Reverse IP Lookup API

What is a Reverse IP Lookup?

A reverse IP lookup identifies all domain names hosted on a given IP address. While traditional DNS queries resolve a domain to an IP, reverse IP reveals the domains behind shared hosting and cloud infrastructure.

This technique is essential for mapping digital infrastructure and uncovering hidden relationships between assets.

Asset discovery and attack surface mapping
Bug bounty reconnaissance
Threat intelligence investigations
Infrastructure clustering analysis

Reverse IP Lookup API Example

curl -H "x-ninja: YOUR_API_KEY" https://ip-ninja.com/api/v1/history/ip/7.7.7.7

{
  "ip": "7.7.7.7",
  "asn": 749,
  "hostnames": [
    {
      "hostname": "3.cluster.test.bifrost.pt.xiaomi.com",
      "last_seen": "2024-01-31"
    },
    {
      "hostname": "anverbo.ru",
      "last_seen": "2026-02-17"
    },
    {
      "hostname": "boyulclinic.com",
      "last_seen": "2024-01-19"
    },
    {
      "hostname": "bristoldigital.com",
      "last_seen": "2024-01-22"
    },
    {
      "hostname": "m.boyulclinic.com",
      "last_seen": "2024-01-19"
    },
    {
      "hostname": "visatest.com",
      "last_seen": "2026-02-19"
    },
    {
      "hostname": "www.boyulclinic.com",
      "last_seen": "2024-01-19"
    }
  ]
}

Why Reverse IP Intelligence Matters

Modern hosting environments allow hundreds of domains to share a single IP address. Reverse IP intelligence helps uncover hidden infrastructure connections.

Identify malicious hosting clusters
Correlate phishing campaigns
Track hosting migrations
Strengthen external attack surface management (EASM)

Frequently Asked Questions

How accurate is reverse IP lookup?

Accuracy depends on DNS visibility and hosting architecture. IP Ninja aggregates multiple data sources to provide reliable IP-to-domain associations.

Does reverse IP work on shared hosting?

Yes. Reverse IP lookup is especially useful in shared hosting environments where multiple domains reside on a single IP address.

What is the difference between reverse DNS and reverse IP lookup?

Reverse DNS (rDNS) relies on PTR records managed by the IP owner. Reverse IP lookup (like IP Ninja) uses massive passive DNS databases to identify ALL domains pointing to an IP, even those without a PTR record.

How many domains can share the same IP address?

In shared hosting or CDN environments, a single IP address can host thousands or even millions of domains. IP Ninja is built to handle high-density IP addresses.

Does the API support IPv6?

Yes. Our engine fully supports both IPv4 and IPv6 addresses for reverse lookup and historical analysis.

Is reverse IP included in all plans?

Reverse IP lookup is available across subscription tiers with varying rate limits. Visit the pricing section to compare available plans.

Can I combine reverse IP with WHOIS or subdomain data?

Yes. All endpoints are accessible through a unified API, allowing seamless correlation between reverse IP, WHOIS, subdomain enumeration and geolocation data.

What is a Reverse IP Lookup?

Reverse IP Lookup API Example

Why Reverse IP Intelligence Matters

More Than Reverse IP – A Complete OSINT API

WHOIS JSON API

Subdomain Enumeration API

IP Geolocation API

Unified Pricing