DNSアンプ攻撃観測 (1x1.cz ANY)
DNSSEC関係で凄いことになっている．チェコの会社っぽい．
$ dig @::1 1x1.cz any ;; Truncated, retrying in TCP mode. ; <<>> DiG 9.7.6-P1 <<>> @::1 1x1.cz any ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33384 ;; flags: qr rd ra; QUERY: 1, ANSWER: 26, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;1x1.cz. IN ANY ;; ANSWER SECTION: 1x1.cz. 1800 IN SOA ns.gransy.com. root.gransy.com. 2013092009 86400 900 1209600 1800 1x1.cz. 1800 IN RRSIG SOA 7 2 1800 20140920002332 20130920002332 56890 1x1.cz. VoueicIrPDYlgmp+Ty+/5A6OjqI6Nen7GV1L2Cac5W7MeIeARaiCZL1N ggBPAwgfh1Q543kj8uJcnjtbYmgd6Px08sFW4wb3oSz1gu3M2b4Iq7AZ xERqzAXrRMQI1IZ8zkXaLHCGllmDfn67GuEKNeD6Ggir8Mdx8H5QaMme /R/M7PAxJVjEr1wyrLQm9HwbPQwya5+b9XfLO85+Q9KwzgIbQVbWc3aN PA5aitnKP+E45dnUVL1EGL5+zF+5oW1DBYp1bSanCbueXxDmrCl5A8lq LFQC657TbtN7t7AHnbFEzVsad0oH28dP16nHWNOsL+XZm5aJbupZs4om uoygcb/hkXfShAlErWE9ubnQIa3d0FtoiCNjyW93HIxvhIEeUR/6+a07 Ye4ob2ifsnLSECLoGm3vtv8tc19RQyAg/pvCsNHaCUfKd9H1vF7pjRtU 2Q2k5EoOyIkrw6aRoEn79GoLhyjUtDc4eegcx8KEkfkydITr5iOa7xJi Z4xRQUzGVzARHCtvc2Njj5gWw/p8XkX1roD4dHyMZRc5jIWH890UcN+k z5VwL4h8X0wAgbnyVninqYHSWVB6RSFJofmvpPQBHs7NkSiy4o88VWM0 mGj2FUj8+QznVsMV789z6hr6iaelAxDhmQ2I6RV47dEma1E+wydfCViM Z6+OuVtb/bQ= 1x1.cz. 1800 IN DNSKEY 256 3 7 BQEAAAAB9QdSKCeptWzBV1tlAFU+AaiSGgU7XaUY6YHgtUQ1ggPvJApl v3N9Xt8vB+z7/FThK4gxzQ3xZ+Y0xZ0sEnQVdl05XTfrrOGjwr6x3Pwx wepWONVZ6FXDb+LhEFx95kYOIjhLnyr5UvOHu9vFOEu1mMENo9gdg00D MBX+tXNBxiHIXzsFUE90QmXBro2GH4EHqTX+4ZVuNCOFhzAnp3h+O7SQ TR8npmdRrmWJvC42uT6ODGEFOnstZ+vJDQnc3ZLvzJvuaXK9pUGJmIQ7 5MEs9xcngf7JXRmW/FqsTph0ZcAXUoad8+Tu43Z0+V1Znf7WtCfODqqj KsKklt7CdY7R6NzEV9b5F//rvG88wZeg+PKXNVbQFFSzyguEsFrvjrTT hdKjyDPfbMRl/vMeoB/dfnB1VP5Ds1zMpqqYqiPPVLBmCjuRC2EalK3t Ph3y9U2xE+A2vytXETew+T+nX9ZG62rS7YnKwsMYrSzUPDTXYgCVwsDM /2Ecl5XEpemOnTvMmQGh7LUuYs/kK2hImPew5ntAQC6jnGr37xC3xtBf kFQN4sV5iSOvZWs5mjP2iEhGEFl5fRqU0Zvck0vOCHBBU0oRj8k4VUpU KSFe2W4iKolj2VS9Jr7S5WIFGFMHUfhyC1j5FVAqSyLBnEKOWper3O+d MQrtWTRl5L1H7v96O/E= 1x1.cz. 1800 IN DNSKEY 257 3 7 BQEAAAABw0H2Xb7JjIuMMVRD3oqWpoXsriUK4sCT2B0TAc9b6v7K+gEI fhtrQ+LImQ/yY4VLZ1z88RDe48LvV2kA3fjB+4tFJTsgmgxCAg29skRN orVLnb6ztSqZO3FuTYgH3yywEw3W4rTkPfthNhiaMEVXVrFDDU4dGhiJ mvIa9mkaPOkIKeRV4gJqs2YSEIhCKeMxkNNGLn1CIXAiFjVbVDcYFv0n 1bBY2iDUllDIRZapMfoSwJMnHI6VXz3CGjxIfcFcr+BUfVFhobqyV848 n4HJcHKMgErtC8xFmRD++Pq/isLbNs48zDSZQY5jJvD30anwzZnzhWJJ 2ZlirUm6pIazB3a6A7V3c381TsRAyY8suy5pkEriSVs4wSfHkiiwd3Z1 sHCTHgefwyRrArFycXR4bvz9sSFOCjbZfJ4S2RFchQa2D+IJsea+kXa+ LGOi2enMd6Jaq5+WB6dUkgWz+9a0/xqCC2ShywyWeazuoLaaejL8NUDf sGj4TEHfkXX+/BodFl6SicWsQEZuNU44/+pyyFqgDKsHu9t8mDtz/IGR Z/Duj9GKTQ4j953Czkic0thvFwqqd6Xm+C48K1qIB1vWqV4AinXDVf/q jbkPxGP01P+riUs5E0zTEoJOtyTtm/xoV5lTwe2PvhysrtGmcTdyqZXD Z6DQnUgkO7BUjlprbnk= 1x1.cz. 1800 IN RRSIG DNSKEY 7 2 1800 20140920002332 20130920002332 52247 1x1.cz. I0sVnwyHKBl5dVGYkpgxcWCVT1uEn6Rzp2rREqwLMQnyIvdGIgWzckRa 8x75SdLW1Giszb1jQyfGRhq0MdVN6Q6YnJfOHTyOaD+H40EDH1rHni8K JqZlg+pgkJdqbMD+Updl6AIfuuhurVTi4o+VWGLr49M6avqtRw1xpxGn zY2xw9r+6UqECGGKNbEOOj5jMv/tSJ3iXKyDqMR9yyE4BlbvcurVe5zH pgZf2wuxakdmOaOrXhxszVQlsnuBdr83ZijMw6uYIt/y3eByT5q7Lkmv fenfRnif5rNXlksP+UE0WAN0CCJ7+OfM3TzS7NF/7sFyWqgWQKRsTcZO l7c7nInWR/W4k7go8J6RFR3sCUPL4p4045TFzpi72EHe/sE8qtI5zHpf FNyu5HOCLMIPTWaPbxSMivdWh1x78wELyEbG7aplFW8/iwdXV5bWpGFP tTBg16u6kIbXiCMQYXYJpDtvaT3qlqDwD25NNSXp9Sgf7jx8ZXY1k3yu zw0XU+5Gxnl4UxDS/z8dicrrBuuWpBCw5hsaueFmkMNIHZ8R6/32sJ4I 1q/DEv8c0lli/y8S3pAQF9pFdtBH1145R8oERxqxr1dsOhSCJPrGoFVT MyhMG2481Osx5CgyjA2wQyW6Y3NNoM1i4MAjT1WMwgxxbhrM+CAQZpx6 P09zD5W83e0= 1x1.cz. 1800 IN RRSIG DNSKEY 7 2 1800 20140920002332 20130920002332 56890 1x1.cz. P2OcDuLKhOuhkYHp9cCqmHKtJKWXu4OY7CapquNk7SFIraEITJWuqgmU d4rtnsEkwbxx6VxhveWBVWpa4YXHS7afoTW64UgBw0YRyb0hiYSLeBYv AYfp0oG0L0pK9W93QiVoPGAVwgqJ8zD4UnCYaHtVeyeE522hB0H9o3Lk pB2U4xp9H/Gt7n5MVHDqk100wPVwiq7kkIeFkXfEWQpLff+R94ZJHpfr GrFdQy2LDHlzAszzJVsDgfQBMvFTWuy2zBVENLbn03Z57XXdbWjRRjso VWJwjyqZ9tfqg0D/52uAmrSVgU9/6ZhOOdSP6A1ziOJyVpxyGxPYH3SN rX1vbcbuXuNy6SCtnrsQh9KTIfEuEswRnOntdi7ApuF2oSOJXtsDAmYl KuLIwDEQvFrgAhO8ahTFBkU5m3jW5+t3C7pPr0m35gLCSHrkxDRz7BkL r6ILDE2OpJbFbN84imHrP6upCGBUyaCzUHUoUTHLD+TYYk86fiTgVSqt h/13+Zw/dAmmsyMIsPsKo7+KP40p9K0sP9ddJKeZU0v9InS3wCgnRcQt 5ZsNCW3x+yOJFPgSqbSxkiBwBFdnnUWq1EZNAAhFYPPLiLN2YX1eiAEA Zea/xJHJ9j0DIfa7vj+ZVb/XW24VrWjrREq2PQ2OjQuiSQxiJbd0c9tj L9fuopW1oeE= 1x1.cz. 1800 IN NSEC *.1x1.cz. A NS SOA MX TXT RRSIG NSEC DNSKEY 1x1.cz. 1800 IN RRSIG NSEC 7 2 1800 20140920002332 20130920002332 56890 1x1.cz. VQJz2B5G/2AlH8X4k4dwI4j1zMaherEmcBemAgOO7UNDzLyRhonN1Vxc bX9BfQXs8/pA8TQtrf02E3J9z/xk1EzAK+4bc2m4q2Y51cxXO9T7nmSz lFsK0p+mNb3eyPvZgN7jtW/AG8NSBxE7RnxiOinhyfci8KhiFOXNqigJ 3/7LAFy3PpO7/sOQr1SZ676XOD5y420AsBge6oMCGJnDqTm8W3QTcqaK LYJaPiw+NVE7sfNuFmFSG+RzjZQagSTF40CVGMevzgMPH1lYI2/pFyXP S4dxurrmNMgQT/2ck4JLymzhDUpckmVsn9wv8lBkpT18SUpv7UGj5b6n VMQPJZPcnIBjjBXfOgv90zLTRXKmKbdn4jNJRKTIuq9ZFFgVtOcG5D3O XPCrMwiCQOwGO0jYWAYmvt/QoviyCmATgd3frnCE77yW8g4T03c7C29N e2GW7z+ZxcQKNW2xWe16c/JNJh2syqFBeMUCkRWBW+/tsFRk4mJ0j3OU 44U2QNbTqqUs+VLA0VQ7KqCAKGdmtASCNqvd6nnWbmzmrIUYut2YkKGO x5WYTjdngWUXzSflbrg4R01fbgwiA4pz8uAs7gh3WcE5BiV9rO4t/Drr CIB6vVBDTJwuu2PYU25CCMW47MZqm/twRsF/zbuc/16X/FTtbn0S8B87 Kex9kLo/8Is= 1x1.cz. 1800 IN TXT "v=spf1 include:_spf.google.com ~all" 1x1.cz. 1800 IN RRSIG TXT 7 2 1800 20140920002332 20130920002332 56890 1x1.cz. mhd4YNHg1Me/Ay40kuElKBjfq1rxg51lPpQJyv5vISZi9ICKC13WfSjv 6CCOnoxPNjqEHxv/+xALlhzmiXnv6JjI4k4BEVMdLApL3w+ZjMXLEqyv D5+Yi4o5OKgdpGlTcrNE983P0/ibgEu+CewsN6YN2/ha014XBtKJrhoF 7t+yRa+KXXX9xIjDPAXjRjL+GkkAL2J2Gt76fs2mzZyJCEG+JLYi/mW9 8dR2wOn/1GsSUgP+j0DGfPoq+MhXAbUGPltyYRpYaliPj0np8FDFBe2+ wTovhpENYayin6R5TyuRE2QvNx2DV3tiUJRiTTcgML9dZJ0sdzLmwwc1 1dBPt0FYvSQ7hLaXtrNwG6HZhbOPHZlz8Cd1phCjOdkya1zhqslMboeJ mjw7YhnbDXkjZf4mw/8km2TWuXUYv5Ujern261JBdbeiI7ce4iumb8Ra jE8jsHWsKnEVlovwI2tPvo82/AGFZFBxagz0ayPL4TQQbHm7vbR9Kv5c h9XX3f0mKP5Jr25Az8OdW1zC9ss2PHQYTinbcYjFZyvPQGRFUo5EhfbB fpolBalqTYrmVOsvrJ5nlTTSUAJYukVkRIU/W8hEhSyAQX2zY7U4kf/f o3skWAfJnN5m13GCOu6uoyJ4JNicR3+NdP2aAW1cujuSu9Wxgc2bxjSG MAFabIX/s54= 1x1.cz. 1800 IN MX 30 ASPMX2.GOOGLEMAIL.com. 1x1.cz. 1800 IN MX 30 ASPMX3.GOOGLEMAIL.com. 1x1.cz. 1800 IN MX 30 ASPMX4.GOOGLEMAIL.com. 1x1.cz. 1800 IN MX 30 ASPMX5.GOOGLEMAIL.com. 1x1.cz. 1800 IN MX 10 ASPMX.L.GOOGLE.com. 1x1.cz. 1800 IN MX 20 ALT1.ASPMX.L.GOOGLE.com. 1x1.cz. 1800 IN MX 20 ALT2.ASPMX.L.GOOGLE.com. 1x1.cz. 1800 IN RRSIG MX 7 2 1800 20140920002332 20130920002332 56890 1x1.cz. VaMmj4xK5S6/DgFxRM8gvbFkgB38mwkhhC4o4RCzZPjELBq5m2mFypUj yynXsFb+OBTaDz3oOaedTN59pMg9da7SwlrOxEsIPfqq9I1jzlMwDMKx /LxUqbyCI10tKFFZM4Euq5R//qXLRfNE/fNHuQzqKVLU+/LUC3cEzF9R RaGGJFf688nRtuUXF6v2vNtGPWt2K9ucC+lk+Wi27gI7zOrnZJ9N8LBe Md4ghd3ayY+MK4HgdH1pqtoe1kzpahnUvQVlLv7EHlNSpNMgqdpyBS/F j+icO22XfjSAjw8rx/RpfcOW1x6YUolXLWQAo4IWsvq9V5Ggj/YD18W1 crf3nlAuYmx3sAmBvAa+Ov58JT8Wxo0AevaQYoMlxthMccKSSFHpJJE2 yuFuFuU2I4IzmmVppXxDd4M/Y44L67eq1ACvU7NUgcx85TpEabWNneBN 59AgD9f8j+hQtxkilpDrqJbVMjS2nVPnBrtMtzJNzFPfGu0Bj8j5TVFN Wz90hcS2m7ngnvMPL1cwqIn9scynpzmdnZEbCVPhW7rMGrGz1UmiDEyv /P3e/T1mHgv4gSmLKINLD1sA+PbjtrOA8xdzMRG4yVuzX/vTTeQh98re Ng3+8jK/nn9t/0o+nIAAOdssGIdPLW1HXBGuPnfpdIhl//6KV1vQU5JR 8ZoYHkyJld8= 1x1.cz. 1800 IN A 46.234.99.18 1x1.cz. 1800 IN RRSIG A 7 2 1800 20140920002332 20130920002332 56890 1x1.cz. KH6DnSGdTX+dUCf6hLrha6KmvSTVVf5gkVhp9a7xd0gdyBgTFoRRKWQt 6wEXtDoEAmeDnkZo7GPuvQO9jzYGmqZLZNvsYHhVs15d7fhYjFaOZTjZ exn7LwxC7zAALrmp95u5OLzs8qHbz6idOzU+v7UXeZG77YDYpyip0moz q0ZM65WK5pOhQPm10wTfaCcUNrObh97urYQnA8vQyg4kohKg0FqlXXKG bM8NR2aDUMKasPrs2TGWustbkjg+JqLsB+gam1RoDxiI4bw+QaQFgdwC fbKholt/aFUHeaHgtYI6GSbTNeKeXCa3Tw/XRWF17PQ+xekBbDAyGqJs rmnpk6avXS1PpCPPoXOV+Gd9TObwkDvUY+f8IrOrbS3uNxmyNWcZkjDi 3CLICTgVIARyH3bzCZLERPUUxtBZstU90oQ+VsxwCX/fQReCKahaxFz/ ljvtP7tRiro1rma0d/DcJ9yWsVv/Js98n2QcIqGDoGPMBr18eqhW0sON 3IodJ4LphH0ADMgHtpVokE03gWAM6T7oZd31YrmhjkSGlxnKjDsJ6u2Z 6FEnJBD4qXK208RQVQx9w8MwcSLKVxYmDxIVf5XinYQ6oK5B7N6V1Fs6 0DoIoz4zMBt9s2iprQUoLCGaDbBLMg8KM+5s6Gc0oi/GxxMO87POKUjJ 16pYbx9PNVo= 1x1.cz. 1800 IN NS ns3.gransy.com. 1x1.cz. 1800 IN NS ns5.gransy.com. 1x1.cz. 1800 IN NS ns4.gransy.com. 1x1.cz. 1800 IN NS ns2.gransy.com. 1x1.cz. 1800 IN NS ns.gransy.com. 1x1.cz. 1800 IN RRSIG NS 7 2 1800 20140920002332 20130920002332 56890 1x1.cz. 459V0KYCr/59wvjKJivwX2gBxlkSuLJNas8V1CL0cxeVlayOlSLDruJ7 UTaIrHDl8XZzixBsyqYrgMt+x72WKCyvrFUebSYF0bH0liBpmgRZfuDB 6EbCN4/qntTVqydKarxBBNvPWrGvpNcqUejgKBzl8LaH0Zvo64jBmrsL gp8vjP9hW0n0zGUtjdrumOroEzqvGL4JtJhBDqhv1on51szR7bF2QZhC 301eDrG66aH7b9TN5vrN5rODh+jsJ0hbMu1L9yC+TUmBr3ffFyME6zvE VtbBgoEJQakOoT7TNmU8zA1eDOVFJce5ul/mRhf1jPshYhYAQPQ0e6rG Xbg/IIdJO7AhxtiKLS9H2NrJ+CKlOev5Rhub2LWyLgUJmPErzYgU7CQq INMPhnVbQ0SSHypkQbnJmpLZ8kkgh0UFAdzVAfSqOnmfX4lkH5czOUYB ag6j9cPSU9VdOvTNV3I3U10LmbpTAVljy4vMBVfshb1ALCzOFPbOPrYx Quv//MbMvGmQZZElVBM+pAczWDjmOsW80kedIo1nkKidUbR/ZdT8eB70 s7lPPyHRqJ8O+hQNSvwjILiO/nuoz8GOFafgLFPWNnqvXmDT6EuC6gRK f2llLfngCorQpf8u5xTHT9bg35xmuBUntZovzYQC3IzW3BM5BcVWfPeV gkfUasjsbto= ;; Query time: 4 msec ;; SERVER: ::1#53(::1) ;; WHEN: Mon Oct 7 13:13:29 2013 ;; MSG SIZE rcvd: 5903
$ whois 46.234.99.18 # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html # # # Query terms are ambiguous. The query is assumed to be: # "n 46.234.99.18" # # Use "?" to get help. # # # The following results may also be obtained via: # http://whois.arin.net/rest/nets;q=46.234.99.18?showDetails=true&showARIN=false&ext=netref2 # NetRange: 46.0.0.0 - 46.255.255.255 CIDR: 46.0.0.0/8 OriginAS: NetName: 46-RIPE NetHandle: NET-46-0-0-0-0 Parent: NetType: Allocated to RIPE NCC Comment: These addresses have been further assigned to users in Comment: the RIPE NCC region. Contact information can be found in Comment: the RIPE database at http://www.ripe.net/whois RegDate: 2009-09-29 Updated: 2009-09-30 Ref: http://whois.arin.net/rest/net/NET-46-0-0-0-0 OrgName: RIPE Network Coordination Centre OrgId: RIPE Address: P.O. Box 10096 City: Amsterdam StateProv: PostalCode: 1001EB Country: NL RegDate: Updated: 2013-07-29 Ref: http://whois.arin.net/rest/org/RIPE ReferralServer: whois://whois.ripe.net:43 OrgTechHandle: RNO29-ARIN OrgTechName: RIPE NCC Operations OrgTechPhone: +31 20 535 4444 OrgTechEmail: hostmaster@ripe.net OrgTechRef: http://whois.arin.net/rest/poc/RNO29-ARIN OrgAbuseHandle: ABUSE3850-ARIN OrgAbuseName: Abuse Contact OrgAbusePhone: +31205354444 OrgAbuseEmail: abuse@ripe.net OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3850-ARIN # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html # % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See http://www.ripe.net/db/support/db-terms-conditions.pdf % Note: this output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '46.234.96.0 - 46.234.127.255' inetnum: 46.234.96.0 - 46.234.127.255 netname: CZ-SUPERNETWORK-20110210 descr: SuperNetwork s.r.o. country: CZ org: ORG-SS59-RIPE admin-c: ZC10-RIPE tech-c: ZC10-RIPE tech-c: DC1000-RIPE tech-c: JP4750-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-lower: SUPERNETWORK-MNT mnt-routes: SUPERNETWORK-MNT mnt-domains: SUPERNETWORK-MNT source: RIPE # Filtered organisation: ORG-Ss59-RIPE org-name: SuperNetwork s.r.o. org-type: LIR address: SuperNetwork s.r.o. Zdenek Cendra Bilejova 407 46303 Liberec CZECH REPUBLIC phone: +420296826296 fax-no: +420482731466 admin-c: DC1000-RIPE admin-c: ZC10-RIPE admin-c: JP4750-RIPE mnt-ref: SUPERNETWORK-MNT mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT source: RIPE # Filtered person: David Cermak address: PRO-ZETA a.s. address: Tiskarska 10/257 address: 108 00 Praha 10 address: Czech Republic phone: +420222742702 nic-hdl: DC1000-RIPE mnt-by: SUPERNETWORK-MNT source: RIPE # Filtered person: Jiri Prochazka address: SuperNetwork s.r.o. address: Na Safrance 33 address: Prague 10 address: 101 00 address: Czech Republic phone: +420296826296 nic-hdl: JP4750-RIPE mnt-by: supernetwork-mnt source: RIPE # Filtered person: Zdenek Cendra address: Na Safrance 33 address: Praha 10 address: 101 00 address: Czech Republic phone: +420296826296 nic-hdl: ZC10-RIPE mnt-by: SUPERNETWORK-MNT source: RIPE # Filtered % Information related to '46.234.96.0/20AS39392' route: 46.234.96.0/20 descr: SuperNetwork s.r.o. origin: AS39392 mnt-by: SUPERNETWORK-MNT source: RIPE # Filtered % This query was served by the RIPE Database Query Service version 1.69 (WHOIS1)
