Using ffuf

ffuf -u http://{ip_address} -H "Host: FUZZ.domain.name" \ -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt -fw 4