows/s)
External 212.36.75.105, 1,561 GByte/300s (42 MBit/s), 1.174.000 packets/300s (3.913 packets/s), 1.140 flows/300s (3 flows/s)
External 81.169.145.25, 1,213 GByte/300s (33 MBit/s), 912.000 packets/300s (3.040 packets/s), 906 flows/300s (3 flows/s)
External 213.251.189.205, 1,185 GByte/300s (32 MBit/s), 891.000 packets/300s (2.970 packets/s), 879 flows/300s (2 flows/s)
External 208.113.134.178, 1,149 GByte/300s (31 MBit/s), 864.000 packets/300s (2.880 packets/s), 857 flows/300s (2 flows/s)
External 184.154.42.82, 1,095 GByte/300s (29 MBit/s), 823.000 packets/300s (2.743 packets/s), 808 flows/300s (2 flows/s)
External 184.154.106.26, 1,087 GByte/300s (29 MBit/s), 817.000 packets/300s (2.723 packets/s), 802 flows/300s (2 flows/s)
External 173.236.101.58, 1,059 GByte/300s (28 MBit/s), 796.000 packets/300s (2.653 packets/s), 786 flows/300s (2 flows/s)
External 196.220.42.60, 1,045 GByte/300s (28 MBit/s), 786.000 packets/300s (2.620 packets/s), 767 flows/300s (2 flows/s)
External 87.117.202.153, 1,045 GByte/300s (28 MBit/s), 786.000 packets/300s (2.620 packets/s), 769 flows/300s (2 flows/s)
External 174.122.37.98, 1,044 GByte/300s (28 MBit/s), 785.000 packets/300s (2.616 packets/s), 773 flows/300s (2 flows/s)
External 209.190.20.220, 1,039 GByte/300s (28 MBit/s), 781.000 packets/300s (2.603 packets/s), 767 flows/300s (2 flows/s)
External 174.121.162.130, 1,025 GByte/300s (27 MBit/s), 771.000 packets/300s (2.570 packets/s), 765 flows/300s (2 flows/s)
External 200.20.1.141, 1,024 GByte/300s (27 MBit/s), 770.000 packets/300s (2.566 packets/s), 763 flows/300s (2 flows/s)
External 69.175.117.146, 1,019 GByte/300s (27 MBit/s), 766.000 packets/300s (2.553 packets/s), 753 flows/300s (2 flows/s)
External 62.149.197.3, 1,004 GByte/300s (27 MBit/s), 755.000 packets/300s (2.516 packets/s), 750 flows/300s (2 flows/s)
External 68.71.45.199, 0,997 GByte/300s (27 MBit/s), 750.000 packets/300s (2.500 packets/s), 739 flows/300s (2 flows/s)
External 208.76.243.50, 0,950 GByte/300s (25 MBit/s), 714.000 packets/300s (2.380 packets/s), 699 flows/300s (2 flows/s)
External 72.29.71.187, 0,908 GByte/300s (24 MBit/s), 683.000 packets/300s (2.276 packets/s), 681 flows/300s (2 flows/s)
External 209.222.9.167, 0,837 GByte/300s (22 MBit/s), 630.000 packets/300s (2.100 packets/s), 610 flows/300s (2 flows/s)
External 122.155.13.144, 0,827 GByte/300s (22 MBit/s), 622.000 packets/300s (2.073 packets/s), 610 flows/300s (2 flows/s)
External 61.19.252.233, 0,802 GByte/300s (21 MBit/s), 603.000 packets/300s (2.010 packets/s), 594 flows/300s (1 flows/s)
External 173.236.56.146, 0,774 GByte/300s (21 MBit/s), 582.000 packets/300s (1.940 packets/s), 576 flows/300s (1 flows/s)
External 61.19.249.133, 0,747 GByte/300s (20 MBit/s), 562.000 packets/300s (1.873 packets/s), 553 flows/300s (1 flows/s)
External 174.36.204.204, 0,713 GByte/300s (19 MBit/s), 536.000 packets/300s (1.786 packets/s), 530 flows/300s (1 flows/s)
External 92.38.227.5, 0,692 GByte/300s (18 MBit/s), 520.000 packets/300s (1.733 packets/s), 518 flows/300s (1 flows/s)
External 89.110.129.52, 0,684 GByte/300s (18 MBit/s), 514.000 packets/300s (1.713 packets/s), 505 flows/300s (1 flows/s)
External 50.23.37.194, 0,669 GByte/300s (18 MBit/s), 503.000 packets/300s (1.676 packets/s), 502 flows/300s (1 flows/s)
External 80.74.147.207, 0,636 GByte/300s (17 MBit/s), 478.000 packets/300s (1.593 packets/s), 474 flows/300s (1 flows/s)

Posted by unity100, 02-25-2012, 09:44 PM
this irritates me to no end as a hetzner customer.

so, when an attack happens for whatsoever reason (a random pimpleface kid somewhere choosing a random ip to ddos with a small botnet he has under hand etc), our entire server is going to be locked out and we wont be able to get back ?

i would like to hear what hetzner has to say about this.
Posted by hostfeat, 02-25-2012, 10:13 PM

Quote:

Originally Posted by unity100

i would like to hear what hetzner has to say about this.

This is the hetzner answer on the forum :

Quote:

From our experience, 98% of all servers never get in contact with DDOS. Some servers get touched by a DDOS seldom and others get in trouble regularly. We decided to focus on the mainstream of the 98% who never get in touch with DDOS. For the remaining servers, there are well specialised datacenters out there, who handle their requirements very good. We don't have the experience, we don't have the budget, and we don't target this market segment.

http://www.webhostingtalk.com/showth...24#post7977124