UUtiliTools
home/cybersecurity/reverse-ip

Reverse IP Lookup

Find the hostname (PTR record) associated with any IP address. Includes forward DNS verification and geolocation info.

What is Reverse DNS?

Reverse DNS (rDNS) maps an IP address back to a hostname using PTR records. It is the opposite of forward DNS, which resolves hostnames to IP addresses. rDNS is stored in the in-addr.arpa zone.

Why PTR Records Matter

PTR records are essential for email deliverability. Many mail servers reject messages from IPs without valid PTR records. They are also used for logging, auditing, and verifying the identity of network hosts.

Forward Verification

Forward-confirmed reverse DNS (FCrDNS) checks that a PTR hostname resolves back to the original IP. A match confirms proper configuration and is a strong indicator of legitimate server identity.

Email

How to Use Reverse IP / PTR Lookup

The Reverse IP / PTR Lookup tool resolves IP addresses to their associated hostnames by querying PTR (pointer) DNS records. This reveals which domains are hosted on a given IP address and verifies forward-confirmed reverse DNS. Essential for email server configuration verification and network reconnaissance.

1

Open the Reverse IP Tool

Navigate to the Reverse IP / PTR Lookup from the cybersecurity tools menu. The tool provides an input field for entering an IP address to resolve.

2

Enter an IP Address

Type or paste the IPv4 or IPv6 address you want to reverse-resolve. The tool will query the in-addr.arpa or ip6.arpa zones to find associated PTR records.

3

Run the Reverse Lookup

Click the lookup button to query DNS servers for PTR records associated with the IP address. Results show the hostname or hostnames mapped to that IP.

4

Review the Results

Examine the returned hostnames and verify whether forward DNS (hostname to IP) matches the reverse DNS (IP to hostname) for forward-confirmed reverse DNS validation.

5

Investigate Further

Use the discovered hostnames for further research by performing WHOIS lookups or DNS queries on the returned domain names to build a complete picture.

Common Use Cases

Email Server Configuration

Verify that your mail server IP address has a proper PTR record that matches the server hostname to improve email deliverability and avoid spam filters.

Network Reconnaissance

Discover which domains and services are hosted on a specific IP address during authorized security assessments and network mapping exercises.

Investigating Suspicious IPs

Resolve suspicious IP addresses found in server logs to their hostnames, helping identify the source organization or hosting provider.

Shared Hosting Discovery

Find out which other websites share the same server IP address, useful for evaluating neighborhood risk in shared hosting environments.

Pro Tips

  • -Forward-confirmed reverse DNS (FCrDNS) requires that the PTR record hostname resolves back to the same IP. This is a strong indicator of legitimate ownership.
  • -Many cloud-hosted IPs return generic PTR records like ec2-1-2-3-4.compute.amazonaws.com, which is normal for shared hosting infrastructure.
  • -Mail servers should always have proper PTR records, as many receiving servers reject email from IPs without valid reverse DNS.
  • -Not all IP addresses have PTR records configured. A missing PTR record does not necessarily indicate anything suspicious.