DNS
Domain Name System (DNS) - Port 53
Zone Transfer
Zone transfer information can be used to reveal all DNS information such as additional host names.
dig axfr @IP # Try zone transfer without domain
dig axfr @IP DOMAIN # Try zone transfer guessing the domain