{"id":38841,"date":"2019-10-31T22:26:17","date_gmt":"2019-10-31T19:26:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/passive-dns-v-rukah-analitika\/"},"modified":"2019-10-31T22:26:17","modified_gmt":"2019-10-31T19:26:17","slug":"passive-dns-v-rukah-analitika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","title":{"rendered":"Passiivne DNS anal\u00fc\u00fctiku k\u00e4tes","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Domeeninimede s\u00fcsteem (DNS) on nagu telefoniraamat, mis muundab kasutajas\u00f5bralikud nimed, nagu \"ussc.ru\", IP-aadressideks. Kuna DNS-i aktiivsus esineb praktiliselt k\u00f5igis side sessioonides, olenemata protokollist, on DNS-i logimine v\u00e4\u00e4rtuslik andmeallikas infoturbe spetsialistidele, v\u00f5imaldades neil avastada anomaaliaid v\u00f5i koguda t\u00e4iendavat teavet uuritava s\u00fcsteemi kohta.<\/p>\n<p><\/p>\n<p>Aastal 2004 pakkus Florian Weimer v\u00e4lja logimise meetodi nimega Passiivne DNS, mis v\u00f5imaldab taastada DNS-i andmete muutuste ajalugu koos indekseerimise ja otsimise v\u00f5imalustega, mis v\u00f5ivad v\u00f5imaldada juurdep\u00e4\u00e4su j\u00e4rgmistele andmetele:<\/p>\n<p><\/p>\n<ul>\n<li>Domeeninimi<\/li>\n<li>IP-aadress, mis on seotud n\u00f5utud domeeninimega<\/li>\n<li>K\u00fcsimise kuup\u00e4ev ja kellaaeg<\/li>\n<li>Vastuse t\u00fc\u00fcp<\/li>\n<li>Kui kaua aega kulub v\u00e4ljastamiseks?<\/li>\n<\/ul>\n<p><\/p>\n<p>Andmed Passiivse DNS-i jaoks kogutakse rekurssivatel DNS-serveritel sisseehitatud moodulite kaudu v\u00f5i DNS-serverite vastuste \u00fclekuulamise teel, mis vastutavad tsooni eest.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4tes\" src=\"\/wp-content\/uploads\/2019\/10\/03066b8baf19d86c73bb7a1ca240a26c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Joonis 1. Passiivne DNS (v\u00f5etud saidilt <noindex><a rel=\"nofollow\" href=\"https:\/\/ctovision.com\/passivedns-leverage-research\/\">Ctovision.com<\/a><\/noindex>)<\/i><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Passive DNS'i omadus seisneb vajaduse puudumises registreerida kliendi IP-aadress, mis kaitseb kasutajate privaatsust. <\/p>\n<p><\/p>\n<p>Praegu on mitmeid teenuseid, mis pakuvad juurdep\u00e4\u00e4su Passive DNS andmetele:<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.dnsdb.info\/\">DNSDB<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.virustotal.com\/gui\/home\/upload\">VirusTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.riskiq.com\/products\/passivetotal\/\">PassiveTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/octo.safedns.com\/\">Octopus<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/\">SecurityTrails<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/umbrella.cisco.com\/products\/threat-intelligence\">Umbrella Investigate<\/a><\/noindex><\/p>\n<p><b>Ettev\u00f5te<\/b><br \/>\nFarsight Security<br \/>\nVirusTotal<br \/>\nRiskiq<br \/>\nSafeDNS<br \/>\nSecurityTrails<br \/>\nCisco<\/p>\n<p><b>Ligip\u00e4\u00e4s<\/b><br \/>\nK\u00fcsimise korral<br \/>\nRegistreerimist ei n\u00f5uta<br \/>\nRegistreerimine on tasuta<br \/>\nK\u00fcsimise korral<br \/>\nRegistreerimist ei n\u00f5uta<br \/>\nK\u00fcsimise korral<\/p>\n<p><b>API<\/b><br \/>\nOn olemas<br \/>\nOn olemas<br \/>\nOn olemas<br \/>\nOn olemas<br \/>\nOn olemas<br \/>\nOn olemas<\/p>\n<p><b>Kliendi olemasolu<\/b><br \/>\nOn olemas<br \/>\nOn olemas<br \/>\nOn olemas<br \/>\nPuudub<br \/>\nPuudub<br \/>\nPuudub<\/p>\n<p><b>Andmete kogumise algus<\/b><br \/>\n2010. aasta<br \/>\n2013. aasta<br \/>\n2009. aasta<br \/>\nKuvatakse ainult viimased 3 kuud<br \/>\n2008. aasta<br \/>\n2006. aasta<\/p>\n<p><\/p>\n<p><i>Tabel 1. Teenused, millel on juurdep\u00e4\u00e4s Passive DNS andmetele<\/i><\/p>\n<p><\/p>\n<h4>Passive DNSi kasutusv\u00f5imalused<\/h4>\n<p><\/p>\n<p>Passive DNS'i abil saab luua seoseid domeeninimede, NS-serverite ja IP-aadresside vahel. See v\u00f5imaldab koostada uuritavate s\u00fcsteemide kaarte ja j\u00e4lgida nende kaartide muutusi esimesest avastamisest kuni praeguseni.<\/p>\n<p><\/p>\n<p>Ka passiivne DNS aitab leevendada liikluse anomaaliate tuvastamist. N\u00e4iteks NS-tsoonide ja A ja AAAA t\u00fc\u00fcpi kirje muudatuste j\u00e4lgimine v\u00f5imaldab tuvastada pahatahtlikke saite, mis kasutavad fast flux meetodit, et varjata C&amp;C avastamise ja blokeerimise eest. Kuna legitiimsed domeeninimed (v\u00e4lja arvatud need, mida kasutatakse koormuse tasakaalustamiseks) ei muuda oma IP-aadresse sageli ja enamik legitiimsetest tsoonidest muudab oma NS-servereid harva. <\/p>\n<p><\/p>\n<p>Passiivne DNS v\u00f5imaldab leida isegi k\u00f5ige eksootilisemaid domeeninimesid, erinevalt otse alamdomeenide s\u00f5naraamatute p\u00f5hjal uurimisest, n\u00e4iteks \u201c222qmxacaiqaaaaazibq4aaidhmbqaaa0undefined7140c0.p.hoff.ru\u201d. See v\u00f5imaldab m\u00f5nikord leida ka veebisaidi testimisalasid (ja haavatavusi), arendajate materjale jne. <\/p>\n<p><\/p>\n<h4>Linki uurimine e-kirjast, kasutades passiivset DNS-i<\/h4>\n<p><\/p>\n<p>Praegu on r\u00e4mpspost \u00fcks peamisi viise, kuidas h\u00e4kker tungib ohvri arvutisse v\u00f5i varastab konfidentsiaalset teavet. Uurime sellisest kirjast linki, kasutades passiivset DNS-i, et hinnata selle meetodi t\u00f5husust.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4tes\" src=\"\/wp-content\/uploads\/2019\/10\/47d75ca464d6aa1c803670b1a53b4cf8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Joonis 2. R\u00e4mpsposti kiri<\/i><\/p>\n<p><\/p>\n<p>Antud kirja link viis veebilehele magnit-boss.rocks, mis pakkus automaatset boonuste kogumist ja raha teenimist:<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4tes\" src=\"\/wp-content\/uploads\/2019\/10\/f9bbb7d49579e5559c8fc76af0cfc13d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Joonis 3. Leht, mis on paigutatud domeenile magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>Selle saidi uurimiseks kasutati <noindex><a rel=\"nofollow\" href=\"http:\/\/api.passivetotal.org\/api\/docs\/\">API Riskiq<\/a><\/noindex>, millel on juba 3 valmis klienti <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/python_api\">Python<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/chrislee35\/passivetotal\">Ruby<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/rust_api\">Rust<\/a><\/noindex>. <\/p>\n<p><\/p>\n<p>Esiteks uurime selle domeeninime kogu ajalugu, selleks kasutame k\u00e4sku:<\/p>\n<p><\/p>\n<p><i>pt-client pdns \u2014 p\u00e4ringu magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>See k\u00e4sk toob v\u00e4lja teabe k\u00f5igi DNS-resolvide kohta, mis on seotud selle domeeninimega. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4tes\" src=\"\/wp-content\/uploads\/2019\/10\/bfaa82b2d7a753f684f32a93e29bf679.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Joonis 4. Vastus API Riskiq-lt<\/i><\/p>\n<p><\/p>\n<p>Toome API vastuse mugavaks visuaalseks kuvamiseks: <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4tes\" src=\"\/wp-content\/uploads\/2019\/10\/90bcff91f110ee8e8f97151618548cb3.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Joonis 5. K\u00f5ik vastusest saadud kirjed<\/i><\/p>\n<p><\/p>\n<p>Edasiuurimiseks v\u00f5eti IP-aadressid, kuhu see domeeninimi resolveeriti 01.08.2019, nendeks IP-aadressideks on 92.119.113.112 ja 85.143.219.65. <\/p>\n<p><\/p>\n<p>Kasutades k\u00e4sku: <\/p>\n<p><\/p>\n<p><i>pt-client pdns \u2014 p\u00e4ringu<\/i><\/p>\n<p><\/p>\n<p>v\u00f5ib saada k\u00f5ik domeeninimed, mis on seotud nende IP-aadressidega.<br \/>\nIP-aadress 92.119.113.112 omab 42 unikaalset domeeninime, mis resolveerusid sellele IP-aadressile, millest m\u00f5ned on:<\/p>\n<p><\/p>\n<ul>\n<li>magnit-boss.club<\/li>\n<li>igrovie-avtomaty.me<\/li>\n<li>pro-x-audit.xyz<\/li>\n<li>zep3-www.xyz<\/li>\n<li>jne<\/li>\n<\/ul>\n<p><\/p>\n<p>IP-aadress 85.143.219.65 on seotud 44 unikaalse domeeninimega, mis on seotud selle IP-aadressiga, sealhulgas sellised nimed nagu:<\/p>\n<p><\/p>\n<ul>\n<li>cvv2.name (krediitkaarditeabe m\u00fc\u00fcgileht)<\/li>\n<li>emaills.world<\/li>\n<li>www.mailru.space<\/li>\n<li>jne<\/li>\n<\/ul>\n<p><\/p>\n<p>Seosed nende domeeninimedega viitavad kalastamisele, kuid usume headesse inimestesse, seega proovime saada boonust summas 332 501.72 rubla? P\u00e4rast \"JAH\" nupule vajutamist palub leht meil kanda 300 rubla kaardilt konto avamiseks ja suunab meid saidile as-torpay.info andmete sisestamiseks. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4tes\" src=\"\/wp-content\/uploads\/2019\/10\/cb2525f6438e5b0314949eae1ab3b81b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Joonis 6. Pealeht saidil ac-pay2day.net<\/i><\/p>\n<p><\/p>\n<p>Esmapilgul legaalne leht, on olemas https-sertifikaat ja peamine leht pakub v\u00f5imalust seda makses\u00fcsteemi oma saidile integreerida, kuid kahjuks ei t\u00f6\u00f6tavad k\u00f5ik lingid \u00fchendamiseks. See domeeninimi on seotud ainult \u00fche IP-aadressiga \u2014 190.115.19.74. Sellel on omakorda 1475 unikaalset domeeninime, mis on seotud selle IP-aadressiga, sealhulgas sellised nimed nagu:<\/p>\n<p><\/p>\n<ul>\n<li>ac-pay2day.net<\/li>\n<li>ac-payfit.com<\/li>\n<li>as-manypay.com<\/li>\n<li>fletkass.net<\/li>\n<li>as-magicpay.com<\/li>\n<li>jne<\/li>\n<\/ul>\n<p><\/p>\n<p>Nagu me n\u00e4eme, v\u00f5imaldab Passive DNS kiiresti ja t\u00f5husalt koguda andmeid uuritava ressursi kohta ning isegi luua omamoodi j\u00e4lje, mis paljastab tervikliku skeemi isikuandmete varguse osas, alates nende hankimisest kuni t\u00f5en\u00e4olise m\u00fc\u00fcgikoha leidmiseni. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4tes\" src=\"\/wp-content\/uploads\/2019\/10\/e06af58c18cdd52e4790047c46768470.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Joonis 7. Uuritava s\u00fcsteemi kaart<\/i><\/p>\n<p><\/p>\n<p>Asjad ei ole nii roosilised, nagu me sooviksime. N\u00e4iteks v\u00f5ivad sellised uurimised kergesti kokku jooksma minna CloudFlare v\u00f5i sarnaste teenustega. Kogutud andmebaasi t\u00f6\u00f6 t\u00f5husus s\u00f5ltub v\u00e4ga palju DNS-p\u00e4ringute arvust, mis l\u00e4bivad Passive DNS andmete kogumise mooduli. Sellegipoolest on Passive DNS uurijale t\u00e4iendava teabe allikaks.<\/p>\n<p><\/p>\n<p><em>Autor: Uurali s\u00fcsteemide julgeoleku keskuse spetsialist<\/em><\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/470974\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430. \u0422\u0430\u043a \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c DNS \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u0430\u043d\u0441\u0430\u0445 \u0441\u0432\u044f\u0437\u0438, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c DNS \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0446\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c\u043e\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29133,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38841","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430. \u0422\u0430\u043a \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c DNS \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u0430\u043d\u0441\u0430\u0445 \u0441\u0432\u044f\u0437\u0438, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c DNS \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0446\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c\u043e\u0439\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430. \u0422\u0430\u043a \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c DNS \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u0430\u043d\u0441\u0430\u0445 \u0441\u0432\u044f\u0437\u0438, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c DNS \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0446\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c\u043e\u0439\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Passive DNS anal\u00fc\u00fctiku k\u00e4es | ProHoster","description":"Domeeninimede s\u00fcsteem (DNS) on nagu telefoniraamat, mis t\u00f5lgib kasutajas\u00f5bralikud nimed, n\u00e4iteks \u201eussc.ru\u201c, IP-aadressideks. Kuna DNS-iga seotud tegevus on kohal peaaegu k\u00f5igis suhtlussessioonides, olenemata protokollist, on DNS-i logimine v\u00e4\u00e4rtuslik andmeallikas infotehnoloogia spetsialisti jaoks, v\u00f5imaldades neil avastada anomaaliaid v\u00f5i saada lisainfot uuritava kohta.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster","og:description":"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430. \u0422\u0430\u043a \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c DNS \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u0430\u043d\u0441\u0430\u0445 \u0441\u0432\u044f\u0437\u0438, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c DNS \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0446\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c\u043e\u0439","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:17+00:00","article:modified_time":"2019-10-31T19:26:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38841","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:38:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:01:36","updated":"2026-01-23 23:38:20"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38841","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38841"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38841\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/29133"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38841"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38841"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}