Reverse IP Lookup
Find the hostname (PTR record) associated with any IP address. Includes forward DNS verification and geolocation info.
What is Reverse DNS?
Reverse DNS (rDNS) maps an IP address back to a hostname using PTR records. It is the opposite of forward DNS, which resolves hostnames to IP addresses. rDNS is stored in the in-addr.arpa zone.
Why PTR Records Matter
PTR records are essential for email deliverability. Many mail servers reject messages from IPs without valid PTR records. They are also used for logging, auditing, and verifying the identity of network hosts.
Forward Verification
Forward-confirmed reverse DNS (FCrDNS) checks that a PTR hostname resolves back to the original IP. A match confirms proper configuration and is a strong indicator of legitimate server identity.
How to Use Reverse IP / PTR Lookup
The Reverse IP / PTR Lookup tool resolves IP addresses to their associated hostnames by querying PTR (pointer) DNS records. This reveals which domains are hosted on a given IP address and verifies forward-confirmed reverse DNS. Essential for email server configuration verification and network reconnaissance.
Open the Reverse IP Tool
Navigate to the Reverse IP / PTR Lookup from the cybersecurity tools menu. The tool provides an input field for entering an IP address to resolve.
Enter an IP Address
Type or paste the IPv4 or IPv6 address you want to reverse-resolve. The tool will query the in-addr.arpa or ip6.arpa zones to find associated PTR records.
Run the Reverse Lookup
Click the lookup button to query DNS servers for PTR records associated with the IP address. Results show the hostname or hostnames mapped to that IP.
Review the Results
Examine the returned hostnames and verify whether forward DNS (hostname to IP) matches the reverse DNS (IP to hostname) for forward-confirmed reverse DNS validation.
Investigate Further
Use the discovered hostnames for further research by performing WHOIS lookups or DNS queries on the returned domain names to build a complete picture.
Common Use Cases
Email Server Configuration
Verify that your mail server IP address has a proper PTR record that matches the server hostname to improve email deliverability and avoid spam filters.
Network Reconnaissance
Discover which domains and services are hosted on a specific IP address during authorized security assessments and network mapping exercises.
Investigating Suspicious IPs
Resolve suspicious IP addresses found in server logs to their hostnames, helping identify the source organization or hosting provider.
Shared Hosting Discovery
Find out which other websites share the same server IP address, useful for evaluating neighborhood risk in shared hosting environments.
Pro Tips
- -Forward-confirmed reverse DNS (FCrDNS) requires that the PTR record hostname resolves back to the same IP. This is a strong indicator of legitimate ownership.
- -Many cloud-hosted IPs return generic PTR records like ec2-1-2-3-4.compute.amazonaws.com, which is normal for shared hosting infrastructure.
- -Mail servers should always have proper PTR records, as many receiving servers reject email from IPs without valid reverse DNS.
- -Not all IP addresses have PTR records configured. A missing PTR record does not necessarily indicate anything suspicious.
You might also like
WHOIS Lookup
Look up domain registration info, expiry dates and nameservers.
CybersecuritySRI Hash Generator
Generate Subresource Integrity hashes for scripts and stylesheets.
CybersecurityJPG ↔ PNG
Convert images between JPG and PNG instantly, without uploading to any server.
ImageJSON Formatter
Format, validate and beautify JSON data instantly.
Developer