■はじめに
まず、「DNSアンプ攻撃」が分からない方はこちらをご覧下さい。そしてDNS「オープンリゾルバ/Open Resolvers」についてはこちらのリンクに纏めて説明しています。
「DNSアンプ攻撃」と「オープンリゾルバ」の関係は↓
Open Resolvers pose a significant threat to the global network infrastructure by answering recursive queries for hosts outside of its domain. They are utilized in DNS Amplification attacksリファレンス: Open Resolver Project openresolverproject.org
大体4月中旬から少しずつ日本国内に悪用された「DNSアンプ攻撃」のIPレポートが届きました。7月ぐらいに結構溜まりますが、国内セキュリティのリング皆様に手続きについて頼んで、報告しました。今2ヶ月以降で、未だ脆弱性が残っているDNSサーバも御座いますし、このブログに本件を報告させて頂きます。
■「DNSアンプ攻撃」の脆弱性をチェックする仕方について
WindowsやLinux/BSDのshellで「DNSアンプ攻撃」の脆弱性の確認が簡単に出来ます。
念のために下記のチェック仕方を参考として公開しますので、是非、使って下さい。
まず、shellでnslookupを使い下記のフォーマットで確認↓
nslookup <存在しているドメイン> <チェックしたいDNSサーバのIP>
例えば↓
$ nslookup malwaremustdie.org 1.2.3.4
もし回答は下記の様になりましたら...
$ nslookup malwaremustdie.org 1.2.3.4 Server: 1.2.3.4 Address: 1.2.3.4#53 Non-authoritative answer: <======= Name: malwaremustdie.org Address: 64.233.189.121 Name: malwaremustdie.org Address: 216.239.32.21 Name: malwaremustdie.org Address: 216.239.36.21 : :...その回答の中に「Non-authoritative answer」とその他情報が出たら「1.2.3.4」のDNSサーバが「DNSアンプ攻撃」の脆弱性があるとのことです。もっとセキュアな設定を行ってください。
下記の回答が出たら、あなたのサーバはDNSオープンリゾルバの問題がありません↓
$ nslookup hatena.jp 216.59.57.100 Server: 216.59.57.100 Address: 216.59.57.100#53 ** server can't find hatena.jp: REFUSED <=============
■対策について、DNSサーバの安全設定する方法(bind9のみ)
1. bindでドメインrecursionの設定を無効にすること↓
options { allow-query-cache { none; }; recursion no; };2. もしrecursionを無効にすることができない場合、ACL(IPアクセスの制限設定)を書く必要があります↓
acl corpnets { 192.168.2.0/24; 192.168.3.0/24; }; options { allow-query { any; }; allow-recursion { corpnets; }; };3. DNSアンプ悪用されないように「Response Rate Limiting/RRL」の設定はおすすめです。
例えば5秒以内の連続リクエストをブロックする設定は下記のように書きます↓
rate-limit { responses-per-second 5; window 5; };
※設定が完了したら、nslookupでもう一度確認してください
※そして、念のためにDNSの設定が大丈夫かどうかの確認の為、オンラインチェックツールもありますが、
私のお勧めは「dnsinspect.com」です↓
■レポートした日本国内で悪用されたDNSサーバIP(BGPフィードのみ)
※)直りましたサーバも沢山あります、念の為に上記に書いたやり方でご確認をお願い致します。
※)下記のIPアドレスはとある国官公庁の攻撃ログに発見しましたので、国内と海外色んな所に報告済みです。
101.102.145.26 | nwsrvn002.NMLICA.JP. |17676 | 101.102.128.0/17 | GIGAINFRA | JP | tcs-dc.jp | Tokyo Nissan Computer System Co. Ltd 110.3.193.53 | 53.193.3.110.ap.yournet.ne.jp. |10013 | 110.0.0.0/14 | FBDC | JP | freebit.com | Freebit Co. Ltd. 110.5.42.199 | aa042199.ppp.asahi-net.or.jp. |4685 | 110.5.0.0/18 | ASAHI | JP | asahi-net.or.jp | Asahi Net Inc. 111.64.236.171 | nthygo030171.hygo.nt.ngn.ppp.infoweb.ne.jp. |2510 | 111.64.0.0/16 | INFOWEB | JP | infoweb.ne.jp | Infoweb 111.64.80.211 | ntsitm061211.sitm.nt.ngn2.ppp.infoweb.ne.jp. |2510 | 111.64.0.0/16 | INFOWEB | JP | infoweb.ne.jp | Infoweb 114.154.125.169 | p2169-ipbfp803okayamaima.okayama.ocn.ne.jp. |4713 | 114.144.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network 114.160.44.130 | |4713 | 114.160.0.0/11 | OCN | JP | - | Hitachi Systems.Ltd. 114.160.53.225 | jotof1.joto.com. |4713 | 114.160.0.0/11 | OCN | JP | joto.com | Joto Techno Co. Ltd 114.160.54.121 | pc1.webx2-unet.ocn.ne.jp. |4713 | 114.160.0.0/11 | OCN | JP | ocn.ne.jp | Webgate 114.160.61.146 | ns-out.yamagata-denshi.co.jp. |4713 | 114.160.0.0/11 | OCN | JP | yamagata-denshi.co.jp | Yamagata Electronic Corporation 114.160.76.121 | |4713 | 114.160.0.0/11 | OCN | JP | - | Tottoricitylibrary 114.168.166.140 | p3140-ipbfp903okayamaima.okayama.ocn.ne.jp. |4713 | 114.160.0.0/11 | OCN | JP | ocn.ne.jp | Open Computer Network 114.179.21.178 | k-net.kisarazu.ed.jp. |4713 | 114.160.0.0/11 | OCN | JP | ntt.com | NTT Communications Corporation 116.91.113.90 | 116.91.113.90.ap.gmobb-fix.jp. |2519 | 116.91.0.0/16 | VECTANT | JP | gmo.jp | GMO Internet Inc. 118.103.111.22 | |17676 | 118.103.0.0/17 | GIGAINFRA | JP | densan-ginza.co.jp | DENSAN Inc. 118.21.101.85 | i118-21-101-85.s30.a048.ap.plala.or.jp. |4713 | 118.16.0.0/13 | OCN | JP | plala.or.jp | NTT Plala Inc. 118.21.151.140 | i118-21-151-140.s30.a048.ap.plala.or.jp. |4713 | 118.16.0.0/13 | OCN | JP | plala.or.jp | NTT Plala Inc. 118.22.23.99 | ns1.tecgrp.co.jp. |4713 | 118.16.0.0/13 | OCN | JP | tecgrp.co.jp | Tohoku Electronic Calculation Center Co. Ltd 118.22.32.210 | kch-mlsv01.kch.kagoshima.jp. |4713 | 118.16.0.0/13 | OCN | JP | keinet.com | Kagoshima City 118.238.220.251 | fs76eedcfb.tkyc512.ap.nuro.jp. |2527 | 118.238.192.0/18 | SO | JP | so-net.ne.jp | So-net Service 119.245.138.31 | parcwave.jp. |2514 | 119.245.0.0/16 | INFOSPHERE | JP | suitepro.jp | Server Hosting Service 119.245.154.176 | st2288.nas931.k-tokyo.nttpc.ne.jp. |2514 | 119.245.0.0/16 | INFOSPHERE | JP | sphere.ad.jp | Infosphere 119.245.191.154 | |2514 | 119.245.0.0/16 | INFOSPHERE | JP | - | Anthonet 120.51.223.13 | s13.IsaitamaFL2.vectant.ne.jp. |2519 | 120.51.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc. 120.51.36.9 | s9.HtokyoFL32.vectant.ne.jp. |2519 | 120.51.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc. 121.119.250.146 | sv3.rockwave.ne.jp. |4713 | 121.112.0.0/13 | OCN | JP | aiship.jp | Rockwave Corporation 122.103.92.98 | s98.IaichiFL72.vectant.ne.jp. |2519 | 122.103.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc. 122.152.138.194 | server11.zaturdayhosting.com. |10026 | 122.152.128.0/19 | PACNET | HK | asianetcom.net | Zaturday Company # 122.1.52.18 | 18.16.52.1.122.in-addr.arpa. |4713 | 122.1.0.0/16 | OCN | JP | printing-daitoku.co.jp | Daitokucorporation 122.1.52.98 | ns.marubisi.co.jp. , mail.marubisi.co.jp. |4713 | 122.1.0.0/16 | OCN | JP | marubisi.co.jp | Marubisi.co.ltd 122.1.7.226 | |4713 | 122.1.0.0/16 | OCN | JP | - | Realize Science & Engineering Center Co. Ltd. 122.18.135.53 | p4915053-ipngn25401marunouchi.tokyo.ocn.ne.jp. |4713 | 122.16.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network 122.18.166.23 | p4504023-ipngn25501marunouchi.tokyo.ocn.ne.jp. |4713 | 122.16.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network 122.18.99.141 | p8141-ipngn1401hiraide.tochigi.ocn.ne.jp. |4713 | 122.16.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network 122.21.243.18 | p4535018-ipngn25701marunouchi.tokyo.ocn.ne.jp. |4713 | 122.16.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network 122.214.38.189 | 122x214x38x189.ap122.ftth.ucom.ne.jp. |17506 | 122.212.0.0/14 | UCOM | JP | fttx.co.jp | UCOM Corporation 122.221.248.3 | ns.janomecredia.co.jp. |17506 | 122.220.0.0/15 | UCOM | JP | janomecredia.co.jp | Janomecredia Corporation 122.22.49.152 | p3152-ipbfp502okayamaima.okayama.ocn.ne.jp. |4713 | 122.16.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network 122.249.88.125 | x088125.ppp.asahi-net.or.jp. |4685 | 122.249.0.0/16 | ASAHI | JP | asahi-net.or.jp | Asahi Net Inc. 124.110.40.149 | static-124-110-40-149.b-man.svips.gol.ne.jp. |2519 | 124.110.0.0/16 | VECTANT | JP | fusioncom.co.jp | Fusion Communications Corp. 124.87.44.219 | p5219-ipngn1601hiraide.tochigi.ocn.ne.jp. |4713 | 124.84.0.0/14 | OCN | JP | ocn.ne.jp | Open Computer Network 125.100.241.194 | |17506 | 125.100.0.0/14 | UCOM | JP | - | Yohantoukyoukirisutokyoukai 125.206.195.228 | |4713 | 125.200.0.0/13 | OCN | JP | ex-cd.co.jp | Exceed Ltd. 125.206.199.138 | ns.summitpos.net. |4713 | 125.200.0.0/13 | OCN | JP | summitstore-web.com | Summit Inc. 125.206.210.178 | |4713 | 125.200.0.0/13 | OCN | JP | - | CHC Corporation 125.206.210.182 | |4713 | 125.200.0.0/13 | OCN | JP | - | CHC Corporation 125.206.219.186 | mail.itmol.com. , ns1.itmol.com. |4713 | 125.200.0.0/13 | OCN | JP | itmol.com | Institute for Theoretical Medicine Inc. 130.158.133.11 | eagle.frsc.tsukuba.ac.jp. |37917 | 130.158.0.0/16 | UTINS | JP | tsukuba.ac.jp | University of Tsukuba 1.33.199.84 | ns2.dynac-net.com. |2514 | 1.33.0.0/16 | INFOSPHERE | JP | dynac-net.com | Dynac Corporation 1.33.202.226 | |2514 | 1.33.0.0/16 | INFOSPHERE | JP | - | Bizen Chemical Co. Ltd. 1.33.204.36 | ns1.dynac-net.com. |2514 | 1.33.0.0/16 | INFOSPHERE | JP | dynac-net.com | Dynac Corporation 150.7.25.1 | bach.office.ee.u-tokai.ac.jp. |2907 | 150.7.0.0/16 | SINET | JP | nic.ad.jp | Japan Network Information Center 153.136.200.120 | p2033120-ipngn200605osakachuo.osaka.ocn.ne.jp. |4713 | 153.128.0.0/11 | OCN | JP | ocn.ne.jp | Open Computer Network 153.142.76.20 | p21020-ipngnfx01kanazawa.ishikawa.ocn.ne.jp. |4713 | 153.128.0.0/11 | OCN | JP | ocn.ne.jp | Open Computer Network 153.145.19.115 | i153-145-19-115.s41.a008.ap.plala.or.jp. |4713 | 153.128.0.0/11 | OCN | JP | plala.or.jp | NTT Plala Inc. 153.150.15.66 | ns.penterj.co.jp. |4713 | 153.128.0.0/11 | OCN | JP | penterj.co.jp | Port Enterprise Co. Ltd. 153.150.18.170 | |4713 | 153.128.0.0/11 | OCN | JP | ntt.com | NTT Communications Corporation 153.150.20.2 | pc2.keishin-ug-unet.ocn.ne.jp. |4713 | 153.128.0.0/11 | OCN | JP | - | Keishin Highschool 153.150.32.74 | 74.72.32.150.153.in-addr.arpa. |4713 | 153.128.0.0/11 | OCN | JP | asteccorp.com | Astec Corporation 153.163.235.91 | p4091-ipngn6202marunouchi.tokyo.ocn.ne.jp. |4713 | 153.160.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network 153.168.129.250 | p672250-ipngn1802funabasi.chiba.ocn.ne.jp. |4713 | 153.160.0.0/12 | OCN | JP | ocn.ne.jp | Open Computer Network 153.197.233.110 | p319110-ipngn200405matuyama.ehime.ocn.ne.jp. |4713 | 153.192.0.0/11 | OCN | JP | ocn.ne.jp | Open Computer Network 153.203.190.252 | p1550252-ipngn14201hodogaya.kanagawa.ocn.ne.jp. |4713 | 153.192.0.0/11 | OCN | JP | ocn.ne.jp | Open Computer Network 153.218.66.66 | p3066-ipngn4401hodogaya.kanagawa.ocn.ne.jp. |4713 | 153.192.0.0/11 | OCN | JP | ocn.ne.jp | Open Computer Network 160.18.148.66 | nw1.kure-nct.ac.jp. |2907 | 160.18.148.0/23 | SINET | JP | kosen-k.go.jp | Institue National Colleges of Technology Japan 163.44.20.108 | hqm-store.com. |2514 | 163.44.0.0/18 | INFOSPHERE | JP | nttpc.co.jp | NTT PC Communications Inc. 180.37.77.210 | 180037077210.bhb.bizhosting.net. |4713 | 180.0.0.0/10 | OCN | JP | ocn.ne.jp | Open Computer Network 180.42.104.50 | ns.fukuoka.med.or.jp. |4713 | 180.0.0.0/10 | OCN | JP | med.or.jp | Fukuoka Prefecture Medical Association 180.42.1.186 | dns.e-pod.jp. |4713 | 180.0.0.0/10 | OCN | JP | polan.tokyo.jp | Polan Organic Foods Delivery 180.42.48.106 | dns.sya.co.jp. |4713 | 180.0.0.0/10 | OCN | JP | sya.co.jp | System Automation Corporation 180.42.68.242 | ns.hayashinet.co.jp. |4713 | 180.0.0.0/10 | OCN | JP | hayashinet.co.jp | Hayashi Co. Ltd 180.42.74.42 | ns.p-info.net. |4713 | 180.0.0.0/10 | OCN | JP | hiddenapp.com | Hidden 180.42.77.242 | mail.netcom-inc.co.jp. |4713 | 180.0.0.0/10 | OCN | JP | netcom-inc.co.jp | Netcom Corporation 180.43.164.18 | dns.nnw.co.jp. |4713 | 180.0.0.0/10 | OCN | JP | nnw.co.jp | Nippon Network Corporation 180.43.172.114 | ns.ctcsp.co.jp. |4713 | 180.0.0.0/10 | OCN | JP | ctcsp.co.jp | CTCSP Corporation 180.47.213.142 | p632142-ipngn1602funabasi.chiba.ocn.ne.jp. |4713 | 180.0.0.0/10 | OCN | JP | ocn.ne.jp | Open Computer Network 180.54.12.29 | p351029-ipngn200107okayamahigasi.okayama.ocn.ne.jp. |4713 | 180.0.0.0/10 | OCN | JP | ocn.ne.jp | Open Computer Network 180.8.49.252 | 180008049252.bhb.bizhosting.net. |4713 | 180.0.0.0/10 | OCN | JP | ocn.ne.jp | Open Computer Network 180.8.49.253 | 180008049253.bhb.bizhosting.net. |4713 | 180.0.0.0/10 | OCN | JP | ocn.ne.jp | Open Computer Network 183.177.234.135 | 183-177-234-135.tokyo.fdn.vectant.ne.jp. |2519 | 183.177.128.0/17 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions . 183.177.238.18 | momiji.mediaf.jp. |2519 | 183.177.128.0/17 | VECTANT | JP | cocospace.com | 21Company 183.177.238.19 | sia.mediaf.jp. |2519 | 183.177.128.0/17 | VECTANT | JP | cocospace.com | 21Company 183.177.245.114 | 183.177.245.114.ap.gmobb-fix.jp. |2519 | 183.177.128.0/17 | VECTANT | JP | arteria-net.com | Arteria Networks Corporation 183.181.172.60 | v-183-181-172-60.ub-freebit.net. |10013 | 183.181.160.0/20 | FBDC | JP | dti.co.jp | Dream Train Internet 202.150.54.20 | |18126 | 202.150.48.0/21 | CTCX | JP | nagoya-ohara.net | Nagoya Ohara Gakuen Colleges 202.210.149.12 | ns1.mandarake.co.jp. |4686 | 202.210.128.0/18 | BEKKOAME | JP | altech-it.com | Altech IT Inc. 202.210.170.2 | mail.daikokuya78.co.jp. |4686 | 202.210.128.0/18 | BEKKOAME | JP | daikokuya78.co.jp | Daikokuya Co. Ltd. 202.211.3.3 | |2907 | 202.211.0.0/20 | SINET | JP | mishima.ac.jp | Gakko Hojin Mishima Gakuen 202.215.110.150 | |2519 | 202.215.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc. 202.215.146.113 | s113.JgunmaFL1.vectant.ne.jp. |2519 | 202.215.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc. 202.215.160.31 | cocospace.com. |2519 | 202.215.0.0/16 | VECTANT | JP | cocospace.com | 21Company 202.215.160.33 | cocospace.com. |2519 | 202.215.0.0/16 | VECTANT | JP | cocospace.com | 21Company 202.215.203.83 | d83.JkagosimaFL1.vectant.ne.jp. |2519 | 202.215.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc. 202.217.173.52 | FNAfx-09p10-52.ppp11.odn.ad.jp. |4725 | 202.217.128.0/17 | ODN | JP | softbank.jp | SoftBank Mobile Corp. 202.218.35.116 | ns.madori.co.jp. |2554 | 202.218.32.0/22 | IDC2554 | JP | wadax.ne.jp | WADAX Inc. 202.221.27.2 | charm.obayashi.co.jp. |2497 | 202.221.0.0/16 | IIJ | JP | obayashi.co.jp | Obayashi Corporation 202.222.33.62 | dns.icc.co.jp. |18121 | 202.222.32.0/19 | INCL | JP | incl.ne.jp | Ishikawa Computer Center Co. Ltd 202.224.16.70 | ns0.tac-net.ne.jp. |18281 | 202.224.16.0/20 | TAC | JP | tac-net.ne.jp | Tokoname New-TV Corporation 202.224.16.71 | ns1.tac-net.ne.jp. |18281 | 202.224.16.0/20 | TAC | JP | tac-net.ne.jp | Tokoname New-TV Corporation 202.224.46.175 | onidake.hpo.net. |4685 | 202.224.32.0/19 | ASAHI | JP | asaren.jp | MM Japan 202.225.1.145 | |2518 | 202.225.0.0/16 | BIGLOBE | JP | biglobe.co.jp | Biglobe Inc. 202.229.102.130 | |2514 | 202.229.0.0/17 | INFOSPHERE | JP | cp-agf-wordgift.jp | Scepcom Inc. 202.229.120.146 | |2514 | 202.229.0.0/17 | INFOSPHERE | JP | - | Tokyo-Seitoku Gakuen 202.230.19.202 | mms.mcgroup.or.jp. |4725 | 202.230.19.0/24 | ODN | JP | mcgroup.or.jp | Kinoshita Management Co. Ltd. 202.234.148.2 | arsv.tabiworld.co.jp. |4725 | 202.234.148.0/24 | ODN | JP | laterra-net.co.jp | LATERRA INTERNATIONAL Inc. 202.234.165.82 | ns.modulat.jp. |4694 | 202.234.128.0/18 | IDC | JP | housecom.co.jp | Timeline Inc. 202.234.36.22 | |4694 | 202.234.0.0/18 | IDC | JP | noahcloud.jp | IDC Frontier Inc. 202.234.36.47 | |4694 | 202.234.0.0/18 | IDC | JP | noahcloud.jp | IDC Frontier Inc. 202.244.112.1 | jizo.ecip.shikoku-u.ac.jp. |2907 | 202.244.112.0/20 | SINET | JP | shikoku-u.ac.jp | Shikoku University 202.247.80.133 | FL9-202-247-80-133.stm.mesh.ad.jp. |2518 | 202.247.0.0/17 | BIGLOBE | JP | biglobe.co.jp | Biglobe Inc. 202.247.80.134 | FL9-202-247-80-134.stm.mesh.ad.jp. |2518 | 202.247.0.0/17 | BIGLOBE | JP | biglobe.co.jp | Biglobe Inc. 202.247.80.135 | FL9-202-247-80-135.stm.mesh.ad.jp. |2518 | 202.247.0.0/17 | BIGLOBE | JP | biglobe.co.jp | Biglobe Inc. 202.248.29.227 | dns1.clubnet.ne.jp. |2510 | 202.248.0.0/16 | INFOWEB | JP | fujitsu.com | Fujitsu Limited 202.248.38.130 | kntinter.knt.co.jp. |2510 | 202.248.0.0/16 | INFOWEB | JP | kjs.co.jp | Kinki Nippon Tourist Co. Ltd. 202.248.78.170 | ns.tm-s.jp. |2510 | 202.248.0.0/16 | INFOWEB | JP | tm-s.jp | Takahashi Ina Hanbai Co. Ltd. 202.32.199.211 | 211.199.32.202.bf.2iij.net. |2497 | 202.32.0.0/16 | IIJ | JP | 2iij.net | Asai Sangyo Co. Ltd. 202.32.199.212 | 212.199.32.202.bf.2iij.net. |2497 | 202.32.0.0/16 | IIJ | JP | 2iij.net | Asai Sangyo Co. Ltd. 202.56.72.194 | host-194.dhcpn7.icn-tv.ne.jp. |24251 | 202.56.64.0/20 | ICNTV | JP | icn-tv.ne.jp | Waki Town 203.138.161.14 | ns2.reggaerecord.com. |2514 | 203.138.0.0/16 | INFOSPHERE | JP | reggaerecord.com | Dub Store Sound Inc. 203.139.214.138 | vcheck.seki.co.jp. |7522 | 203.139.192.0/19 | STCN | JP | seki.co.jp | Seki.co. Ltd. 203.140.79.98 | mail.xeen.co.jp. |17511 | 203.140.64.0/19 | K | JP | xeen.co.jp | Xeen Inc 203.179.80.146 | |9600 | 203.179.80.0/20 | SONYTELECOM | JP | kobatec.com | Kobatec 203.179.80.35 | 203-179-80-35.cust.bit-drive.ne.jp. |9600 | 203.179.80.0/20 | SONYTELECOM | JP | bit-drive.ne.jp | Media Enterprise Inc. 203.179.82.202 | 203-179-82-202.cust.bit-drive.ne.jp. |9600 | 203.179.80.0/20 | SONYTELECOM | JP | netdreamers.co.jp | Net Dreamers Co. Ltd. 203.183.167.100 | 100.64/26.167.183.203.in-addr.arpa. |4694 | 203.183.0.0/16 | IDC | JP | ujj.co.jp | Userjoy Japan Co. Ltd. 210.129.122.2 | ns01.ecbiz.jp. |4694 | 210.129.0.0/16 | IDC | JP | ecbiz.jp | Skysoft Corp 210.129.222.210 | |4694 | 210.129.0.0/16 | IDC | JP | noahcloud.jp | IDC Frontier Inc. 210.134.0.38 | |2514 | 210.134.0.0/20 | INFOSPHERE | JP | inaker.ad.jp | Inaka Net 210.134.2.130 | |2514 | 210.134.0.0/20 | INFOSPHERE | JP | nic.ad.jp | Japan Network Information Center 210.134.75.131 | 131.128.75.134.210.in-addr.arpa. |4725 | 210.134.64.0/19 | ODN | JP | amn.co.jp | AMN Internet Service 210.142.137.10 | ns1.cosmos.ne.jp. |2497 | 210.142.128.0/20 | IIJ | JP | cosmos.ne.jp | Cosmos Net Communications Co. Ltd. 210.142.245.227 | ns1-is01.tomorrow.ne.jp. |7522 | 210.142.224.0/19 | STCN | JP | tosbac-systems.co.jp | Tosbac Systems Co. Inc 210.144.3.21 | ns01.bizxoffice.com. |4673 | 210.144.0.0/16 | INTERVIA | JP | nttd-i.co.jp | System Platforms Sector MS Development Department 210.145.113.5 | ns.intio.or.jp. |4713 | 210.145.0.0/16 | OCN | JP | intio.or.jp | Intio-Net Service 210.145.146.226 | d01001.nttoryo.co.jp. |4713 | 210.145.0.0/16 | OCN | JP | nttoryo.co.jp | Nihon Tokushu Toryo 210.145.94.34 | 34.32.94.145.210.in-addr.arpa. |4713 | 210.145.0.0/16 | OCN | JP | adms-asia.co.jp | AEGON Direct&Affinity Marketing Services 210.150.187.42 | |2514 | 210.150.0.0/16 | INFOSPHERE | JP | - | Zip Telecom Co. Ltd 210.150.189.57 | |2514 | 210.150.0.0/16 | INFOSPHERE | JP | cyclone-ent.co.jp | Cyclone Entertainment Inc. 210.151.113.81 | s001.osaka-shinai.ac.jp. |2907 | 210.151.64.0/18 | SINET | JP | osaka-shinai.ac.jp | Osaka Shin-ai Jogakuin 210.154.76.2 | byakko.nssoft.co.jp. |4713 | 210.154.0.0/16 | OCN | JP | nssoft.co.jp | NSSOFT 210.160.211.186 | |4713 | 210.160.0.0/16 | OCN | JP | - | Saitama Automobile Manufacturing Co. Ltd. 210.161.20.226 | ns.takaoka.ac.jp. |4713 | 210.161.0.0/16 | OCN | JP | takaoka.ac.jp | Takaoka University of Law 210.161.214.170 | |4713 | 210.161.0.0/16 | OCN | JP | be-tec.co.jp | Be-Tec Corporation 210.162.118.34 | |4713 | 210.162.0.0/16 | OCN | JP | 2iij.net | TDS Co. Ltd. 210.162.161.34 | ns.fujicitio.com. |4713 | 210.162.0.0/16 | OCN | JP | fujicitio.com | Fujicitio Corporation 210.162.194.178 | |4713 | 210.162.0.0/16 | OCN | JP | nd-inc.co.jp | Nihon-Densan Corporation 210.163.105.82 | ns.sanyu-group.co.jp. |4713 | 210.163.0.0/16 | OCN | JP | sanyu-group.co.jp | Sanyu Industries Ltd. 210.164.104.194 | server.shinban.co.jp. |4713 | 210.164.0.0/16 | OCN | JP | shinban.co.jp | Nihon-Shinban Co. Ltd. 210.168.66.32 | |4694 | 210.168.0.0/17 | IDC | JP | noahcloud.jp | IDC Frontier Inc. 210.168.72.13 | |4694 | 210.168.0.0/17 | IDC | JP | noahcloud.jp | IDC Frontier Inc. 210.168.72.19 | |4694 | 210.168.0.0/17 | IDC | JP | noahcloud.jp | IDC Frontier Inc. 210.168.75.139 | |4694 | 210.168.0.0/17 | IDC | JP | noahcloud.jp | IDC Frontier Inc. 210.169.138.250 | red.jawca.net. |4725 | 210.169.128.0/17 | ODN | JP | jawca.net | JapanWebcast Corp. 210.170.68.2 | kpma.kanagawa.med.or.jp. |4713 | 210.170.64.0/18 | OCN | JP | med.or.jp | Kanagawa Prefecture Medical As sociation 210.172.21.242 | notes-sv.daiichijushi.co.jp. |9600 | 210.172.0.0/19 | SONYTELECOM | JP | daiichijushi.co.jp | Daiichijushi Industry Corporation 210.174.207.101 | |4725 | 210.174.128.0/17 | ODN | JP | - | VoDa Media Inc. 210.175.206.14 | dns1.soho-net.ne.jp. |7516 | 210.175.192.0/19 | TOHKNET | JP | soho-net.ne.jp | Soho Japan 210.175.39.2 | ns.naxnet.or.jp. |4725 | 210.175.0.0/17 | ODN | JP | naxnet.or.jp | NAXNET 210.175.39.5 | ns2.naxnet.or.jp. |4725 | 210.175.0.0/17 | ODN | JP | naxnet.or.jp | NAXNET 210.175.79.237 | global.dev.whitecloud.jp. |4725 | 210.175.0.0/17 | ODN | JP | softbank.jp | SoftBank Telecom Corp. 210.189.109.146 | f8m01-0146.din.or.jp. |4723 | 210.189.96.0/19 | DOLPHIN | JP | din.or.jp | Dolphin International Inc. 210.190.106.34 | host.technodome.or.jp., www.technodome.or.jp. |4713 | 210.190.0.0/16 | OCN | JP | technodome.or.jp | Foundation Toyama Center for Industrial Creativity 210.226.138.210 | mw300b.kiyonoya.co.jp. |4713 | 210.226.0.0/15 | OCN | JP | kiyonoya.co.jp | Kiyonoya Corporation 210.226.96.2 | ns.kyosuiren.or.jp. |4713 | 210.226.0.0/15 | OCN | JP | kyosuiren.or.jp | National Mutual Insurance Federation of Fishery Co-Operatives 210.232.183.2 | 2.0.183.232.210.in-addr.arpa. |4713 | 210.232.0.0/16 | OCN | JP | - | AI.System Corporation 210.236.12.116 | ns1.hinase.ne.jp. |7670 | 210.236.0.0/19 | CTNET | JP | hinase.ne.jp | Hinase Cable Television 210.248.41.98 | dns.nidec-shimpo.co.jp. |4713 | 210.248.0.0/16 | OCN | JP | nidec-shimpo.co.jp | NIDEC-SHIMPO Corporation 210.248.73.146 | aquila.urban-group.co.jp. |4713 | 210.248.0.0/16 | OCN | JP | urban-group.co.jp | Urban Development Co. Ltd. 210.251.245.221 | ma2.ibix.co.jp. |9600 | 210.251.240.0/20 | SONYTELECOM | JP | tol.ne.jp | IBIX Corporation 210.253.225.43 | d225043.ppp.asahi-net.or.jp. |4685 | 210.253.224.0/19 | ASAHI | JP | asahi-net.jp | Asahi Net 210.254.28.146 | 210254028146.cidr.odn.ne.jp. |4725 | 210.254.0.0/18 | ODN | JP | odn.ne.jp | Nippon Paper Core Industrial Co. Ltd 211.0.125.50 | ns1.satsuma.co.jp. |4713 | 211.0.0.0/16 | OCN | JP | satsuma.co.jp | Satsuma Shuzo Co. Ltd. 211.0.24.18 | dns.peaceboat.gr.jp. |4713 | 211.0.0.0/16 | OCN | JP | peaceboat.gr.jp | Peace Boat 211.121.135.178 | ns2.fujitaka.com.176.135.121.211.IN-ADDR.ARPA. |4725 | 211.121.0.0/16 | ODN | JP | - | Fujitaka.Co.Ltd. 211.121.168.58 | ns.takeda-ms.jp. |4725 | 211.121.0.0/16 | ODN | JP | takeda-ms.jp | Takeda Printing Co. Ltd. 211.122.123.60 | p37060-ipbffx02marunouchi.tokyo.ocn.ne.jp. |4713 | 211.122.0.0/15 | OCN | JP | ocn.ne.jp | Open Computer Network 211.122.246.154 | p3154-ipbffx02hodogaya.kanagawa.ocn.ne.jp. |4713 | 211.122.0.0/15 | OCN | JP | ocn.ne.jp | Open Computer Network 211.12.232.245 | dns1.takaya.co.jp. |7670 | 211.12.224.0/19 | CTNET | JP | takaya.co.jp | TAKAYA Corporation 211.125.75.87 | w2.mk1.jp. |7506 | 211.125.72.0/21 | INTERQ | JP | gmo.jp | GMO Internet Inc. 211.127.166.242 | 242.240.166.127.211.in-addr.arpa. |4725 | 211.127.0.0/16 | ODN | JP | - | Financial Rating Corporation of Japan 211.127.211.218 | 218.216.211.127.211.in-addr.arpa. ns1.jrl.co.jp. |4725 | 211.127.0.0/16 | ODN | JP | jrl.co.jp | JR Kyushu Financial Management Co. Ltd. 211.129.113.142 | p84142-ipbffx02marunouchi.tokyo.ocn.ne.jp. |4713 | 211.129.0.0/16 | OCN | JP | ocn.ne.jp | Open Computer Network 211.133.201.239 | nz239.net211133201.thn.ne.jp. |10010 | 211.133.192.0/19 | TOKAI | JP | tokai-com.co.jp | Tokai Communications Corporation 211.19.32.120 | dns2.mki-net.co.jp. |17673 | 211.19.32.0/20 | MKINET | JP | mki-net.co.jp | Mitsui Knowledge Industry Co. Ltd. 211.19.32.17 | dns1.mki-net.co.jp., dns.mki-net.co.jp. |17673 | 211.19.32.0/20 | MKINET | JP | mki-net.co.jp | Mitsui Knowledge Industry Co. Ltd. 211.7.238.2 | dns1.tomorrow.ne.jp. |7522 | 211.7.224.0/19 | STCN | JP | tomorrow.ne.jp | Tosbac Systems Co. Inc. 211.8.86.235 | |4725 | 211.8.0.0/16 | ODN | JP | kubota.ne.jp | KUBOTA Systems Inc. 211.9.37.46 | |9600 | 211.9.32.0/19 | SONYTELECOM | JP | hanjin.com | HANJIN SHIPPING Co. LTD. 211.9.46.82 | atic.reform.ne.jp. |9600 | 211.9.32.0/19 | SONYTELECOM | JP | chokuju.net | D Product.net 218.216.74.51 | 51.48.74.216.218.in-addr.arpa. |9600 | 218.216.64.0/20 | SONYTELECOM | JP | - | Net Piloting Inc. 218.224.233.114 | 114.112.233.224.218.in-addr.arpa. |4713 | 218.224.0.0/16 | OCN | JP | - | West Japan Railway Train Union 218.224.244.66 | ns.yg-you-i-net.or.jp. |4713 | 218.224.0.0/16 | OCN | JP | yamaguchikensyakyo.jp | Yamaguchi Prefectural Council Of Social Welfare 218.224.244.68 | ns.yamaguchikensyakyo.jp. |4713 | 218.224.0.0/16 | OCN | JP | yamaguchikensyakyo.jp | Yamaguchi Prefectural Council Of Social Welfare 218.224.248.18 | kdisdns.kdis-inc.co.jp. |4713 | 218.224.0.0/16 | OCN | JP | kdis-inc.co.jp | Kochi Dealing Information Service Inc. 218.224.250.22 | sdns.nagasaki-om.co.jp. |4713 | 218.224.0.0/16 | OCN | JP | denno-bld.com | Office Mation Corporation 218.42.148.195 | |9600 | 218.42.144.0/20 | SONYTELECOM | JP | sjts.co.jp | Japan total system incorporated. 218.42.156.105 | yurin.illumina.co.jp.,lohhdl.illumina.co.jp.,ns.illumina.co.jp.,www.illumina.co.jp.,ecole.illumina.co.jp.,mail.illumina.co.jp.,ns.ecole.jp. |9600 | 218.42.144.0/20 | SONYTELECOM | JP | illuminate.jpn.com | Illuminate Co. 218.42.158.178 | 218-42-158-178.cust.bit-drive.ne.jp. |9600 | 218.42.144.0/20 | SONYTELECOM | JP | bit-drive.ne.jp | Onlymac Net 218.44.160.146 | |4713 | 218.44.0.0/16 | OCN | JP | human-itec.co.jp | Human Interface Technology 218.44.233.114 | ns.acs.co.jp. |4713 | 218.44.0.0/16 | OCN | JP | acs.co.jp | ACS Co. Ltd. 218.44.235.218 | ns.water.saitama.saitama.jp. |4713 | 218.44.0.0/16 | OCN | JP | water.saitama.saitama.jp | Saitama Municipal Waterworks Bureau 219.101.247.4 | ns1.cfweb.co.jp., ns1.cfweb.jp. |17676 | 219.101.128.0/17 | GIGAINFRA | JP | cfweb.co.jp | Cedyna Financial Corporation 219.101.42.91 | adr23.vidro.ne.jp.,gw91.vidro.ne.jp. |9600 | 219.101.32.0/20 | SONYTELECOM | JP | fujioka.co.jp | Fujioka 219.101.83.238 | bus021.magma.me. |18090 | 219.101.80.0/22 | MAGMA | JP | xsp.ne.jp | IMS Corporation 219.105.32.115 | sv01.benefitex.dcn.ne.jp. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation 219.105.32.176 | mail.mailpo.jp. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation 219.105.32.217 | dns.257.jp. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation 219.105.33.21 | sv04.tomigaya.shibuya.tokyo.dcn.ne.jp. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation 219.105.33.28 | secondary.syscore.shibuya.tokyo.dcn.ne.jp. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation 219.105.33.44 | dns1.jascnet.com. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation 219.105.37.213 | ns6.pear.clio.ne.jp. |18097 | 219.105.32.0/20 | DCN | JP | clio.ne.jp | Honda Clio Shinshu Co. Ltd. 219.105.39.1 | pppoe001.39.east.tokyo.dcn.ne.jp. |18097 | 219.105.32.0/20 | DCN | JP | dcn.ne.jp | D.C.N. Corporation 219.106.226.50 | sunday.tokyord.jp. |9600 | 219.106.224.0/19 | SONYTELECOM | JP | tokyord.jp | Bac Tera Systems Co. Ltd. 219.109.236.2 | ns.ishikawa-center.ac.jp. |10013 | 219.109.224.0/20 | FBDC | JP | ishikawa-center.ac.jp | Ishikawa Polytecnic Center 219.114.102.2 | blue.souritsu.co.jp. |4713 | 219.114.0.0/17 | OCN | JP | souritsu.co.jp | Souritsu Electric Corporation 219.118.166.98 | dns1.p-8.co.jp. |9600 | 219.118.160.0/19 | SONYTELECOM | JP | so-net.ne.jp | SO-Net Corporation 219.118.167.67 | |9600 | 219.118.160.0/19 | SONYTELECOM | JP | falco-c.jp | Cosmic Inc. 219.118.168.218 | ns1.pentain.co.jp. |9600 | 219.118.160.0/19 | SONYTELECOM | JP | pentain.co.jp | Pentain Corp Inc. 219.118.168.34 | ns.sunnoah.co.jp. |9600 | 219.118.160.0/19 | SONYTELECOM | JP | sunnoah.co.jp | Sunnoah Co. Ltd. 219.118.175.114 | ns10.scepcom.co.jp. |9600 | 219.118.160.0/19 | SONYTELECOM | JP | namabeer.ne.jp | SCEPCOM Incorporated. 219.118.175.115 | ns11.jpcsr.co.jp. |9600 | 219.118.160.0/19 | SONYTELECOM | JP | namabeer.ne.jp | SCEPCOM Incorporated. 219.122.43.90 | ns.meijo.ed.jp. |17511 | 219.122.32.0/19 | K | JP | meijo.ed.jp | Meijo institute senior high school 219.127.221.92 | 92.64.221.127.219.in-addr.arpa. |17676 | 219.127.128.0/17 | GIGAINFRA | JP | densan-ginza.co.jp | DENSAN Inc. 219.127.229.161 | awerg01.ecole-net.jp. |17676 | 219.127.128.0/17 | GIGAINFRA | JP | ecole-net.jp | Ecole Ryutsu Group Co. Ltd. 219.127.249.195 | ns2.toyo-tv.ne.jp. |17676 | 219.127.128.0/17 | GIGAINFRA | JP | sakamoto-catv.jp | Yatsushiro City 219.163.10.2 | birds.kosmek.co.jp. |4713 | 219.160.0.0/14 | OCN | JP | kosmek.co.jp | Kosmek Ltd. 219.163.104.250 | dns.sogo-co.co.jp. |4713 | 219.160.0.0/14 | OCN | JP | sogo-co.co.jp | SOGO CONSULTANTS Corporation 219.163.104.251 | www.sogo-co.co.jp. |4713 | 219.160.0.0/14 | OCN | JP | sogo-co.co.jp | SOGO CONSULTANTS Corporation 219.163.13.186 | dns1.chunichisogo.co.jp. |4713 | 219.160.0.0/14 | OCN | JP | - | Chunichi Sogo Service 219.163.18.231 | server.senmaike.net. |4713 | 219.160.0.0/14 | OCN | JP | exe.ne.jp | Exe Internet Service 219.163.21.66 | ns.dk2.co.jp. |4713 | 219.160.0.0/14 | OCN | JP | dk2.co.jp | Dainichi Inc. 219.163.63.193 | |4713 | 219.160.0.0/14 | OCN | JP | todashuhan.jp | Computer Move Corporation 219.163.82.170 | ns.shinnichi.co.jp. |4713 | 219.160.0.0/14 | OCN | JP | shinnichi.co.jp | Shinnichi Corporation 219.164.212.33 | |4713 | 219.164.0.0/15 | OCN | JP | - | Medical Corporation Kenkoin 219.165.98.122 | ns.aquanet.ne.jp. |4713 | 219.164.0.0/15 | OCN | JP | kotake.ws | Aquanet 219.166.0.194 | ns.sankyoprocess.co.jp.,mail.sankyoprocess.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | sankyoprocess.co.jp | Sankyo Process 219.166.13.18 | dns.c-max.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | c-max.co.jp | Fuji Seiko Limited 219.166.14.88 | ns0.wpage.jp. |4713 | 219.166.0.0/15 | OCN | JP | wpage.jp | Mediapark 219.166.158.106 | ns.kumamoto.sanyu.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | sanyu.co.jp | Sanyu Switch Co. Ltd. 219.166.160.122 | ns.keisen-se.ac.jp. |4713 | 219.166.0.0/15 | OCN | JP | keisen-se.ac.jp | Keisen School Corporation 219.166.161.226 | ns.etandard.meguro.tokyo.jp. |4713 | 219.166.0.0/15 | OCN | JP | ocn.ne.jp | OCN Provided by NTT-Communications Which is ISP 219.166.19.122 | public.koutsukikaku.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | koutsukikaku.co.jp | Koutsukikaku Corporation 219.166.191.74 | cocoa.medec-ltd.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | medec-ltd.co.jp | Medec Corporation 219.166.19.26 | dns.three-chords.com. |4713 | 219.166.0.0/15 | OCN | JP | three-chords.com | Three-Chords Co. Ltd. 219.166.24.106 | server1.hopenet.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | hopenet.co.jp | Hasegawa Kazunari 219.166.24.108 | server3.hopenet.co.jp. |4713 | 219.166.0.0/15 | OCN | JP | hopenet.co.jp | Hasegawa Kazunari 219.97.239.66 | pdns.camp-a.jp. |2510 | 219.97.0.0/16 | INFOWEB | JP | fujitsu.com | Fujitsu Limited 219.99.166.50 | ns01.futureweb.jp. |23824 | 219.99.160.0/21 | FUTURE | JP | fsi.ne.jp | Future Spirits Co. Ltd. 220.110.111.74 | 74.72.111.110.220.in-addr.arpa. |4713 | 220.110.0.0/16 | OCN | JP | - | Graphic Support Co. Ltd. 220.110.170.218 | |4713 | 220.110.0.0/16 | OCN | JP | - | Taihouseihan Co. Ltd. 220.110.190.226 | 226.224.190.110.220.in-addr.arpa. |4713 | 220.110.0.0/16 | OCN | JP | - | Press Media Corporation 220.110.192.226 | external01.hgu.ac.jp. |4713 | 220.110.0.0/16 | OCN | JP | hgu.ac.jp | Hamamatsu Gakuin University 220.110.198.226 | ns.matuuo.co.jp. |4713 | 220.110.0.0/16 | OCN | JP | it-server.jp | Matsuyama Uoichiba Corporation 220.110.34.42 | ns2.tunagaru.net. |4713 | 220.110.0.0/16 | OCN | JP | tunagaru.net | Isolutions Co. Ltd. 220.110.37.130 | ns.kita-osaka.co.jp. |4713 | 220.110.0.0/16 | OCN | JP | kita-osaka.co.jp | Create Osaka Co. Ltd. 220.110.40.250 | ns.imv.co.jp. |4713 | 220.110.0.0/16 | OCN | JP | imv.co.jp | IMV Corporation 220.111.41.106 | jp2-bs62002.vwh.net. |4713 | 220.111.32.0/20 | OCN | JP | ocn.ne.jp | Open Computer Network 220.209.241.104 | ntfksm059104.fksm.nt.ngn2.ppp.infoweb.ne.jp. |2510 | 220.209.0.0/16 | INFOWEB | JP | infoweb.ne.jp | Infoweb 220.99.109.154 | ns1.city-seika.com. |4713 | 220.99.0.0/17 | OCN | JP | city-seika.com | Tokyo City Seika Co. Ltd. 220.99.113.10 | ns.kroute.co.jp. |4713 | 220.99.0.0/17 | OCN | JP | - | Kroute Corporation 221.186.108.210 | ks99.kan-so.co.jp. |4713 | 221.184.0.0/13 | OCN | JP | kan-so.co.jp | Kan-So Corporation 221.186.109.82 | dns1.jpu.jp.,dns1.jpu.co.jp. |4713 | 221.184.0.0/13 | OCN | JP | bouhanmodel.net | Nippon Pana-Use.co. Ltd. 221.186.127.58 | 58.56.127.186.221.in-addr.arpa. ns.axyz-grp.co.jp. |4713 | 221.184.0.0/13 | OCN | JP | axyz-grp.co.jp | Axyz.ltd 221.186.154.86 | |4713 | 221.184.0.0/13 | OCN | JP | foundationapi.com | Sankyo Frontier 222.146.54.94 | |4713 | 222.144.0.0/13 | OCN | JP | ocn.ne.jp | Open Computer Network 222.151.204.10 | 10.8.204.151.222.in-addr.arpa. ns1.arnest1.co.jp. |4713 | 222.144.0.0/13 | OCN | JP | arnest1.co.jp | Arnest One Corporation 222.151.207.178 | ns.to-on.co.jp. |4713 | 222.144.0.0/13 | OCN | JP | to-on.co.jp | To-On Music Publishing Co. Ltd. 222.151.228.138 | ns.iwafu.jp. |4713 | 222.144.0.0/13 | OCN | JP | iwafu.jp | Iwate Mitsubishi Fuso Car Sales Co. Ltd. 222.151.236.18 | dns.akropolis.ne.jp. |4713 | 222.144.0.0/13 | OCN | JP | akropolis.ne.jp | Akropolis 222.228.220.168 | s168.GosakaFL3.vectant.ne.jp. |2519 | 222.228.0.0/16 | VECTANT | JP | marubeni-access.com | Marubeni Access Solutions Inc. 42.99.131.50 | smtp.marveldigital.com. |10026 | 42.99.128.0/17 | PACNET | HK | pacnet.net | Marvel Digital Limited 42.99.131.52 | mx.marveldigital.com. |10026 | 42.99.128.0/17 | PACNET | HK | pacnet.net | Marvel Digital Limited 58.94.99.216 | i58-94-99-216.s30.a048.ap.plala.or.jp. |4713 | 58.88.0.0/13 | OCN | JP | plala.or.jp | NTT Plala Inc. 60.32.10.106 | ns1.gpcenter.jp. |4713 | 60.32.0.0/12 | OCN | JP | gpcenter.jp | Gpcenter Corporation 60.32.108.218 | |4713 | 60.32.0.0/12 | OCN | JP | - | Pal Net Corporation 60.32.135.2 | ns.active.sc.,www.active.sc.,gw.active.sc.,mx.active.sc.,mx.axis-ing.com.,gw.heyasta.com.0.135.32.60.in-addr.arpa. |4713 | 60.32.0.0/12 | OCN | JP | axis-ing.com | Axis International Corporation 60.32.149.2 | |4713 | 60.32.0.0/12 | OCN | JP | - | Nitto Corporation 60.32.184.66 | ns.mitsuchi.co.jp. |4713 | 60.32.0.0/12 | OCN | JP | mitsuchi.co.jp | Mitsuchi Corporation 60.32.191.76 | mx.ja-saito.or.jp. |4713 | 60.32.0.0/12 | OCN | JP | ja-saito.or.jp | Ja Saito 60.32.209.234 | |4713 | 60.32.0.0/12 | OCN | JP | - | Serie Co. Ltd. 60.32.213.121 | pc1.kurushima-6-unet.ocn.ne.jp. |4713 | 60.32.0.0/12 | OCN | JP | ocn.ne.jp | Kurusima kaikyo Traffic Advisory Service Center 60.32.219.82 | ns.s-iwata.imabari.ehime.jp. |4713 | 60.32.0.0/12 | OCN | JP | s-iwata.imabari.ehime.jp | Iwata Shuji 60.32.80.162 | ns01.tsbrain.net. |4713 | 60.32.0.0/12 | OCN | JP | tsbrain.net | Tsbrain Inc. 60.32.97.114 | ns.sakataminami-h.ed.jp. |4713 | 60.32.0.0/12 | OCN | JP | sakataminami-h.ed.jp | Sakataminami High School 60.43.34.58 | i60-43-34-58.s30.a048.ap.plala.or.jp. |4713 | 60.32.0.0/12 | OCN | JP | plala.or.jp | NTT Plala Inc. 61.113.175.16 | |4713 | 61.113.0.0/16 | OCN | JP | tonotv.com | City of Tono 61.115.12.163 | atcreation.jp. |9595 | 61.115.0.0/17 | XEPHION | JP | xephion.ne.jp | Xephion 61.119.52.34 | |4713 | 61.119.0.0/16 | OCN | JP | nichibanmedical.co.jp | Nichiban Medical Corporation 61.119.52.36 | |4713 | 61.119.0.0/16 | OCN | JP | nichibanmedical.co.jp | Nichiban Medical Corporation 61.121.244.77 | banana.fruitmail.net. |4694 | 61.121.240.0/20 | IDC | JP | fruitmail.net | Ibridge Co. Ltd 61.194.219.146 | st0226.nas811.p-kyoto.nttpc.ne.jp. |2514 | 61.194.128.0/17 | INFOSPHERE | JP | sphere.ad.jp | Infosphere 61.194.41.50 | ns.hwako.co.jp. |2514 | 61.194.0.0/17 | INFOSPHERE | JP | hwako.co.jp | Hokkaido Wako Purechemical Industries Ltd 61.194.53.162 | ns.hs-sec.co.jp. |2514 | 61.194.0.0/17 | INFOSPHERE | JP | hs-sec.co.jp | H.S.Securities Co. Ltd 61.194.81.194 | |2514 | 61.194.0.0/17 | INFOSPHERE | JP | - | TYK Information Service Co. Ltd 61.194.81.196 | |2514 | 61.194.0.0/17 | INFOSPHERE | JP | - | TYK Information Service Co. Ltd 61.194.88.105 | ns1.eco-dream.com. |2514 | 61.194.0.0/17 | INFOSPHERE | JP | eco-dream.com | CURLING CREATIVE CONSULT Incorporated. 61.195.31.190 | express.net.dti.ad.jp. |10013 | 61.195.0.0/19 | FBDC | JP | dream.jp | Dream Train Internet Inc. 61.196.191.91 | ns.shizcon.co.jp. |4725 | 61.196.0.0/16 | ODN | JP | - | ShizuokaSeigyo Corporation 61.196.227.41 | |4725 | 61.196.0.0/16 | ODN | JP | kimden.co.jp | Kimura Electric Co. Ltd. 61.196.230.74 | ns01.nidec-tosok.co.jp. |4725 | 61.196.0.0/16 | ODN | JP | nidec-tosok.co.jp | Nidec tosok Corporation 61.197.170.138 | ns.cinet.co.jp. |2514 | 61.197.128.0/17 | INFOSPHERE | JP | cinet.co.jp | Climb Corporation 61.197.192.55 | speed6.winpal.net. |2514 | 61.197.128.0/17 | INFOSPHERE | JP | winpal.net | Winpal Corp. 61.197.217.34 | dmn-ns1.dominic.ed.jp. |2514 | 61.197.128.0/17 | INFOSPHERE | JP | dominic.ed.jp | St. dominic's Institute 61.197.226.220 | komomo.eof.co.jp. |2514 | 61.197.128.0/17 | INFOSPHERE | JP | eof.co.jp | E.O.F Co. Ltd. 61.199.241.2 | mail.komae-vfc.jp.,ns.komae-vfc.jp.,www.komae-vfc.jp. |4713 | 61.199.0.0/16 | OCN | JP | komae-vfc.jp | Komae City 61.202.247.106 | dns1.kenden.co.jp. |17676 | 61.202.192.0/18 | GIGAINFRA | JP | kenden.co.jp | Kenden.co. Ltd 61.203.130.81 | dc81.runsystem.co.jp. |17676 | 61.203.128.0/20 | GIGAINFRA | JP | runsystem.co.jp | Runsystem Co. Ltd. 61.205.54.25 | 25.54.205.61.west.global.crust-r.net. |10013 | 61.205.32.0/19 | FBDC | JP | freebit.com | Freebit Co. Ltd. 61.206.116.230 | 61.206.116.230.static.zoot.jp. |2514 | 61.206.112.0/20 | INFOSPHERE | JP | interlink-ltd.com | Interlink Co. Ltd 61.206.183.135 | |17676 | 61.206.128.0/18 | GIGAINFRA | JP | - | Clubit Corporation 61.206.7.147 | www.kohboh.co.jp. |7522 | 61.206.0.0/20 | STCN | JP | kohboh.co.jp | Shikoku System Koh-Boh Corporation 61.208.23.226 | ns.jsibaraki.jp. |4713 | 61.208.0.0/16 | OCN | JP | jsibaraki.jp | Ibaraki Council of Institutions for the Elderly 61.208.91.162 | ns.nagahama-hp.jp. |4713 | 61.208.0.0/16 | OCN | JP | nagahama-hp.jp | Nagahama City Hospital 61.211.245.189 | flfk01-189.wind.ne.jp. |10013 | 61.211.240.0/20 | FBDC | JP | freebit.com | Freebit Co. Ltd. 61.213.136.106 | ns5.namabeer.ne.jp. |17524 | 61.213.128.0/20 | DSN | JP | file.ne.jp | Scepcom Inc. 61.215.198.35 | ns22.pa-co-ltd.co.jp. |17676 | 61.215.192.0/20 | GIGAINFRA | JP | pa-co-ltd.co.jp | PA Co. Ltd.
■リファレンス
DNS の再帰的な問合せを使った DDoS 攻撃の対策について(JPRS)
オープンリゾルバ(Open Resolver)に対する注意喚起 (JPNIC)
DNSの再帰的な問い合わせを使ったDDoS攻撃に関する注意喚起 (JPCERT)
@unixfreaxjp/0day.jp Sun Oct 16 18:23:04 JST 2016
調査した結果、日本国内のDNS悪用されているDNSアンプ攻撃事件について
返信削除1. 攻撃の原因はロシアで作られたDNSアンプDDoSボットネットです。
2. マルウェアサンプルはELFとPE、両方種類があります、
ELFサンプル(攻撃マシンから洗い出した):
f4e3d4ee9ac7b0d29642d01333c2e2fb 7348efce3d373ee1a3ac18c6c0796a84
3. ボットネット調査レポート [link]
4. 最新の事件の調査の時にボットネット攻撃C2は下記となります↓
Attack source:
insections.biz A 185.45.193.165
GeoIP during the attack:
"ip": "185.45.193.165",
"hostname": "No Hostname",
"city": "Amsterdam",
"region": "Noord-Holland",
"country": "NL",
"loc": "52.3740,4.8897",
"org": "AS60117 Host Sailor Ltd.",
"postal": "1006"
Registrant Email: zaporozhchenko.andrey@ya.ru
Administrative Contact Email: zaporozhchenko.andrey@ya.ru
Billing Contact Email: zaporozhchenko.andrey@ya.ru
Technical Contact Email: zaporozhchenko.andrey@ya.ru
以上/malwaremustdie.org DE, GE, JP, HU Team.