{"id":38841,"date":"2019-10-31T22:26:17","date_gmt":"2019-10-31T19:26:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/passive-dns-v-rukah-analitika\/"},"modified":"2019-10-31T22:26:17","modified_gmt":"2019-10-31T19:26:17","slug":"passive-dns-v-rukah-analitika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","title":{"rendered":"Passiivne DNS anal\u00fc\u00fctiku k\u00e4es","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Domeenide s\u00fcsteem (DNS) on sarnane telefoniraamatuga, mis t\u00f5lgib kasutajas\u00f5bralikud nimed, n\u00e4iteks \"ussc.ru\", IP-aadressideks. Kuna DNS-i aktiivsus esineb praktiliselt k\u00f5igis suhtlussessioonides, olenemata protokollist, on DNS-i logimine v\u00e4\u00e4rtuslik teabeallikas infotehnoloogia spetsialistidele, v\u00f5imaldades neil avastada anomaaliaid v\u00f5i saada t\u00e4iendavaid andmeid uuritava s\u00fcsteemi kohta.<\/p>\n<p><\/p>\n<p>2004. aastal pakkus Florian Weimer v\u00e4lja logimise meetodi nimega Passive DNS, mis v\u00f5imaldab taastada DNS-andmete muutuste ajalugu koos indekseerimise ja otsinguv\u00f5imalustega, mis v\u00f5ivad anda juurdep\u00e4\u00e4su j\u00e4rgmistele andmetele:<\/p>\n<p><\/p>\n<ul>\n<li>Domeeninimi<\/li>\n<li>K\u00fclastatud domeeninime IP-aadress<\/li>\n<li>Vastuse kuup\u00e4ev ja kellaaeg<\/li>\n<li>Vastuse t\u00fc\u00fcp<\/li>\n<li>jne.<\/li>\n<\/ul>\n<p><\/p>\n<p>Passive DNS andmeid kogutakse rekursiivsetelt DNS-serveritelt sisseehitatud moodulite abil v\u00f5i DNS-serverite vastuste pealtkuulamise teel, mis vastutavad tsooni eest.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4es\" src=\"\/wp-content\/uploads\/2019\/10\/03066b8baf19d86c73bb7a1ca240a26c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Kujutis 1. Passive DNS (v\u00f5etud veebisaidilt <noindex><a rel=\"nofollow\" href=\"https:\/\/ctovision.com\/passivedns-leverage-research\/\">Ctovision.com<\/a><\/noindex>)<\/i><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Passive DNS-i erip\u00e4ra on see, et kliendi IP-aadressi registerimine ei ole vajalik, mis kaitseb kasutajate privaatsust. <\/p>\n<p><\/p>\n<p>Praegu on palju teenuseid, mis pakuvad juurdep\u00e4\u00e4su Passive DNS andmetele:<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.dnsdb.info\/\">DNSDB<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.virustotal.com\/gui\/home\/upload\">VirusTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.riskiq.com\/products\/passivetotal\/\">PassiveTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/octo.safedns.com\/\">Octopus<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/\">SecurityTrails<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/umbrella.cisco.com\/products\/threat-intelligence\">Umbrella Investigate<\/a><\/noindex><\/p>\n<p><b>Ettev\u00f5te<\/b><br \/>\nFarsight Security<br \/>\nVirusTotal<br \/>\nRiskiq<br \/>\nSafeDNS<br \/>\nSecurityTrails<br \/>\nCisco<\/p>\n<p><b>Juurdep\u00e4\u00e4s<\/b><br \/>\nK\u00fcsimise korral<br \/>\nRegistreerimist ei n\u00f5uta<br \/>\nVaba registreerimine<br \/>\nK\u00fcsimise korral<br \/>\nRegistreerimist ei n\u00f5uta<br \/>\nK\u00fcsimise korral<\/p>\n<p><b>API<\/b><br \/>\nOlemas<br \/>\nOlemas<br \/>\nOlemas<br \/>\nOlemas<br \/>\nOlemas<br \/>\nOlemas<\/p>\n<p><b>Kliendi olemasolu<\/b><br \/>\nOlemas<br \/>\nOlemas<br \/>\nOlemas<br \/>\nPuudub<br \/>\nPuudub<br \/>\nPuudub<\/p>\n<p><b>Andmete kogumise algus<\/b><br \/>\n2010. aasta<br \/>\n2013. aasta<br \/>\n2009. aasta<br \/>\nKuva ainult viimased 3 kuud<br \/>\n2008. aasta<br \/>\n2006. aasta<\/p>\n<p><\/p>\n<p><i>Tabel 1. Teenused, millel on juurdep\u00e4\u00e4s Passive DNS andmetele<\/i><\/p>\n<p><\/p>\n<h4>Passive DNS-i kasutamise v\u00f5imalused<\/h4>\n<p><\/p>\n<p>Passive DNS-i kasutamine v\u00f5imaldab luua seoseid domeeninimede, NS-serverite ja IP-aadresside vahel. See v\u00f5imaldab koostada uuritavate s\u00fcsteemide kaarte ja j\u00e4lgida nende kaardis toimuvaid muutusi alates esimesest avastamisest kuni praeguseni.<\/p>\n<p><\/p>\n<p>Lisaks lihtsustab Passive DNS liikluse anomaaliate tuvastamist. N\u00e4iteks NS-tsoonide ja A- ja AAAA-t\u00fc\u00fcpi kirjade muutuste j\u00e4lgimine v\u00f5imaldab tuvastada pahatahtlikke saite, mis kasutavad fast flux meetodit, et varjata C&amp;C-d avastamise ja blokeerimise eest. Kuna ehtsad domeeninimed (v\u00e4lja arvatud need, mida kasutatakse koormuse jagamiseks) ei vaheta oma IP-aadresse tihti, ei muuda enamik ehtsaid zone oma NS-servereid harva. <\/p>\n<p><\/p>\n<p>Passiivne DNS v\u00f5imaldab leida isegi k\u00f5ige eksootilisemaid domeeninimesid, nagu n\u00e4iteks \u201c222qmxacaiqaaaaazibq4aaidhmbqaaa0undefined7140c0.p.hoff.ru\u201d, mitte ainult otsides alamdomeene s\u00f5nastikes. Samuti aitab see m\u00f5nikord tuvastada testimise (ja haavatavaid) veebisaidi piirkondi, arendajate materjale jne. <\/p>\n<p><\/p>\n<h4>Kirja lingi uurimine, kasutades Passive DNS-i<\/h4>\n<p><\/p>\n<p>Praeguseks on r\u00e4mpspost \u00fcks peamisi viise, kuidas pahatahtlik isik p\u00e4\u00e4seb ohvri arvutisse v\u00f5i varastab konfidentsiaalset teavet. Proovime uurida sellisest kirjast linki, kasutades Passive DNS-i, et hinnata selle meetodi efektiivsust.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4es\" src=\"\/wp-content\/uploads\/2019\/10\/47d75ca464d6aa1c803670b1a53b4cf8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Joonis 2. R\u00e4mpspostikirja n\u00e4idis<\/i><\/p>\n<p><\/p>\n<p>Antud kirjast p\u00e4rit link viis veebisaidile magnit-boss.rocks, mis pakkus automaatselt boonuste kogumist ja raha teenimist:<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4es\" src=\"\/wp-content\/uploads\/2019\/10\/f9bbb7d49579e5559c8fc76af0cfc13d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Joonis 3. Leht, mis asub domeenil magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>Selle saidi uurimiseks kasutati <noindex><a rel=\"nofollow\" href=\"http:\/\/api.passivetotal.org\/api\/docs\/\">API Riskiq<\/a><\/noindex>, mis omab juba 3 valmis klienti aadressil <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/python_api\">Python<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/chrislee35\/passivetotal\">Ruby<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/rust_api\">Rustis<\/a><\/noindex>. <\/p>\n<p><\/p>\n<p>Esmselt selgitame v\u00e4lja kogu selle domeeninime ajaloo, selleks kasutame k\u00e4sku:<\/p>\n<p><\/p>\n<p><i>pt-client pdns &#8212;query magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>See k\u00e4sk annab teavet k\u00f5igi DNS-i lahenduste kohta, mis on seotud selle domeeninimega. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4es\" src=\"\/wp-content\/uploads\/2019\/10\/bfaa82b2d7a753f684f32a93e29bf679.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Joonis 4. Vastus API Riskiq-ilt<\/i><\/p>\n<p><\/p>\n<p>Toome API vastuse paremini visualiseeritud kujule: <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4es\" src=\"\/wp-content\/uploads\/2019\/10\/90bcff91f110ee8e8f97151618548cb3.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Joonis 5. K\u00f5ik vastuse sisestused<\/i><\/p>\n<p><\/p>\n<p>Edasisteks uuringuteks v\u00f5eti IP-aadressid, millele domeeninimi lahendati k\u00f5nesolevaga kirja saamise ajal 01.08.2019, need IP-aadressid on 92.119.113.112 ja 85.143.219.65. <\/p>\n<p><\/p>\n<p>Kasutades k\u00e4sku: <\/p>\n<p><\/p>\n<p><i>pt-client pdns &#8212;query<\/i><\/p>\n<p><\/p>\n<p>v\u00f5ime saada k\u00f5ik domeeninimed, mis on seotud nende IP-aadressidega.<br \/>\nIP-aadressil 92.119.113.112 on 42 unikaalset domeeninime, mis on lahendatud sellele IP-aadressile, nende hulgas on j\u00e4rgmised nimed:<\/p>\n<p><\/p>\n<ul>\n<li>magnit-boss.club<\/li>\n<li>igrovie-avtomaty.me<\/li>\n<li>pro-x-audit.xyz<\/li>\n<li>zep3-www.xyz<\/li>\n<li>jne<\/li>\n<\/ul>\n<p><\/p>\n<p>IP-aadressil 85.143.219.65 on 44 unikaalset domeeninime, mis on lahendatud sellele IP-aadressile, nende hulgas on j\u00e4rgmised nimed:<\/p>\n<p><\/p>\n<ul>\n<li>cvv2.name (krediitkaardiandmete m\u00fc\u00fcgi veebisait)<\/li>\n<li>emaills.world<\/li>\n<li>www.mailru.space<\/li>\n<li>jne<\/li>\n<\/ul>\n<p><\/p>\n<p>Seosed nende domeeninimedega viitavad v\u00f5imalikule phishing'ule, kuid usume headesse inimestesse, seet\u00f5ttu proovime saada boonus summas 332 501.72 rubla? P\u00e4rast \u201cJAH\u201d nupu vajutamist palub veebisait meil kanda 300 rubla kontolt, et kontot avada, ja suunab meid saidile as-torpay.info andmete sisestamiseks. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4es\" src=\"\/wp-content\/uploads\/2019\/10\/cb2525f6438e5b0314949eae1ab3b81b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Joonis 6. Koduleht saidilt ac-pay2day.net<\/i><\/p>\n<p><\/p>\n<p>Esmapidi legaalne veebisait, on olemas https-sertifikaat ning avalehte pakub selle makses\u00fcsteemi \u00fchendamist oma saidiga, kuid kahjuks ei t\u00f6\u00f6ta tervet \u00fchendamise lingid. Antud domeeninimi resolveerub ainult 1 IP-aadressile \u2014 190.115.19.74. Sellel on omakorda 1475 unikaalset domeeninime, mis on selle IP-aadressiga seotud, sealhulgas sellised nimed nagu:<\/p>\n<p><\/p>\n<ul>\n<li>ac-pay2day.net<\/li>\n<li>ac-payfit.com<\/li>\n<li>as-manypay.com<\/li>\n<li>fletkass.net<\/li>\n<li>as-magicpay.com<\/li>\n<li>jne<\/li>\n<\/ul>\n<p><\/p>\n<p>Kuidas me n\u00e4eme, v\u00f5imaldab Passive DNS piisavalt kiiresti ja t\u00f5husalt koguda andmeid uuritava ressursi kohta ning isegi luua omamoodi j\u00e4ljendi, mis aitab avada kogu skeemi isikuandmete varguse osas, alates nende hankimisest kuni t\u00f5en\u00e4olise m\u00fc\u00fcgikoha leidmiseni. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passiivne DNS anal\u00fc\u00fctiku k\u00e4es\" src=\"\/wp-content\/uploads\/2019\/10\/e06af58c18cdd52e4790047c46768470.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Joonis 7. Uuritava s\u00fcsteemi kaart<\/i><\/p>\n<p><\/p>\n<p>Asjad ei ole nii roosilised, kui me sooviksime. N\u00e4iteks v\u00f5ivad sellised uurimised kergesti takerduda CloudFlare'i v\u00f5i sarnaste teenuste taha. Ja kogutud andmebaasi efektiivsus s\u00f5ltub v\u00e4ga palju DNS-p\u00e4ringute kogusest, mis kulgevad Passive DNS andmete kogumise moduli kaudu. Sellegipoolest on Passive DNS t\u00e4iendava teabe allikaks uurijale.<\/p>\n<p><\/p>\n<p><em>Autor: Uurali s\u00fcsteemide turvalisuse spetsialist<\/em><\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/470974\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430. \u0422\u0430\u043a \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c DNS \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u0430\u043d\u0441\u0430\u0445 \u0441\u0432\u044f\u0437\u0438, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c DNS \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0446\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c\u043e\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29133,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38841","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Passive DNS anal\u00fc\u00fctiku k\u00e4tes | ProHoster","description":"Domeeninimede s\u00fcsteem (DNS) on nagu telefoniraamat, mis t\u00f5lgib kasutajas\u00f5bralikud nimet nagu \"ussc.ru\" IP-aadressideks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster","og:description":"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:17+00:00","article:modified_time":"2019-10-31T19:26:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38841","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:38:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:01:36","updated":"2026-01-23 23:38:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38841","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38841"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38841\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/29133"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38841"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38841"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}