{"id":38841,"date":"2019-10-31T22:26:17","date_gmt":"2019-10-31T19:26:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/passive-dns-v-rukah-analitika\/"},"modified":"2019-10-31T22:26:17","modified_gmt":"2019-10-31T19:26:17","slug":"passive-dns-v-rukah-analitika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","title":{"rendered":"Passive DNS i analytikens h\u00e4nder","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Dom\u00e4nnamnssystemet (DNS) fungerar som en telefonkatalog som \u00f6vers\u00e4tter anv\u00e4ndarv\u00e4nliga namn, som \u2018ussc.ru\u2019, till IP-adresser. Eftersom DNS-aktivitet f\u00f6rekommer i n\u00e4stan alla kommunikationssessioner, oavsett protokoll, \u00e4r DNS-loggning en v\u00e4rdefull datak\u00e4lla f\u00f6r informationss\u00e4kerhetsspecialister, vilket g\u00f6r det m\u00f6jligt f\u00f6r dem att uppt\u00e4cka avvikelser eller f\u00e5 ytterligare information om det unders\u00f6kta systemet.<\/p>\n<p><\/p>\n<p>\u00c5r 2004 f\u00f6reslog Florian Weimer en metod f\u00f6r loggning som kallas Passive DNS, som g\u00f6r det m\u00f6jligt att \u00e5terst\u00e4lla historiken f\u00f6r f\u00f6r\u00e4ndringar i DNS-data med m\u00f6jlighet till indexering och s\u00f6kning, vilket kan ge tillg\u00e5ng till f\u00f6ljande data:<\/p>\n<p><\/p>\n<ul>\n<li>Dom\u00e4nnamn<\/li>\n<li>IP-adressen f\u00f6r den beg\u00e4rda dom\u00e4nnamnet<\/li>\n<li>Datum och tid f\u00f6r svaret<\/li>\n<li>Typ av svar<\/li>\n<li>och s\u00e5 vidare.<\/li>\n<\/ul>\n<p><\/p>\n<p>Data f\u00f6r Passive DNS samlas in fr\u00e5n rekursiva DNS-servrar via inbyggda moduler eller genom att f\u00e5nga svar fr\u00e5n DNS-servrar som ansvarar f\u00f6r zonen.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i analytikens h\u00e4nder\" src=\"\/wp-content\/uploads\/2019\/10\/03066b8baf19d86c73bb7a1ca240a26c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 1. Passive DNS (h\u00e4mtad fr\u00e5n webbplatsen <noindex><a rel=\"nofollow\" href=\"https:\/\/ctovision.com\/passivedns-leverage-research\/\">Ctovision.com<\/a><\/noindex>)<\/i><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Ett k\u00e4nnetecken f\u00f6r Passive DNS \u00e4r att det inte kr\u00e4ver registrering av klientens IP-adress, vilket skyddar anv\u00e4ndarnas integritet. <\/p>\n<p><\/p>\n<p>F\u00f6r n\u00e4rvarande finns det m\u00e5nga tj\u00e4nster som erbjuder tillg\u00e5ng till Passive DNS-data:<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.dnsdb.info\/\">DNSDB<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.virustotal.com\/gui\/home\/upload\">VirusTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/www.riskiq.com\/products\/passivetotal\/\">PassiveTotal<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/octo.safedns.com\/\">Octopus<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/\">SecurityTrails<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/umbrella.cisco.com\/products\/threat-intelligence\">Umbrella Investigate<\/a><\/noindex><\/p>\n<p><b>F\u00f6retag<\/b><br \/>\nFarsight Security<br \/>\nVirusTotal<br \/>\nRiskiq<br \/>\nSafeDNS<br \/>\nSecurityTrails<br \/>\nCisco<\/p>\n<p><b>\u00c5tkomst<\/b><br \/>\nP\u00e5 beg\u00e4ran<br \/>\nKr\u00e4ver ingen registrering<br \/>\n\u00d6ppen registrering<br \/>\nP\u00e5 beg\u00e4ran<br \/>\nKr\u00e4ver ingen registrering<br \/>\nP\u00e5 beg\u00e4ran<\/p>\n<p><b>API<\/b><br \/>\nFinns<br \/>\nFinns<br \/>\nFinns<br \/>\nFinns<br \/>\nFinns<br \/>\nFinns<\/p>\n<p><b>Klientens n\u00e4rvaro<\/b><br \/>\nFinns<br \/>\nFinns<br \/>\nFinns<br \/>\nIngen<br \/>\nIngen<br \/>\nIngen<\/p>\n<p><b>Datainsamlingens b\u00f6rjan<\/b><br \/>\n2010<br \/>\n2013<br \/>\n2009<br \/>\nVisar endast de senaste 3 m\u00e5naderna<br \/>\n2008<br \/>\n2006<\/p>\n<p><\/p>\n<p><i>Tabell 1. Tj\u00e4nster med tillg\u00e5ng till Passive DNS-data<\/i><\/p>\n<p><\/p>\n<h4>Anv\u00e4ndningsomr\u00e5den f\u00f6r Passive DNS<\/h4>\n<p><\/p>\n<p>Genom att anv\u00e4nda Passive DNS kan man bygga relationer mellan dom\u00e4nnamn, NS-servrar och IP-adresser. Detta m\u00f6jligg\u00f6r skapandet av kartor \u00f6ver de unders\u00f6kta systemen och \u00f6vervakning av f\u00f6r\u00e4ndringar i dessa kartor fr\u00e5n f\u00f6rsta uppt\u00e4ckten till nutid.<\/p>\n<p><\/p>\n<p>Passive DNS underl\u00e4ttar ocks\u00e5 identifieringen av avvikelser i trafiken. Till exempel, att \u00f6vervaka f\u00f6r\u00e4ndringar i NS-zoner och typer av A- och AAAA-poster g\u00f6r det m\u00f6jligt att identifiera skadliga webbplatser som anv\u00e4nder metoden fast flux, avsedd att d\u00f6lja C&amp;C fr\u00e5n uppt\u00e4ckten och blockering. Eftersom legitima dom\u00e4nnamn (utom de som anv\u00e4nds f\u00f6r lastbalansering) s\u00e4llan \u00e4ndrar sina IP-adresser, medan de flesta legitima zoner s\u00e4llan byter sina NS-servrar. <\/p>\n<p><\/p>\n<p>Passive DNS, till skillnad fr\u00e5n direkt s\u00f6kning av subdom\u00e4ner genom ordlistor, g\u00f6r det m\u00f6jligt att hitta \u00e4ven de mest exotiska dom\u00e4nnamnen, som exempelvis \u201c222qmxacaiqaaaaazibq4aaidhmbqaaa0undefined7140c0.p.hoff.ru\u201d. Det g\u00f6r det \u00e4ven m\u00f6jligt att uppt\u00e4cka testomr\u00e5den (och s\u00e5rbara) p\u00e5 webbplatser, utvecklarmaterial, etc. <\/p>\n<p><\/p>\n<h4>Unders\u00f6kning av l\u00e4nken i e-postmeddelandet med hj\u00e4lp av Passive DNS<\/h4>\n<p><\/p>\n<p>F\u00f6r n\u00e4rvarande \u00e4r skr\u00e4ppost en av de fr\u00e4msta metoderna som angripare anv\u00e4nder f\u00f6r att ta sig in p\u00e5 offrets dator eller stj\u00e4la konfidentiell information. L\u00e5t oss unders\u00f6ka l\u00e4nken i ett s\u00e5dant mail med hj\u00e4lp av Passive DNS f\u00f6r att bed\u00f6ma effektiviteten av denna metod.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i analytikens h\u00e4nder\" src=\"\/wp-content\/uploads\/2019\/10\/47d75ca464d6aa1c803670b1a53b4cf8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 2. Skr\u00e4ppostmeddelande<\/i><\/p>\n<p><\/p>\n<p>L\u00e4nken i detta meddelande ledde till webbplatsen magnit-boss.rocks, som erbj\u00f6d att automatiskt samla bonusar och tj\u00e4na pengar:<\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i analytikens h\u00e4nder\" src=\"\/wp-content\/uploads\/2019\/10\/f9bbb7d49579e5559c8fc76af0cfc13d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 3. Sida som finns p\u00e5 dom\u00e4nen magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>F\u00f6r att unders\u00f6ka denna webbplats anv\u00e4ndes <noindex><a rel=\"nofollow\" href=\"http:\/\/api.passivetotal.org\/api\/docs\/\">API Riskiq<\/a><\/noindex>, som redan har 3 befintliga kunder p\u00e5 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/python_api\">Python<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/chrislee35\/passivetotal\">Ruby<\/a><\/noindex> och <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/passivetotal\/rust_api\">Rust<\/a><\/noindex>. <\/p>\n<p><\/p>\n<p>F\u00f6rst tar vi reda p\u00e5 hela historien bakom detta dom\u00e4nnamn, och f\u00f6r detta anv\u00e4nder vi kommandot:<\/p>\n<p><\/p>\n<p><i>pt-client pdns \u2014fr\u00e5ga magnit-boss.rocks<\/i><\/p>\n<p><\/p>\n<p>Detta kommando kommer att ge information om alla DNS-resolvningar relaterade till detta dom\u00e4nnamn. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i analytikens h\u00e4nder\" src=\"\/wp-content\/uploads\/2019\/10\/bfaa82b2d7a753f684f32a93e29bf679.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 4. Svar fr\u00e5n API Riskiq<\/i><\/p>\n<p><\/p>\n<p>Vi presenterar svaret fr\u00e5n API i ett mer \u00f6versk\u00e5dligt format: <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i analytikens h\u00e4nder\" src=\"\/wp-content\/uploads\/2019\/10\/90bcff91f110ee8e8f97151618548cb3.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 5. Alla poster fr\u00e5n svaret<\/i><\/p>\n<p><\/p>\n<p>F\u00f6r vidare unders\u00f6kning togs IP-adresser som detta dom\u00e4nnamn resolvades till vid tidpunkten f\u00f6r mottagandet av mailet den 01.08.2019, dessa IP-adresser \u00e4r 92.119.113.112 och 85.143.219.65. <\/p>\n<p><\/p>\n<p>Genom att anv\u00e4nda kommandot: <\/p>\n<p><\/p>\n<p><i>pt-client pdns \u2014fr\u00e5ga<\/i><\/p>\n<p><\/p>\n<p>kan vi f\u00e5 alla dom\u00e4nnamn som \u00e4r kopplade till dessa IP-adresser.<br \/>\nIP-adressen 92.119.113.112 har 42 unika dom\u00e4nnamn som resolvades till denna IP-adress, bland vilka \u00e5terfinns f\u00f6ljande namn:<\/p>\n<p><\/p>\n<ul>\n<li>magnit-boss.club<\/li>\n<li>igrovie-avtomaty.me<\/li>\n<li>pro-x-audit.xyz<\/li>\n<li>zep3-www.xyz<\/li>\n<li>m.fl.<\/li>\n<\/ul>\n<p><\/p>\n<p>IP-adressen 85.143.219.65 har 44 unika dom\u00e4nnamn som resolvades till denna IP-adress, bland vilka \u00e5terfinns f\u00f6ljande namn:<\/p>\n<p><\/p>\n<ul>\n<li>cvv2.name (webbplats f\u00f6r f\u00f6rs\u00e4ljning av kreditkortinformation)<\/li>\n<li>emaills.world<\/li>\n<li>www.mailru.space<\/li>\n<li>m.fl.<\/li>\n<\/ul>\n<p><\/p>\n<p>Kopplingarna till dessa dom\u00e4nnamn tyder p\u00e5 phishing, men vi tror ju p\u00e5 goda m\u00e4nniskor, s\u00e5 vi kommer att f\u00f6rs\u00f6ka f\u00e5 en bonus p\u00e5 332 501,72 rubel? Efter att ha tryckt p\u00e5 knappen \u201cJA\u201d ber webbplatsen oss att \u00f6verf\u00f6ra 300 rubel fr\u00e5n kortet f\u00f6r att l\u00e5sa upp kontot och skickar oss till webbplatsen as-torpay.info f\u00f6r att ange uppgifterna. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i analytikens h\u00e4nder\" src=\"\/wp-content\/uploads\/2019\/10\/cb2525f6438e5b0314949eae1ab3b81b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 6. Huvudsidan p\u00e5 webbplatsen ac-pay2day.net<\/i><\/p>\n<p><\/p>\n<p>Ett till synes legitimt webbplats, med HTTPS-certifikat, och huvud sidan erbjuder att ansluta detta betalningssystem till sin webbplats, men tyv\u00e4rr fungerar alla l\u00e4nkar f\u00f6r anslutning inte. Detta dom\u00e4nnamn l\u00f6ses upp till endast 1 IP-adress \u2014 190.115.19.74. Den har i sin tur 1475 unika dom\u00e4nnamn som l\u00f6stes mot denna IP-adress, bland vilka finns namn som:<\/p>\n<p><\/p>\n<ul>\n<li>ac-pay2day.net<\/li>\n<li>ac-payfit.com<\/li>\n<li>as-manypay.com<\/li>\n<li>fletkass.net<\/li>\n<li>as-magicpay.com<\/li>\n<li>m.fl.<\/li>\n<\/ul>\n<p><\/p>\n<p>Som vi kan se, m\u00f6jligg\u00f6r Passive DNS att snabbt och effektivt samla in data om den unders\u00f6kta resursen och till och med bygga ett slags avtryck som g\u00f6r det m\u00f6jligt att avsl\u00f6ja ett helt schema f\u00f6r st\u00f6ld av personuppgifter, fr\u00e5n dess f\u00f6rv\u00e4rv till sannolika f\u00f6rs\u00e4ljningsst\u00e4llen. <\/p>\n<p>\n<img decoding=\"async\" alt=\"Passive DNS i analytikens h\u00e4nder\" src=\"\/wp-content\/uploads\/2019\/10\/e06af58c18cdd52e4790047c46768470.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><i>Figur 7. Karta \u00f6ver det unders\u00f6kta systemet<\/i><\/p>\n<p><\/p>\n<p>Det \u00e4r inte allt s\u00e5 ljus som vi skulle \u00f6nska. Till exempel kan s\u00e5dana utredningar l\u00e4tt krocka med CloudFlare eller liknande tj\u00e4nster. Och effektiviteten av den insamlade databasen beror mycket p\u00e5 antalet DNS-f\u00f6rfr\u00e5gningar som passerar genom modulen f\u00f6r insamling av Passive DNS-data. Men \u00e5 andra sidan \u00e4r Passive DNS en k\u00e4lla till tillsatsinformation f\u00f6r forskaren.<\/p>\n<p><\/p>\n<p><em>F\u00f6rfattare: Specialist vid Ural Center for Security Systems<\/em><\/p>\n<p>K\u00e4lla: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/470974\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430. \u0422\u0430\u043a \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c DNS \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u0430\u043d\u0441\u0430\u0445 \u0441\u0432\u044f\u0437\u0438, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c DNS \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0446\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c\u043e\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29133,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38841","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sv_SE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/passive-dns-v-rukah-analitika\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:26:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Passive DNS i h\u00e4nderna p\u00e5 en analytiker | ProHoster","description":"Domain Name System (DNS) \u00e4r liknande en telefonkatalog som \u00f6vers\u00e4tter anv\u00e4ndarv\u00e4nliga namn, s\u00e5som \"ussc.ru\", till IP-adresser.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Passive DNS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 | ProHoster","og:description":"\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d (DNS) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043c\u0435\u043d\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u00abussc.ru\u00bb, \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430.","og:url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/passive-dns-v-rukah-analitika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:17+00:00","article:modified_time":"2019-10-31T19:26:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38841","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:38:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:01:36","updated":"2026-01-23 23:38:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/38841","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=38841"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/38841\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/29133"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=38841"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=38841"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=38841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}