Reverse IP Lookup API: Find All Domains on Any IP Address
Discover how reverse IP lookup works and how to find all domains hosted on an IP address. Use cases for security research, competitive analysis, and hosting audits.
What Is Reverse IP Lookup?
Reverse IP lookup (also called reverse DNS lookup or IP to domain lookup) finds all domain names hosted on a specific IP address. While a regular DNS lookup resolves a domain to an IP address, reverse IP lookup does the opposite: it finds all domains pointing to a given IP.
This is particularly useful because many websites share the same IP address through shared hosting, CDN services, or virtual private servers. Reverse IP lookup reveals these relationships.
Common Use Cases
Security Auditing
Identify all domains on your server IPs. Detect unauthorized domains that could indicate a compromise or misuse of your hosting infrastructure.
Competitive Research
Discover other domains and projects owned by a competitor by finding all domains hosted on their IP addresses.
Server Consolidation
Audit your server infrastructure to identify underutilized servers, plan consolidations, and optimize hosting costs.
Fraud Detection
Link related fraudulent domains by finding domains sharing the same IP address as known malicious infrastructure.
How the Reverse IP API Works
Send the IP Address
Send a GET request with the target IP address to the reverse IP lookup endpoint:
curl -X GET "https://api.ops.tools/v1/reverse-ip?ip=93.184.216.34" \ -H "Authorization: Bearer YOUR_API_KEY"
Receive Domain List
The API returns a JSON response with all domains found on the IP address, along with metadata like domain age, registrar, and DNS status.
Integrate and Analyze
Process the results in your application. Filter by domain age, status, or registrar to surface relevant insights for your use case.
Response Data Fields
| Field | Description | Example |
|---|---|---|
| ipAddress | The queried IP | 93.184.216.34 |
| domains | List of domains on this IP | ["example.com", ...] |
| domainCount | Total domains found | 42 |
| isCdn | Whether IP belongs to a CDN | false |
Code Examples
Python
import requests
apiUrl = "https://api.ops.tools/v1/reverse-ip"
headers = {"Authorization": "Bearer YOUR_API_KEY"}
response = requests.get(apiUrl, headers=headers, params={
"ip": "93.184.216.34"
})
data = response.json()
print(f"IP: {data['ipAddress']}")
print(f"Domains found: {data['domainCount']}")
for domain in data["domains"]:
print(f" - {domain}")Node.js
const response = await fetch(
"https://api.ops.tools/v1/reverse-ip?ip=93.184.216.34",
{ headers: { "Authorization": "Bearer YOUR_API_KEY" } }
);
const data = await response.json();
console.log(`Found ${data.domainCount} domains on ${data.ipAddress}`);
data.domains.forEach(d => console.log(` - ${d}`));Best Practices for Reverse IP Lookups
- Cache results for 24-48 hours to reduce API calls
- Combine with IP geolocation for location-aware insights
- Monitor IPs associated with your infrastructure regularly
- Filter out CDN IP ranges (Cloudflare, AWS, etc.) when checking for shared hosting
- Use pagination for IPs with large numbers of domains
Combine reverse IP lookup with IP geolocation data for richer infrastructure insights. Professional plans start at $29/month.
Frequently Asked Questions
Q: What is reverse IP lookup?
Reverse IP lookup finds all domain names hosted on a specific IP address. This is the opposite of a regular DNS lookup which finds the IP address for a domain. It reveals shared hosting relationships and infrastructure connections.
Q: How to find all domains hosted on an IP?
Use a reverse IP lookup API like Ops.Tools. Send a GET request with the target IP address, and the API returns all domains mapped to that IP address, along with metadata like domain age and status.
Q: What are the use cases for reverse IP lookup?
Common use cases include security auditing (finding malicious domains on your IP), competitive research (discovering competitor domains), server consolidation (identifying shared hosting), and fraud detection (linking related domains).
Q: How accurate is reverse IP lookup?
Reverse IP lookup accuracy depends on the data source. The Ops.Tools API uses real-time DNS PTR records combined with historical data, providing high accuracy for domains with proper DNS configuration. Domains behind CDNs may not appear in results.
Related Articles
Domain Monitoring Tools vs DIY Scripts in 2026: DNS, WHOIS, SSL, and Workflow Costs
A practical build-vs-buy framework for teams deciding whether to keep domain monitoring in scripts or move to an API platform with bulk checks and operational guardrails.
DNS Migration Checklist for Production Teams in 2026: Validate DNS, SSL, IP, and Headers Before Cutover
Use a repeatable cutover checklist to validate DNS records, registration context, IP ownership, certificates, and HTTP headers before you move production traffic.
SecurityTrails Alternatives for Ops Teams in 2026: Pricing Visibility, Workflow Fit, and Verified Coverage
Compare SecurityTrails, IPinfo, HackerTarget, WhoisXML API, and Ops.Tools with a public-docs-only framework built for platform, security, and infrastructure buyers.
Discover All Domains on Any IP Address
Reverse IP lookup API with real-time data. Plans from $29/month.