{"id":38841,"date":"2019-10-31T22:26:17","date_gmt":"2019-10-31T19:26:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/passive-dns-v-rukah-analitika\/"},"modified":"2019-10-31T22:26:17","modified_gmt":"2019-10-31T19:26:17","slug":"passive-dns-v-rukah-analitika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/no\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","title":{"rendered":"Passive DNS i hendene p\u00e5 analytikeren","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Domenesystemet (DNS) fungerer som en telefonkatalog som oversetter brukervennlige navn, som \u00abussc.ru\u00bb, til IP-adresser. Siden DNS-aktivitet er tilstede i nesten alle kommunikasjons\u00f8kter, uavhengig av protokoll, er DNS-loggf\u00f8ring en verdifull datakilde for informasjons-sikkerhetsspesialister. Dette lar dem oppdage anomalier eller f\u00e5 ytterligere informasjon om det unders\u00f8kte systemet.<\/p>\n<p><\/p>\n<p>I 2004 ble det av Florian Weimer foresl\u00e5tt en loggf\u00f8ringsmetode kalt Passive DNS, som gj\u00f8r det mulig \u00e5 gjenopprette historien om endringer i DNS-data med indekserings- og s\u00f8kefunksjoner, som kan gi tilgang til f\u00f8lgende data:<\/p>\n<p><\/p>\n<ul>\n<li>Domenenavnet<\/li>\n<li>IP-adressen til det forespurte domenenavnet<\/li>\n<li>Dato og tid for svaret<\/li>\n<li>Svartype<\/li>\n<li>osv.<\/li>\n<\/ul>\n<p><\/p>\n<p>Data for Passive DNS samles fra rekursive DNS-servere ved hjelp av innebygde moduler eller ved \u00e5 fange svar fra DNS-serverne som er ansvarlige for sonen.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i hendene p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/03066b8baf19d86c73bb7a1ca240a26c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 1. Passive DNS (hentet fra nettstedet <noindex><a rel=\"nofollow\" href=\"https:\/\/ctovision.com\/passivedns-leverage-research\/\">Ctovision.com<\/a><\/noindex>)<\/i><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>En s\u00e6regenhet ved Passive DNS er at det ikke er n\u00f8dvendig \u00e5 registrere klientens IP-adresse, noe som bidrar til \u00e5 beskytte brukernes personvern. <\/p>\n<p><\/p>\n<p>For tiden finnes det mange tjenester som gir tilgang til Passive DNS-data:<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.dnsdb.info\/\">DNSDB<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.virustotal.com\/gui\/home\/upload\">VirusTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.riskiq.com\/products\/passivetotal\/\">PassiveTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/octo.safedns.com\/\">Octopus<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/\">SecurityTrails<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/umbrella.cisco.com\/products\/threat-intelligence\">Umbrella Investigate<\/a><\/noindex><\/p>\n<p><b>Firma<\/b><br \/>\nFarsight Security<br \/>\nVirusTotal<br \/>\nRiskiq<br \/>\nSafeDNS<br \/>\nSecurityTrails<br \/>\nCisco<\/p>\n<p><b>Tilgang<\/b><br \/>\nEtter foresp\u00f8rsel<br \/>\nKrever ikke registrering<br \/>\nGratis registrering<br \/>\nEtter foresp\u00f8rsel<br \/>\nKrever ikke registrering<br \/>\nEtter foresp\u00f8rsel<\/p>\n<p><b>API<\/b><br \/>\nTilgjengelig<br \/>\nTilgjengelig<br \/>\nTilgjengelig<br \/>\nTilgjengelig<br \/>\nTilgjengelig<br \/>\nTilgjengelig<\/p>\n<p><b>Tilstedev\u00e6relse av klient<\/b><br \/>\nTilgjengelig<br \/>\nTilgjengelig<br \/>\nTilgjengelig<br \/>\nIngen<br \/>\nIngen<br \/>\nIngen<\/p>\n<p><b>Start p\u00e5 datainnsamling<\/b><br \/>\n2010<br \/>\n2013<br \/>\n2009<br \/>\nViser kun de siste 3 m\u00e5nedene<br \/>\n2008<br \/>\n2006<\/p>\n<p><\/p>\n<p><i>Tabell 1. Tjenester med tilgang til Passive DNS-data<\/i><\/p>\n<p><\/p>\n<h4>Bruksomr\u00e5der for Passive DNS<\/h4>\n<p><\/p>\n<p>Ved \u00e5 bruke Passive DNS kan man bygge opp relasjoner mellom domenenavn, NS-servere og IP-adresser. Dette gj\u00f8r det mulig \u00e5 lage kart over de unders\u00f8kte systemene og spore endringer i slike kart fra f\u00f8rste oppdagelse til n\u00e5v\u00e6rende tidspunkt.<\/p>\n<p><\/p>\n<p>Passive DNS letter ogs\u00e5 identifisering av anomalier i trafikken. For eksempel kan sporing av endringer i NS-soner og A- og AAAA-poster avdekke ondsinnede nettsteder som bruker metoden fast flux for \u00e5 skjule C&amp;C fra oppdagelse og blokkering. Siden legitime domenenavn (bortsett fra de som brukes til lastbalansering) ikke ofte vil endre IP-adressene sine, og de fleste legitime soner sjelden endrer NS-serverne sine. <\/p>\n<p><\/p>\n<p>Passive DNS, i motsetning til direkte sammenligning av underdomener med ordlister, lar deg finne selv de mest eksotiske domenenavnene, for eksempel \u201c222qmxacaiqaaaaazibq4aaidhmbqaaa0undefined7140c0.p.hoff.ru\u201d. Det gj\u00f8r det ogs\u00e5 noen ganger mulig \u00e5 finne testomr\u00e5der (og s\u00e5rbare) p\u00e5 nettsiden, materiale for utviklere osv. <\/p>\n<p><\/p>\n<h4>Unders\u00f8ke lenken fra e-posten ved \u00e5 bruke Passive DNS<\/h4>\n<p><\/p>\n<p>Per n\u00e5 er spam en av de viktigste m\u00e5tene gjennom hvilken angriperen f\u00e5r tilgang til offerets datamaskin eller stjeler konfidensiell informasjon. La oss pr\u00f8ve \u00e5 unders\u00f8ke lenken fra en slik e-post ved \u00e5 bruke Passive DNS, for \u00e5 vurdere effektiviteten av denne metoden.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i hendene p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/47d75ca464d6aa1c803670b1a53b4cf8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 2. Spam e-post<\/i><\/p>\n<p><\/p>\n<p>Lenken fra denne e-posten f\u00f8rte til nettstedet magnit-boss.rocks, som tilb\u00f8d \u00e5 samle bonuspoeng og motta penger automatisk:<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i hendene p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/f9bbb7d49579e5559c8fc76af0cfc13d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 3. Siden vert p\u00e5 domenet magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>For unders\u00f8kelsen av dette nettstedet ble <noindex><a rel=\"nofollow\" href=\"http:\/\/api.passivetotal.org\/api\/docs\/\">API Riskiq<\/a><\/noindex>, som allerede har 3 aktive kunder p\u00e5 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/python_api\">Python<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/chrislee35\/passivetotal\">Ruby<\/a><\/noindex> og <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/rust_api\">Rust<\/a><\/noindex>. <\/p>\n<p><\/p>\n<p>F\u00f8rst gir vi oss et innblikk i historikken til dette domenenavnet, for dette bruker vi kommandoen:<\/p>\n<p><\/p>\n<p><i>pt-client pdns \u2014query magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>Denne kommandoen vil gi oss informasjon om alle DNS-oppl\u00f8sninger knyttet til dette domenenavnet. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i hendene p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/bfaa82b2d7a753f684f32a93e29bf679.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 4. Svar fra API Riskiq<\/i><\/p>\n<p><\/p>\n<p>Vi gir svaret fra APIet en mer visuell form: <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i hendene p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/90bcff91f110ee8e8f97151618548cb3.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 5. Alle poster fra svaret<\/i><\/p>\n<p><\/p>\n<p>For videre unders\u00f8kelse ble IP-adressene som dette domenenavnet ble oppl\u00f8st til p\u00e5 tidspunktet for mottakelsen av e-posten 01.08.2019, f\u00f8rt opp. Disse IP-adressene er 92.119.113.112 og 85.143.219.65. <\/p>\n<p><\/p>\n<p>Ved \u00e5 bruke kommandoen: <\/p>\n<p><\/p>\n<p><i>pt-client pdns \u2014query<\/i><\/p>\n<p><\/p>\n<p>kan man f\u00e5 alle domenenavnene som er koblet til disse IP-adressene.<br \/>\nIP-adressen 92.119.113.112 har 42 unike domenenavn som ble oppl\u00f8st til denne IP-adressen, blant disse er:<\/p>\n<p><\/p>\n<ul>\n<li>magnit-boss.club<\/li>\n<li>igrovie-avtomaty.me<\/li>\n<li>pro-x-audit.xyz<\/li>\n<li>zep3-www.xyz<\/li>\n<li>og flere<\/li>\n<\/ul>\n<p><\/p>\n<p>IP-adressen 85.143.219.65 har 44 unike domenenavn som ble oppl\u00f8st til denne IP-adressen, blant disse er:<\/p>\n<p><\/p>\n<ul>\n<li>cvv2.name (nettsted for salg av kredittkortdata)<\/li>\n<li>emaills.world<\/li>\n<li>www.mailru.space<\/li>\n<li>og flere<\/li>\n<\/ul>\n<p><\/p>\n<p>Forbindelsene med disse domenenavnene tilf\u00f8res phishing, men vi tror jo p\u00e5 snille mennesker, s\u00e5 skal vi fors\u00f8ke \u00e5 f\u00e5 en bonus p\u00e5 332 501,72 rubler? Etter \u00e5 ha trykket p\u00e5 knappen \u201cJA\u201d, ber nettstedet oss om \u00e5 overf\u00f8re 300 rubler fra kortet for \u00e5 l\u00e5se opp kontoen og sender oss til nettstedet as-torpay.info for \u00e5 oppgi dataene. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i hendene p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/cb2525f6438e5b0314949eae1ab3b81b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 6. Hjemmesiden til nettsiden ac-pay2day.net<\/i><\/p>\n<p><\/p>\n<p>Det ser ut som et lovlig nettsted, det har et HTTPS-sertifikat, og hovedsiden tilbyr tilkobling av dette betalingssystemet til nettstedet ditt. Dessverre fungerer imidlertid alle tilkoblingslenker. Dette domenenavnet l\u00f8ser kun til \u00e9n IP-adresse \u2014 190.115.19.74. Denne har i sin tur 1475 unike domenenavn, som resolveres til denne IP-adressen, inkludert navn som:<\/p>\n<p><\/p>\n<ul>\n<li>ac-pay2day.net<\/li>\n<li>ac-payfit.com<\/li>\n<li>as-manypay.com<\/li>\n<li>fletkass.net<\/li>\n<li>as-magicpay.com<\/li>\n<li>og flere<\/li>\n<\/ul>\n<p><\/p>\n<p>Som vi kan se, lar Passive DNS oss raskt og effektivt samle data om den unders\u00f8kte ressursen og til og med lage et slags fingeravtrykk som kan avdekke en hel plan for tyveri av personopplysninger, fra innsamling til sannsynlig salgssted. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i hendene p\u00e5 analytikeren\" src=\"\/wp-content\/uploads\/2019\/10\/e06af58c18cdd52e4790047c46768470.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 7. Kart over det unders\u00f8kte systemet<\/i><\/p>\n<p><\/p>\n<p>Det er ikke alt s\u00e5 lyst som vi kunne \u00f8nske. For eksempel kan slike unders\u00f8kelser lett st\u00f8te p\u00e5 CloudFlare eller lignende tjenester. Effektiviteten til den innsamlede databasen avhenger mye av antall DNS-foresp\u00f8rsler som g\u00e5r gjennom modulen for innsamling av Passive DNS-data. Men likevel er Passive DNS en kilde til tilleggsinformasjon for forskeren.<\/p>\n<p><\/p>\n<p><em>Forfatter: Spesialist ved Ural senter for system sikkerhet<\/em><\/p>\n<p>Kilde: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/470974\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430. \u0422\u0430\u043a \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c DNS \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u0430\u043d\u0441\u0430\u0445 \u0441\u0432\u044f\u0437\u0438, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c DNS \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0446\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c\u043e\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29133,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38841","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/no\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"nn_NO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/no\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Passive DNS i hendene p\u00e5 analytikeren | ProHoster","description":"Domene Systemet (DNS) fungerer som en telefonkatalog som oversetter brukervennlige navn, som \"ussc.ru\", til IP-adresser.","canonical_url":"https:\/\/prohoster.info\/no\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nn_NO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster","og:description":"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.","og:url":"https:\/\/prohoster.info\/no\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:17+00:00","article:modified_time":"2019-10-31T19:26:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38841","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:38:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:01:36","updated":"2026-01-23 23:38:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/38841","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/comments?post=38841"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/38841\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/media\/29133"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/media?parent=38841"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/categories?post=38841"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/tags?post=38841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}