What Is a Reverse Lookup?
A reverse lookup is any search that works backwards from a known identifier (IP address, email address, phone number) to find associated information. In the context of internet infrastructure, the most important type is reverse DNS, which maps an IP address back to a hostname. Other forms of reverse lookup serve different investigative and verification purposes.
Reverse DNS (PTR Records)
Reverse DNS is the process of resolving an IP address to a hostname, the opposite of a standard forward DNS lookup (hostname to IP). It relies on PTR (Pointer) records stored in a special DNS zone.
How It Works
For IPv4, reverse DNS uses the in-addr.arpa zone. The IP address is written in reverse order:
- IP:
192.0.2.1 - Reverse DNS query:
1.2.0.192.in-addr.arpa - PTR record:
mail.example.com.
For IPv6, reverse DNS uses the ip6.arpa zone, with each hexadecimal nibble reversed and separated by dots.
PTR records are managed by whoever controls the IP address block, typically the ISP or hosting provider. You usually need to request PTR record creation through your provider's control panel or support.
Why Reverse DNS Matters for Email
Reverse DNS is critical for email deliverability. When a mail server receives an SMTP connection, it often performs a reverse DNS lookup on the connecting IP:
- Gmail checks that the sending IP has a valid PTR record and that the PTR hostname resolves back to the same IP (forward-confirmed reverse DNS, or FCrDNS).
- Outlook factors PTR record presence and consistency into its sender reputation evaluation.
- Yahoo similarly expects sending IPs to have matching PTR records.
A missing or mismatched PTR record can cause email rejection or spam folder placement. Check your sending IP's reverse DNS with our IP reputation tool.
Reverse IP Lookup
A reverse IP lookup identifies all domains hosted on a given IP address. This is useful for:
- Shared hosting analysis. Determining what other websites share your server's IP. If a neighbor is sending spam, it can affect your IP reputation.
- Security investigations. Identifying all services associated with a suspicious IP.
- Infrastructure mapping. Understanding how a target's hosting is organized.
Reverse IP lookups rely on databases that map IP addresses to domains based on DNS records, web crawling, and certificate transparency logs. Results are not always complete, especially for servers using name-based virtual hosting.
Reverse Email Lookup
A reverse email lookup searches for information associated with an email address, such as the owner's name, social media profiles, or other accounts. These lookups aggregate data from public records, data breaches, social media APIs, and WHOIS records.
Limitations: Results vary widely in accuracy. Privacy regulations (GDPR, CCPA) and platform changes have reduced the data available to these services.
Use Cases
- Email server administration. Verifying FCrDNS for your sending IPs to meet deliverability requirements.
- Spam investigation. Looking up the PTR and IP reputation of servers sending suspicious email. Analyze headers with our header analysis tool and check IPs with our IP reputation tool.
- Network troubleshooting. Identifying which server an IP belongs to when reviewing logs or firewall rules.
- Domain reconnaissance. Mapping infrastructure by finding all domains on a given IP or all IPs associated with a domain via our DNS lookup tool.
Stay on top of your email infrastructure. Sign up for the InboxTooling newsletter for deliverability tips, tool updates, and best practices.