{"id":38841,"date":"2019-10-31T22:26:17","date_gmt":"2019-10-31T19:26:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/passive-dns-v-rukah-analitika\/"},"modified":"2019-10-31T22:26:17","modified_gmt":"2019-10-31T19:26:17","slug":"passive-dns-v-rukah-analitika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","title":{"rendered":"Passive DNS i h\u00e6nderne p\u00e5 analytikeren","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Dom\u00e6nenavnesystemet (DNS) fungerer som en telefonbog, der overs\u00e6tter brugervenlige navne som \"ussc.ru\" til IP-adresser. Da DNS-aktivitet er til stede i n\u00e6sten alle kommunikationssessioner uanset protokol, udg\u00f8r DNS-logning en v\u00e6rdifuld datakilde for informationsteknikere. Det g\u00f8r det muligt at opdage anomalier eller indhente yderligere oplysninger om det unders\u00f8gte system.<\/p>\n<p><\/p>\n<p>I 2004 foreslog Florian Weimer en logningsmetode kaldet Passive DNS, som muligg\u00f8r genopbygning af historikken for \u00e6ndringer i DNS-data med mulighed for indeksering og s\u00f8gning, hvilket kan give adgang til f\u00f8lgende oplysninger:<\/p>\n<p><\/p>\n<ul>\n<li>Dom\u00e6nenavn<\/li>\n<li>IP-adressen for det anmodede dom\u00e6nenavn<\/li>\n<li>Dato og tidspunkt for svaret<\/li>\n<li>Type svar<\/li>\n<li>osv.<\/li>\n<\/ul>\n<p><\/p>\n<p>Data til Passive DNS indsamles fra rekursive DNS-servere via indbyggede moduler eller ved at opfange svar fra DNS-servere, der er ansvarlige for zonen.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i h\u00e6nderne p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/03066b8baf19d86c73bb7a1ca240a26c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 1. Passive DNS (taget fra hjemmesiden <noindex><a rel=\"nofollow\" href=\"https:\/\/ctovision.com\/passivedns-leverage-research\/\">Ctovision.com<\/a><\/noindex>)<\/i><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>En vigtig egenskab ved Passive DNS er, at der ikke er behov for at registrere klientens IP-adresse, hvilket hj\u00e6lper med at beskytte brugernes privatliv. <\/p>\n<p><\/p>\n<p>I \u00f8jeblikket findes der mange tjenester, der giver adgang til Passive DNS-data:<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.dnsdb.info\/\">DNSDB<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.virustotal.com\/gui\/home\/upload\">VirusTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.riskiq.com\/products\/passivetotal\/\">PassiveTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/octo.safedns.com\/\">Octopus<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/\">SecurityTrails<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/umbrella.cisco.com\/products\/threat-intelligence\">Umbrella Investigate<\/a><\/noindex><\/p>\n<p><b>Virksomheden<\/b><br \/>\nFarsight Security<br \/>\nVirusTotal<br \/>\nRiskiq<br \/>\nSafeDNS<br \/>\nSecurityTrails<br \/>\nCisco<\/p>\n<p><b>Adgang<\/b><br \/>\nEfter foresp\u00f8rgsel<br \/>\nKr\u00e6ver ikke registrering<br \/>\nRegistrering er gratis<br \/>\nEfter foresp\u00f8rgsel<br \/>\nKr\u00e6ver ikke registrering<br \/>\nEfter foresp\u00f8rgsel<\/p>\n<p><b>API<\/b><br \/>\nTilstedev\u00e6rende<br \/>\nTilstedev\u00e6rende<br \/>\nTilstedev\u00e6rende<br \/>\nTilstedev\u00e6rende<br \/>\nTilstedev\u00e6rende<br \/>\nTilstedev\u00e6rende<\/p>\n<p><b>Klientens tilg\u00e6ngelighed<\/b><br \/>\nTilstedev\u00e6rende<br \/>\nTilstedev\u00e6rende<br \/>\nTilstedev\u00e6rende<br \/>\nIngen<br \/>\nIngen<br \/>\nIngen<\/p>\n<p><b>Startdato for dataindsamling<\/b><br \/>\n2010<br \/>\n2013<br \/>\n2009<br \/>\nViser kun de sidste 3 m\u00e5neder<br \/>\n2008<br \/>\n2006<\/p>\n<p><\/p>\n<p><i>Tabel 1. Tjenester med adgang til Passive DNS-data<\/i><\/p>\n<p><\/p>\n<h4>Anvendelsesmuligheder for Passive DNS<\/h4>\n<p><\/p>\n<p>Ved brug af Passive DNS kan man kortl\u00e6gge forbindelser mellem dom\u00e6nenavne, NS-servere og IP-adresser. Dette muligg\u00f8r opbygningen af kort over de unders\u00f8gte systemer og sporing af \u00e6ndringer fra den f\u00f8rste opdagelse til det nuv\u00e6rende tidspunkt.<\/p>\n<p><\/p>\n<p>Desuden letter Passive DNS identifikation af anomalier i trafikken. For eksempel giver sporing af \u00e6ndringer i NS-zoner og A- og AAAA-poster mulighed for at identificere ondsindede websider, der bruger fast flux-metoden, designet til at skjule C&amp;C fra opdagelse og blokering. Da legitime dom\u00e6nenavne (undtagen dem der bruges til belastningsfordeling) ikke ofte \u00e6ndrer deres IP-adresser, og de fleste legitime zoner sj\u00e6ldent \u00e6ndrer deres NS-servere. <\/p>\n<p><\/p>\n<p>Passive DNS adskiller sig fra direkte gennemgang af underdom\u00e6ner via ordb\u00f8ger ved at finde selv de mest eksotiske dom\u00e6nenavne, s\u00e5som \u201c222qmxacaiqaaaaazibq4aaidhmbqaaa0undefined7140c0.p.hoff.ru\u201d. Det kan ogs\u00e5 nogle gange finde testmilj\u00f8er (og s\u00e5rbare) p\u00e5 et websted, udviklermateriale osv. <\/p>\n<p><\/p>\n<h4>Unders\u00f8gelse af linket fra e-mailen ved hj\u00e6lp af Passive DNS<\/h4>\n<p><\/p>\n<p>I \u00f8jeblikket er spam en af de prim\u00e6re m\u00e5der, hvorp\u00e5 en angriber f\u00e5r adgang til offerets computer eller stj\u00e6ler fortrolige oplysninger. Lad os fors\u00f8ge at unders\u00f8ge et link fra en s\u00e5dan e-mail ved hj\u00e6lp af Passive DNS for at vurdere effektiviteten af denne metode.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i h\u00e6nderne p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/47d75ca464d6aa1c803670b1a53b4cf8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 2. Spam e-mail<\/i><\/p>\n<p><\/p>\n<p>Linket fra denne e-mail f\u00f8rte til hjemmesiden magnit-boss.rocks, som automatisk tilb\u00f8d at indsamle bonusser og modtage penge:<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i h\u00e6nderne p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/f9bbb7d49579e5559c8fc76af0cfc13d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 3. Side hostet p\u00e5 dom\u00e6net magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>Til unders\u00f8gelse af denne hjemmeside blev der anvendt <noindex><a rel=\"nofollow\" href=\"http:\/\/api.passivetotal.org\/api\/docs\/\">Riskiq API<\/a><\/noindex>, som allerede har 3 aktive kunder med <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/python_api\">Python<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/chrislee35\/passivetotal\">Ruby<\/a><\/noindex> og <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/rust_api\">Rust<\/a><\/noindex>. <\/p>\n<p><\/p>\n<p>F\u00f8rst finder vi hele historien om dette dom\u00e6nenavn, for dette bruger vi kommandoen:<\/p>\n<p><\/p>\n<p><i>pt-client pdns \u2014 foresp\u00f8rgsel magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>Denne kommando vil give oplysninger om alle DNS-opslag relateret til dette dom\u00e6nenavn. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i h\u00e6nderne p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/bfaa82b2d7a753f684f32a93e29bf679.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 4. Svar fra Riskiq API<\/i><\/p>\n<p><\/p>\n<p>Vi pr\u00e6senterer svaret fra API'et i en mere overskuelig form: <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i h\u00e6nderne p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/90bcff91f110ee8e8f97151618548cb3.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 5. Alle poster fra svaret<\/i><\/p>\n<p><\/p>\n<p>Til videre unders\u00f8gelse blev IP-adresserne, som dette dom\u00e6nenavn blev l\u00f8st til p\u00e5 tidspunktet for modtagelsen af e-mailen den 01.08.2019, medtaget \u2014 disse IP-adresser er 92.119.113.112 og 85.143.219.65. <\/p>\n<p><\/p>\n<p>Ved at bruge kommandoen: <\/p>\n<p><\/p>\n<p><i>pt-client pdns \u2014 foresp\u00f8rgsel<\/i><\/p>\n<p><\/p>\n<p>kan man f\u00e5 alle dom\u00e6nenavne, der er forbundet med disse IP-adresser.<br \/>\nIP-adressen 92.119.113.112 har 42 unikke dom\u00e6nenavne, der blev l\u00f8st til denne IP-adresse, hvoriblandt findes f\u00f8lgende navne:<\/p>\n<p><\/p>\n<ul>\n<li>magnit-boss.club<\/li>\n<li>igrovie-avtomaty.me<\/li>\n<li>pro-x-audit.xyz<\/li>\n<li>zep3-www.xyz<\/li>\n<li>m.m.<\/li>\n<\/ul>\n<p><\/p>\n<p>IP-adressen 85.143.219.65 har 44 unikke dom\u00e6nenavne, der blev l\u00f8st til denne IP-adresse, hvoriblandt findes f\u00f8lgende navne:<\/p>\n<p><\/p>\n<ul>\n<li>cvv2.name (hjemmeside til salg af kreditkortoplysninger)<\/li>\n<li>emaills.world<\/li>\n<li>www.mailru.space<\/li>\n<li>m.m.<\/li>\n<\/ul>\n<p><\/p>\n<p>Forbindelser til disse dom\u00e6nenavne antyder phishing, men vi tror p\u00e5 gode mennesker, s\u00e5 lad os fors\u00f8ge at f\u00e5 en bonus p\u00e5 332 501,72 rubler? Efter at have klikket p\u00e5 knappen \u201cJA\u201d, beder hjemmesiden os om at overf\u00f8re 300 rubler fra kortet for at gen\u00e5bne kontoen og sender os til hjemmesiden as-torpay.info for at indtaste oplysninger. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i h\u00e6nderne p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/cb2525f6438e5b0314949eae1ab3b81b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 6. Forside af hjemmesiden ac-pay2day.net<\/i><\/p>\n<p><\/p>\n<p>Udadere ser det ud som en lovlig hjemmeside, den har et HTTPS-certifikat, og forsiden tilbyder at tilslutte dette betalingssystem til din hjemmeside, men desv\u00e6rre virker alle forbindelser til tilslutningen ikke. Dette dom\u00e6nenavn resolveres kun til 1 IP-adresse \u2014 190.115.19.74. Denne IP har i sin tur 1475 unikke dom\u00e6nenavne, der resolveredes til denne IP-adresse, herunder navne som:<\/p>\n<p><\/p>\n<ul>\n<li>ac-pay2day.net<\/li>\n<li>ac-payfit.com<\/li>\n<li>as-manypay.com<\/li>\n<li>fletkass.net<\/li>\n<li>as-magicpay.com<\/li>\n<li>m.m.<\/li>\n<\/ul>\n<p><\/p>\n<p>Som vi kan se, muligg\u00f8r Passive DNS en relativt hurtig og effektiv indsamling af data om den unders\u00f8gte ressource og endda opbygning af et slags fingeraftryk, der g\u00f8r det muligt at afsl\u00f8re et helt system af persondataindbrud, fra dets erhvervelse til det mulige salgssted. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i h\u00e6nderne p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/e06af58c18cdd52e4790047c46768470.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 7. Kort over det unders\u00f8gte system<\/i><\/p>\n<p><\/p>\n<p>Det er ikke helt s\u00e5 rosenr\u00f8dt, som vi kunne \u00f8nske. For eksempel kan s\u00e5danne unders\u00f8gelser let kollidere med CloudFlare eller lignende tjenester. Effektiviteten af den indsamlede database afh\u00e6nger i h\u00f8j grad af antallet af DNS-foresp\u00f8rgsler, der g\u00e5r gennem modulet til indsamling af Passive DNS-data. Ikke desto mindre er Passive DNS en kilde til supplerende information for forskeren.<\/p>\n<p><\/p>\n<p><em>Forfatter: Specialist ved det Uraliske Center for System Sikkerhed<\/em><\/p>\n<p>Kilde: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/470974\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430. \u0422\u0430\u043a \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c DNS \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u0430\u043d\u0441\u0430\u0445 \u0441\u0432\u044f\u0437\u0438, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c DNS \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0446\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c\u043e\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29133,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38841","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Passive DNS i h\u00e6nderne p\u00e5 analytikeren | ProHoster","description":"Dom\u00e6nenavnsystemet (DNS) fungerer som en telefonbog, der overs\u00e6tter brugervenlige navne som \"ussc.ru\" til IP-adresser.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster","og:description":"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:17+00:00","article:modified_time":"2019-10-31T19:26:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38841","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:38:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:01:36","updated":"2026-01-23 23:38:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/38841","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=38841"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/38841\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/29133"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=38841"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=38841"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=38841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}