A "reverse A" lookup is a DNS query that maps an IP address to its corresponding domain name.

By using a reverse A lookup to find domains that have pointed to a specific IP address, security teams can identify other domains that may be associated with the same infrastructure or threat actors.

Cyber criminals often use tactics such as domain squatting, where they register a domain that is similar to a legitimate domain in order to deceive users, and domain spoofing, where they impersonate a legitimate domain by using a similar or misspelled domain name.

By identifying other domains that have pointed to the same IP address, security teams can identify potential instances of domain squatting or spoofing and take appropriate action before either become a problem.

Monitoring reverse A lookup data

You can monitor results populated on the Explore screen for any changes, saving you time and resources by automating key queries across a range of internal workflows.

Monitors run once every 24 hours. You'll be alerted when Silent Push detects new results via email (filtering/sorting options are not applied)