¥Þ¥ë¥¦¥§¥¢¤ÏC&C¥µ¡¼¥Ð¤ÈÄÌ¿®¤¹¤ë¤³¤È¤Ç¡¢¹¶·â¼Ô¤«¤é¤Î»ØÎá¤ò¼õ¤±¡¢µ¡Ì©¾ðÊó¤ò³°Éô¤ËÁ÷¿®¤·¤¿¤ê¤·¤Þ¤¹¡£¹¶·â¼Ô¤«¤é¤¹¤ë¤È¡¢C&C¥µ¡¼¥Ð¤ÎIP¥¢¥É¥ì¥¹¤¬ÆÃÄꤵ¤ì¤ë¤È¡¢FW¤Ê¤É¤ÇÄÌ¿®¤¬¼×ÃǤµ¤ì¤Æ¤·¤Þ¤¤¤Þ¤¹¡£
¤½¤³¤Ç¡¢¤¤¤í¤¤¤í¤Êµ»Ë¡¤òÍѤ¤¤Æ¡¢C&C¥µ¡¼¥Ð¤ò±£Êä·¤Þ¤¹¡£
¤³¤³¤Ç²òÀ⤹¤ëµ»½Ñ¤Ï¡¢°Ê²¼¤Î2¤Ä¤Ç¤¹¡£

£±¡¥Fast Flux¡¡¡§IP¥¢¥É¥ì¥¹¤Î±£ÊÃ
£²¡¥Domain Flux¡¡¡§¡¡FQDN¤Î±£ÊÃ


£±¡¥ Fast Flux

¡Ê£±¡ËFast Flux¤È¤Ï

²áµîÌä¡ÊR1NW¸á¸å­¶Ì䣲¡Ë¤Ë¤Ï¡¢°Ê²¼¤Îµ­ºÜ¤¬¤¢¤ê¤Þ¤¹¡£

Fast Flux¤Ï¡¤ÆÃÄê¤Î¥É¥á¥¤¥ó¤ËÂФ¹¤ëDNS¥ì¥³¡¼¥É¤òû»þ´Ö¤ËÊѲ½¤µ¤»¤ë¤³¤È¤Ë¤è¤Ã¤Æ¡¤¥µ¡¼¥Ð¤ÎÄÉÀפòº¤Æñ¤Ë¤µ¤»¤ë¼êË¡¤Ç¤¢¤ë¡£

Fast Flux¤Ï¡Ö¥Õ¥¡¥¹¥È¥Õ¥é¥Ã¥¯¥¹¡×¤ÈÆÉ¤ß¤Þ¤¹¡£Fast Flux¤òľÌõ¤¹¤ë¤È¡Ö®¤¤¡ÊFast¡ËÊÑÆ°¡ÊFlux¡Ë¡×¤Ç¤¹¡£Ä¾Ìõ¤ÎÄ̤ꡤDNS¥ì¥³¡¼¥É¤ò¡Ö®¤¯ÊÑÆ°¡×¤µ¤»¤ë¤³¤È¤Ç¡¤¥Ü¥Ã¥È¤ÎIP¥¢¥É¥ì¥¹¤òÄÉÀפ·¤Ë¤¯¤¯¤·¤Þ¤¹¡£


¡Ê£²¡ËFastFlux¤Î»ÅÁȤß

¤Þ¤º¡¢¿Þ£´¤ÎDNS¤Î±þÅú¾ðÊó¤ò¸«¤Æ¤ß¤Þ¤·¤ç¤¦¡£
fastflux


¿Þ4¤Ï¡¢ns.example.com¤Ë¡¢fast-flux.example.com¤ÎA¥ì¥³¡¼¥É¤òÌ䤤¹ç¤ï¤»¤¿·ë²Ì¤Ç¤¹¡£QUESTION SECTION¤¬Ì䤤¹ç¤ï¤»¤Ç¡¢ANSWER SECTION¤¬¤½¤Î±þÅú¤Ç¤¹¡£fast-flux.example.com¤È¤¤¤¦1¤Ä¤ÎFQDN¤ËIPb1¡ÁIPbz¤Þ¤Ç¤Î26¸Ä¤ÎIP¥¢¥É¥ì¥¹¤¬ÉÕÍ¿¤µ¤ì¤Æ¤¤¤Þ¤¹¡£¤Þ¤¿¡¢180¤ÏTTL¡ÊTime To Live¡Ë¤ÎÃͤǡ¢¥­¥ã¥Ã¥·¥åDNS¥µ¡¼¥Ð¤Ç¥­¥ã¥Ã¥·¥å¤¹¤ë»þ´Ö¤òÉÿô¤Ç»ØÄꤷ¤Þ¤¹¡£º£²ó¤Ï¤ï¤º¤«3ʬ¡Ê=180Éáˤ·¤«¤¢¤ê¤Þ¤»¤ó¡£¤³¤ì¤Ë¤è¤ê¡¢PC¤Ï3ʬ¤¬·Ð²á¤¹¤ë¤È¡¢²þ¤á¤ÆIP¥¢¥É¥ì¥¹¤òÌ䤤¹ç¤ï¤»¤·¤Þ¤¹¡£
¥Í¥Ã¥È¥ï¡¼¥¯¥¹¥Ú¥·¥ã¥ê¥¹¥È¤òÌܻؤ¹½÷À­SE¤¢¤ì¡©

¤Ê¤¼¡¢¤³¤ó¤Ê¤³¤È¤ò¤¹¤ë¤Î¤Ç¤¹¤«¡©
C&C¥µ¡¼¥Ð¤Ø¤ÎÄÌ¿®¤¬¡¢µñÈݤµ¤ì¤Ê¤¤¤è¤¦¤Ë¤¹¤ë¤¿¤á¤Ç¤¹¡£²¾¤Ë¡¢´ë¶ÈÆâ¤ÎPC¤¬C&C¥µ¡¼¥Ð¤ËÄÌ¿®¤·¤Æ¥Þ¥ë¥¦¥§¥¢¤Ë´¶À÷¤·¤¿¤È¤·¤Þ¤¹¡£´ë¶È¤Î¥·¥¹¥Æ¥à´ÉÍý¼Ô¤ÏFW¤ÎÄÌ¿®¥í¥°¤ò¸«¤Æ¡¢³ºÅö¤ÎIP¥¢¥É¥ì¥¹¤ÎÄÌ¿®¤ò¼×ÃǤ·¤Þ¤¹¡£¤·¤«¤·¡¢¤³¤Î¤è¤¦¤ËÂçÎ̤ÎIP¥¢¥É¥ì¥¹¤òDNS¤Ëµ­ºÜ¤·¤Æ¤ª¤±¤Ð¡¢¥Þ¥ë¥¦¥§¥¢¡Ê¤Þ¤¿¤ÏDNS¤Î¥ê¥¾¥ë¥Ðµ¡Ç½¡Ë¤¬Ê̤ÎIP¥¢¥É¥ì¥¹¤ËÄÌ¿®¤·¤Þ¤¹¡£

²Ã¤¨¤Æ¡¢¹¶·â¼Ô¤¬¤³¤Î¥É¥á¥¤¥ó¾ðÊó¤òÉÑÈˤËÊѹ¹¤·¤¿¤é¡¢IP¥¢¥É¥ì¥¹¤Ï¤á¤Þ¤°¤ë¤·¤¯ÊѲ½¤·¤Þ¤¹¡£¶ñÂÎŪ¤Ë¤Ï¡¢¹¶·â¼Ô¤ÏIPb1¡ÁIPbz¡¢¼¡¤ÏIPc1¡ÁIPcz¡¢IPd1¡ÁIPdz¡¢¤Ê¤É¤ÈËè²óÊѲ½¤µ¤»¤ë¤Î¤Ç¤¹¡£TTL¤Ï¤ï¤º¤«3ʬ¤Ç¤¹¤«¤é¡¢PC¤Ï3ʬ¤´¤È¤ËDNS¥µ¡¼¥Ð¤ËÌ䤤¹ç¤ï¤»¤ò¤·¤Þ¤¹¡£¤½¤·¤Æ¡¢ÊѲ½¤·¤¿¿·¤·¤¤IP¥¢¥É¥ì¥¹¤ËÄÌ¿®¤·¤è¤¦¤·¤Þ¤¹¡£¤³¤¦¤Ê¤ë¤È¡¤ÌäÂêʸ¤Ë¤¢¤ë¡Ö¥µ¡¼¥Ð¤ÎÄÉÀפòº¤Æñ¤Ë¤µ¤»¤ë¡×¤È¤¤¤¦ÅÀ¤â¤ï¤«¤Ã¤Æ¤â¤é¤¨¤ë¤³¤È¤Ç¤·¤ç¤¦¡£¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ë¤Æ¡¢¤³¤Î¤è¤¦¤ËÊѲ½¤¹¤ëIP¥¢¥É¥ì¥¹¤òFW¤äProxy¥µ¡¼¥Ð¤ËÈ¿±Ç¤µ¤»Â³¤±¤ë¤Î¤Ï¸½¼ÂŪ¤Ëº¤Æñ¤Ç¤¹¡£

¥Í¥Ã¥È¥ï¡¼¥¯¥¹¥Ú¥·¥ã¥ê¥¹¥È¤òÌܻؤ¹½÷À­SE¤¦¡¼¡¼¤ó¡¡

¹¶·â¼Ô¤Ï¤½¤ó¤Ê¤Ë¤¿¤¯¤µ¤ó¤ÎIP¥¢¥É¥ì¥¹¤ò»ý¤Ã¤Æ¤¤¤ë¤Î¤Ç¤¹¤«¡©

 

 
¤¤¤¨¡¢»ý¤Ã¤Æ¤¤¤Ê¤¤¤Ç¤·¤ç¤¦¡£Â¿¤¯¤Ï¡¢¾è¤Ã¼è¤Ã¤¿¥µ¡¼¥Ð¤ò»È¤Ã¤Æ¤¤¤Þ¤¹¡£

¥Í¥Ã¥È¥ï¡¼¥¯¥¹¥Ú¥·¥ã¥ê¥¹¥È¤òÌܻؤ¹½÷À­SEÂԤäƤè

¡¡
IP
¥¢¥É¥ì¥¹¤Ç¤Ï¤Ê¤¯¡¢URL¤äFQDN¤Ê¤É¤Î¥É¥á¥¤¥ó¤ÇµñÈݤ¹¤ì¤Ð¤¤¤¤¤È»×¤¤¤Þ¤¹¡£
¤â¤Á¤í¤ó¡¢¤½¤¦¤Ç¤¹¡£¤è¤Ã¤Æ¡¢¹¶·â¼Ô¤Ï¥É¥á¥¤¥ó¤â±£Ê䷤褦¤È¹Í¤¨¤Þ¤¹¡£¤½¤ÎÊýË¡¤¬¼¡¤ÎDomain Flux¤Ç¤¹¡£

 

£²¡¥Domain Flux

²áµîÌä¡ÊR1NW¸á¸å­¶Ì䣲¡Ë¤Ë¤Ï¡¢°Ê²¼¤Îµ­ºÜ¤¬¤¢¤ê¤Þ¤¹¡£

¹¶·â¼Ô¤Ï¡¤¤³¤ì¤òÈò¤±¤ë¤¿¤á¤ËDomain Flux ¤È¸Æ¤Ð¤ì¤ë¼êË¡¤òÍѤ¤¤ë¤³¤È¤¬¤¢¤ë¡£

¡¡Domain Flux¤Ï¡¤¥É¥á¥¤¥ó¥ï¥¤¥ë¥É¥«¡¼¥É¤òÍѤ¤¤Æ¡¤¤¢¤é¤æ¤ë¥Û¥¹¥È̾¤ËÂФ·¤Æ¡¤Æ±°ì¤ÎIP¥¢¥É¥ì¥¹¤ò±þÅú¤¹¤ë¼êË¡¤Ç¤¢¤ë¡£Fast Flux ¤ÈDomain Flux¤òÁȤ߹ç¤ï¤»¤ë¤³¤È¤Ë¤è¤Ã¤Æ¡¤C&C¥µ¡¼¥Ð¤ÎFQDN¤ÈIP¥¢¥É¥ì¥¹¤ÎξÊý¤ò±£ÊäǤ­¤ë¡£¿Þ£´¤Ë¼¨¤·¤¿¹½À®¤ÎFast Flux ¤ÈDomain Flux¤òÁȤ߹ç¤ï¤»¤¿¤È¤­¤Î¡¤ns.example.com¤ËÀßÄꤵ¤ì¤ë¥¾¡¼¥ó¥ì¥³¡¼¥É¤ÎÎã¤ò¿Þ£µ¤Ë¼¨¤¹¡£
domainflux


¿Þ5¡¡ns. example. com¤ËÀßÄꤵ¤ì¤ë¥¾¡¼¥ó¥ì¥³¡¼¥É¤ÎÎã¡ÊÈ´¿è¡Ë

¡¡Domain Flux¤Ï¡¢ÌäÂêʸ¤Ë¤¢¤ë¤è¤¦¤Ë¡¢¡Ö¤¢¤é¤æ¤ë¥Û¥¹¥È̾¤ËÂФ·¤Æ¡¤Æ±°ì¤ÎIP¥¢¥É¥ì¥¹¤ò±þÅú¤¹¤ë¡×¤³¤È¤Ç¡¢¹¶·â¼Ô¤ÎIP¥¢¥É¥ì¥¹¤ò±£Ê乤ë¼êË¡¤Ç¤¹¡£¤È¤¤¤Ã¤Æ¤â¡¢µ»½ÑŪ¤Ë¤Ï¡¢DNS¤ÎA¥ì¥³¡¼¥É¤Ë¥ï¥¤¥ë¥É¥«¡¼¥É¡Ê¡ö¡Ë¤ò»È¤¦¡¢¤³¤ì¤À¤±¤Ç¤¹¡£

ef6167f8.jpg¡¡¡¡
¤½¤ì¤À¤±¤Ç¡¢ÌäÂêʸ¤Ë¤¢¤ë¡ÖC&C¥µ¡¼¥Ð¤ÎFQDN¤ÈIP¥¢¥É¥ì¥¹¤ÎξÊý¤ò±£ÊäǤ­¤ë¡×¤Î¤Ç¤¹¤«¡©

 
IP¥¢¥É¥ì¥¹¤Î±£Êäϡ¢Àè¤Ë½Ò¤Ù¤¿Fast Flux¤Ç¼Â¸½¤·¤Þ¤¹¡£FQDN¤Î±£Êä˴ؤ·¤Æ¤Ç¤¹¤¬¡¢¹¶·â¼Ô¤Ï¥×¥í¥°¥é¥à¤Ë¤è¤Ã¤Æ¡¢ËèÆü¤Î¤è¤¦¤Ë¿·¤·¤¤¥É¥á¥¤¥ó¤òºîÀ®¤·¤Þ¤¹¡£¤¿¤È¤¨¤Ð¡¢ÆüÉÕ¤òÉÕ¤±¤Æc2c20200123.example.com¡¢c2c20200124.example.com¡¢¤Ê¤É¤ÈÊѲ½¤µ¤»¤Þ¤¹¡£DNS¥µ¡¼¥Ð¤Ë¤Ï¥ï¥¤¥ë¥É¡½¥«¡¼¥É¡Ö¡ö¡×¤ò»È¤Ã¤Æ¤¤¤ë¤Î¤Ç¡¢¾åµ­¤Î¥É¥á¥¤¥ó¤Ç¤¢¤Ã¤Æ¤â¡¢Ì¾Á°²ò·è¤¬¤Ç¤­¤Þ¤¹¡£¥É¥á¥¤¥ó¤Î¥Ñ¥¿¡¼¥ó¤Ï¤Û¤Ü̵¸Â¤Ç¤¹¤«¤é¡¢C&C¥µ¡¼¥Ð¤ÎÀµµ¬¤Î¥É¥á¥¤¥ó̾¡Ê¤Þ¤¿¤ÏFQDN¡Ë¤ÎÆÃÄê¤Ïº¤Æñ¤Ç¤¹¡£¤Ä¤Þ¤ê¡¢C&C¥µ¡¼¥Ð¤ÎFQDN¤ò±£ÊäǤ­¤ë¤Î¤Ç¤¹¡£

¡¡¹¶·â¼Ô¤¬Domain Flux¤ÈFast Flux¤òÁȤ߹ç¤ï¤»¤ë¤È¡¤URL¥Õ¥£¥ë¥¿¥ê¥ó¥°¤ò²óÈò¤·¤Þ¤¹¡£¤Þ¤¿¡¢¥í¥°²òÀϤò¤¹¤ëºÝ¤Ë¤â¡¢IP¥¢¥É¥ì¥¹¤ÎÄÉÀפâÈó¾ï¤Ëº¤Æñ¤Ë¤Ê¤ê¤Þ¤¹¡£


¥¹¥Ý¥ó¥µ¡¼¥É¥ê¥ó¥¯