Hello everyone,

I recently reinstalled a dedicated server (with OVH, in case that helps
with diagnosis), transitioning from Debian 11 to Debian 12.

Since then, I have been experiencing regular and progressive IPv4 blocking
at my home. Access via IPv6 or from another IPv4 (including from the same
provider) is working.

Here's an example from last night after a server reboot the previous
evening:
01:43-02:13 (30 minutes)
02:26-03:26 (1 hour)
03:28-05:28 (2 hours)
05:55-? (still blocked at the time of writing)

Issues:
- The OVH Debian 12 template for dedicated servers doesn't come with any
pre-installed blocking tools (e.g., no fail2ban).
- I haven't added any such tools since installing the server, only Apache
(with mod_security), PHP, and MariaDB.
- From my home IP address last night, the only generated requests were from
my Uptime Kuma probe, which includes a ping every minute and a curl request
to a URL that consistently returns HTTP 200 (except when the IP is blocked,
of course).

When my IP is blocked, curl returns a "Connection refused," and ping
returns "Destination Port Unreachable."

I couldn't find any mentions of my IPv4 address in the server logs. MTR
(-4) doesn't report any issues reaching the server. OVH has confirmed that
it's not an issue with their network equipment, and a rescue mode restart
allows me to regain ping access.

Do you have any ideas about what might be causing this on a nearly pristine
Debian 12 installation? I've been pulling my hair out for a few days now...

Thanks!

Romain

Reply via email to