Reverse ip, find domain names on ip address

Question

How and from where websites like this http://www.yougetsignal.com/tools/web-sites-on-web-server/ are getting this information from? How can I develop such tool?

Thank you.

Radian

duplicate superuser.com/questions/287577/… – Yolanthe

Answer 1

You can use nslookup on the IP. Reverse DNS is defined with the .in-addr.arpa domain.

Example:

nslookup somedomain.com

yields 123.21.2.3, and then you do:

nslookup 123.21.2.3

this will ask 3.2.21.123.in-addr.arpa and yield the domain name (if there is one defined for reverse DNS).

Crossland

It only displays one domain. Is there a way or parameter to list all the domains pointing to a specific IP address? – Cardoza

Answer 2

You can use ping -a <ip> or nbtstat -A <ip>

Pretender

Answer 3

They're just trawling lists of web sites, and recording the resulting IP addresses in a database.

All you're seeing is the reverse mapping of that list. It's not guaranteed to be a full list (indeed more often than not it won't be) because it's impossible to learn every possible web site address.

Borage

Answer 4

windows user can just using the simple nslookup command

G:\wwwRoot\JavaScript Testing>nslookup 208.97.177.124
Server:  phicomm.me
Address:  192.168.2.1

Name:    apache2-argon.william-floyd.dreamhost.com
Address:  208.97.177.124


G:\wwwRoot\JavaScript Testing>

http://www.guidingtech.com/2890/find-ip-address-nslookup-command-windows/

if you want get more info, please check the following answer!

https://superuser.com/questions/287577/how-to-find-a-domain-based-on-the-ip-address/1177576#1177576

Franko

Answer 5

From about section of Reverse IP Domain Check tool on yougetsignal:

A reverse IP domain check takes a domain name or IP address pointing to a web server and searches for other sites known to be hosted on that same web server. Data is gathered from search engine results, which are not guaranteed to be complete.

Salty

Not always. Hoster can change reverse DNS lookup. I would do -1 for that , but i can't. btw, reverse dns used by mail services like google and other. – Phlogistic

Answer 6

This worked for me to get domain in intranet

https://gist.github.com/jrothmanshore/2656003

It's a powershell script. Run it in PowerShell

.\ip_lookup.ps1 <ip>

Yolanthe

Answer 7

Using the dig command tool, you can retrieve the PTR DNS record if it is set. PTR provides a domain name for reverse lookup.

dig -x 8.8.8.8 +short

Gives: dns.google

Similarly with IPv6:

dig -x 2001:4860:4860::8888 +short

Gives: dns.google

N.B: not all IP addresses have PTR records set up!

Bags