Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Lately I've been tracking a spammer on craigslist. I recently discovered that he's added a new technique to his arsenal, he registered a whole bunch of domain names but they all resolve to the same ip address.

Is there any way to take an ip address and get a list of all the domain names that resolve to that ip?

share|improve this question
add comment

6 Answers

up vote 2 down vote accepted

Bing can search on IP address, which tends to work for me.

For example, searching for other things hosting with myipneighbors.com

ip:74.208.74.176

Returns:

http://www.bing.com/search?q=ip%3A74.208.74.176
myipneighbors.com
hotelir.com
share|improve this answer
2  
Note that this is not conclusive and will only contain domains in Bing's index. It'll be a good indicator but you can't rely on it. –  JamesHannah Feb 10 '11 at 12:21
    
Agreed, I wouldn't rely on it as a definitive list. –  Dave Feb 10 '11 at 17:00
add comment

No.

It's not the way DNS works. You can register any number of domains against a single IP, and not bother putting in a reverse DNS entry for any of them if you want.

Unless you want to brute force resolve the internet. :)

share|improve this answer
add comment

Yes. There is. It's not 100%, but it certainly works well enough.

Check out: http://www.net-square.com/msnpawn/index.shtml

There are other tools that do this sort of thing as well, but this will get you going.

share|improve this answer
add comment

Check out www.myipneighbors.com, it is mostly designed to help people on shared hosting know what other domains are on the same server, but it sounds like it would also apply to what you are trying to do.

share|improve this answer
add comment

No, in short.

The only relationship from IP addresses to hostnames (note the direction) is reverse DNS (PTR). Which is a one-to-one mapping and won't assist you.

share|improve this answer
add comment

Here ya go.

Be interested to hear if it works for you:

http://www.domaintools.com/reverse-ip/

share|improve this answer
    
That site simply resolves the reverse DNS record (PTR record) for that IP. First of all it will only ever point to a single domainname. Second, even that single result does not have to be meaningful, since it depends on the 'spammer' to register the correct PTR record. How likely is that? –  Martijn Heemels Jul 1 '09 at 14:06
1  
It does a little more than that. The information is sourced by crawling sites and comparing datasets. It's far from foolproof and is unlikely to be any use at all on obscure or recently registered domains. If you're ever Googled for an IP or ASN then you might have seen Robtex, who among others, perform a similar service for free. –  Dan Carley Jul 1 '09 at 14:12
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.