Resolve host name from IP address

Question

I'm looking for a command line tool which gets an IP address and returns the host name, for Windows.

score 177 · Accepted Answer · edited Oct 11 '16 at 12:58

177

The command you are looking for is called nslookup, works fine for reverse lookups IFF someone has configured a reverse zone file, which they don't always do.

edited Oct 11 '16 at 12:58

Bruno Bieri

103

answered Oct 13 '09 at 14:29

Ward

13,010

score 126 · Answer 2 · answered Oct 13 '09 at 16:32

if all the above fails, and you are specifically looking for a Windows machine, you can use

nbtstat -a 192.168.1.50

The data returned will be all the NetBIOS records the machine has. The one with a <20h> record type will usually be the machine's name.

score 92 · Answer 3 · answered Oct 13 '09 at 14:44

92

For many IP addresses you could just use ping -a, for example

ping -a 209.85.229.106

will return

Pinging ww-in-f106.google.com [209.85.229.106] with 32 bytes of data:

Reply from 209.85.229.106...........

answered Oct 13 '09 at 14:44

Marko Carter

4,212

score 38 · Answer 4 · answered Oct 13 '09 at 14:36

38

If you use nslookup command with the IP address as its first argument will return the PTR record (the reverse entry) if it exists. For example:

nslookup 192.168.1.50

answered Oct 13 '09 at 14:36

Kyle Brandt

85,693

score 3 · Answer 5 · edited Jun 25 '19 at 17:01

3

Use dig. A Windows port is available from the ISC here (look in the immediate download box for the link to the zip file). Here's their man page reference for dig.

Ward's point about the reverse lookup records often not getting created is very much true. Reverse lookups often do fail because many admins don't bother creating the ptr records.

edited Jun 25 '19 at 17:01

Marcello Miorelli

235

answered Oct 13 '09 at 14:35

squillman

38,163

score 3 · Answer 6 · edited Jul 17 '17 at 15:11

(tested under Windows 10 x64)

From command line:

FOR /F "tokens=2 delims= " %A in ('2^>NUL NSLOOKUP "%IP_ADDRESS%" ^| FINDSTR /C:": "') do ECHO %A

Within a script:

FOR /F "tokens=2 delims= " %%A in ('2^>NUL NSLOOKUP "%IP_ADDRESS%" ^| FINDSTR /C:": "') do ECHO %%A

Two (side)notes:

To supress NSLOOKUP errors you have to use 2^>NUL instead of 1^>NUL
I've used FINDSTR /C to extract the value after the four whitespace characters. As the four spaces only seem to exist for the Name: entry, this appears to be only way to make it work on other localized systems.

score 2 · Answer 7 · answered Dec 07 '22 at 05:14

2

tracert might be an option.

tracert 10.12.190.51

Results in:

Tracing route to LAP8662.aus.int.example.com [10.12.190.51]
over a maximum of 30 hops:
1    <1 ms    <1 ms    <1 ms  LAP8662.aus.int.example.com [10.12.190.51]
Trace complete.

answered Dec 07 '22 at 05:14

Fidel

434

score 1 · Answer 8 · answered Jul 25 '19 at 08:29

1

psexec \192.168.0.65 hostname

DMHD006 hostname exited on 192.168.0.65 with error code 0.

answered Jul 25 '19 at 08:29

Sahin

11

score 0 · Answer 9 · answered Jun 27 '17 at 23:34

0

if you want to know the host-name in same network then please use another machine which have same network and use below commend
Ping -an ip addres

answered Jun 27 '17 at 23:34

user422366

21

Resolve host name from IP address

9 Answers9

Linked