DocoDoco

日本語

Detection of Unauthorized Access and Illegitimate Activity

Our firm determines geographic location by analyzing reverse IP lookup results and connections between network users. Building and searching the geolocation database includes visual inspection by full time analysts in addition to automatic processing by dedicated systems.
We have also incorporated a huge volume of feedback from our existing customers into our investigation system, known as DFLS, through which we update our data to offer you only the very best.

Available Data
Country Data
In addition to ISO 3166-1 compliant country codes, country names in English and Japanese will be returned.
Prefecture Data
In addition to prefecture codes(JIS X 0401)based on local government codes designated by Ministry of Internal Affairs and Communications, prefecture names in English and Japanese will be returned.
Municipality Data
In addition to municipality codes(JIS X 0402)based on local government codes designated by Ministry of Internal Affairs and Communications, municipality names in English and Japanese will be returned.
Organization Data
In addition to Japan Standard Industry Classification compliant industry codes (large classification,middle classification,small classification,fine classification
And such values as company flag,main/branch office flag,self-employed business flag,listing classification flag,capital code,payroll number code,andsales amount codewill be returned.
Environment Data
Mainly circuit class(FTTH,ADSL,ISDN,Dial-up)value will be returned.
CF
It is an index to judge "the accuracy" of data from abbreviation of Confidence Factor.
Services to Detect Illegitimate Activity in the Access Log

Whether or not access is legitimate, when users access a web server, they leave behind their IP address. Our staff will conduct an analysis with exclusive analysis tools and SURFPOINT™ data from the location specified by your company. Because all the data stays in your location, this type of analysis is suitable even when sensitive information is involved. We ask that you prepare a Windows computer with a CD drive for our exclusive analysis tools. Depending on the amount of data to be processed, analysis may require several days. The attributes of logged IP addresses allow us to find high risk transactions such as in the following cases:

Examples of possible unauthorized access detected

- One account has been accessed from multiple countries.

- One account has been accessed from multiple ISPs or from multiple organizations.

- Multiple accounts have been accessed by one IP address.

It is possible to uncover leads like these just so long as an IP address is left in the transaction records.

Transaction history data before adding DocoDoco's data
Transaction history
Date Time Credit card number IP address Domain Country Prefecture Circuit
2012/04/01 18:00 V111-1111 111.111.0.5
2012/04/01 18:00 J335-3467 222.222.0.5
2012/04/01 18:10 J335-3467 123.123.2.2
2012/04/01 18:40 M666-5555 222.222.222.1
2012/04/01 18:45 V111-1111 222.222.222.1
2012/04/01 18:48 V111-1111 111.111.0.5
2012/04/01 18:48 V111-1111 111.111.0.5

Through our investigation, we can expand on clues as shown in the following table:

Transaction history data after adding DocoDoco's data
Transaction history
Date Time Credit card number IP address Domain Country Prefecture Circuit
2012/04/01 18:00 V111-1111 111.111.0.5 catv-s.ne.jp Japan Shizuoka CATV
2012/04/01 18:00 J335-3467 222.222.0.5 aaa.co.jp Japan TTokyo leased line
2012/04/01 18:10 J335-3467 123.123.2.2 isp-a.ne.jp Japan 大阪 ADSL
2012/04/01 18:40 M666-5555 222.222.222.1 net-china.cn China
2012/04/01 18:45 V111-1111 222.222.222.1 net-china.cn China
2012/04/01 18:48 V111-1111 111.111.0.5 catv-s.ne.jp Japan Shizuoka CATV
2012/04/01 18:48 V111-1111 111.111.0.5 catv-s.ne.jp Japan Shizuoka CATV

Results of the investigation establish the following:

  1 The same card number was accessed from two locations, one immediately after the other.

  2 Multiple cards have been accessed from the same IP address.

  3 Access has occurred from an IP address other than the one normally used.

※Please contact our support team for the details including the rate.


Page Top