Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an IP list and I have to seperate them as static ones and dynamic ones. Is there any tool or way to do that? Thank for any advice...

share|improve this question
IPs on a company LAN, or IPs showing up in a log of an internet facing server? – rackandboneman May 17 '12 at 14:08
they are from all over the world. – ibrahim May 17 '12 at 14:28
up vote 12 down vote accepted

tl;dr - Nope.

The difference between static addresses and dynamic ones is merely that dynamic addresses are handed out by a DHCP server. Period. The range of IP addresses that a DHCP server can hand out is completely arbitrary, so without access to the DHCP server's configuration, there's no way to tell definitively which is which.

Depending on what lease duration the DHCP server is configured with, you may be able to infer information about certain IP by seeing if their ARP mapping changes over time.

If you're talking about public IPs, you may be able to do a reverse dns lookup on the IP, and if a PTR record exists for it, the hostname returned may give you some information about whether it's a static or dynamic address.

To reiterate, though, with the IP alone, there's no way to get the information you're looking for.

share|improve this answer
I would consider AutoIP to be "dynamic" too. ;) – Chris S May 17 '12 at 14:11
Heh, good point. – EEAA May 17 '12 at 14:11
You can hand out static reservations via DHCP as well. – Thomas G May 17 '12 at 15:05
@ThomasG - Yes, but those would still be considered as dynamic, since they are not set manually on the client. – EEAA May 17 '12 at 15:07
@ErikA Dynamic as far as the protocols involved but sold as "static" by the service provider as a non-changing address for a customer's CPE. It all depends on who picks the words. – Thomas G May 17 '12 at 16:17

There isa good chance to do a reverse ptr naming analysis and check for a dynamic / dial in name pattern there. THis should help for internet. has a short mention of that - most providers use recognizable naming standards for dynamic ip addresses. It is prtty informal but you can check for patterns (dynamic, dial-in) or strings that show part of the ip address in reverse dns (i.e. for the ip is an indication this is from at least a pool allocated for semi dynamic allocation.

If that is not the case - or it is a LAN where the reverse entry is set to the machine name.... no way.

IT alway has error margings (example above the IP may be from a dynamic pool, but the DHCP may statically assign it via reservation).

At the end it is not the IP address that is dynamic. THis is like asking whether you can get the gender of a contract holder for a phone by looking at the phone number. Dynamic IP Addresss are not different - only managed by a computer.

share|improve this answer
+1 for handy tip – gparent May 17 '12 at 14:18

Generally - you cannot do this. But if you need to set up some security settings for your service (e.g. disable mail sourced from dynamic IP) - you can use dns-list for reverse-check ip If sorbs return nxdomain on request for IP.AD.DR.ES ( - it means that ip address is not listed as dynamic.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.