Contents x
      Locate IPs associated with a specific domain name (forward A)
      • 26 Jul 2024
      • 1 Minute to read
      • Print
      • Dark
        Light
      Contents

      Locate IPs associated with a specific domain name (forward A)

      • Updated on 26 Jul 2024
      • 1 Minute to read
      • Print
      • Dark
        Light
      Article summary

      A "forward A" lookup is a DNS query that maps a domain name to its corresponding IP address.

      By using a forward A lookup to locate IPs associated with a specific domain name, security teams can identify the servers or hosts associated with the domain, and identify other domains or IPs that are associated with the same infrastructure or threat activity.

      By verifying the accuracy and completeness of DNS information for a particular domain, security teams can identify potential instances of DNS hijacking or spoofing, where a malicious actor may have taken control of a domain and redirected traffic to a different IP address or domain.

      Execute a forward A lookup

      1. Navigate to Explore DNS Data > IPs Hosting a Domain

      2. Enter the server's domain name

      3. Select the type of record to output (A/AAAA)

      4. (Optional) Specify the time frame when the A record was first seen

      5. (Optional) Set the time frame when the A record was last seen

      6. (Optional) Tick Last 24 Hours to only show A records first observed in the last 24 hours

      7. Specify a Sort Order that applies itself to outputted results

      8. Click Search

      Monitoring forward A lookup data

      You can monitor results populated on the Explore screen for any changes, saving you time and resources by automating key queries across a range of internal workflows.

      Monitors run once every 24 hours. You'll be alerted when Silent Push detects new results via email (filtering/sorting options are not applied)

      1. Once you've received a set of results, click the Monitor button on the top right

      2. Specify a Monitor name

      3. Enter a Description

      4. Click Save

      5. Your monitored query is now visible in Monitors > Monitored Queries

      6. Read this article for information on how to share a monitor

      Was this article helpful?
      What's Next