<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-GB link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#222222'>OVH seemed to have upped their game with more information than just throwing all traffic into “mitigation” which can result in bad exit status, with no information as to what their systems are detecting as a threat of denial of service attack.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#222222'><o:p> </o:p></span></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width=458 style='width:343.25pt;border-collapse:collapse'><tr><td width=456 nowrap valign=top style='width:341.9pt;padding:0cm 0cm 0cm 0cm'><p class=MsoNormal style='line-height:15.0pt'><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#222222'>For the first time I got an email…no mitigation. </span><span style='font-family:"Helvetica",sans-serif;letter-spacing:.15pt;mso-fareast-language:EN-GB'><o:p></o:p></span></p></td><td nowrap valign=top style='padding:0cm 0cm 0cm 0cm'><p class=MsoNormal align=right style='text-align:right'><span style='font-family:"Helvetica",sans-serif;color:#222222;letter-spacing:.15pt;mso-fareast-language:EN-GB'><o:p> </o:p></span></p></td><td nowrap valign=top style='padding:0cm 0cm 0cm 0cm'><p class=MsoNormal align=right style='text-align:right'><span style='font-family:"Helvetica",sans-serif;color:#222222;letter-spacing:.15pt;mso-fareast-language:EN-GB'><o:p> </o:p></span></p></td><td nowrap rowspan=2 valign=top style='padding:0cm 0cm 0cm 0cm'><p class=MsoNormal align=center style='text-align:center;line-height:13.5pt'><span style='font-family:"Helvetica",sans-serif;color:#444444;letter-spacing:.15pt;mso-fareast-language:EN-GB'><img width=1 height=1 style='width:.0125in;height:.0125in' id="Picture_x0020_3" src="cid:image001.gif@01D68BC2.731B65E0"></span><span style='font-family:"Helvetica",sans-serif;color:#444444;letter-spacing:.15pt;mso-fareast-language:EN-GB'><o:p></o:p></span></p><p class=MsoNormal align=center style='text-align:center;line-height:13.5pt'><span style='font-family:"Helvetica",sans-serif;color:#444444;letter-spacing:.15pt;mso-fareast-language:EN-GB'><img width=1 height=1 style='width:.0125in;height:.0125in' id="Picture_x0020_2" src="cid:image001.gif@01D68BC2.731B65E0"></span><span style='font-family:"Helvetica",sans-serif;color:#444444;letter-spacing:.15pt;mso-fareast-language:EN-GB'><o:p></o:p></span></p></td></tr><tr><td colspan=3 style='padding:0cm 0cm 0cm 0cm'><p class=MsoNormal><span style='font-family:"Helvetica",sans-serif;letter-spacing:.15pt;mso-fareast-language:EN-GB'><o:p> </o:p></span></p></td></tr></table><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#222222;mso-fareast-language:EN-GB'>Dear Customer,<br><br>Abnormal activity has been detected on your VPS<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#222222'><br><span style='background:white'>Attack detail : 4Kpps/2Mbps</span><br><span style='background:white'>dateTime srcIp:srcPort dstIp:dstPort protocol flags bytes reason </span><br><span style='background:white'>2020.09.15 19:02:21 CEST </span></span><a href="http://51.38.64.136:42845/" target="_blank"><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#1155CC;background:white'>my ip:42845</span></a><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#222222;background:white'> </span><a href="http://212.22.93.124:25565/" target="_blank"><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#1155CC;background:white'>212.22.93.124:25565</span></a><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#222222;background:white'> TCP SYN 60 ATTACK:TCP_SYN </span><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#222222'><br><span style='background:white'>2020.09.15 19:02:21 CEST </span></span><a href="http://51.38.64.136:39673/" target="_blank"><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#1155CC;background:white'>my ip:39673</span></a><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#222222;background:white'> </span><a href="http://212.22.93.124:25565/" target="_blank"><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#1155CC;background:white'>212.22.93.124:25565</span></a><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#222222;background:white'> TCP SYN 60 ATTACK:TCP_SYN <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#222222;background:white'>Etc<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#222222;background:white'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Arial",sans-serif;color:#222222;background:white'>Gerry</span><span style='font-size:12.0pt'><o:p></o:p></span></p></div></body></html>