1. notion.so DNS
| /protocol /techcrunch /レジストラなど |
DNS障害とのことで調べてみたら、clientHoldになっていた。
- その背景を調べる。
1.1. 発端
https://www.datacenterdynamics.com/en/news/phishing-complaints-cause-notion-outage/
- Phishing complaints cause Notion outage
https://news.ycombinator.com/item?id=26113385
https://twitter.com/beyondDNS/status/1360246198171410438?s=20
ドメイン停止措置を受けた。すぐに復活したが、理由の説明がなかった。(2/13)
/悪用 されているらしい。 サービスは cloudflare 経由
レジストリは soNICとのこと。
/レジストラなど name.comの名がでているが、whoisには 1apiの名前が。
https://twitter.com/beyondDNS/status/1361552332496932866?s=20
Notion’s hours-long outage was caused by phishing complaints
2018年の zoho.com を酷似しているとある。(今回はClientHoldでNS変更ではなかったので、 回復に時間を要しなかった。)
https://techcrunch.com/2021/02/12/notion-outage-dns-domain-issues/
https://www.protocol.com/bulletins/notion-domain-dns-problems /protocol
notionが使えないという叫びが目に入ったので、調べてみた。-- ToshinoriMaeno 2021-02-12 15:24:02
Updated Date: 2021-02-12T14:06:47.510Z Domain Status: clientHold https://icann.org/epp#clientHold
@NotionHQ
https://note.com/yriica/n/nc079db469d47
https://twitter.com/logicalicy/status/1360239452547919873?s=20
Mario Hayashi @logicalicy · 2月12日 Notion's down time appears to be a DNS registrar issue. `whois http://notion.so` indicates that its Domain Status is in `clientHold`... I suspect this means there's an admin issue with the domain... 泣き顔
1.2. whois
復活した? ClientHoldではなくなったが、まだNXDOMAINだ。-- ToshinoriMaeno 2021-02-12 15:24:02
DNSは復活したが、コンテンツはおかしいようだ。-- ToshinoriMaeno 2021-02-12 15:47:16
Updated Date: 2021-02-12T15:40:39.103Z Registrar: 1API Registrar Abuse Contact Email: admin-c@1api.net Registrar Abuse Contact Phone: +1.760444867 Renewal Grace Expiry Date: 2021-02-17T14:06:47.556Z Domain Status: ok https://icann.org/epp#ok
Domain Name: notion.so
Registry Domain ID: 31288-sonic
Registry WHOIS Server:: whois.nic.so
Registrar URL:
Updated Date: 2021-02-12T15:11:58.579Z
Creation Date: 2015-03-31T00:00:00.0Z
Registry Expiry Date: 2022-03-31T00:00:00.0Z
Registrar Registration Expiration Date: 2022-03-31T00:00:00.0Z
Registrar: 1API
Registrar Abuse Contact Email: admin-c@1api.net
Registrar Abuse Contact Phone: +1.760444867
Renewal Grace Expiry Date: 2021-02-17T14:06:47.556Z
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: I4TDo-ACBux
Registrant Name: Redacted | EU Registrar
Registrant Organization: Notion
Registrant Street: 925 Guerrero St. #12
Registrant Street: 0
Registrant Street: 0
Registrant City: San Francisco
Registrant State/Province: CA
Registrant Postal Code: 94110
Registrant Country: US
Registrant Phone: Redacted | EU Registrar
Registrant Email: Redacted | EU Registrar
Name Server: woz.ns.cloudflare.com
Name Server: dana.ns.cloudflare.com
DNSSEC: unsigned
>>> Last update of WHOIS database: 2021-02-12T15:14:47.756Z <<<
$ dig notion.so @e.nic.so
; <<>> DiG 9.11.3-1ubuntu1.12-Ubuntu <<>> notion.so @e.nic.so
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11282
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; NSID: 33 2e 6e 72 74 2e 70 63 68 ("3.nrt.pch")
; COOKIE: 27d23f6c2486c54ff6f9a1f960269d986dfdc2951d8bd8c1 (good)
;; QUESTION SECTION:
;notion.so. IN A
;; AUTHORITY SECTION:
so. 1200 IN SOA d.nic.so. hostmaster.nic.so. 2021021215 21600 3600 604800 1200
;; Query time: 16 msec
;; SERVER: 204.61.216.101#53(204.61.216.101)
;; WHEN: Sat Feb 13 00:24:08 JST 2021
;; MSG SIZE rcvd: 134
1.3. ダウン時 Domain Status: clientHold
Domain Name: notion.so Registry Domain ID: 31288-sonic Registry WHOIS Server:: whois.nic.so Registrar URL: Creation Date: 2015-03-31T00:00:00.0Z Registry Expiry Date: 2022-03-31T00:00:00.0Z Registrar Registration Expiration Date: 2022-03-31T00:00:00.0Z Registrar: 1API Registrar Abuse Contact Email: admin-c@1api.net Registrar Abuse Contact Phone: +1.760444867 Renewal Grace Expiry Date: 2021-02-17T14:06:47.556Z Domain Status: clientHold https://icann.org/epp#clientHold Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Registry Registrant ID: wnkMa-bYdjn Registrant Name: Redacted | EU Registrar Registrant Organization: Notion Registrant Street: 925 Guerrero St. #12 Registrant Street: 0 Registrant Street: 0 Registrant City: San Francisco Registrant State/Province: CA Registrant Postal Code: 94110 Registrant Country: US Registrant Phone: Redacted | EU Registrar Registrant Email: Redacted | EU Registrar Name Server: woz.ns.cloudflare.com Name Server: dana.ns.cloudflare.com DNSSEC: unsigned >>> Last update of WHOIS database: 2021-02-12T14:34:15.136Z <<< notion.so. 300 IN A 104.18.22.110 notion.so. 300 IN A 104.18.23.110