You’re in the suitable place if you wish to know extra about Reverse DNS Lookup and Reverse IP Lookup and the varied instruments to carry out them.
DNS lookup is a precious useful resource that may assist organizations and attackers detect DNS vulnerabilities.
The implementation of the DNSSEC protocol is among the best-known methods to guard in opposition to DNS threats resembling DNS hijacking and on-path assaults.
This text describes easy methods to carry out DNS and IP reverse lookup utilizing some on-line safety analysis instruments.
Let’s begin.
What’s Reverse DNS Lookup?
A typical DNS document factors a site title to an IP handle, which tells a pc the place to ship a request for info on the Web. This is called ahead decision and has a ahead DNS document. This occurs each time you go to a web site on the web. DNS document is rather like a telephone e book for web through which we retailer the contacts with the title for cellular numbers.
A reverse DNS document is the precise reverse of a ahead DNS document. You simply begin wanting up the IP handle to see what area or hostname is related to it.
Reverse DNS, often known as rDNS, shouldn’t be as extensively used as standard DNS lookups. A website should level to an IP handle, however the IP handle doesn’t need to have a Reverse DNS document. Even with out an rDNS document, domains will nonetheless load.
Reverse DNS knowledge is saved in a specific PTR document sort.
Performing a Reverse DNS lookup on an IP might be performed just by operating instructions in a terminal. On Home windows, Mac and Linux there’s a command known as nslookup.
Within the instance under, you possibly can see that I carried out DNS and reverse DNS lookup on the goal web site.
C:Usersgeekflare>nslookup dnsleaktest.com
Server: reliance.reliance
Handle: 2245:211:c34b:a1c1::c458:1041
Non-authoritative reply:
Title: dnsleaktest.com
Handle: 23.239.16.110
C:Usersgeekflare>nslookup 23.239.16.110
Server: reliance.reliance
Handle: 2245:211:c34b:a1c1::c458:1041
Title: li685-110.members.linode.com
Handle: 23.239.16.110This performs a search and first signifies the place the data comes from. Right here the main points concerning the DNS resolver info shall be displayed first. It then shows the host title referenced by the reverse DNS document for the required IP handle.
What’s reverse IP lookup?
A reverse IP lookup appears to be like up the area title and IP handle and lists all domains hosted on the identical server. It finds all DNS A data related to a selected IP handle. It basically returns a listing of all domains with the identical IP handle.
The query now’s what the attacker will do by figuring out the names of different internet functions operating on the identical server. In any case, they aren’t targets for hackers.
To illustrate web site A is the goal internet utility and hackers could not discover any vulnerabilities to use.
On this case, a hacker performs the reverse IP lookup and suppose he finds out that Web site B can be registered on the identical server. Now suppose that web site B accommodates bugs which can be simple to use, and by exploiting these bugs or vulnerabilities, they will get their fingers on the server internet hosting these internet functions. This additionally offers the attacker entry to all info on web site A.
These web sites could also be from the identical group or from totally different organizations.
To cease a thief, you need to suppose like a thief. Subsequently, data about Reverse IP Lookup is essential for safety researchers.
That is the most important disadvantage of shared internet hosting. Hosting corporations can cost considerably much less for his or her providers by internet hosting a number of websites on the identical server. When a number of web sites share one enormous server, it’s known as shared internet hosting.
We have put collectively a listing of DNS and IP Reverse Lookup instruments that allow you to search proper in your browser.
Let’s get began!
Reverse IP Instruments
Reverse IP/DNS instruments of the WhoisXML API permit customers to see all connections between IP addresses and hostnames. This product line is powered by a number one repository of passive DNS knowledge with billions of IP and DNS data.
WhoisXML API reverse IP/DNS instruments have gained the belief of 1000’s of customers, enabling them so as to add DNS context to safety platforms, speed up menace detection and response, develop menace intelligence, and extra.
Presently the product line features a:
- API with output queries in XML and JSON codecs. The API permits customers to question as much as 10 IPs per second and simply integrates with Splunk and Postman platforms.
- DNS database of information obtainable in a unified and constant CSV format, up to date every day, weekly or month-to-month relying on person necessities. Obtain the CSV pattern to check the information in your setting.
- GUI lookup device that permits customers to verify the domains that share an IP handle in seconds and obtain the leads to JSON format.
View this product sheet to see how the WhoisXML API’s IP and DNS knowledge can meet particular knowledge necessities.
View dns
Viewdns is a useful and glorious internet service that may carry out each the DNS and IP reverse lookup on a site or IP handle.
Enter the specified web site title or IP handle and click on the ‘GO’ button to proceed.
This web site additionally has a number of different instruments resembling reverse whois lookup, spam database lookup, MAC handle lookup, firewall check and plenty of extra.
HackerTarget
HackerTarget is one other useful gizmo for checking the Reverse DNS data and Reverse IP lookup of any web site.
To search out the main points of the goal web site, enter the area title or IP handle and click on ‘submit’.
This web site has varied instruments to safe the programs, from discovering assault surfaces to figuring out vulnerabilities resembling internet scanners and port scanners.
Area Instruments
The Domaintools web site is a strong device to carry out the reverse IP lookup on any web site. Enter the area title or its IP handle within the textual content field and click on ‘Lookup’. It shortly offers the specified outcomes.
Utilizing this internet service, you can too carry out different operations resembling checking internet hosting historical past, bulk parsing of whois queries, and even IP monitoring (monitoring modifications in registered domains related to an IP handle).
mxtoolbox
The MXtoolbox device is a very simple device to make use of. Enter an IP handle within the enter discipline to carry out the reverse DNS lookup.
Different options of this device embrace blacklist checking, DMARC (Area-based Message Authentication, Reporting, and Conformance), and LOC lookup.
Utilizing the Crips device in Linux
Alternatively, you possibly can carry out the Reverse DNS and IP lookup in Linux utilizing the Crips device.
This device shouldn’t be pre-installed in Linux. It’s important to set up it manually from their GitHub repository.
Crips is a group of on-line IP instruments that aid you shortly get details about IP addresses and DNS data.
The options embrace Whois lookup, Traceroute, Reverse DNS Lookup, GeoIP Lookup, Port Scan and Reverse IP Lookup.
Set up & use
- Open the terminal.
- Use the next git repository to clone to your system.
git clone https://github.com/Manisso/Crips.gitGo to that listing and run the utility with Python.
cd Crips && python Crips.py
Then select the specified choice. To carry out Reverse DNS Lookup, enter 4, and to carry out Reverse IP Lookup, enter 7. You may even carry out different operations resembling Geo Lookup and port scanning.
For instance, right here I’m performing a reverse IP lookup utilizing the Crips device.
In just a few seconds, it is going to give the end result after getting into the goal area handle.
_|_|_| _|
_| _| _|_| _|_|_| _|_|_|
_| _|_| _| _| _| _|_|
_| _| _| _| _| _|_|
_|_|_| _| _| _|_|_| _|_|_|
_|
_|
}--{+} Coded By Manisso {+}--{
}----{+} fb.me/dzmanisso {+}----{
}--{+} Greetz To IcoDz {+}--{
{1}--Whois lookup
{2}--Traceroute
{3}--DNS Lookup
{4}--Reverse DNS Lookup
{5}--GeoIP Lookup
{6}--Port Scan
{7}--Reverse IP Lookup
{0}--INSTALL & UPDATE
{99}-Exit
Crips~# 7
Enter IP Or Area : renjith.org
<html>
<head><title>301 Moved Completely</title></head>
<physique>
<heart><h1>301 Moved Completely</h1></heart>
<hr><heart>nginx</heart>
</physique>
</html>
File Saved On :
/residence/author/Crips
File : index.html?q=renjith.org
Proceed [Y/n] ->And eventually, the output is saved in an index file in the identical listing. In the event you open that file, you’ll find the domains hosted on the identical server.
3dcopilot.com
4cares.com
5dockrealty.com.au
7evencos.com
aajtakuttarakhand.com
aajtakuttrakhand.com
aargeesglobal.com
aayanmedicose.com
abhipetrolpump.in
abritenow.com
accnongov.org.in
adelaidesolarandelectrical.com.au
adgnito.com
advanceawamr.com
advertobuzz.in
affirmationonart.co.uk
affluentgs.com
afghanistanhub.com
ainalbeeah.com
albert.right now
alhayahparty.org
aliving.ae
altsstore.com
altsstore.in
altwaf.com
americatvmount.com
anchorjo.com
andllo.comConclusion 👇
I hope you discovered this text very useful in studying the distinction between DNS and IP reverse lookup and the totally different strategies and instruments to carry out it.
You might also be enthusiastic about easy methods to discover DNS IP.