| title | Anti-hack information - Dedicated Server and VPS |
|---|---|
| excerpt | Find out what information will be visible and provided when OVHcloud's internal Anti-DDoS protection is triggered |
| updated | 2026-XX-XX |
Learn what information will be visible and provided when OVHcloud's internal Anti-DDoS protection is triggered on behalf of your Dedicated Server or VPS.
- a Dedicated Server or VPS that has been hacked
- access to the OVHcloud Control Panel
When Anti-DDoS protection is triggered on your Dedicated Server, you will see a message in the OVHcloud Control Panel: "Your server has been hacked. Please contact our support team for instructions on what to do next."
Your server can be booted in rescue, which will allow a restart or the reinstallation of the operating system. Below are the boot options for your server:
| Name | Function | Status |
|---|---|---|
| Rescue | Will allow a restart or the reinstallation of the operating system. | Hacked |
| Rescue FTP | Will allow a restart or the reinstallation of the operating system. | Hacked |
| rescue12-ftp - FTP rescue system for anti-hack | Will not allow a restart or the reinstallation of the operating system. | Hacked and blocked |
{.thumbnail}
OVHcloud will also open a support ticket on your behalf containing the following:
Dear Customer,
As your server nsXXXXXXX.ip-XXX-XXX-XXX.eu is presenting too great a threat to our network, we had no choice but to place it in 'rescue FTP' mode. An email containing a username and password has been sent to you so that you can easily retrieve any data still located in the storage space.
Please do not hesitate to contact our technical support so that this situation does not become critical.
You can find the logs brought up by our system below which led to this alert.
- START OF ADDITIONAL INFORMATION -
- END OF ADDITIONAL INFORMATION -
Kind regards,
OVHcloud Customer Support The OVHcloud Team
When Anti-DDoS protection is triggered on your VPS, your VPS will be placed in rescue mode.
{.thumbnail}
OVHcloud will also open a support ticket on your behalf containing the following:
Dear Customer,
Abnormal activity has been detected on your VPS vps-XXXXXXXX.vps.ovh.net.
Your VPS has been placed in rescue mode. This is so that you can intervene on your VPS to resolve the issues flagged up. An email containing information on rescue mode has been sent to you.
Actions can no longer be carried out on your VPS via your Manager/API. Only the following actions are possible:
- Reinstallation of your VPS.
- Use of rescue mode to resolve the problems flagged.
Once the issues have been resolved, please contact our technical support to get it restored to normal mode.
Please do not hesitate to contact our technical support team so that this situation does not become critical.
You will find the logs brought up by our system below, which led to this alert.
[!primary] Please take note of the bottom part of the message stating: "Once the issues have been resolved, please contact our technical support to get it restored to normal mode. Please do not hesitate to contact our technical support team so that this situation does not become critical."
Join our community of users.