{"id":38841,"date":"2019-10-31T22:26:17","date_gmt":"2019-10-31T19:26:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/passive-dns-v-rukah-analitika\/"},"modified":"2019-10-31T22:26:17","modified_gmt":"2019-10-31T19:26:17","slug":"passive-dns-v-rukah-analitika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","title":{"rendered":"Pasivn\u00ed DNS v rukou analytika","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Syst\u00e9m dom\u00e9nov\u00fdch jmen (DNS) je podobn\u00fd telefonn\u00ed knize, kter\u00e1 p\u0159ev\u00e1d\u00ed u\u017eivatelsky p\u0159\u00edv\u011btiv\u00e1 jm\u00e9na, jako je \u201eussc.ru\u201c, na IP adresy. Aktivita DNS je p\u0159\u00edtomna t\u00e9m\u011b\u0159 ve v\u0161ech relac\u00edch komunikace, bez ohledu na protokol. Tak\u017ee logov\u00e1n\u00ed DNS je cenn\u00fdm zdrojem dat pro odborn\u00edka na informa\u010dn\u00ed bezpe\u010dnost, co\u017e jim umo\u017e\u0148uje odhalovat anom\u00e1lie nebo z\u00edsk\u00e1vat dal\u0161\u00ed informace o vy\u0161et\u0159ovan\u00e9m syst\u00e9mu.<\/p>\n<p><\/p>\n<p>V roce 2004 Florian Weimer navrhl metodu logov\u00e1n\u00ed nazvanou Passive DNS, kter\u00e1 umo\u017e\u0148uje obnovit historii zm\u011bn \u00fadaj\u016f DNS s mo\u017enost\u00ed indexace a vyhled\u00e1v\u00e1n\u00ed, co\u017e m\u016f\u017ee poskytovat p\u0159\u00edstup k n\u00e1sleduj\u00edc\u00edm \u00fadaj\u016fm:<\/p>\n<p><\/p>\n<ul>\n<li>Dom\u00e9nov\u00e9 jm\u00e9no<\/li>\n<li>IP adresa po\u017eadovan\u00e9ho dom\u00e9nov\u00e9ho jm\u00e9na<\/li>\n<li>Datum a \u010das odpov\u011bdi<\/li>\n<li>Typ odpov\u011bdi<\/li>\n<li>atd.<\/li>\n<\/ul>\n<p><\/p>\n<p>Data pro Passive DNS se shroma\u017e\u010fuj\u00ed z rekurzivn\u00edch DNS server\u016f pomoc\u00ed zabudovan\u00fdch modul\u016f nebo zachyt\u00e1v\u00e1n\u00edm odpov\u011bd\u00ed od DNS server\u016f odpov\u011bdn\u00fdch za z\u00f3nu.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Pasivn\u00ed DNS v rukou analytika\" src=\"\/wp-content\/uploads\/2019\/10\/03066b8baf19d86c73bb7a1ca240a26c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Obr\u00e1zek 1. Passive DNS (po\u0159\u00edzeno ze str\u00e1nky <noindex><a rel=\"nofollow\" href=\"https:\/\/ctovision.com\/passivedns-leverage-research\/\">Ctovision.com<\/a><\/noindex>)<\/i><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Specifikem Passive DNS je absence pot\u0159eby registrovat IP adresu klienta, co\u017e umo\u017e\u0148uje chr\u00e1nit soukrom\u00ed u\u017eivatel\u016f. <\/p>\n<p><\/p>\n<p>V sou\u010dasnosti existuje mnoho slu\u017eeb, kter\u00e9 poskytuj\u00ed p\u0159\u00edstup k \u00fadaj\u016fm Passive DNS:<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.dnsdb.info\/\">DNSDB<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.virustotal.com\/gui\/home\/upload\">VirusTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.riskiq.com\/products\/passivetotal\/\">PassiveTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/octo.safedns.com\/\">Octopus<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/\">SecurityTrails<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/umbrella.cisco.com\/products\/threat-intelligence\">Umbrella Investigate<\/a><\/noindex><\/p>\n<p><b>Spole\u010dnost<\/b><br \/>\nFarsight Security<br \/>\nVirusTotal<br \/>\nRiskiq<br \/>\nSafeDNS<br \/>\nSecurityTrails<br \/>\nCisco<\/p>\n<p><b>P\u0159\u00edstup<\/b><br \/>\nNa \u017e\u00e1dost<br \/>\nNepot\u0159ebuje registraci<br \/>\nRegistrace je zdarma<br \/>\nNa \u017e\u00e1dost<br \/>\nNepot\u0159ebuje registraci<br \/>\nNa \u017e\u00e1dost<\/p>\n<p><b>API<\/b><br \/>\nJe k dispozici<br \/>\nJe k dispozici<br \/>\nJe k dispozici<br \/>\nJe k dispozici<br \/>\nJe k dispozici<br \/>\nJe k dispozici<\/p>\n<p><b>P\u0159\u00edtomnost klienta<\/b><br \/>\nJe k dispozici<br \/>\nJe k dispozici<br \/>\nJe k dispozici<br \/>\n\u017d\u00e1dn\u00e1<br \/>\n\u017d\u00e1dn\u00e1<br \/>\n\u017d\u00e1dn\u00e1<\/p>\n<p><b>Za\u010d\u00e1tek sb\u011bru dat<\/b><br \/>\n2010<br \/>\n2013<br \/>\n2009<br \/>\nZobrazuje pouze posledn\u00ed 3 m\u011bs\u00edce<br \/>\n2008<br \/>\n2006<\/p>\n<p><\/p>\n<p><i>Tabulka 1. Slu\u017eby s p\u0159\u00edstupem k \u00fadaj\u016fm Passive DNS<\/i><\/p>\n<p><\/p>\n<h4>Mo\u017enosti vyu\u017eit\u00ed Passive DNS<\/h4>\n<p><\/p>\n<p>Pou\u017eit\u00edm Passive DNS lze budovat vazby mezi dom\u00e9nov\u00fdmi jm\u00e9ny, NS servery a IP adresami. To umo\u017e\u0148uje vytv\u00e1\u0159et mapy zkouman\u00fdch syst\u00e9m\u016f a sledovat zm\u011bny t\u00e9to mapy od prvn\u00edho zji\u0161t\u011bn\u00ed a\u017e do sou\u010dasnosti.<\/p>\n<p><\/p>\n<p>Tak\u00e9 Passive DNS usnad\u0148uje odhalov\u00e1n\u00ed anom\u00e1li\u00ed v provozu. Nap\u0159\u00edklad sledov\u00e1n\u00ed zm\u011bn v NS z\u00f3n\u00e1ch a z\u00e1znamech typu A a AAAA umo\u017e\u0148uje odhalovat \u0161kodliv\u00e9 weby, kter\u00e9 pou\u017e\u00edvaj\u00ed metodu fast flux, zam\u011b\u0159enou na skryt\u00ed C&amp;C p\u0159ed odhalen\u00edm a blokac\u00ed. Proto\u017ee legitimn\u00ed dom\u00e9nov\u00e1 jm\u00e9na (krom\u011b t\u011bch, kter\u00e1 se pou\u017e\u00edvaj\u00ed pro rozlo\u017een\u00ed z\u00e1t\u011b\u017ee) nebudou \u010dasto m\u011bnit sv\u00e9 IP adresy, v\u011bt\u0161ina legitimn\u00edch z\u00f3n z\u0159\u00eddka m\u011bn\u00ed sv\u00e9 NS servery. <\/p>\n<p><\/p>\n<p>Pasivn\u00ed DNS na rozd\u00edl od p\u0159\u00edm\u00e9ho skenov\u00e1n\u00ed subdom\u00e9n podle slovn\u00edk\u016f umo\u017e\u0148uje naj\u00edt i ty nejexoti\u010dt\u011bj\u0161\u00ed dom\u00e9nov\u00e1 jm\u00e9na, nap\u0159\u00edklad \"222qmxacaiqaaaaazibq4aaidhmbqaaa0undefined7140c0.p.hoff.ru\". To tak\u00e9 n\u011bkdy umo\u017e\u0148uje identifikovat testovac\u00ed (a zraniteln\u00e9) oblasti webov\u00fdch str\u00e1nek, materi\u00e1ly pro v\u00fdvoj\u00e1\u0159e atd. <\/p>\n<p><\/p>\n<h4>Zkoum\u00e1n\u00ed odkazu z e-mailu pomoc\u00ed Pasivn\u00edho DNS<\/h4>\n<p><\/p>\n<p>V sou\u010dasnosti je spam jedn\u00edm z hlavn\u00edch zp\u016fsob\u016f, jak\u00fdm \u00fato\u010dn\u00edci pronikaj\u00ed do po\u010d\u00edta\u010d\u016f ob\u011bt\u00ed nebo kradou citliv\u00e9 informace. Pokus\u00edme se prozkoumat odkaz z takov\u00e9ho e-mailu pomoc\u00ed Pasivn\u00edho DNS, abychom zhodnotili \u00fa\u010dinnost t\u00e9to metody.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Pasivn\u00ed DNS v rukou analytika\" src=\"\/wp-content\/uploads\/2019\/10\/47d75ca464d6aa1c803670b1a53b4cf8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Obr\u00e1zek 2. Spamov\u00fd e-mail<\/i><\/p>\n<p><\/p>\n<p>Odkaz z tohoto e-mailu vedl na str\u00e1nku magnit-boss.rocks, kter\u00e1 nab\u00edzela automaticky shroma\u017e\u010fovat bonusy a get pen\u00edze:<\/p>\n<p>\n<img decoding=\"async\" alt=\"Pasivn\u00ed DNS v rukou analytika\" src=\"\/wp-content\/uploads\/2019\/10\/f9bbb7d49579e5559c8fc76af0cfc13d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Obr\u00e1zek 3. Str\u00e1nka um\u00edst\u011bn\u00e1 na dom\u00e9n\u011b magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>Pro zkoum\u00e1n\u00ed t\u00e9to str\u00e1nky byl pou\u017eit <noindex><a rel=\"nofollow\" href=\"http:\/\/api.passivetotal.org\/api\/docs\/\">API Riskiq<\/a><\/noindex>, kter\u00e9 ji\u017e m\u00e1 3 klienty na <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/python_api\">CouchDB<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/chrislee35\/passivetotal\">Ruby<\/a><\/noindex> a <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/rust_api\">Rust<\/a><\/noindex>. <\/p>\n<p><\/p>\n<p>Nejprve zjist\u00edme celou historii t\u00e9to dom\u00e9ny, k tomu pou\u017eijeme p\u0159\u00edkaz:<\/p>\n<p><\/p>\n<p><i>pt-client pdns \u2014 dotaz magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>Tento p\u0159\u00edkaz vyd\u00e1 informace o v\u0161ech DNS \u0159e\u0161en\u00edch spojen\u00fdch s touto dom\u00e9nou. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Pasivn\u00ed DNS v rukou analytika\" src=\"\/wp-content\/uploads\/2019\/10\/bfaa82b2d7a753f684f32a93e29bf679.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Obr\u00e1zek 4. Odpov\u011b\u010f z API Riskiq<\/i><\/p>\n<p><\/p>\n<p>P\u0159evedeme odpov\u011b\u010f z API do p\u0159ehledn\u011bj\u0161\u00ed podoby: <\/p>\n<p>\n<img decoding=\"async\" alt=\"Pasivn\u00ed DNS v rukou analytika\" src=\"\/wp-content\/uploads\/2019\/10\/90bcff91f110ee8e8f97151618548cb3.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Obr\u00e1zek 5. V\u0161echny z\u00e1znamy z odpov\u011bdi<\/i><\/p>\n<p><\/p>\n<p>Pro dal\u0161\u00ed zkoum\u00e1n\u00ed byly zvoleny IP adresy, na kter\u00e9 se tato dom\u00e9na resolvovala v dob\u011b obdr\u017een\u00ed e-mailu 01.08.2019, mezi tyto adresy pat\u0159\u00ed 92.119.113.112 a 85.143.219.65. <\/p>\n<p><\/p>\n<p>Pou\u017eit\u00edm p\u0159\u00edkazu: <\/p>\n<p><\/p>\n<p><i>pt-client pdns \u2014 dotaz<\/i><\/p>\n<p><\/p>\n<p>m\u016f\u017eeme z\u00edskat v\u0161echna dom\u00e9nov\u00e1 jm\u00e9na, kter\u00e1 jsou spojena s t\u011bmito IP adresami.<br \/>\nIP adresa 92.119.113.112 m\u00e1 42 unik\u00e1tn\u00edch dom\u00e9nov\u00fdch jmen, kter\u00e9 se resolvovaly na tuto IP adresu, mezi nimi jsou n\u00e1sleduj\u00edc\u00ed jm\u00e9na:<\/p>\n<p><\/p>\n<ul>\n<li>magnit-boss.club<\/li>\n<li>igrovie-avtomaty.me<\/li>\n<li>pro-x-audit.xyz<\/li>\n<li>zep3-www.xyz<\/li>\n<li>a dal\u0161\u00ed<\/li>\n<\/ul>\n<p><\/p>\n<p>IP adresa 85.143.219.65 m\u00e1 44 unik\u00e1tn\u00edch dom\u00e9nov\u00fdch jmen, kter\u00e9 se resolvovaly na tuto IP adresu, mezi nimi jsou n\u00e1sleduj\u00edc\u00ed jm\u00e9na:<\/p>\n<p><\/p>\n<ul>\n<li>cvv2.name (str\u00e1nka pro prodej \u00fadaj\u016f o kreditn\u00edch kart\u00e1ch)<\/li>\n<li>emaills.world<\/li>\n<li>www.mailru.space<\/li>\n<li>a dal\u0161\u00ed<\/li>\n<\/ul>\n<p><\/p>\n<p>Spojen\u00ed s t\u011bmito dom\u00e9nov\u00fdmi jm\u00e9ny nazna\u010duj\u00ed phishing, ale my p\u0159ece v\u011b\u0159\u00edme v dobr\u00e9 lidi, a proto se pokus\u00edme z\u00edskat bonus ve v\u00fd\u0161i 332 501,72 rubl\u016f? Po stisknut\u00ed tla\u010d\u00edtka \"ANO\" n\u00e1s str\u00e1nka vyzve, abychom p\u0159evedli 300 rubl\u016f z karty pro odblokov\u00e1n\u00ed \u00fa\u010dtu a p\u0159esm\u011bruje n\u00e1s na str\u00e1nku as-torpay.info pro zad\u00e1n\u00ed \u00fadaj\u016f. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Pasivn\u00ed DNS v rukou analytika\" src=\"\/wp-content\/uploads\/2019\/10\/cb2525f6438e5b0314949eae1ab3b81b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Obr\u00e1zek 6. Hlavn\u00ed str\u00e1nka webu ac-pay2day.net<\/i><\/p>\n<p><\/p>\n<p>Na prvn\u00ed pohled leg\u00e1ln\u00ed web, m\u00e1 HTTPS certifik\u00e1t a hlavn\u00ed str\u00e1nka nab\u00edz\u00ed mo\u017enost p\u0159ipojit tento platebn\u00ed syst\u00e9m na sv\u016fj web, ale bohu\u017eel v\u0161echny odkazy na p\u0159ipojen\u00ed nefunguj\u00ed. Tato dom\u00e9nov\u00e1 adresa se resolvuje pouze na jednu IP adresu \u2014 190.115.19.74. Tato IP adresa m\u00e1 p\u0159itom 1475 unik\u00e1tn\u00edch dom\u00e9nov\u00fdch n\u00e1zv\u016f, kter\u00e9 se resolvovaly na tuto IP adresu, mezi nimi\u017e jsou takov\u00e9 n\u00e1zvy jako:<\/p>\n<p><\/p>\n<ul>\n<li>ac-pay2day.net<\/li>\n<li>ac-payfit.com<\/li>\n<li>as-manypay.com<\/li>\n<li>fletkass.net<\/li>\n<li>as-magicpay.com<\/li>\n<li>a dal\u0161\u00ed<\/li>\n<\/ul>\n<p><\/p>\n<p>Jak vid\u00edme, Passive DNS umo\u017e\u0148uje relativn\u011b rychle a efektivn\u011b shrom\u00e1\u017edit data o zkouman\u00e9m zdroji a dokonce vytvo\u0159it jak\u00fdsi otisk, kter\u00fd umo\u017e\u0148uje odhalit celou sch\u00e9ma kr\u00e1de\u017ee osobn\u00edch \u00fadaj\u016f, od jejich z\u00edsk\u00e1n\u00ed po pravd\u011bpodobn\u00e9 m\u00edsto prodeje. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Pasivn\u00ed DNS v rukou analytika\" src=\"\/wp-content\/uploads\/2019\/10\/e06af58c18cdd52e4790047c46768470.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Obr\u00e1zek 7. Mapa zkouman\u00e9ho syst\u00e9mu<\/i><\/p>\n<p><\/p>\n<p>Nen\u00ed v\u0161e tak r\u016f\u017eov\u00e9, jak bychom si p\u0159\u00e1li. Nap\u0159\u00edklad takov\u00e1 vy\u0161et\u0159ov\u00e1n\u00ed se mohou snadno narazit na CloudFlare nebo podobn\u00e9 slu\u017eby. A \u00fa\u010dinnost shrom\u00e1\u017ed\u011bn\u00e9 datab\u00e1ze velmi z\u00e1vis\u00ed na po\u010dtu DNS dotaz\u016f, kter\u00e9 proch\u00e1zej\u00ed modulem pro shroma\u017e\u010fov\u00e1n\u00ed dat Passive DNS. P\u0159esto v\u0161ak Passive DNS je zdrojem dodate\u010dn\u00fdch informac\u00ed pro v\u00fdzkumn\u00edka.<\/p>\n<p><\/p>\n<p><em>Autor: Specialista Uralsk\u00e9ho centra syst\u00e9mov\u00e9 bezpe\u010dnosti<\/em><\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/470974\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430. \u0422\u0430\u043a \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c DNS \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u0430\u043d\u0441\u0430\u0445 \u0441\u0432\u044f\u0437\u0438, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c DNS \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0446\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c\u043e\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29133,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38841","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Passive DNS v rukou analytika | ProHoster","description":"Syst\u00e9m dom\u00e9nov\u00fdch n\u00e1zv\u016f (DNS) je podobn\u00fd telefonn\u00edmu seznamu, kter\u00fd p\u0159ev\u00e1d\u00ed u\u017eivatelsky p\u0159\u00edv\u011btiv\u00e1 jm\u00e9na, jako je \u201eussc.ru\u201c, na IP adresy.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster","og:description":"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:17+00:00","article:modified_time":"2019-10-31T19:26:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38841","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:38:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:01:36","updated":"2026-01-23 23:38:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/38841","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=38841"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/38841\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/29133"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=38841"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=38841"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=38841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}