{"id":38841,"date":"2019-10-31T22:26:17","date_gmt":"2019-10-31T19:26:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/passive-dns-v-rukah-analitika\/"},"modified":"2019-10-31T22:26:17","modified_gmt":"2019-10-31T19:26:17","slug":"passive-dns-v-rukah-analitika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","title":{"rendered":"DNS pasiv \u00een m\u00e2inile analistului","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Sistemul de nume de domenii (DNS) este similar cu un catalog telefonic, care transform\u0103 numele prietenoase pentru utilizatori, precum \u201eussc.ro\u201d, \u00een adrese IP. Activitatea DNS este prezent\u0103 \u00een aproape toate sesiunile de comunicare, indiferent de protocol. Astfel, logarea DNS reprezint\u0103 o surs\u0103 valoroas\u0103 de date pentru speciali\u0219tii \u00een securitate informa\u021bional\u0103, permi\u021b\u00e2ndu-le s\u0103 descopere anomalii sau s\u0103 ob\u021bin\u0103 informa\u021bii suplimentare despre sistemul cercetat\u0103.<\/p>\n<p><\/p>\n<p>\u00cen 2004, Florian Weimer a propus o metod\u0103 de logare, denumit\u0103 Passive DNS, care permite reconstruirea istoricului modific\u0103rilor datelor DNS cu posibilit\u0103\u021bi de indexare \u0219i c\u0103utare, ce pot oferi acces la urm\u0103toarele date:<\/p>\n<p><\/p>\n<ul>\n<li>Numele de domeniu<\/li>\n<li>Adresa IP a numelui de domeniu solicitat<\/li>\n<li>Data \u0219i ora r\u0103spunsului<\/li>\n<li>Tipul r\u0103spunsului<\/li>\n<li>etc.<\/li>\n<\/ul>\n<p><\/p>\n<p>Datele pentru Passive DNS sunt colectate de la serverele DNS recursive prin module \u00eencorporate sau prin interceptarea r\u0103spunsurilor de la serverele DNS responsabile pentru zon\u0103.<\/p>\n<p>\n<img decoding=\"async\" alt=\"DNS pasiv \u00een m\u00e2inile analistului\" src=\"\/wp-content\/uploads\/2019\/10\/03066b8baf19d86c73bb7a1ca240a26c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figura 1. Passive DNS (preluat\u0103 de pe site-ul <noindex><a rel=\"nofollow\" href=\"https:\/\/ctovision.com\/passivedns-leverage-research\/\">Ctovision.com<\/a><\/noindex>)<\/i><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Particularitatea Passive DNS const\u0103 \u00een absen\u021ba necesit\u0103\u021bii de a \u00eenregistra adresa IP a clientului, ceea ce permite protejarea confiden\u021bialit\u0103\u021bii utilizatorilor. <\/p>\n<p><\/p>\n<p>\u00cen prezent, exist\u0103 numeroase servicii care ofer\u0103 acces la datele Passive DNS:<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.dnsdb.info\/\">DNSDB<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.virustotal.com\/gui\/home\/upload\">VirusTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.riskiq.com\/products\/passivetotal\/\">PassiveTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/octo.safedns.com\/\">Octopus<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/\">SecurityTrails<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/umbrella.cisco.com\/products\/threat-intelligence\">Umbrella Investigate<\/a><\/noindex><\/p>\n<p><b>Compania<\/b><br \/>\nFarsight Security<br \/>\nVirusTotal<br \/>\nRiskiq<br \/>\nSafeDNS<br \/>\nSecurityTrails<br \/>\nCisco<\/p>\n<p><b>Acces<\/b><br \/>\nLa cerere<br \/>\nNu necesit\u0103 \u00eenregistrare<br \/>\n\u00cenregistrare liber\u0103<br \/>\nLa cerere<br \/>\nNu necesit\u0103 \u00eenregistrare<br \/>\nLa cerere<\/p>\n<p><b>API<\/b><br \/>\nPrezent<br \/>\nPrezent<br \/>\nPrezent<br \/>\nPrezent<br \/>\nPrezent<br \/>\nPrezent<\/p>\n<p><b>Disponibilitatea clientului<\/b><br \/>\nPrezent<br \/>\nPrezent<br \/>\nPrezent<br \/>\nLips\u0103<br \/>\nLips\u0103<br \/>\nLips\u0103<\/p>\n<p><b>\u00cenceperea colect\u0103rii datelor<\/b><br \/>\n2010<br \/>\n2013<br \/>\n2009<br \/>\nAfi\u0219eaz\u0103 doar ultimele 3 luni<br \/>\n2008<br \/>\n2006<\/p>\n<p><\/p>\n<p><i>Tabelul 1. Servicii cu acces la date Passive DNS<\/i><\/p>\n<p><\/p>\n<h4>Modalit\u0103\u021bi de utilizare a Passive DNS<\/h4>\n<p><\/p>\n<p>Folosind Passive DNS, se pot construi rela\u021bii \u00eentre numele de domenii, serverele NS \u0219i adresele IP. Acest lucru permite crearea de h\u0103r\u021bi ale sistemelor investigate \u0219i monitorizarea modific\u0103rilor acestor h\u0103r\u021bi de la prima descoperire p\u00e2n\u0103 \u00een prezent.<\/p>\n<p><\/p>\n<p>De asemenea, Passive DNS faciliteaz\u0103 identificarea anomaliilor \u00een trafic. De exemplu, monitorizarea modific\u0103rilor \u00een zonele NS \u0219i \u00een \u00eenregistr\u0103rile de tip A \u0219i AAAA permite identificarea site-urilor malveolente care folosesc metoda fast flux, menit\u0103 s\u0103 ascund\u0103 C&amp;C de detectare \u0219i blocare. Deoarece numele de domenii legitime (cu excep\u021bia celor utilizate pentru echilibrul de sarcin\u0103) nu \u00ee\u0219i vor schimba frecvent adresele IP, iar majoritatea zonelor legitime \u00ee\u0219i schimb\u0103 rar serverele NS. <\/p>\n<p><\/p>\n<p>DNS pasiv, spre deosebire de c\u0103utarea direct\u0103 a subdomeniilor \u00een dic\u021bionare, permite g\u0103sirea chiar \u0219i a celor mai exotice nume de domenii, cum ar fi \"222qmxacaiqaaaaazibq4aaidhmbqaaa0undefined7140c0.p.hoff.ru\". De asemenea, acest lucru poate ajuta uneori la descoperirea c\u0103ilor de testare (\u0219i vulnerabile) ale unui site web, a materialelor pentru dezvoltatori etc. <\/p>\n<p><\/p>\n<h4>Analiza linkului dintr-un mesaj, folosind DNS pasiv<\/h4>\n<p><\/p>\n<p>\u00cen prezent, spamul este una dintre principalele c\u0103i prin care un atacator p\u0103trunde pe computerul victimei sau fur\u0103 informa\u021bii confiden\u021biale. Vom \u00eencerca s\u0103 analiz\u0103m linkul dintr-un astfel de mesaj, folosind DNS pasiv, pentru a evalua eficien\u021ba acestei metode.<\/p>\n<p>\n<img decoding=\"async\" alt=\"DNS pasiv \u00een m\u00e2inile analistului\" src=\"\/wp-content\/uploads\/2019\/10\/47d75ca464d6aa1c803670b1a53b4cf8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figura 2. Mesaj spam<\/i><\/p>\n<p><\/p>\n<p>Linkul din acest mesaj ducea pe site-ul magnit-boss.rocks, care oferea, \u00een mod automat, posibilitatea de a acumula bonusuri \u0219i de a c\u00e2\u0219tiga bani:<\/p>\n<p>\n<img decoding=\"async\" alt=\"DNS pasiv \u00een m\u00e2inile analistului\" src=\"\/wp-content\/uploads\/2019\/10\/f9bbb7d49579e5559c8fc76af0cfc13d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figura 3. Pagina g\u0103zduit\u0103 pe domeniul magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>Pentru a analiza acest site, a fost utilizat <noindex><a rel=\"nofollow\" href=\"http:\/\/api.passivetotal.org\/api\/docs\/\">API Riskiq<\/a><\/noindex>, care are deja 3 clien\u021bi preg\u0103ti\u021bi pe <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/python_api\">Python<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/chrislee35\/passivetotal\">Ruby<\/a><\/noindex> \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/rust_api\">Rust<\/a><\/noindex>. <\/p>\n<p><\/p>\n<p>\u00cen primul r\u00e2nd, vom afla \u00eentreaga istorie a acestui nume de domeniu, pentru aceasta vom folosi comanda:<\/p>\n<p><\/p>\n<p><i>pt-client pdns \u2014query magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>Aceast\u0103 comand\u0103 va returna informa\u021bii despre toate rezolv\u0103rile DNS asociate cu acest nume de domeniu. <\/p>\n<p>\n<img decoding=\"async\" alt=\"DNS pasiv \u00een m\u00e2inile analistului\" src=\"\/wp-content\/uploads\/2019\/10\/bfaa82b2d7a753f684f32a93e29bf679.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figura 4. R\u0103spuns de la API Riskiq<\/i><\/p>\n<p><\/p>\n<p>Vom prezenta r\u0103spunsul de la API \u00eentr-o form\u0103 mai vizibil\u0103: <\/p>\n<p>\n<img decoding=\"async\" alt=\"DNS pasiv \u00een m\u00e2inile analistului\" src=\"\/wp-content\/uploads\/2019\/10\/90bcff91f110ee8e8f97151618548cb3.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figura 5. Toate \u00eenregistr\u0103rile din r\u0103spuns<\/i><\/p>\n<p><\/p>\n<p>Pentru o analiz\u0103 ulterioar\u0103, au fost luate adresele IP la care acest nume de domeniu rezolva \u00een momentul primirii mesajului, pe 01.08.2019, acestea fiind adresele 92.119.113.112 \u0219i 85.143.219.65. <\/p>\n<p><\/p>\n<p>Folosind comanda: <\/p>\n<p><\/p>\n<p><i>pt-client pdns \u2014query<\/i><\/p>\n<p><\/p>\n<p>putem ob\u021bine toate numele de domenii care sunt asociate cu aceste adrese IP.<br \/>\nAdresa IP 92.119.113.112 are 42 nume de domenii unice care au rezolvat la aceast\u0103 adres\u0103 IP, printre care se num\u0103r\u0103:<\/p>\n<p><\/p>\n<ul>\n<li>magnit-boss.club<\/li>\n<li>igrovie-avtomaty.me<\/li>\n<li>pro-x-audit.xyz<\/li>\n<li>zep3-www.xyz<\/li>\n<li>\u0219i altele<\/li>\n<\/ul>\n<p><\/p>\n<p>Adresa IP 85.143.219.65 are 44 nume de domenii unice care au rezolvat la aceast\u0103 adres\u0103 IP, printre care se num\u0103r\u0103:<\/p>\n<p><\/p>\n<ul>\n<li>cvv2.name (site pentru v\u00e2nzarea datelor de carduri de credit)<\/li>\n<li>emaills.world<\/li>\n<li>www.mailru.space<\/li>\n<li>\u0219i altele<\/li>\n<\/ul>\n<p><\/p>\n<p>Leg\u0103turile cu aceste nume de domenii sugereaz\u0103 activit\u0103\u021bi de phishing, dar noi credem \u00een oameni buni, prin urmare, vom \u00eencerca s\u0103 ob\u021binem un bonus \u00een valoare de 332.501,72 ruble? Dup\u0103 ap\u0103sarea butonului \u201cDA\u201d, site-ul ne cere s\u0103 transfer\u0103m 300 de ruble de pe card pentru deblocarea contului \u0219i ne trimite pe site-ul as-torpay.info pentru introducerea datelor. <\/p>\n<p>\n<img decoding=\"async\" alt=\"DNS pasiv \u00een m\u00e2inile analistului\" src=\"\/wp-content\/uploads\/2019\/10\/cb2525f6438e5b0314949eae1ab3b81b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figura 6. Pagina principal\u0103 a site-ului ac-pay2day.net<\/i><\/p>\n<p><\/p>\n<p>De la distan\u021b\u0103, acesta pare a fi un site legal, are certificat https, iar pagina principal\u0103 ofer\u0103 posibilitatea de a conecta acest sistem de plat\u0103 la site-ul t\u0103u, dar, din p\u0103cate, toate linkurile pentru conexiune nu func\u021bioneaz\u0103. Acest nume de domeniu se rezolv\u0103 doar \u00eentr-o singur\u0103 adres\u0103 IP \u2014 190.115.19.74. Aici se afl\u0103 1475 de nume de domeniu unice, care s-au rezolvat la aceast\u0103 adres\u0103 IP, printre care nume precum:<\/p>\n<p><\/p>\n<ul>\n<li>ac-pay2day.net<\/li>\n<li>ac-payfit.com<\/li>\n<li>as-manypay.com<\/li>\n<li>fletkass.net<\/li>\n<li>as-magicpay.com<\/li>\n<li>\u0219i altele<\/li>\n<\/ul>\n<p><\/p>\n<p>Dup\u0103 cum putem observa, Passive DNS permite colectarea rapid\u0103 \u0219i eficient\u0103 a datelor despre resursa investigat\u0103 \u0219i chiar construirea unei forme de amprent\u0103, care dezv\u0103luie o \u00eentreag\u0103 schem\u0103 de furt al datelor personale, de la ob\u021binerea acestora p\u00e2n\u0103 la locul probabil de v\u00e2nzare. <\/p>\n<p>\n<img decoding=\"async\" alt=\"DNS pasiv \u00een m\u00e2inile analistului\" src=\"\/wp-content\/uploads\/2019\/10\/e06af58c18cdd52e4790047c46768470.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Fig. 7. Harta sistemului investigat<\/i><\/p>\n<p><\/p>\n<p>Nu totul este roz, a\u0219a cum ne-am dori. De exemplu, astfel de investiga\u021bii se pot lovi cu u\u0219urin\u021b\u0103 de CloudFlare sau servicii similare. Eficien\u021ba bazei de date colectate depinde foarte mult de num\u0103rul de cereri DNS care trec prin modulul de colectare a datelor Passive DNS. Cu toate acestea, Passive DNS este o surs\u0103 suplimentar\u0103 de informa\u021bii pentru investigator.<\/p>\n<p><\/p>\n<p><em>Autor: Specialist al Centrului de Securitate a Sistemelor din Ural<\/em><\/p>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/470974\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430. \u0422\u0430\u043a \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c DNS \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u0430\u043d\u0441\u0430\u0445 \u0441\u0432\u044f\u0437\u0438, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c DNS \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0446\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c\u043e\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29133,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38841","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Passive DNS \u00een m\u00e2inile analistului | ProHoster","description":"Sistemul de nume de domenii (DNS) este asem\u0103n\u0103tor unei c\u0103r\u021bi de telefoane, care traduce nume u\u0219or de utilizat, cum ar fi \u201eussc.ru\u201d, \u00een adrese IP.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster","og:description":"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:17+00:00","article:modified_time":"2019-10-31T19:26:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38841","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:38:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:01:36","updated":"2026-01-23 23:38:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/38841","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=38841"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/38841\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/29133"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=38841"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=38841"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=38841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}