## page was renamed from watchA/notion.so ## page was copied from DnsTemplate ##master-page:HelpTemplate = notion.so DNS = <> <> DNS障害とのことで調べてみたら、clientHoldになっていた。 その背景を調べる。 == 発端 == https://www.datacenterdynamics.com/en/news/phishing-complaints-cause-notion-outage/ Phishing complaints cause Notion outage https://news.ycombinator.com/item?id=26113385 https://twitter.com/beyondDNS/status/1360246198171410438?s=20 ドメイン停止措置を受けた。すぐに復活したが、理由の説明がなかった。(2/13) https://twitter.com/iwaokimura/status/1360224767731671044?s=20 https://twitter.com/hikarine3/status/1360229447408865284?s=20 https://www.notion.so/ [[/悪用]] されているらしい。 サービスは cloudflare 経由 レジストリは soNICとのこと。 [[/レジストラなど]] name.comの名がでているが、whoisには 1apiの名前が。 https://twitter.com/beyondDNS/status/1361552332496932866?s=20 https://techcrunch.com/2021/02/15/notions-hours-long-outage-was-caused-by-phishing-complaints/ Notion’s hours-long outage was caused by phishing complaints 2018年の zoho.com を酷似しているとある。(今回はClientHoldでNS変更ではなかったので、 回復に時間を要しなかった。) https://techcrunch.com/2021/02/12/notion-outage-dns-domain-issues/ [[/techcrunch]] https://www.protocol.com/bulletins/notion-domain-dns-problems [[/protocol]] notionが使えないという叫びが目に入ったので、調べてみた。-- ToshinoriMaeno <> https://twitter.com/NotionStatus/status/1360220589743480838?s=20 https://www.notion.so/?utm_source=google&utm_campaign=2075789713&utm_medium=93936778294&utm_content=418914026062&utm_term=notion%20so&targetid=kwd-654800325249&gclid=EAIaIQobChMImPH7sMvk7gIV0Z7CCh29xwUJEAAYASAAEgJuU_D_BwE {{{ Updated Date: 2021-02-12T14:06:47.510Z Domain Status: clientHold https://icann.org/epp#clientHold }}} @NotionHQ https://note.com/yriica/n/nc079db469d47 https://twitter.com/logicalicy/status/1360239452547919873?s=20 {{{ Mario Hayashi @logicalicy · 2月12日 Notion's down time appears to be a DNS registrar issue. `whois http://notion.so` indicates that its Domain Status is in `clientHold`... I suspect this means there's an admin issue with the domain... 泣き顔 }}} == whois == 復活した? ClientHoldではなくなったが、まだNXDOMAINだ。-- ToshinoriMaeno <> DNSは復活したが、コンテンツはおかしいようだ。-- ToshinoriMaeno <> {{{ Updated Date: 2021-02-12T15:40:39.103Z Registrar: 1API Registrar Abuse Contact Email: admin-c@1api.net Registrar Abuse Contact Phone: +1.760444867 Renewal Grace Expiry Date: 2021-02-17T14:06:47.556Z Domain Status: ok https://icann.org/epp#ok }}} {{{ Domain Name: notion.so Registry Domain ID: 31288-sonic Registry WHOIS Server:: whois.nic.so Registrar URL: Updated Date: 2021-02-12T15:11:58.579Z Creation Date: 2015-03-31T00:00:00.0Z Registry Expiry Date: 2022-03-31T00:00:00.0Z Registrar Registration Expiration Date: 2022-03-31T00:00:00.0Z Registrar: 1API Registrar Abuse Contact Email: admin-c@1api.net Registrar Abuse Contact Phone: +1.760444867 Renewal Grace Expiry Date: 2021-02-17T14:06:47.556Z Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Registry Registrant ID: I4TDo-ACBux Registrant Name: Redacted | EU Registrar Registrant Organization: Notion Registrant Street: 925 Guerrero St. #12 Registrant Street: 0 Registrant Street: 0 Registrant City: San Francisco Registrant State/Province: CA Registrant Postal Code: 94110 Registrant Country: US Registrant Phone: Redacted | EU Registrar Registrant Email: Redacted | EU Registrar Name Server: woz.ns.cloudflare.com Name Server: dana.ns.cloudflare.com DNSSEC: unsigned >>> Last update of WHOIS database: 2021-02-12T15:14:47.756Z <<< $ dig notion.so @e.nic.so ; <<>> DiG 9.11.3-1ubuntu1.12-Ubuntu <<>> notion.so @e.nic.so ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11282 ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; NSID: 33 2e 6e 72 74 2e 70 63 68 ("3.nrt.pch") ; COOKIE: 27d23f6c2486c54ff6f9a1f960269d986dfdc2951d8bd8c1 (good) ;; QUESTION SECTION: ;notion.so. IN A ;; AUTHORITY SECTION: so. 1200 IN SOA d.nic.so. hostmaster.nic.so. 2021021215 21600 3600 604800 1200 ;; Query time: 16 msec ;; SERVER: 204.61.216.101#53(204.61.216.101) ;; WHEN: Sat Feb 13 00:24:08 JST 2021 ;; MSG SIZE rcvd: 134 }}} == ダウン時 Domain Status: clientHold == {{{ Domain Name: notion.so Registry Domain ID: 31288-sonic Registry WHOIS Server:: whois.nic.so Registrar URL: Creation Date: 2015-03-31T00:00:00.0Z Registry Expiry Date: 2022-03-31T00:00:00.0Z Registrar Registration Expiration Date: 2022-03-31T00:00:00.0Z Registrar: 1API Registrar Abuse Contact Email: admin-c@1api.net Registrar Abuse Contact Phone: +1.760444867 Renewal Grace Expiry Date: 2021-02-17T14:06:47.556Z Domain Status: clientHold https://icann.org/epp#clientHold Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Registry Registrant ID: wnkMa-bYdjn Registrant Name: Redacted | EU Registrar Registrant Organization: Notion Registrant Street: 925 Guerrero St. #12 Registrant Street: 0 Registrant Street: 0 Registrant City: San Francisco Registrant State/Province: CA Registrant Postal Code: 94110 Registrant Country: US Registrant Phone: Redacted | EU Registrar Registrant Email: Redacted | EU Registrar Name Server: woz.ns.cloudflare.com Name Server: dana.ns.cloudflare.com DNSSEC: unsigned >>> Last update of WHOIS database: 2021-02-12T14:34:15.136Z <<< notion.so. 300 IN A 104.18.22.110 notion.so. 300 IN A 104.18.23.110 }}} == history == {{{ }}} ---- CategoryDns CategoryWatch CategoryTemplate