Robtex

Up: 96.43.152.0/21
Can't show all results, try to descend to a more specific CIDR
Down left: 96.43.152.0/23
Down right: 96.43.154.0/23
(Some of the IP numbers are capped at 3 entries)

IP	Type	Hostname
96.43.152.1	PTR	sfm-96.43.152.1.net.salesforce.com
96.43.152.8	A+PTR	proxy-chx.salesforce.com
96.43.152.25	A	monitor-chx.salesforce.com
96.43.152.27	PTR	sfm-96.43.152.27.net.salesforce.com
96.43.152.33	A	cs32-chx.force.com
96.43.152.34	A	cs32-chx.my.salesforce.com
96.43.152.35	A	cs33-chx.salesforce.com
96.43.152.36	PTR	sfm-96.43.152.36.net.salesforce.com
96.43.152.36	A	cs33-chx.force.com
96.43.152.37	A	cs33-chx.my.salesforce.com
96.43.152.39	A	na21-chx.force.com
96.43.152.40	PTR	sfm-96.43.152.40.net.salesforce.com
96.43.152.40	A	na21-chx.my.salesforce.com
96.43.152.48	A	na21-chx.inst.siteforce.com
96.43.152.50	PTR	sfm-96.43.152.50.net.salesforce.com
96.43.152.51	PTR	cs32-1-chx.inst.siteforce.com
96.43.152.64	A+PTR	smtp01-chx.mta.salesforce.com
96.43.152.69	PTR	smtp06-chx.mta.salesforce.com
96.43.152.71	A+PTR	smtp08-chx.mta.salesforce.com
96.43.152.72	A+PTR	smtp09-chx.mta.salesforce.com
96.43.152.82	A	umps1-chx.salesforce.com
96.43.152.83	A	la1-chx.salesforceliveagent.com
96.43.152.95	PTR	sfm-96.43.152.95.net.salesforce.com
96.43.152.108	PTR	sfm-96.43.152.108.net.salesforce.com
96.43.152.123	A	srd2-chx.net.salesforce.com
96.43.152.125	PTR	srd2-chx.net.salesforce.com
96.43.152.137	PTR	sfm-96.43.152.137.net.salesforce.com
96.43.152.145	PTR	sfm-96.43.152.145.net.salesforce.com
96.43.152.152	PTR	sfm-96.43.152.152.net.salesforce.com
96.43.152.161	PTR	cs32-2-chx.force.com
96.43.152.161	A	cs32-chx.force.com
96.43.152.162	PTR	cs32-2-chx.my.salesforce.com
96.43.152.162	A	cs32-chx.my.salesforce.com
96.43.152.163	A	cs33-chx.salesforce.com
96.43.152.164	PTR	sfm-96.43.152.164.net.salesforce.com
96.43.152.164	A	cs33-chx.force.com
96.43.152.165	PTR	cs33-2-chx.my.salesforce.com
96.43.152.165	A	cs33-chx.my.salesforce.com
96.43.152.167	PTR	na21-2-chx.force.com
96.43.152.167	A	na21-chx.force.com
96.43.152.168	PTR	sfm-96.43.152.168.net.salesforce.com
96.43.152.168	A	na21-chx.my.salesforce.com
96.43.152.170	PTR	sfm-96.43.152.170.net.salesforce.com
96.43.152.174	PTR	sfm-96.43.152.174.net.salesforce.com
96.43.152.187	PTR	sfm-96.43.152.187.net.salesforce.com
96.43.152.211	PTR	la1-2-chx.salesforce.com
96.43.152.211	A	la1-chx.salesforceliveagent.com
96.43.152.213	PTR	sfm-96.43.152.213.net.salesforce.com
96.43.152.229	PTR	sfm-96.43.152.229.net.salesforce.com
96.43.152.243	PTR	sfm-96.43.152.243.net.salesforce.com
96.43.152.252	PTR	sfm-96.43.152.252.net.salesforce.com
96.43.152.255	PTR	sfm-96.43.152.255.net.salesforce.com
96.43.153.32	PTR	sfm-96.43.153.32.net.salesforce.com
96.43.153.32	A	cs32-wax.salesforce.com
96.43.153.33	PTR	cs32-1-wax.force.com
96.43.153.33	A	relaytest-citizenshipgrants.cs32.force.com
96.43.153.33	A	cs32.force.com
96.43.153.34	PTR	cs32-1-wax.my.salesforce.com
96.43.153.36	PTR	cs33-1-wax.force.com
96.43.153.36	A	cs33-wax.force.com
96.43.153.36	A	cjms--qa--loop.cs33.visual.force.com
96.43.153.37	PTR	cs33-1-wax.my.salesforce.com
96.43.153.37	A	cs33-wax.my.salesforce.com
96.43.153.39	PTR	na21-1-wax.force.com
96.43.153.40	PTR	na21-1-wax.my.salesforce.com
96.43.153.40	A	na21.my.salesforce.com
96.43.153.40	A	elicenseohio.my.salesforce.com
96.43.153.48	PTR	na21-1-wax.inst.siteforce.com
96.43.153.48	A	na21-wax.inst.siteforce.com
96.43.153.64	A+PTR	smtp01-wax.mta.salesforce.com
96.43.153.69	A+PTR	smtp06-wax.mta.salesforce.com
96.43.153.70	A+PTR	smtp07-wax.mta.salesforce.com
96.43.153.76	PTR	smtp13-wax.mta.salesforce.com
96.43.153.78	A+PTR	smtp15-wax.mta.salesforce.com
96.43.153.82	PTR	umps1-1-wax.salesforce.com
96.43.153.82	A	0.umps1wx.salesforce.com
96.43.153.82	A	umps1wx.salesforce.com
96.43.153.83	PTR	la1-1-wax.salesforce.com
96.43.153.83	A	la1-wax.salesforceliveagent.com
96.43.153.83	A	d.la1wx.salesforceliveagent.com
96.43.153.160	PTR	sfm-96.43.153.160.net.salesforce.com
96.43.153.160	A	cs32-wax.salesforce.com
96.43.153.161	PTR	sfm-96.43.153.161.net.salesforce.com
96.43.153.161	A	relaytest-citizenshipgrants.cs32.force.com
96.43.153.161	A	cs32.force.com
96.43.153.162	PTR	sfm-96.43.153.162.net.salesforce.com
96.43.153.164	A	cs33-wax.force.com
96.43.153.164	A	cjms--qa--loop.cs33.visual.force.com
96.43.153.164	A	cs33.force.com
96.43.153.165	PTR	cs33-2-wax.my.salesforce.com
96.43.153.165	A	cs33-wax.my.salesforce.com
96.43.153.167	PTR	sfm-96.43.153.167.net.salesforce.com
96.43.153.168	PTR	na21-2-wax.my.salesforce.com
96.43.153.168	A	na21.my.salesforce.com
96.43.153.168	A	elicenseohio.my.salesforce.com
96.43.153.211	PTR	la1-2-wax.salesforce.com
96.43.153.211	A	la1-wax.salesforceliveagent.com
96.43.153.211	A	d.la1wx.salesforceliveagent.com
96.43.154.76	PTR	custom-domain-96.43.154.76.net.salesforce.com
96.43.154.110	PTR	custom-domain-96.43.154.110.net.salesforce.com
96.43.154.136	PTR	custom-domain-96.43.154.136.net.salesforce.com
96.43.154.165	PTR	custom-domain-96.43.154.165.net.salesforce.com
96.43.154.166	PTR	custom-domain-96.43.154.166.net.salesforce.com
96.43.154.175	PTR	custom-domain-96.43.154.175.net.salesforce.com
96.43.154.192	PTR	custom-domain-96.43.154.192.net.salesforce.com
96.43.154.196	PTR	custom-domain-96.43.154.196.net.salesforce.com
96.43.154.233	PTR	custom-domain-96.43.154.233.net.salesforce.com