Registered members can get up to 500'000 results from a single query using the web form or 10 million using the API (see below).

Search hosts across up to a /24 of public IP addresses.įree users are limited by the number of results. Not only can you use the Reverse IP lookup to find web hosts on a single IP address, the query can also be performed against a CIDR network block. Potentially bypassing the security controls of the target site. If for example, your primary target web site appears to be secure, you may be able to gain access to the underlying operating system by attacking a less secure site on the same server.

It is also common in many organizations and can be an excellent way to expand the attack surface during reconnaissance of a web server. This is a common technique in shared hosting environments. In order to avoid the detection process itself being detected, typically tools will avoid sending mass amounts of ICMP packets that clearly show anyone monitoring the network the intentions of the attacker but instead try other methods (such as attempting connections on well-known ports).The technique known as Reverse IP Lookup is a way to identify hostnames that have DNS (A) records associated with an IP address.Ī web server can be configured to serve multiple virtual hosts from a single IP address. The third thing that may be happening is that it is not a standard ICMP ping being used to detect hosts and the remote firewall is blocking detection. You may have been scanning on an interface that only contains your machine (maybe a virtual interface). This network range may have been detected by looking at the interface address as it can be calculated from the machine's IP and the netmask. Typically a home network will go from 192.168.1.1 to 192.168.1.254 which can also be represented as 192.168.1.0/24 in CIDR format. If you've specified this yourself, you may have specified it incorrectly. It is not really feasible to ping every possible address in order to discover machines, hence the address range of your local network must be known. There are a few things that might be happening here.

Advanced ip lookup