日曜日, 10月 16, 2016

#OCJP-131: 日本国内で悪用された「DNSアンプ攻撃」について

■はじめに

まず、「DNSアンプ攻撃」が分からない方はこちらをご覧下さい。そしてDNS「オープンリゾルバ/Open Resolvers」についてはこちらのリンクに纏めて説明しています

「DNSアンプ攻撃」と「オープンリゾルバ」の関係は↓

Open Resolvers pose a significant threat to the global network infrastructure 
by answering recursive queries for hosts outside of its domain. 
They are utilized in DNS Amplification attacks 
リファレンス: Open Resolver Project openresolverproject.org

大体4月中旬から少しずつ日本国内に悪用された「DNSアンプ攻撃」のIPレポートが届きました。7月ぐらいに結構溜まりますが、国内セキュリティのリング皆様に手続きについて頼んで、報告しました。今2ヶ月以降で、未だ脆弱性が残っているDNSサーバも御座いますし、このブログに本件を報告させて頂きます。

■「DNSアンプ攻撃」の脆弱性をチェックする仕方について

WindowsやLinux/BSDのshellで「DNSアンプ攻撃」の脆弱性の確認が簡単に出来ます。
念のために下記のチェック仕方を参考として公開しますので、是非、使って下さい。

まず、shellでnslookupを使い下記のフォーマットで確認↓

nslookup <存在しているドメイン> <チェックしたいDNSサーバのIP>

例えば↓
$ nslookup malwaremustdie.org 1.2.3.4

もし回答は下記の様になりましたら...
$ nslookup malwaremustdie.org 1.2.3.4
Server:         1.2.3.4
Address:        1.2.3.4#53

Non-authoritative answer:   <=======
Name:   malwaremustdie.org
Address: 64.233.189.121
Name:   malwaremustdie.org
Address: 216.239.32.21
Name:   malwaremustdie.org
Address: 216.239.36.21
  :     :
...その回答の中に「Non-authoritative answer」とその他情報が出たら「1.2.3.4」のDNSサーバが「DNSアンプ攻撃」の脆弱性があるとのことです。もっとセキュアな設定を行ってください。

下記の回答が出たら、あなたのサーバはDNSオープンリゾルバの問題がありません↓

$ nslookup hatena.jp 216.59.57.100
Server:         216.59.57.100
Address:        216.59.57.100#53

** server can't find hatena.jp: REFUSED <=============


■対策について、DNSサーバの安全設定する方法(bind9のみ)

1. bindでドメインrecursionの設定を無効にすること↓

options {
     allow-query-cache { none; };
     recursion no;
};
2. もしrecursionを無効にすることができない場合、ACL(IPアクセスの制限設定)を書く必要があります↓
acl corpnets { 192.168.2.0/24; 192.168.3.0/24; };
options {
  allow-query { any; };
  allow-recursion { corpnets; };
};
3. DNSアンプ悪用されないように「Response Rate Limiting/RRL」の設定はおすすめです。
例えば5秒以内の連続リクエストをブロックする設定は下記のように書きます↓
rate-limit {
    responses-per-second 5;
    window 5;
};

※設定が完了したら、nslookupでもう一度確認してください
※そして、念のためにDNSの設定が大丈夫かどうかの確認の為、オンラインチェックツールもありますが、

私のお勧めは「dnsinspect.com」です↓


■レポートした日本国内で悪用されたDNSサーバIP(BGPフィードのみ)

※)直りましたサーバも沢山あります、念の為に上記に書いたやり方でご確認をお願い致します。
※)下記のIPアドレスはとある国官公庁の攻撃ログに発見しましたので、国内と海外色んな所に報告済みです。

101.102.145.26 | nwsrvn002.NMLICA.JP. |17676 | 101.102.128.0/17 | GIGAINFRA | JP | tcs-dc.jp | Tokyo Nissan Computer System Co. Ltd
110.3.193.53 | 53.193.3.110.ap.yournet.ne.jp. |10013 | 110.0.0.0/14 | FBDC | JP | freebit.com | Freebit Co. Ltd.
110.5.42.199 | aa042199.ppp.asahi-net.or.jp. |4685 | 110.5.0.0/18 | ASAHI | JP | asahi-net.or.jp | Asahi Net Inc.
111.64.236.171 | nthygo030171.hygo.nt.ngn.ppp.infoweb.ne.jp. |2510 | 111.64.0.0/16 | INFOWEB | JP | infoweb.ne.jp | Infoweb
111.64.80.211 | ntsitm061211.sitm.nt.ngn2.ppp.infoweb.ne.jp. |2510 | 111.64.0.0/16 | INFOWEB | JP | infoweb.ne.jp | Infoweb
114.154.125.169 | p2169-ipbfp803okayamaima.okayama.ocn.ne.jp. |4713 | 114.144.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network
114.160.44.130 |  |4713 | 114.160.0.0/11 | OCN | JP | - | Hitachi Systems.Ltd.
114.160.53.225 | jotof1.joto.com. |4713 | 114.160.0.0/11 | OCN | JP | joto.com | Joto Techno Co. Ltd
114.160.54.121 | pc1.webx2-unet.ocn.ne.jp. |4713 | 114.160.0.0/11 | OCN | JP | ocn.ne.jp | Webgate
114.160.61.146 | ns-out.yamagata-denshi.co.jp. |4713 | 114.160.0.0/11 | OCN | JP | yamagata-denshi.co.jp | Yamagata Electronic Corporation
114.160.76.121 |  |4713 | 114.160.0.0/11 | OCN | JP | - | Tottoricitylibrary
114.168.166.140 | p3140-ipbfp903okayamaima.okayama.ocn.ne.jp. |4713 | 114.160.0.0/11 | OCN | JP | ocn.ne.jp | Open Computer Network
114.179.21.178 | k-net.kisarazu.ed.jp. |4713 | 114.160.0.0/11 | OCN | JP | ntt.com | NTT Communications Corporation
116.91.113.90 | 116.91.113.90.ap.gmobb-fix.jp. |2519 | 116.91.0.0/16 | VECTANT | JP | gmo.jp | GMO Internet Inc.
118.103.111.22 |  |17676 | 118.103.0.0/17 | GIGAINFRA | JP | densan-ginza.co.jp | DENSAN Inc.
118.21.101.85 | i118-21-101-85.s30.a048.ap.plala.or.jp. |4713 | 118.16.0.0/13 | OCN | JP | plala.or.jp | NTT Plala Inc.
118.21.151.140 | i118-21-151-140.s30.a048.ap.plala.or.jp. |4713 | 118.16.0.0/13 | OCN | JP | plala.or.jp | NTT Plala Inc.
118.22.23.99 | ns1.tecgrp.co.jp. |4713 | 118.16.0.0/13 | OCN | JP | tecgrp.co.jp | Tohoku Electronic Calculation Center Co. Ltd
118.22.32.210 | kch-mlsv01.kch.kagoshima.jp. |4713 | 118.16.0.0/13 | OCN | JP | keinet.com | Kagoshima City
118.238.220.251 | fs76eedcfb.tkyc512.ap.nuro.jp. |2527 | 118.238.192.0/18 | SO | JP | so-net.ne.jp | So-net Service
119.245.138.31 | parcwave.jp. |2514 | 119.245.0.0/16 | INFOSPHERE | JP | suitepro.jp | Server Hosting Service
119.245.154.176 | st2288.nas931.k-tokyo.nttpc.ne.jp. |2514 | 119.245.0.0/16 | INFOSPHERE | JP | sphere.ad.jp | Infosphere
119.245.191.154 |  |2514 | 119.245.0.0/16 | INFOSPHERE | JP | - | Anthonet
120.51.223.13 | s13.IsaitamaFL2.vectant.ne.jp. |2519 | 120.51.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc.
120.51.36.9 | s9.HtokyoFL32.vectant.ne.jp. |2519 | 120.51.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc.
121.119.250.146 | sv3.rockwave.ne.jp. |4713 | 121.112.0.0/13 | OCN | JP | aiship.jp | Rockwave Corporation
122.103.92.98 | s98.IaichiFL72.vectant.ne.jp. |2519 | 122.103.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc.
122.152.138.194 | server11.zaturdayhosting.com. |10026 | 122.152.128.0/19 | PACNET | HK | asianetcom.net | Zaturday Company #
122.1.52.18 | 18.16.52.1.122.in-addr.arpa. |4713 | 122.1.0.0/16 | OCN | JP | printing-daitoku.co.jp | Daitokucorporation
122.1.52.98 | ns.marubisi.co.jp. , mail.marubisi.co.jp. |4713 | 122.1.0.0/16 | OCN | JP | marubisi.co.jp | Marubisi.co.ltd
122.1.7.226 |  |4713 | 122.1.0.0/16 | OCN | JP | - | Realize Science & Engineering Center Co. Ltd.
122.18.135.53 | p4915053-ipngn25401marunouchi.tokyo.ocn.ne.jp. |4713 | 122.16.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network
122.18.166.23 | p4504023-ipngn25501marunouchi.tokyo.ocn.ne.jp. |4713 | 122.16.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network
122.18.99.141 | p8141-ipngn1401hiraide.tochigi.ocn.ne.jp. |4713 | 122.16.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network
122.21.243.18 | p4535018-ipngn25701marunouchi.tokyo.ocn.ne.jp. |4713 | 122.16.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network
122.214.38.189 | 122x214x38x189.ap122.ftth.ucom.ne.jp. |17506 | 122.212.0.0/14 | UCOM | JP | fttx.co.jp | UCOM Corporation
122.221.248.3 | ns.janomecredia.co.jp. |17506 | 122.220.0.0/15 | UCOM | JP | janomecredia.co.jp | Janomecredia Corporation
122.22.49.152 | p3152-ipbfp502okayamaima.okayama.ocn.ne.jp. |4713 | 122.16.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network
122.249.88.125 | x088125.ppp.asahi-net.or.jp. |4685 | 122.249.0.0/16 | ASAHI | JP | asahi-net.or.jp | Asahi Net Inc.
124.110.40.149 | static-124-110-40-149.b-man.svips.gol.ne.jp. |2519 | 124.110.0.0/16 | VECTANT | JP | fusioncom.co.jp | Fusion Communications Corp.
124.87.44.219 | p5219-ipngn1601hiraide.tochigi.ocn.ne.jp. |4713 | 124.84.0.0/14 | OCN | JP | ocn.ne.jp | Open Computer Network
125.100.241.194 |  |17506 | 125.100.0.0/14 | UCOM | JP | - | Yohantoukyoukirisutokyoukai
125.206.195.228 |  |4713 | 125.200.0.0/13 | OCN | JP | ex-cd.co.jp | Exceed Ltd.
125.206.199.138 | ns.summitpos.net. |4713 | 125.200.0.0/13 | OCN | JP | summitstore-web.com | Summit Inc.
125.206.210.178 |  |4713 | 125.200.0.0/13 | OCN | JP | - | CHC Corporation
125.206.210.182 |  |4713 | 125.200.0.0/13 | OCN | JP | - | CHC Corporation
125.206.219.186 | mail.itmol.com. , ns1.itmol.com. |4713 | 125.200.0.0/13 | OCN | JP | itmol.com | Institute for Theoretical Medicine Inc.
130.158.133.11 | eagle.frsc.tsukuba.ac.jp. |37917 | 130.158.0.0/16 | UTINS | JP | tsukuba.ac.jp | University of Tsukuba
1.33.199.84 | ns2.dynac-net.com. |2514 | 1.33.0.0/16 | INFOSPHERE | JP | dynac-net.com | Dynac Corporation
1.33.202.226 |  |2514 | 1.33.0.0/16 | INFOSPHERE | JP | - | Bizen Chemical Co. Ltd.
1.33.204.36 | ns1.dynac-net.com. |2514 | 1.33.0.0/16 | INFOSPHERE | JP | dynac-net.com | Dynac Corporation
150.7.25.1 | bach.office.ee.u-tokai.ac.jp. |2907 | 150.7.0.0/16 | SINET | JP | nic.ad.jp | Japan Network Information Center
153.136.200.120 | p2033120-ipngn200605osakachuo.osaka.ocn.ne.jp. |4713 | 153.128.0.0/11 | OCN | JP | ocn.ne.jp | Open Computer Network
153.142.76.20 | p21020-ipngnfx01kanazawa.ishikawa.ocn.ne.jp. |4713 | 153.128.0.0/11 | OCN | JP | ocn.ne.jp | Open Computer Network
153.145.19.115 | i153-145-19-115.s41.a008.ap.plala.or.jp. |4713 | 153.128.0.0/11 | OCN | JP | plala.or.jp | NTT Plala Inc.
153.150.15.66 | ns.penterj.co.jp. |4713 | 153.128.0.0/11 | OCN | JP | penterj.co.jp | Port Enterprise Co. Ltd.
153.150.18.170 |  |4713 | 153.128.0.0/11 | OCN | JP | ntt.com | NTT Communications Corporation
153.150.20.2 | pc2.keishin-ug-unet.ocn.ne.jp. |4713 | 153.128.0.0/11 | OCN | JP | - | Keishin Highschool
153.150.32.74 | 74.72.32.150.153.in-addr.arpa. |4713 | 153.128.0.0/11 | OCN | JP | asteccorp.com | Astec Corporation
153.163.235.91 | p4091-ipngn6202marunouchi.tokyo.ocn.ne.jp. |4713 | 153.160.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network
153.168.129.250 | p672250-ipngn1802funabasi.chiba.ocn.ne.jp. |4713 | 153.160.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network
153.197.233.110 | p319110-ipngn200405matuyama.ehime.ocn.ne.jp. |4713 | 153.192.0.0/11 | OCN | JP | ocn.ne.jp | Open Computer Network
153.203.190.252 | p1550252-ipngn14201hodogaya.kanagawa.ocn.ne.jp. |4713 | 153.192.0.0/11 | OCN | JP | ocn.ne.jp | Open Computer Network
153.218.66.66 | p3066-ipngn4401hodogaya.kanagawa.ocn.ne.jp. |4713 | 153.192.0.0/11 | OCN | JP | ocn.ne.jp | Open Computer Network
160.18.148.66 | nw1.kure-nct.ac.jp. |2907 | 160.18.148.0/23 | SINET | JP | kosen-k.go.jp | Institue National Colleges of Technology Japan
163.44.20.108 | hqm-store.com. |2514 | 163.44.0.0/18 | INFOSPHERE | JP | nttpc.co.jp | NTT PC Communications Inc.
180.37.77.210 | 180037077210.bhb.bizhosting.net. |4713 | 180.0.0.0/10 | OCN | JP | ocn.ne.jp | Open Computer Network
180.42.104.50 | ns.fukuoka.med.or.jp. |4713 | 180.0.0.0/10 | OCN | JP | med.or.jp | Fukuoka Prefecture Medical Association
180.42.1.186 | dns.e-pod.jp. |4713 | 180.0.0.0/10 | OCN | JP | polan.tokyo.jp | Polan Organic Foods Delivery
180.42.48.106 | dns.sya.co.jp. |4713 | 180.0.0.0/10 | OCN | JP | sya.co.jp | System Automation Corporation
180.42.68.242 | ns.hayashinet.co.jp. |4713 | 180.0.0.0/10 | OCN | JP | hayashinet.co.jp | Hayashi Co. Ltd
180.42.74.42 | ns.p-info.net. |4713 | 180.0.0.0/10 | OCN | JP | hiddenapp.com | Hidden
180.42.77.242 | mail.netcom-inc.co.jp. |4713 | 180.0.0.0/10 | OCN | JP | netcom-inc.co.jp | Netcom Corporation
180.43.164.18 | dns.nnw.co.jp. |4713 | 180.0.0.0/10 | OCN | JP | nnw.co.jp | Nippon Network Corporation
180.43.172.114 | ns.ctcsp.co.jp. |4713 | 180.0.0.0/10 | OCN | JP | ctcsp.co.jp | CTCSP Corporation
180.47.213.142 | p632142-ipngn1602funabasi.chiba.ocn.ne.jp. |4713 | 180.0.0.0/10 | OCN | JP | ocn.ne.jp | Open Computer Network
180.54.12.29 | p351029-ipngn200107okayamahigasi.okayama.ocn.ne.jp. |4713 | 180.0.0.0/10 | OCN | JP | ocn.ne.jp | Open Computer Network
180.8.49.252 | 180008049252.bhb.bizhosting.net. |4713 | 180.0.0.0/10 | OCN | JP | ocn.ne.jp | Open Computer Network
180.8.49.253 | 180008049253.bhb.bizhosting.net. |4713 | 180.0.0.0/10 | OCN | JP | ocn.ne.jp | Open Computer Network
183.177.234.135 | 183-177-234-135.tokyo.fdn.vectant.ne.jp. |2519 | 183.177.128.0/17 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions .
183.177.238.18 | momiji.mediaf.jp. |2519 | 183.177.128.0/17 | VECTANT | JP | cocospace.com | 21Company
183.177.238.19 | sia.mediaf.jp. |2519 | 183.177.128.0/17 | VECTANT | JP | cocospace.com | 21Company
183.177.245.114 | 183.177.245.114.ap.gmobb-fix.jp. |2519 | 183.177.128.0/17 | VECTANT | JP | arteria-net.com | Arteria Networks Corporation
183.181.172.60 | v-183-181-172-60.ub-freebit.net. |10013 | 183.181.160.0/20 | FBDC | JP | dti.co.jp | Dream Train Internet
202.150.54.20 |  |18126 | 202.150.48.0/21 | CTCX | JP | nagoya-ohara.net | Nagoya Ohara Gakuen Colleges
202.210.149.12 | ns1.mandarake.co.jp. |4686 | 202.210.128.0/18 | BEKKOAME | JP | altech-it.com | Altech IT Inc.
202.210.170.2 | mail.daikokuya78.co.jp. |4686 | 202.210.128.0/18 | BEKKOAME | JP | daikokuya78.co.jp | Daikokuya Co. Ltd.
202.211.3.3 |  |2907 | 202.211.0.0/20 | SINET | JP | mishima.ac.jp | Gakko Hojin Mishima Gakuen
202.215.110.150 |  |2519 | 202.215.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc.
202.215.146.113 | s113.JgunmaFL1.vectant.ne.jp. |2519 | 202.215.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc.
202.215.160.31 | cocospace.com. |2519 | 202.215.0.0/16 | VECTANT | JP | cocospace.com | 21Company
202.215.160.33 | cocospace.com. |2519 | 202.215.0.0/16 | VECTANT | JP | cocospace.com | 21Company
202.215.203.83 | d83.JkagosimaFL1.vectant.ne.jp. |2519 | 202.215.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc.
202.217.173.52 | FNAfx-09p10-52.ppp11.odn.ad.jp. |4725 | 202.217.128.0/17 | ODN | JP | softbank.jp | SoftBank Mobile Corp.
202.218.35.116 | ns.madori.co.jp. |2554 | 202.218.32.0/22 | IDC2554 | JP | wadax.ne.jp | WADAX Inc.
202.221.27.2 | charm.obayashi.co.jp. |2497 | 202.221.0.0/16 | IIJ | JP | obayashi.co.jp | Obayashi Corporation
202.222.33.62 | dns.icc.co.jp. |18121 | 202.222.32.0/19 | INCL | JP | incl.ne.jp | Ishikawa Computer Center Co. Ltd
202.224.16.70 | ns0.tac-net.ne.jp. |18281 | 202.224.16.0/20 | TAC | JP | tac-net.ne.jp | Tokoname New-TV Corporation
202.224.16.71 | ns1.tac-net.ne.jp. |18281 | 202.224.16.0/20 | TAC | JP | tac-net.ne.jp | Tokoname New-TV Corporation
202.224.46.175 | onidake.hpo.net. |4685 | 202.224.32.0/19 | ASAHI | JP | asaren.jp | MM Japan
202.225.1.145 |  |2518 | 202.225.0.0/16 | BIGLOBE | JP | biglobe.co.jp | Biglobe Inc.
202.229.102.130 |  |2514 | 202.229.0.0/17 | INFOSPHERE | JP | cp-agf-wordgift.jp | Scepcom Inc.
202.229.120.146 |  |2514 | 202.229.0.0/17 | INFOSPHERE | JP | - | Tokyo-Seitoku Gakuen
202.230.19.202 | mms.mcgroup.or.jp. |4725 | 202.230.19.0/24 | ODN | JP | mcgroup.or.jp | Kinoshita Management Co. Ltd.
202.234.148.2 | arsv.tabiworld.co.jp. |4725 | 202.234.148.0/24 | ODN | JP | laterra-net.co.jp | LATERRA INTERNATIONAL Inc.
202.234.165.82 | ns.modulat.jp. |4694 | 202.234.128.0/18 | IDC | JP | housecom.co.jp | Timeline Inc.
202.234.36.22 |  |4694 | 202.234.0.0/18 | IDC | JP | noahcloud.jp | IDC Frontier Inc.
202.234.36.47 |  |4694 | 202.234.0.0/18 | IDC | JP | noahcloud.jp | IDC Frontier Inc.
202.244.112.1 | jizo.ecip.shikoku-u.ac.jp. |2907 | 202.244.112.0/20 | SINET | JP | shikoku-u.ac.jp | Shikoku University
202.247.80.133 | FL9-202-247-80-133.stm.mesh.ad.jp. |2518 | 202.247.0.0/17 | BIGLOBE | JP | biglobe.co.jp | Biglobe Inc.
202.247.80.134 | FL9-202-247-80-134.stm.mesh.ad.jp. |2518 | 202.247.0.0/17 | BIGLOBE | JP | biglobe.co.jp | Biglobe Inc.
202.247.80.135 | FL9-202-247-80-135.stm.mesh.ad.jp. |2518 | 202.247.0.0/17 | BIGLOBE | JP | biglobe.co.jp | Biglobe Inc.
202.248.29.227 | dns1.clubnet.ne.jp. |2510 | 202.248.0.0/16 | INFOWEB | JP | fujitsu.com | Fujitsu Limited
202.248.38.130 | kntinter.knt.co.jp. |2510 | 202.248.0.0/16 | INFOWEB | JP | kjs.co.jp | Kinki Nippon Tourist Co. Ltd.
202.248.78.170 | ns.tm-s.jp. |2510 | 202.248.0.0/16 | INFOWEB | JP | tm-s.jp | Takahashi Ina Hanbai Co. Ltd.
202.32.199.211 | 211.199.32.202.bf.2iij.net. |2497 | 202.32.0.0/16 | IIJ | JP | 2iij.net | Asai Sangyo Co. Ltd.
202.32.199.212 | 212.199.32.202.bf.2iij.net. |2497 | 202.32.0.0/16 | IIJ | JP | 2iij.net | Asai Sangyo Co. Ltd.
202.56.72.194 | host-194.dhcpn7.icn-tv.ne.jp. |24251 | 202.56.64.0/20 | ICNTV | JP | icn-tv.ne.jp | Waki Town
203.138.161.14 | ns2.reggaerecord.com. |2514 | 203.138.0.0/16 | INFOSPHERE | JP | reggaerecord.com | Dub Store Sound Inc.
203.139.214.138 | vcheck.seki.co.jp. |7522 | 203.139.192.0/19 | STCN | JP | seki.co.jp | Seki.co. Ltd.
203.140.79.98 | mail.xeen.co.jp. |17511 | 203.140.64.0/19 | K | JP | xeen.co.jp | Xeen Inc
203.179.80.146 |  |9600 | 203.179.80.0/20 | SONYTELECOM | JP | kobatec.com | Kobatec
203.179.80.35 | 203-179-80-35.cust.bit-drive.ne.jp. |9600 | 203.179.80.0/20 | SONYTELECOM | JP | bit-drive.ne.jp | Media Enterprise Inc.
203.179.82.202 | 203-179-82-202.cust.bit-drive.ne.jp. |9600 | 203.179.80.0/20 | SONYTELECOM | JP | netdreamers.co.jp | Net Dreamers Co. Ltd.
203.183.167.100 | 100.64/26.167.183.203.in-addr.arpa. |4694 | 203.183.0.0/16 | IDC | JP | ujj.co.jp | Userjoy Japan Co. Ltd.
210.129.122.2 | ns01.ecbiz.jp. |4694 | 210.129.0.0/16 | IDC | JP | ecbiz.jp | Skysoft Corp
210.129.222.210 |  |4694 | 210.129.0.0/16 | IDC | JP | noahcloud.jp | IDC Frontier Inc.
210.134.0.38 |  |2514 | 210.134.0.0/20 | INFOSPHERE | JP | inaker.ad.jp | Inaka Net
210.134.2.130 |  |2514 | 210.134.0.0/20 | INFOSPHERE | JP | nic.ad.jp | Japan Network Information Center
210.134.75.131 | 131.128.75.134.210.in-addr.arpa. |4725 | 210.134.64.0/19 | ODN | JP | amn.co.jp | AMN Internet Service
210.142.137.10 | ns1.cosmos.ne.jp. |2497 | 210.142.128.0/20 | IIJ | JP | cosmos.ne.jp | Cosmos Net Communications Co. Ltd.
210.142.245.227 | ns1-is01.tomorrow.ne.jp. |7522 | 210.142.224.0/19 | STCN | JP | tosbac-systems.co.jp | Tosbac Systems Co. Inc
210.144.3.21 | ns01.bizxoffice.com. |4673 | 210.144.0.0/16 | INTERVIA | JP | nttd-i.co.jp | System Platforms Sector MS Development Department
210.145.113.5 | ns.intio.or.jp. |4713 | 210.145.0.0/16 | OCN | JP | intio.or.jp | Intio-Net Service
210.145.146.226 | d01001.nttoryo.co.jp. |4713 | 210.145.0.0/16 | OCN | JP | nttoryo.co.jp | Nihon Tokushu Toryo
210.145.94.34 | 34.32.94.145.210.in-addr.arpa. |4713 | 210.145.0.0/16 | OCN | JP | adms-asia.co.jp | AEGON Direct&Affinity Marketing Services
210.150.187.42 |  |2514 | 210.150.0.0/16 | INFOSPHERE | JP | - | Zip Telecom Co. Ltd
210.150.189.57 |  |2514 | 210.150.0.0/16 | INFOSPHERE | JP | cyclone-ent.co.jp | Cyclone Entertainment Inc.
210.151.113.81 | s001.osaka-shinai.ac.jp. |2907 | 210.151.64.0/18 | SINET | JP | osaka-shinai.ac.jp | Osaka Shin-ai Jogakuin
210.154.76.2 | byakko.nssoft.co.jp. |4713 | 210.154.0.0/16 | OCN | JP | nssoft.co.jp | NSSOFT
210.160.211.186 |  |4713 | 210.160.0.0/16 | OCN | JP | - | Saitama Automobile Manufacturing Co. Ltd.
210.161.20.226 | ns.takaoka.ac.jp. |4713 | 210.161.0.0/16 | OCN | JP | takaoka.ac.jp | Takaoka University of Law
210.161.214.170 |  |4713 | 210.161.0.0/16 | OCN | JP | be-tec.co.jp | Be-Tec Corporation
210.162.118.34 |  |4713 | 210.162.0.0/16 | OCN | JP | 2iij.net | TDS Co. Ltd.
210.162.161.34 | ns.fujicitio.com. |4713 | 210.162.0.0/16 | OCN | JP | fujicitio.com | Fujicitio Corporation
210.162.194.178 |  |4713 | 210.162.0.0/16 | OCN | JP | nd-inc.co.jp | Nihon-Densan Corporation
210.163.105.82 | ns.sanyu-group.co.jp. |4713 | 210.163.0.0/16 | OCN | JP | sanyu-group.co.jp | Sanyu Industries Ltd.
210.164.104.194 | server.shinban.co.jp. |4713 | 210.164.0.0/16 | OCN | JP | shinban.co.jp | Nihon-Shinban Co. Ltd.
210.168.66.32 |  |4694 | 210.168.0.0/17 | IDC | JP | noahcloud.jp | IDC Frontier Inc.
210.168.72.13 |  |4694 | 210.168.0.0/17 | IDC | JP | noahcloud.jp | IDC Frontier Inc.
210.168.72.19 |  |4694 | 210.168.0.0/17 | IDC | JP | noahcloud.jp | IDC Frontier Inc.
210.168.75.139 |  |4694 | 210.168.0.0/17 | IDC | JP | noahcloud.jp | IDC Frontier Inc.
210.169.138.250 | red.jawca.net. |4725 | 210.169.128.0/17 | ODN | JP | jawca.net | JapanWebcast Corp.
210.170.68.2 | kpma.kanagawa.med.or.jp. |4713 | 210.170.64.0/18 | OCN | JP | med.or.jp | Kanagawa Prefecture Medical As sociation
210.172.21.242 | notes-sv.daiichijushi.co.jp. |9600 | 210.172.0.0/19 | SONYTELECOM | JP | daiichijushi.co.jp | Daiichijushi Industry Corporation
210.174.207.101 |  |4725 | 210.174.128.0/17 | ODN | JP | - | VoDa Media Inc.
210.175.206.14 | dns1.soho-net.ne.jp. |7516 | 210.175.192.0/19 | TOHKNET | JP | soho-net.ne.jp | Soho Japan
210.175.39.2 | ns.naxnet.or.jp. |4725 | 210.175.0.0/17 | ODN | JP | naxnet.or.jp | NAXNET
210.175.39.5 | ns2.naxnet.or.jp. |4725 | 210.175.0.0/17 | ODN | JP | naxnet.or.jp | NAXNET
210.175.79.237 | global.dev.whitecloud.jp. |4725 | 210.175.0.0/17 | ODN | JP | softbank.jp | SoftBank Telecom Corp.
210.189.109.146 | f8m01-0146.din.or.jp. |4723 | 210.189.96.0/19 | DOLPHIN | JP | din.or.jp | Dolphin International Inc.
210.190.106.34 | host.technodome.or.jp., www.technodome.or.jp. |4713 | 210.190.0.0/16 | OCN | JP | technodome.or.jp | Foundation Toyama Center for Industrial Creativity
210.226.138.210 | mw300b.kiyonoya.co.jp. |4713 | 210.226.0.0/15 | OCN | JP | kiyonoya.co.jp | Kiyonoya Corporation
210.226.96.2 | ns.kyosuiren.or.jp. |4713 | 210.226.0.0/15 | OCN | JP | kyosuiren.or.jp | National Mutual Insurance Federation of Fishery Co-Operatives
210.232.183.2 | 2.0.183.232.210.in-addr.arpa. |4713 | 210.232.0.0/16 | OCN | JP | - | AI.System Corporation
210.236.12.116 | ns1.hinase.ne.jp. |7670 | 210.236.0.0/19 | CTNET | JP | hinase.ne.jp | Hinase Cable Television
210.248.41.98 | dns.nidec-shimpo.co.jp. |4713 | 210.248.0.0/16 | OCN | JP | nidec-shimpo.co.jp | NIDEC-SHIMPO Corporation
210.248.73.146 | aquila.urban-group.co.jp. |4713 | 210.248.0.0/16 | OCN | JP | urban-group.co.jp | Urban Development Co. Ltd.
210.251.245.221 | ma2.ibix.co.jp. |9600 | 210.251.240.0/20 | SONYTELECOM | JP | tol.ne.jp | IBIX Corporation
210.253.225.43 | d225043.ppp.asahi-net.or.jp. |4685 | 210.253.224.0/19 | ASAHI | JP | asahi-net.jp | Asahi Net
210.254.28.146 | 210254028146.cidr.odn.ne.jp. |4725 | 210.254.0.0/18 | ODN | JP | odn.ne.jp | Nippon Paper Core Industrial Co. Ltd
211.0.125.50 | ns1.satsuma.co.jp. |4713 | 211.0.0.0/16 | OCN | JP | satsuma.co.jp | Satsuma Shuzo Co. Ltd.
211.0.24.18 | dns.peaceboat.gr.jp. |4713 | 211.0.0.0/16 | OCN | JP | peaceboat.gr.jp | Peace Boat
211.121.135.178 | ns2.fujitaka.com.176.135.121.211.IN-ADDR.ARPA. |4725 | 211.121.0.0/16 | ODN | JP | - | Fujitaka.Co.Ltd.
211.121.168.58 | ns.takeda-ms.jp. |4725 | 211.121.0.0/16 | ODN | JP | takeda-ms.jp | Takeda Printing Co. Ltd.
211.122.123.60 | p37060-ipbffx02marunouchi.tokyo.ocn.ne.jp. |4713 | 211.122.0.0/15 | OCN | JP | ocn.ne.jp | Open Computer Network
211.122.246.154 | p3154-ipbffx02hodogaya.kanagawa.ocn.ne.jp. |4713 | 211.122.0.0/15 | OCN | JP | ocn.ne.jp | Open Computer Network
211.12.232.245 | dns1.takaya.co.jp. |7670 | 211.12.224.0/19 | CTNET | JP | takaya.co.jp | TAKAYA Corporation
211.125.75.87 | w2.mk1.jp. |7506 | 211.125.72.0/21 | INTERQ | JP | gmo.jp | GMO Internet Inc.
211.127.166.242 | 242.240.166.127.211.in-addr.arpa. |4725 | 211.127.0.0/16 | ODN | JP | - | Financial Rating Corporation of Japan
211.127.211.218 | 218.216.211.127.211.in-addr.arpa.
ns1.jrl.co.jp. |4725 | 211.127.0.0/16 | ODN | JP | jrl.co.jp | JR Kyushu Financial Management Co. Ltd.
211.129.113.142 | p84142-ipbffx02marunouchi.tokyo.ocn.ne.jp. |4713 | 211.129.0.0/16 | OCN | JP | ocn.ne.jp | Open Computer Network
211.133.201.239 | nz239.net211133201.thn.ne.jp. |10010 | 211.133.192.0/19 | TOKAI | JP | tokai-com.co.jp | Tokai Communications Corporation
211.19.32.120 | dns2.mki-net.co.jp. |17673 | 211.19.32.0/20 | MKINET | JP | mki-net.co.jp | Mitsui Knowledge Industry Co. Ltd.
211.19.32.17 | dns1.mki-net.co.jp., dns.mki-net.co.jp. |17673 | 211.19.32.0/20 | MKINET | JP | mki-net.co.jp | Mitsui Knowledge Industry Co. Ltd.
211.7.238.2 | dns1.tomorrow.ne.jp. |7522 | 211.7.224.0/19 | STCN | JP | tomorrow.ne.jp | Tosbac Systems Co. Inc.
211.8.86.235 |  |4725 | 211.8.0.0/16 | ODN | JP | kubota.ne.jp | KUBOTA Systems Inc.
211.9.37.46 |  |9600 | 211.9.32.0/19 | SONYTELECOM | JP | hanjin.com | HANJIN SHIPPING Co. LTD.
211.9.46.82 | atic.reform.ne.jp. |9600 | 211.9.32.0/19 | SONYTELECOM | JP | chokuju.net | D Product.net
218.216.74.51 | 51.48.74.216.218.in-addr.arpa. |9600 | 218.216.64.0/20 | SONYTELECOM | JP | - | Net Piloting Inc.
218.224.233.114 | 114.112.233.224.218.in-addr.arpa. |4713 | 218.224.0.0/16 | OCN | JP | - | West Japan Railway Train Union
218.224.244.66 | ns.yg-you-i-net.or.jp. |4713 | 218.224.0.0/16 | OCN | JP | yamaguchikensyakyo.jp | Yamaguchi Prefectural Council Of Social Welfare
218.224.244.68 | ns.yamaguchikensyakyo.jp. |4713 | 218.224.0.0/16 | OCN | JP | yamaguchikensyakyo.jp | Yamaguchi Prefectural Council Of Social Welfare
218.224.248.18 | kdisdns.kdis-inc.co.jp. |4713 | 218.224.0.0/16 | OCN | JP | kdis-inc.co.jp | Kochi Dealing Information Service Inc.
218.224.250.22 | sdns.nagasaki-om.co.jp. |4713 | 218.224.0.0/16 | OCN | JP | denno-bld.com | Office Mation Corporation
218.42.148.195 |  |9600 | 218.42.144.0/20 | SONYTELECOM | JP | sjts.co.jp | Japan total system incorporated.
218.42.156.105 | yurin.illumina.co.jp.,lohhdl.illumina.co.jp.,ns.illumina.co.jp.,www.illumina.co.jp.,ecole.illumina.co.jp.,mail.illumina.co.jp.,ns.ecole.jp. |9600 | 218.42.144.0/20 | SONYTELECOM | JP | illuminate.jpn.com | Illuminate Co.
218.42.158.178 | 218-42-158-178.cust.bit-drive.ne.jp. |9600 | 218.42.144.0/20 | SONYTELECOM | JP | bit-drive.ne.jp | Onlymac Net
218.44.160.146 |  |4713 | 218.44.0.0/16 | OCN | JP | human-itec.co.jp | Human Interface Technology
218.44.233.114 | ns.acs.co.jp. |4713 | 218.44.0.0/16 | OCN | JP | acs.co.jp | ACS Co. Ltd.
218.44.235.218 | ns.water.saitama.saitama.jp. |4713 | 218.44.0.0/16 | OCN | JP | water.saitama.saitama.jp | Saitama Municipal Waterworks Bureau
219.101.247.4 | ns1.cfweb.co.jp., ns1.cfweb.jp. |17676 | 219.101.128.0/17 | GIGAINFRA | JP | cfweb.co.jp | Cedyna Financial Corporation
219.101.42.91 | adr23.vidro.ne.jp.,gw91.vidro.ne.jp. |9600 | 219.101.32.0/20 | SONYTELECOM | JP | fujioka.co.jp | Fujioka
219.101.83.238 | bus021.magma.me. |18090 | 219.101.80.0/22 | MAGMA | JP | xsp.ne.jp | IMS Corporation
219.105.32.115 | sv01.benefitex.dcn.ne.jp. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation
219.105.32.176 | mail.mailpo.jp. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation
219.105.32.217 | dns.257.jp. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation
219.105.33.21 | sv04.tomigaya.shibuya.tokyo.dcn.ne.jp. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation
219.105.33.28 | secondary.syscore.shibuya.tokyo.dcn.ne.jp. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation
219.105.33.44 | dns1.jascnet.com. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation
219.105.37.213 | ns6.pear.clio.ne.jp. |18097 | 219.105.32.0/20 | DCN | JP | clio.ne.jp | Honda Clio Shinshu Co. Ltd.
219.105.39.1 | pppoe001.39.east.tokyo.dcn.ne.jp. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation
219.106.226.50 | sunday.tokyord.jp. |9600 | 219.106.224.0/19 | SONYTELECOM | JP | tokyord.jp | Bac Tera Systems Co. Ltd.
219.109.236.2 | ns.ishikawa-center.ac.jp. |10013 | 219.109.224.0/20 | FBDC | JP | ishikawa-center.ac.jp | Ishikawa Polytecnic Center
219.114.102.2 | blue.souritsu.co.jp. |4713 | 219.114.0.0/17 | OCN | JP | souritsu.co.jp | Souritsu Electric Corporation
219.118.166.98 | dns1.p-8.co.jp. |9600 | 219.118.160.0/19 | SONYTELECOM | JP | so-net.ne.jp | SO-Net Corporation
219.118.167.67 |  |9600 | 219.118.160.0/19 | SONYTELECOM | JP | falco-c.jp | Cosmic Inc.
219.118.168.218 | ns1.pentain.co.jp. |9600 | 219.118.160.0/19 | SONYTELECOM | JP | pentain.co.jp | Pentain Corp Inc.
219.118.168.34 | ns.sunnoah.co.jp. |9600 | 219.118.160.0/19 | SONYTELECOM | JP | sunnoah.co.jp | Sunnoah Co. Ltd.
219.118.175.114 | ns10.scepcom.co.jp. |9600 | 219.118.160.0/19 | SONYTELECOM | JP | namabeer.ne.jp | SCEPCOM Incorporated.
219.118.175.115 | ns11.jpcsr.co.jp. |9600 | 219.118.160.0/19 | SONYTELECOM | JP | namabeer.ne.jp | SCEPCOM Incorporated.
219.122.43.90 | ns.meijo.ed.jp. |17511 | 219.122.32.0/19 | K | JP | meijo.ed.jp | Meijo institute senior high school
219.127.221.92 | 92.64.221.127.219.in-addr.arpa. |17676 | 219.127.128.0/17 | GIGAINFRA | JP | densan-ginza.co.jp | DENSAN Inc.
219.127.229.161 | awerg01.ecole-net.jp. |17676 | 219.127.128.0/17 | GIGAINFRA | JP | ecole-net.jp | Ecole Ryutsu Group Co. Ltd.
219.127.249.195 | ns2.toyo-tv.ne.jp. |17676 | 219.127.128.0/17 | GIGAINFRA | JP | sakamoto-catv.jp | Yatsushiro City
219.163.10.2 | birds.kosmek.co.jp. |4713 | 219.160.0.0/14 | OCN | JP | kosmek.co.jp | Kosmek Ltd.
219.163.104.250 | dns.sogo-co.co.jp. |4713 | 219.160.0.0/14 | OCN | JP | sogo-co.co.jp | SOGO CONSULTANTS Corporation
219.163.104.251 | www.sogo-co.co.jp. |4713 | 219.160.0.0/14 | OCN | JP | sogo-co.co.jp | SOGO CONSULTANTS Corporation
219.163.13.186 | dns1.chunichisogo.co.jp. |4713 | 219.160.0.0/14 | OCN | JP | - | Chunichi Sogo Service
219.163.18.231 | server.senmaike.net. |4713 | 219.160.0.0/14 | OCN | JP | exe.ne.jp | Exe Internet Service
219.163.21.66 | ns.dk2.co.jp. |4713 | 219.160.0.0/14 | OCN | JP | dk2.co.jp | Dainichi Inc.
219.163.63.193 |  |4713 | 219.160.0.0/14 | OCN | JP | todashuhan.jp | Computer Move Corporation
219.163.82.170 | ns.shinnichi.co.jp. |4713 | 219.160.0.0/14 | OCN | JP | shinnichi.co.jp | Shinnichi Corporation
219.164.212.33 |  |4713 | 219.164.0.0/15 | OCN | JP | - | Medical Corporation Kenkoin
219.165.98.122 | ns.aquanet.ne.jp. |4713 | 219.164.0.0/15 | OCN | JP | kotake.ws | Aquanet
219.166.0.194 | ns.sankyoprocess.co.jp.,mail.sankyoprocess.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | sankyoprocess.co.jp | Sankyo Process
219.166.13.18 | dns.c-max.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | c-max.co.jp | Fuji Seiko Limited
219.166.14.88 | ns0.wpage.jp. |4713 | 219.166.0.0/15 | OCN | JP | wpage.jp | Mediapark
219.166.158.106 | ns.kumamoto.sanyu.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | sanyu.co.jp | Sanyu Switch Co. Ltd.
219.166.160.122 | ns.keisen-se.ac.jp. |4713 | 219.166.0.0/15 | OCN | JP | keisen-se.ac.jp | Keisen School Corporation
219.166.161.226 | ns.etandard.meguro.tokyo.jp. |4713 | 219.166.0.0/15 | OCN | JP | ocn.ne.jp | OCN Provided by NTT-Communications Which is ISP
219.166.19.122 | public.koutsukikaku.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | koutsukikaku.co.jp | Koutsukikaku Corporation
219.166.191.74 | cocoa.medec-ltd.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | medec-ltd.co.jp | Medec Corporation
219.166.19.26 | dns.three-chords.com. |4713 | 219.166.0.0/15 | OCN | JP | three-chords.com | Three-Chords Co. Ltd.
219.166.24.106 | server1.hopenet.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | hopenet.co.jp | Hasegawa Kazunari
219.166.24.108 | server3.hopenet.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | hopenet.co.jp | Hasegawa Kazunari
219.97.239.66 | pdns.camp-a.jp. |2510 | 219.97.0.0/16 | INFOWEB | JP | fujitsu.com | Fujitsu Limited
219.99.166.50 | ns01.futureweb.jp. |23824 | 219.99.160.0/21 | FUTURE | JP | fsi.ne.jp | Future Spirits Co. Ltd.
220.110.111.74 | 74.72.111.110.220.in-addr.arpa. |4713 | 220.110.0.0/16 | OCN | JP | - | Graphic Support Co. Ltd.
220.110.170.218 |  |4713 | 220.110.0.0/16 | OCN | JP | - | Taihouseihan Co. Ltd.
220.110.190.226 | 226.224.190.110.220.in-addr.arpa. |4713 | 220.110.0.0/16 | OCN | JP | - | Press Media Corporation
220.110.192.226 | external01.hgu.ac.jp. |4713 | 220.110.0.0/16 | OCN | JP | hgu.ac.jp | Hamamatsu Gakuin University
220.110.198.226 | ns.matuuo.co.jp. |4713 | 220.110.0.0/16 | OCN | JP | it-server.jp | Matsuyama Uoichiba Corporation
220.110.34.42 | ns2.tunagaru.net. |4713 | 220.110.0.0/16 | OCN | JP | tunagaru.net | Isolutions Co. Ltd.
220.110.37.130 | ns.kita-osaka.co.jp. |4713 | 220.110.0.0/16 | OCN | JP | kita-osaka.co.jp | Create Osaka Co. Ltd.
220.110.40.250 | ns.imv.co.jp. |4713 | 220.110.0.0/16 | OCN | JP | imv.co.jp | IMV Corporation
220.111.41.106 | jp2-bs62002.vwh.net. |4713 | 220.111.32.0/20 | OCN | JP | ocn.ne.jp | Open Computer Network
220.209.241.104 | ntfksm059104.fksm.nt.ngn2.ppp.infoweb.ne.jp. |2510 | 220.209.0.0/16 | INFOWEB | JP | infoweb.ne.jp | Infoweb
220.99.109.154 | ns1.city-seika.com. |4713 | 220.99.0.0/17 | OCN | JP | city-seika.com | Tokyo City Seika Co. Ltd.
220.99.113.10 | ns.kroute.co.jp. |4713 | 220.99.0.0/17 | OCN | JP | - | Kroute Corporation
221.186.108.210 | ks99.kan-so.co.jp. |4713 | 221.184.0.0/13 | OCN | JP | kan-so.co.jp | Kan-So Corporation
221.186.109.82 | dns1.jpu.jp.,dns1.jpu.co.jp. |4713 | 221.184.0.0/13 | OCN | JP | bouhanmodel.net | Nippon Pana-Use.co. Ltd.
221.186.127.58 | 58.56.127.186.221.in-addr.arpa.
ns.axyz-grp.co.jp. |4713 | 221.184.0.0/13 | OCN | JP | axyz-grp.co.jp | Axyz.ltd
221.186.154.86 |  |4713 | 221.184.0.0/13 | OCN | JP | foundationapi.com | Sankyo Frontier
222.146.54.94 |  |4713 | 222.144.0.0/13 | OCN | JP | ocn.ne.jp | Open Computer Network
222.151.204.10 | 10.8.204.151.222.in-addr.arpa.
ns1.arnest1.co.jp. |4713 | 222.144.0.0/13 | OCN | JP | arnest1.co.jp | Arnest One Corporation
222.151.207.178 | ns.to-on.co.jp. |4713 | 222.144.0.0/13 | OCN | JP | to-on.co.jp | To-On Music Publishing Co. Ltd.
222.151.228.138 | ns.iwafu.jp. |4713 | 222.144.0.0/13 | OCN | JP | iwafu.jp | Iwate Mitsubishi Fuso Car Sales Co. Ltd.
222.151.236.18 | dns.akropolis.ne.jp. |4713 | 222.144.0.0/13 | OCN | JP | akropolis.ne.jp | Akropolis
222.228.220.168 | s168.GosakaFL3.vectant.ne.jp. |2519 | 222.228.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc.
42.99.131.50 | smtp.marveldigital.com. |10026 | 42.99.128.0/17 | PACNET | HK | pacnet.net | Marvel Digital Limited
42.99.131.52 | mx.marveldigital.com. |10026 | 42.99.128.0/17 | PACNET | HK | pacnet.net | Marvel Digital Limited
58.94.99.216 | i58-94-99-216.s30.a048.ap.plala.or.jp. |4713 | 58.88.0.0/13 | OCN | JP | plala.or.jp | NTT Plala Inc.
60.32.10.106 | ns1.gpcenter.jp. |4713 | 60.32.0.0/12 | OCN | JP | gpcenter.jp | Gpcenter Corporation
60.32.108.218 |  |4713 | 60.32.0.0/12 | OCN | JP | - | Pal Net Corporation
60.32.135.2 | ns.active.sc.,www.active.sc.,gw.active.sc.,mx.active.sc.,mx.axis-ing.com.,gw.heyasta.com.0.135.32.60.in-addr.arpa. |4713 | 60.32.0.0/12 | OCN | JP | axis-ing.com | Axis International Corporation
60.32.149.2 |  |4713 | 60.32.0.0/12 | OCN | JP | - | Nitto Corporation
60.32.184.66 | ns.mitsuchi.co.jp. |4713 | 60.32.0.0/12 | OCN | JP | mitsuchi.co.jp | Mitsuchi Corporation
60.32.191.76 | mx.ja-saito.or.jp. |4713 | 60.32.0.0/12 | OCN | JP | ja-saito.or.jp | Ja Saito
60.32.209.234 |  |4713 | 60.32.0.0/12 | OCN | JP | - | Serie Co. Ltd.
60.32.213.121 | pc1.kurushima-6-unet.ocn.ne.jp. |4713 | 60.32.0.0/12 | OCN | JP | ocn.ne.jp | Kurusima kaikyo Traffic Advisory Service Center
60.32.219.82 | ns.s-iwata.imabari.ehime.jp. |4713 | 60.32.0.0/12 | OCN | JP | s-iwata.imabari.ehime.jp | Iwata Shuji
60.32.80.162 | ns01.tsbrain.net. |4713 | 60.32.0.0/12 | OCN | JP | tsbrain.net | Tsbrain Inc.
60.32.97.114 | ns.sakataminami-h.ed.jp. |4713 | 60.32.0.0/12 | OCN | JP | sakataminami-h.ed.jp | Sakataminami High School
60.43.34.58 | i60-43-34-58.s30.a048.ap.plala.or.jp. |4713 | 60.32.0.0/12 | OCN | JP | plala.or.jp | NTT Plala Inc.
61.113.175.16 |  |4713 | 61.113.0.0/16 | OCN | JP | tonotv.com | City of Tono
61.115.12.163 | atcreation.jp. |9595 | 61.115.0.0/17 | XEPHION | JP | xephion.ne.jp | Xephion
61.119.52.34 |  |4713 | 61.119.0.0/16 | OCN | JP | nichibanmedical.co.jp | Nichiban Medical Corporation
61.119.52.36 |  |4713 | 61.119.0.0/16 | OCN | JP | nichibanmedical.co.jp | Nichiban Medical Corporation
61.121.244.77 | banana.fruitmail.net. |4694 | 61.121.240.0/20 | IDC | JP | fruitmail.net | Ibridge Co. Ltd
61.194.219.146 | st0226.nas811.p-kyoto.nttpc.ne.jp. |2514 | 61.194.128.0/17 | INFOSPHERE | JP | sphere.ad.jp | Infosphere
61.194.41.50 | ns.hwako.co.jp. |2514 | 61.194.0.0/17 | INFOSPHERE | JP | hwako.co.jp | Hokkaido Wako Purechemical Industries Ltd
61.194.53.162 | ns.hs-sec.co.jp. |2514 | 61.194.0.0/17 | INFOSPHERE | JP | hs-sec.co.jp | H.S.Securities Co. Ltd
61.194.81.194 |  |2514 | 61.194.0.0/17 | INFOSPHERE | JP | - | TYK Information Service Co. Ltd
61.194.81.196 |  |2514 | 61.194.0.0/17 | INFOSPHERE | JP | - | TYK Information Service Co. Ltd
61.194.88.105 | ns1.eco-dream.com. |2514 | 61.194.0.0/17 | INFOSPHERE | JP | eco-dream.com | CURLING CREATIVE CONSULT Incorporated.
61.195.31.190 | express.net.dti.ad.jp. |10013 | 61.195.0.0/19 | FBDC | JP | dream.jp | Dream Train Internet Inc.
61.196.191.91 | ns.shizcon.co.jp. |4725 | 61.196.0.0/16 | ODN | JP | - | ShizuokaSeigyo Corporation
61.196.227.41 |  |4725 | 61.196.0.0/16 | ODN | JP | kimden.co.jp | Kimura Electric Co. Ltd.
61.196.230.74 | ns01.nidec-tosok.co.jp. |4725 | 61.196.0.0/16 | ODN | JP | nidec-tosok.co.jp | Nidec tosok Corporation
61.197.170.138 | ns.cinet.co.jp. |2514 | 61.197.128.0/17 | INFOSPHERE | JP | cinet.co.jp | Climb Corporation
61.197.192.55 | speed6.winpal.net. |2514 | 61.197.128.0/17 | INFOSPHERE | JP | winpal.net | Winpal Corp.
61.197.217.34 | dmn-ns1.dominic.ed.jp. |2514 | 61.197.128.0/17 | INFOSPHERE | JP | dominic.ed.jp | St. dominic's Institute
61.197.226.220 | komomo.eof.co.jp. |2514 | 61.197.128.0/17 | INFOSPHERE | JP | eof.co.jp | E.O.F Co. Ltd.
61.199.241.2 | mail.komae-vfc.jp.,ns.komae-vfc.jp.,www.komae-vfc.jp. |4713 | 61.199.0.0/16 | OCN | JP | komae-vfc.jp | Komae City
61.202.247.106 | dns1.kenden.co.jp. |17676 | 61.202.192.0/18 | GIGAINFRA | JP | kenden.co.jp | Kenden.co. Ltd
61.203.130.81 | dc81.runsystem.co.jp. |17676 | 61.203.128.0/20 | GIGAINFRA | JP | runsystem.co.jp | Runsystem Co. Ltd.
61.205.54.25 | 25.54.205.61.west.global.crust-r.net. |10013 | 61.205.32.0/19 | FBDC | JP | freebit.com | Freebit Co. Ltd.
61.206.116.230 | 61.206.116.230.static.zoot.jp. |2514 | 61.206.112.0/20 | INFOSPHERE | JP | interlink-ltd.com | Interlink Co. Ltd
61.206.183.135 |  |17676 | 61.206.128.0/18 | GIGAINFRA | JP | - | Clubit Corporation
61.206.7.147 | www.kohboh.co.jp. |7522 | 61.206.0.0/20 | STCN | JP | kohboh.co.jp | Shikoku System Koh-Boh Corporation
61.208.23.226 | ns.jsibaraki.jp. |4713 | 61.208.0.0/16 | OCN | JP | jsibaraki.jp | Ibaraki Council of Institutions for the Elderly
61.208.91.162 | ns.nagahama-hp.jp. |4713 | 61.208.0.0/16 | OCN | JP | nagahama-hp.jp | Nagahama City Hospital
61.211.245.189 | flfk01-189.wind.ne.jp. |10013 | 61.211.240.0/20 | FBDC | JP | freebit.com | Freebit Co. Ltd.
61.213.136.106 | ns5.namabeer.ne.jp. |17524 | 61.213.128.0/20 | DSN | JP | file.ne.jp | Scepcom Inc.
61.215.198.35 | ns22.pa-co-ltd.co.jp. |17676 | 61.215.192.0/20 | GIGAINFRA | JP | pa-co-ltd.co.jp | PA Co. Ltd.


■リファレンス

DNS の再帰的な問合せを使った DDoS 攻撃の対策について(JPRS)
オープンリゾルバ(Open Resolver)に対する注意喚起 (JPNIC)
DNSの再帰的な問い合わせを使ったDDoS攻撃に関する注意喚起 (JPCERT)

@unixfreaxjp/0day.jp Sun Oct 16 18:23:04 JST 2016

1 件のコメント:

  1. 調査した結果、日本国内のDNS悪用されているDNSアンプ攻撃事件について
    1. 攻撃の原因はロシアで作られたDNSアンプDDoSボットネットです。
    2. マルウェアサンプルはELFとPE、両方種類があります、
    ELFサンプル(攻撃マシンから洗い出した):
      f4e3d4ee9ac7b0d29642d01333c2e2fb 7348efce3d373ee1a3ac18c6c0796a84
    3. ボットネット調査レポート [link]
    4. 最新の事件の調査の時にボットネット攻撃C2は下記となります↓
    Attack source:
    insections.biz A 185.45.193.165

    GeoIP during the attack:
    "ip": "185.45.193.165",
    "hostname": "No Hostname",
    "city": "Amsterdam",
    "region": "Noord-Holland",
    "country": "NL",
    "loc": "52.3740,4.8897",
    "org": "AS60117 Host Sailor Ltd.",
    "postal": "1006"

    Registrant Email: zaporozhchenko.andrey@ya.ru
    Administrative Contact Email: zaporozhchenko.andrey@ya.ru
    Billing Contact Email: zaporozhchenko.andrey@ya.ru
    Technical Contact Email: zaporozhchenko.andrey@ya.ru
    以上/malwaremustdie.org DE, GE, JP, HU Team.

    返信削除