Skip to content

What is Reverse DNS?

Reverse DNS is the process of finding a hostname associated with an IP address. Forward DNS lookup does the opposite: it helps you find an IP address using a hostname. It uses special PTR (Pointer) records stored in part of DNS to find the name for you. Reverse DNS is also sometimes called PTR lookup, reverse resolution, or rDNS.

Example:

  • IP: 8.8.8.8
  • Reverse DNS query: 8.8.8.8.in-addr.arpa
  • Result: dns.google

Email servers use reverse DNS to verify that an incoming email’s IP address matches the domain it claims to be from, reducing spam. Network admins also use troubleshooting tools like dig -x or nslookup to identify devices on a network by hostname rather than IP address.

Reverse DNS also serves security purposes: Web servers and security tools log domain names instead of numeric IP addresses to make data readable and investigate malicious activity.

rDNS doesn’t work for every IP address, however. Reverse DNS is controlled by whoever owns the IP block (usually ISPs or cloud providers), and it’s not mandatory to have PTR records (although it’s recommended). It’s not always symmetrical either; the forward and reverse may not match.