[NeMo-DDoS-List] Kentik Alert: 1 changed to active [Major], 0 changed to inactive [IUCC] (2025-02-06 08:40:57 UTC)

[Hank Nussbacher]

נראה שהיה התקפה קצרה על שרת DNS של TAU

[cid:image001.png at 01DB7884.D4267D30]

From: Kentik <no-reply at kentikalerts.com>
Sent: Thursday, 6 February 2025 10:41
To: nocplus at noc.ilan.net.il; Nemo-ddos-list at nocvm.ilan.net.il
Subject: Kentik Alert: 1 changed to active [Major], 0 changed to inactive [IUCC] (2025-02-06 08:40:57 UTC)

[Kentik]
Kentik Alert for IUCC
2025-02-06 08:40:57 UTC
Alarm for DDoS: UDP Fragments Attack - TAU Active

  *   State: new → alarm
  *   Timeframe: 2025-02-06 08:40:56 UTC (start) → ongoing
  *   Baseline Source Info: A static threshold was used (no baselining).
  *   Alarm ID: 0194da6b-5d9b-7a8c-b3ac-2b89c83c5414
  *   IP_dst_cidr_16_128: 132.66.0.0/16
  *   Metrics:

     *   Mbits/s: 3157
     *   Packets/second: 298453.85
     *   Unique Source IPs: 21207

Open Details<https://u2871016.ct.sendgrid.net/ls/click?upn=u001.bEm-2FQJugwtyNa8ErZhHRf1wkbjomNfjJv1q58H6HseRi6SCYozRM8K1X7UEOpIidmKOr2s8ea9eCrvelQk21EHzLm9c3BUhxX-2Fmo4A4cLrEbyRQZ3Ugw0tXvgnOEnBjejbk5_7hHMSM-2BvUgpXPt0sTZtsmOO6-2F-2FLqExZFrMkj3jmrk4nq5EXT8tziqPFmEPIvWaDSGxN5rUqsQ3Gh4UUsNiq2roheZXsufT3RzoIB8tgAuC8GIncuiAlQptjUNt-2B3B2RamVxsb-2BMAjNEpl5WNTNYt1Amf-2BybUDEo6xavFk59XT-2BFOPq0eMRsnSwFoAC5MPWK8oPknJFjGTSv0Ilzlyxi-2B9Q-3D-3D> | Open Dashboard<https://u2871016.ct.sendgrid.net/ls/click?upn=u001.bEm-2FQJugwtyNa8ErZhHRf1wkbjomNfjJv1q58H6HseSbJfliEMMr3lsHYbQ9hG-2BuZQgc79jfyKarGbN3gK3fiO91fvtaShxFJR3VKnS5K-2FB0z-2B3HYsxzHb0cPTrglC39-2Bp3zS9BVAy1wu9XTDNuSFg-3D-3DYDyM_7hHMSM-2BvUgpXPt0sTZtsmOO6-2F-2FLqExZFrMkj3jmrk4nq5EXT8tziqPFmEPIvWaDSGxN5rUqsQ3Gh4UUsNiq2rkI8PaAAu1xcwcuXhmkhvOYPla8zC7LAL-2BoFxg0RHhxxeATPpDLR8ABrN9U8VMdZdfbO1uN8rbKFnHGu1sxK-2BWUjjWPvfY8dAL6x6dD7BlJ3XEgmmTU9BBV4Qt5AbQf3og-3D-3D> | Open Alerting List<https://u2871016.ct.sendgrid.net/ls/click?upn=u001.bEm-2FQJugwtyNa8ErZhHRf1wkbjomNfjJv1q58H6HseR-2Fkc7e1DayLK5n3CVPYlN6KWkPZB9-2B3RnuNu7Gr0rY4GKC6RPvvz2YKY65afupfbZbf9wN-2BxCwRKijVzv1lB-2FAVkap_7hHMSM-2BvUgpXPt0sTZtsmOO6-2F-2FLqExZFrMkj3jmrk4nq5EXT8tziqPFmEPIvWaDSGxN5rUqsQ3Gh4UUsNiq2ruE-2FmYJAj-2BcS-2BcVHQYvgdzgnh0sqUvQfkvxeOjXJ-2B9Y5sR8JhBzM9-2Fso2htu-2FbUyaol3TuCj8r8KFKEcvaXVEvB1useqMiS78o31aqwpJqfsEJg8RdNfSeazXllz2dDYaw-3D-3D>

To see Alerting dashboard, click here<https://u2871016.ct.sendgrid.net/ls/click?upn=u001.bEm-2FQJugwtyNa8ErZhHRf1wkbjomNfjJv1q58H6HseSeC3F7DEZq0YfkGm-2Fbu2OMlW6R_7hHMSM-2BvUgpXPt0sTZtsmOO6-2F-2FLqExZFrMkj3jmrk4nq5EXT8tziqPFmEPIvWaDSGxN5rUqsQ3Gh4UUsNiq2ro-2Fe42dchDF6G2BIO8lf2yfmIxmP-2FnnsGv-2BGpxkA5oeCRm4oQRWJYQ90HkAOOgLYeRqexWiHIRAGQw-2B9OB9pdHK148iaWXWzD-2FZTM4hQVrdAU5GjtkUhNZ2XDMoIS3PGYg-3D-3D>.
Manage your notification channels<https://u2871016.ct.sendgrid.net/ls/click?upn=u001.bEm-2FQJugwtyNa8ErZhHRf1wkbjomNfjJv1q58H6HseR541ME7yEZ3KZGnED-2F69RxmMShix2rbkJX9ZW9v6RPqA-3D-3DVcna_7hHMSM-2BvUgpXPt0sTZtsmOO6-2F-2FLqExZFrMkj3jmrk4nq5EXT8tziqPFmEPIvWaDSGxN5rUqsQ3Gh4UUsNiq2rrsxW3L41dTTcR6hbit2Pgjajq7hiYa3MjULdzjs1fdrHCJGqpifYJIIXvcGfxoE7Wmh9NnLUaD2bGcUYtmNFh87yO7GRy6wYBws2Wy9r9LHTDcgo-2BxoYWBjrCio2uRdzg-3D-3D>
© 2025 Kentik | 548 Market St PMB 78595 | San Francisco, CA 94104

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://nocvm.iucc.ac.il/pipermail/nemo-ddos-list/attachments/20250206/f04364ee/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 142052 bytes
Desc: image001.png
URL: <http://nocvm.iucc.ac.il/pipermail/nemo-ddos-list/attachments/20250206/f04364ee/attachment-0001.png>