Results 1 to 10 of 10

Thread: rIP - Reverse IP

  1. #1
    Senior Member
    Join Date
    Jan 2003
    Posts
    3,915

    rIP - Reverse IP

    This is another tool I wrote about a while ago, rIP - Reverse IP is rather cool.

    It's developed by a group called Crush, and they maintain a database (currently .com, .org and .net mapping every domain by IP, so they can query an IP and find all associated domains).... This is VERY handy for pen-testers and social engineers.

    Example query (antionline.com):

    Showing records 1 - 3 out of 3 for antionline.com. (63.146.109.212).

    antionline.com antionline.org
    antionline.net
    An interesting query to run is google.com, you can see how many people have redirected their domains to Google (who knows why)... there are quite a few.

    Either way... it's a very interesting tool. The database is available (single purchase, no updates for $20) and you can purchase a new database monthly.... so, if you have a use for it and don't want to use it online but would rather direct access to the database you're looking at $240/year.

  2. #2
    Senior Member
    Join Date
    Oct 2007
    Location
    do a whois search on my ip...
    Posts
    268
    Interesting tool, but for $240/year USD... I think I will stick to Netcraft.

    http://news.netcraft.com/

  3. #3
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,325
    Quote Originally Posted by ArPaNET
    Interesting tool, but for $240/year USD... I think I will stick to Netcraft.

    http://news.netcraft.com/
    My thoughts exactly. There are far too many tools out there that are free to pay for free information.
    Quitmzilla is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.

  4. #4
    Senior Member
    Join Date
    Jan 2003
    Posts
    3,915
    Quote Originally Posted by ArPaNET
    Interesting tool, but for $240/year USD... I think I will stick to Netcraft.

    http://news.netcraft.com/
    Nobody said you had to pay for it... the $240/year USD would be for a vendor of some sort that may want to purchase the database for inclusion with a product... Searching the database through the web interface is free...

    Out of curiosity... where's the netcraft tool that performs this? I haven't seen one before.

  5. #5
    Junior Member
    Join Date
    Feb 2008
    Posts
    2
    Hello-

    Thanks HTRegz for plugging the site. And like you said, the results are free and even available as a gz file! (useful for large result sets)

    I will be adding .us and .info in the near future and I will also be attempting to resolve common subdomains (www, mail, etc.)

    The primary reason I sell the database is to pay for my costs. I have to rent VMs to perform the mass lookup. I think $20 is a reasonable cost for the ENTIRE database, and of course it is not required that a person buy it every month. If there is interest in the future for "subscriptions" to the build I will certainly create a discounted price model.

    Anyway, I hope you guys like the site.

    -d-

  6. #6
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,323
    Quote Originally Posted by HTRegz
    Nobody said you had to pay for it... the $240/year USD would be for a vendor of some sort that may want to purchase the database for inclusion with a product... Searching the database through the web interface is free...

    Out of curiosity... where's the netcraft tool that performs this? I haven't seen one before.
    See here: http://news.netcraft.com/

    Netcraft is more than an IP reversal. It often also indicates a best guess as to OS and Webserver (it used to have version info as well but I'm not sure if it still includes that).
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  7. #7
    Junior Member
    Join Date
    Feb 2008
    Posts
    2
    Quote Originally Posted by MsMittens
    See here: http://news.netcraft.com/

    Netcraft is more than an IP reversal. It often also indicates a best guess as to OS and Webserver (it used to have version info as well but I'm not sure if it still includes that).
    Reverse IP != Reverse DNS

    Reverse IP is a generic term that has been used to indicate looking up all vhosts on a particular IP address. You can not get this information with a reverse DNS lookup, as it will only return the records from the authoritative zone.

    AFAIK, Netcraft does not offer a reverse IP tool, i.e. a tool used to search by IP for all vhosts on a system. All I can see is a query which returns domains matched by the input string. If they *do* provide a true reverse ip tool, I would certainly like to see it. I like to test my results against similar services.

    -d-

  8. #8
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,323
    Ah.. I see what you're referring to and true.
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  9. #9
    Senior Member
    Join Date
    Oct 2007
    Location
    do a whois search on my ip...
    Posts
    268
    Quote Originally Posted by HTRegz
    Nobody said you had to pay for it...
    I didn't get that out of your post... thanks for clearing that up!
    I am on the same page as MsMittens; neat program though =)

  10. #10
    Senior Member
    Join Date
    Jan 2003
    Posts
    3,915
    Quote Originally Posted by disfigure
    Reverse IP != Reverse DNS

    Reverse IP is a generic term that has been used to indicate looking up all vhosts on a particular IP address. You can not get this information with a reverse DNS lookup, as it will only return the records from the authoritative zone.

    AFAIK, Netcraft does not offer a reverse IP tool, i.e. a tool used to search by IP for all vhosts on a system. All I can see is a query which returns domains matched by the input string. If they *do* provide a true reverse ip tool, I would certainly like to see it. I like to test my results against similar services.

    -d-
    Thank you

    For a second I thought I was going crazy

Similar Threads

  1. Cisco Security Advisory: Cisco Telnet Denial of Service Vulnerability
    By Spyder32 in forum Miscellaneous Security Discussions
    Replies: 1
    Last Post: May 27th, 2008, 01:17 PM
  2. Reverse DNS Lookup
    By XTC46 in forum Web Security
    Replies: 29
    Last Post: February 4th, 2006, 01:53 PM
  3. Replies: 4
    Last Post: November 10th, 2004, 07:58 AM
  4. Reverse DNS mapping delegation
    By nske in forum Network Security Discussions
    Replies: 8
    Last Post: June 7th, 2004, 07:29 PM
  5. Reverse DNS
    By jared_c in forum Network Security Discussions
    Replies: 5
    Last Post: June 17th, 2002, 12:30 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •