How can I get all IPs of a domain name, say, www.google.com?
Of course, nslookup and host command will give me IPs of a domain. But what shall I do if I want a list ALL (or, at least a lot more than just one or two..) IPs of that domain?
You might use the actual whois command, which should work on any IP address. The whois command will also return information such as the numbers of network bits (17). From this, you can determine the actual number of IP addresses. For example, if I whois the IP address 18.104.22.168, I will get:
The /17 means that a sub-class-B network, and that the number of possible addresses is :
2^(32-17) - 2
2^15 - 2
32,768 - 2
32766 possible IP addresses. The -2 is because of the very first address (the network address 22.214.171.124) , and the very last one, which is the broadcast address (126.96.36.199), both addresses cannot be used to point to a host.
This is for IPv4 addresses, of course.
The whois will return different information when you use a domain name such as google.com. Finally, keep in mind that the returned IP for a host name can depend on the country where you actually are.
host google.com will return a single IP address when queried from Ottawa, Canada.
Thank you for your interest in this question. Because it has attracted low-quality answers, posting an answer now requires 10 reputation on this site.
Would you like to answer one of these unanswered questions instead?