<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<title>Kentik Alert</title>
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
h1
{mso-style-priority:9;
mso-style-link:"Heading 1 Char";
margin:0cm;
font-size:24.0pt;
font-family:"Segoe UI",sans-serif;
font-weight:normal;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#2854C5;
text-decoration:underline;}
span.Heading1Char
{mso-style-name:"Heading 1 Char";
mso-style-priority:9;
mso-style-link:"Heading 1";
font-family:"Aptos Display",sans-serif;
color:#0F4761;}
span.EmailStyle55
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1378965870;
mso-list-template-ids:1289399180;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="#EEEEEE" lang="en-IL" link="#2854C5" vlink="#2854C5" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal" dir="RTL" style="text-align:right;direction:rtl;unicode-bidi:embed">
<span lang="HE" style="font-size:11.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US">נראה שהיה התקפה קצרה על שרת
</span><span lang="EN-US" dir="LTR" style="font-size:11.0pt;mso-fareast-language:EN-US">DNS</span><span dir="RTL"></span><span dir="RTL"></span><span lang="HE" style="font-size:11.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US"><span dir="RTL"></span><span dir="RTL"></span>
של </span><span lang="EN-US" dir="LTR" style="font-size:11.0pt;mso-fareast-language:EN-US">TAU</span><span lang="HE" style="font-size:11.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal" dir="RTL" style="text-align:right;direction:rtl;unicode-bidi:embed">
<span lang="HE" style="font-size:11.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal" dir="RTL" style="text-align:right;direction:rtl;unicode-bidi:embed">
<span lang="HE" dir="LTR" style="font-size:11.0pt;mso-fareast-language:EN-US"><img width="1626" height="663" style="width:16.9375in;height:6.9097in" id="Picture_x0020_1" src="cid:image001.png@01DB7884.D4267D30"></span><span lang="HE" style="font-size:11.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Kentik <no-reply@kentikalerts.com>
<br>
<b>Sent:</b> Thursday, 6 February 2025 10:41<br>
<b>To:</b> nocplus@noc.ilan.net.il; Nemo-ddos-list@nocvm.ilan.net.il<br>
<b>Subject:</b> Kentik Alert: 1 changed to active [Major], 0 changed to inactive [IUCC] (2025-02-06 08:40:57 UTC)<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div align="center">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="675" style="width:506.25pt;border-collapse:collapse">
<tbody>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<div>
<div align="center">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse">
<tbody>
<tr>
<td style="border:solid #CBCBCB 1.0pt;padding:0cm 0cm 0cm 0cm">
<div>
<p class="MsoNormal" style="background:#002766;vertical-align:top"><span style="font-family:"Segoe UI",sans-serif;color:white"><img width="110" height="23" style="width:1.1458in;height:.2361in" id="_x0000_i1026" src="https://info.kentik.com/rs/869-PAD-887/images/kentik_r_455x93.png" alt="Kentik"></span><span style="font-family:"Segoe UI",sans-serif"><o:p></o:p></span></p>
<div style="margin-bottom:18.0pt">
<h1 style="line-height:24.0pt;mso-line-height-rule:exactly;background:white"><b><span style="font-size:19.5pt;color:#1C1C1D">Kentik Alert for IUCC<o:p></o:p></span></b></h1>
<p class="MsoNormal" style="line-height:18.0pt;mso-line-height-rule:exactly;background:white">
<span style="font-family:"Segoe UI",sans-serif;color:#1C1C1D">2025-02-06 08:40:57 UTC
<o:p></o:p></span></p>
</div>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse">
<tbody>
<tr>
<td width="24" style="width:18.0pt;padding:0cm 0cm 0cm 0cm"></td>
<td style="padding:0cm 0cm 0cm 0cm">
<div>
<p class="MsoNormal"><strong><span style="font-size:13.5pt;font-family:"Segoe UI",sans-serif">Alarm for DDoS: UDP Fragments Attack - TAU Active</span></strong><b><span style="font-size:13.5pt;font-family:"Segoe UI",sans-serif">
<o:p></o:p></span></b></p>
</div>
</td>
</tr>
</tbody>
</table>
<div>
<ul type="square">
<li class="MsoNormal" style="color:#1C1C1D;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:18.0pt;mso-line-height-rule:exactly;mso-list:l0 level1 lfo1;background:white">
<b><span style="font-family:"Segoe UI",sans-serif">State:</span></b><span style="font-family:"Segoe UI",sans-serif"> new →
<b>alarm</b><o:p></o:p></span></li><li class="MsoNormal" style="color:#1C1C1D;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:18.0pt;mso-line-height-rule:exactly;mso-list:l0 level1 lfo1;background:white">
<b><span style="font-family:"Segoe UI",sans-serif">Timeframe:</span></b><span style="font-family:"Segoe UI",sans-serif"> 2025-02-06 08:40:56 UTC (start) →
<b>ongoing</b><o:p></o:p></span></li><li class="MsoNormal" style="color:#1C1C1D;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:18.0pt;mso-line-height-rule:exactly;mso-list:l0 level1 lfo1;background:white">
<b><span style="font-family:"Segoe UI",sans-serif">Baseline Source Info:</span></b><span style="font-family:"Segoe UI",sans-serif"> A static threshold was used (no baselining).<o:p></o:p></span></li><li class="MsoNormal" style="color:#1C1C1D;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:18.0pt;mso-line-height-rule:exactly;mso-list:l0 level1 lfo1;background:white">
<b><span style="font-family:"Segoe UI",sans-serif">Alarm ID:</span></b><span style="font-family:"Segoe UI",sans-serif"> 0194da6b-5d9b-7a8c-b3ac-2b89c83c5414<o:p></o:p></span></li><li class="MsoNormal" style="color:#1C1C1D;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:18.0pt;mso-line-height-rule:exactly;mso-list:l0 level1 lfo1;background:white">
<b><span style="font-family:"Segoe UI",sans-serif">IP_dst_cidr_16_128:</span></b><span style="font-family:"Segoe UI",sans-serif"> 132.66.0.0/16<o:p></o:p></span></li><li class="MsoNormal" style="color:#1C1C1D;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:18.0pt;mso-line-height-rule:exactly;mso-list:l0 level1 lfo1;background:white">
<b><span style="font-family:"Segoe UI",sans-serif">Metrics:</span></b><span style="font-family:"Segoe UI",sans-serif"><o:p></o:p></span></li></ul>
<ul type="square">
<ul type="square">
<li class="MsoNormal" style="color:#1C1C1D;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:18.0pt;mso-line-height-rule:exactly;mso-list:l0 level2 lfo1;background:white">
<span style="font-family:"Segoe UI",sans-serif">Mbits/s: 3157<o:p></o:p></span></li><li class="MsoNormal" style="color:#1C1C1D;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:18.0pt;mso-line-height-rule:exactly;mso-list:l0 level2 lfo1;background:white">
<span style="font-family:"Segoe UI",sans-serif">Packets/second: 298453.85<o:p></o:p></span></li><li class="MsoNormal" style="color:#1C1C1D;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:18.0pt;mso-line-height-rule:exactly;mso-list:l0 level2 lfo1;background:white">
<span style="font-family:"Segoe UI",sans-serif">Unique Source IPs: 21207<o:p></o:p></span></li></ul>
</ul>
<p style="line-height:18.0pt;mso-line-height-rule:exactly;background:white"><span style="color:#1C1C1D"><a href="https://u2871016.ct.sendgrid.net/ls/click?upn=u001.bEm-2FQJugwtyNa8ErZhHRf1wkbjomNfjJv1q58H6HseRi6SCYozRM8K1X7UEOpIidmKOr2s8ea9eCrvelQk21EHzLm9c3BUhxX-2Fmo4A4cLrEbyRQZ3Ugw0tXvgnOEnBjejbk5_7hHMSM-2BvUgpXPt0sTZtsmOO6-2F-2FLqExZFrMkj3jmrk4nq5EXT8tziqPFmEPIvWaDSGxN5rUqsQ3Gh4UUsNiq2roheZXsufT3RzoIB8tgAuC8GIncuiAlQptjUNt-2B3B2RamVxsb-2BMAjNEpl5WNTNYt1Amf-2BybUDEo6xavFk59XT-2BFOPq0eMRsnSwFoAC5MPWK8oPknJFjGTSv0Ilzlyxi-2B9Q-3D-3D" target="_blank">Open
Details</a> | <a href="https://u2871016.ct.sendgrid.net/ls/click?upn=u001.bEm-2FQJugwtyNa8ErZhHRf1wkbjomNfjJv1q58H6HseSbJfliEMMr3lsHYbQ9hG-2BuZQgc79jfyKarGbN3gK3fiO91fvtaShxFJR3VKnS5K-2FB0z-2B3HYsxzHb0cPTrglC39-2Bp3zS9BVAy1wu9XTDNuSFg-3D-3DYDyM_7hHMSM-2BvUgpXPt0sTZtsmOO6-2F-2FLqExZFrMkj3jmrk4nq5EXT8tziqPFmEPIvWaDSGxN5rUqsQ3Gh4UUsNiq2rkI8PaAAu1xcwcuXhmkhvOYPla8zC7LAL-2BoFxg0RHhxxeATPpDLR8ABrN9U8VMdZdfbO1uN8rbKFnHGu1sxK-2BWUjjWPvfY8dAL6x6dD7BlJ3XEgmmTU9BBV4Qt5AbQf3og-3D-3D" target="_blank">
Open Dashboard</a> | <a href="https://u2871016.ct.sendgrid.net/ls/click?upn=u001.bEm-2FQJugwtyNa8ErZhHRf1wkbjomNfjJv1q58H6HseR-2Fkc7e1DayLK5n3CVPYlN6KWkPZB9-2B3RnuNu7Gr0rY4GKC6RPvvz2YKY65afupfbZbf9wN-2BxCwRKijVzv1lB-2FAVkap_7hHMSM-2BvUgpXPt0sTZtsmOO6-2F-2FLqExZFrMkj3jmrk4nq5EXT8tziqPFmEPIvWaDSGxN5rUqsQ3Gh4UUsNiq2ruE-2FmYJAj-2BcS-2BcVHQYvgdzgnh0sqUvQfkvxeOjXJ-2B9Y5sR8JhBzM9-2Fso2htu-2FbUyaol3TuCj8r8KFKEcvaXVEvB1useqMiS78o31aqwpJqfsEJg8RdNfSeazXllz2dDYaw-3D-3D" target="_blank">
Open Alerting List</a> <o:p></o:p></span></p>
</div>
</div>
<p style="line-height:18.0pt;mso-line-height-rule:exactly;background:white"><span style="color:#1C1C1D">To see Alerting dashboard,
<a href="https://u2871016.ct.sendgrid.net/ls/click?upn=u001.bEm-2FQJugwtyNa8ErZhHRf1wkbjomNfjJv1q58H6HseSeC3F7DEZq0YfkGm-2Fbu2OMlW6R_7hHMSM-2BvUgpXPt0sTZtsmOO6-2F-2FLqExZFrMkj3jmrk4nq5EXT8tziqPFmEPIvWaDSGxN5rUqsQ3Gh4UUsNiq2ro-2Fe42dchDF6G2BIO8lf2yfmIxmP-2FnnsGv-2BGpxkA5oeCRm4oQRWJYQ90HkAOOgLYeRqexWiHIRAGQw-2B9OB9pdHK148iaWXWzD-2FZTM4hQVrdAU5GjtkUhNZ2XDMoIS3PGYg-3D-3D" target="_blank">
click here</a>.<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;mso-line-height-rule:exactly;background:white">
<span style="font-family:"Segoe UI",sans-serif;color:#1C1C1D"><a href="https://u2871016.ct.sendgrid.net/ls/click?upn=u001.bEm-2FQJugwtyNa8ErZhHRf1wkbjomNfjJv1q58H6HseR541ME7yEZ3KZGnED-2F69RxmMShix2rbkJX9ZW9v6RPqA-3D-3DVcna_7hHMSM-2BvUgpXPt0sTZtsmOO6-2F-2FLqExZFrMkj3jmrk4nq5EXT8tziqPFmEPIvWaDSGxN5rUqsQ3Gh4UUsNiq2rrsxW3L41dTTcR6hbit2Pgjajq7hiYa3MjULdzjs1fdrHCJGqpifYJIIXvcGfxoE7Wmh9NnLUaD2bGcUYtmNFh87yO7GRy6wYBws2Wy9r9LHTDcgo-2BxoYWBjrCio2uRdzg-3D-3D" target="_blank"><span style="color:#686A6D">Manage
your notification channels</span></a> <o:p></o:p></span></p>
</div>
<p class="MsoNormal" align="center" style="text-align:center;line-height:10.5pt;mso-line-height-rule:exactly">
<span style="font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:#686A6D">© 2025 Kentik | 548 Market St PMB 78595 | San Francisco, CA 94104
<o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><span style="font-family:"Segoe UI",sans-serif"><img border="0" width="1" height="1" style="width:.0069in;height:.0069in" id="_x0000_i1025" src="https://u2871016.ct.sendgrid.net/wf/open?upn=u001.QtKYNoo3GcRw1VH9U6fLO-2BBko36GhcCS65mj11DY6Xbu-2F-2BMqEXT7MTMDgzE2A7vZI4JHi7w-2F4JUgXd-2FpVr7I-2F1ZNS98I-2BMqWl7mJXZUCqWulwYribSPVDu9vzAAo-2Fx8NFRu-2ByLXy9-2BiQV-2BqDhsBTwvz1a9c0ScvuR9uJzKINplq-2FG5DHDZs3olWP-2FBfmRKiFmkhK75tZn9ejYpq7G22wbdinbXfgdAbVjdslYxgCER8-3D"></span><span style="font-family:"Segoe UI",sans-serif"><o:p></o:p></span></p>
</div>
</body>
</html>