What it is
Lists the other hostnames Shodan has recorded against the same IP address, alongside domains and subdomains linked to the target through its DNS records.
Why it matters
Shared hosting muddies this, since a thousand unrelated sites can sit behind one address. On dedicated infrastructure it is a fast way to find the rest of an organisation's estate: staging environments, retired marketing sites, and internal tools that were never meant to face the internet.
How this assessment works
Skopeon Labs queries public infrastructure signals and authoritative network protocols directly from external sensor nodes. All evaluations are completely non-invasive and agentless, assessing observable configurations without sending malicious payloads or disrupting service.
Operational Scope & Limitations
This check evaluates public perimeter responses observable at the time of inquiry. Endpoints protected behind third-party reverse proxies or CDNs reflect the edge configuration of the proxy layer.