shodan : net:"SUBNET/MASK"
zoomeye : IP/MASK
- The last piece of information that is really interesting is to check if the same Google Analytics / Adsense ID is used in several websites. This technique was discovered in 2015 and is well described here by Bellingcat.
Using Google Dorks to find subdomains
# find subdomains
# without www and subd1
site:"something.com" -www -subd1