[OT] Utility to lookup hosts on an IP address

[Hall Stevenson]

Is there a tool along the lines of nslookup, dig, host, and so on that
can list what websites, i.e. domain names, are hosted on a particular IP
address ??


Regards
Hall

--
-=< A .sig ?? What in the world is a .sig for ?? ;-) >=-


--
To UNSUBSCRIBE, email to [email]debian-user-request@lists.debian.org[/email]
with a subject of "unsubscribe". Trouble? Contact [email]listmaster@lists.debian.org[/email]

[Kirk Strauser]

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQA/LR1y5sRg+Y0CpvERApTMAJ41rtpFMtOz2k72VxGUriWtdg8iCw CgmsmK
l7cR0UThBQs4Afli5mNhF4A=
=ixGQ
-----END PGP SIGNATURE-----

[Dave Carrigan]

On Sun, Aug 03, 2003 at 01:47:37PM +0000, Hall Stevenson wrote:

> Is there a tool along the lines of nslookup, dig, host, and so on that
> can list what websites, i.e. domain names, are hosted on a particular IP
> address ??

No. The host command will tell you what the reverse name of an IP
address is:

$ host [url]www.rudedog.org[/url]
[url]www.rudedog.org[/url] CNAME gw.rudedog.org
gw.rudedog.org A 206.124.142.242
$ host 206.124.142.242
Name: dsl-142-242.sea.blarg.net
Address: 206.124.142.242

However, there is no way to figure out that 206.124.142.242 is
[url]www.rudedog.org[/url], [url]www.chezcarrigan.com[/url], gallery.chezcarrigan.com, etc.

The only feasible way to do that would be to transfer every single DNS
zone on the known internet(*) and find the A records that pointed to
206.124.142.242, and even then, that wouldn't tell you exactly what you
want to know.

Note that Apache's mod_info can tell you all of the virtual hosts on a
single IP, but the Apache admin would first have to enable it and second
would have to be stupid (or brave) enough to allow access to it on the
public internet.

(*) This is an exercise left for the reader.

--
Dave Carrigan
Seattle, WA, USA
[email]dave@rudedog.org[/email] | [url]http://www.rudedog.org/[/url] | ICQ:161669680
UNIX-Apache-Perl-Linux-Firewalls-LDAP-C-C++-DNS-PalmOS-PostgreSQL-MySQL


--
To UNSUBSCRIBE, email to [email]debian-user-request@lists.debian.org[/email]
with a subject of "unsubscribe". Trouble? Contact [email]listmaster@lists.debian.org[/email]

[Alex Malinovich]

On Sun, 2003-08-03 at 11:38, Dave Carrigan wrote:

> On Sun, Aug 03, 2003 at 01:47:37PM +0000, Hall Stevenson wrote:

> > Is there a tool along the lines of nslookup, dig, host, and so on that
> > can list what websites, i.e. domain names, are hosted on a particular IP
> > address ??

>
> No. The host command will tell you what the reverse name of an IP
> address is:
>
> $ host [url]www.rudedog.org[/url]
> [url]www.rudedog.org[/url] CNAME gw.rudedog.org
> gw.rudedog.org A 206.124.142.242
> $ host 206.124.142.242
> Name: dsl-142-242.sea.blarg.net
> Address: 206.124.142.242
>
> However, there is no way to figure out that 206.124.142.242 is
> [url]www.rudedog.org[/url], [url]www.chezcarrigan.com[/url], gallery.chezcarrigan.com, etc.
>
> The only feasible way to do that would be to transfer every single DNS
> zone on the known internet(*) and find the A records that pointed to
> 206.124.142.242, and even then, that wouldn't tell you exactly what you
> want to know.

To be certain that you're getting all of the possible websites on a
particular IP the above would be necessary. However, going under the
assumption that most websites that are on the same IP will use the same
nameserver as well, it might be a good start to just get the A records
on that particular nameserver.

--
Alex Malinovich
Support Free Software, delete your Windows partition TODAY!
Encrypted mail preferred. You can get my public key from any of the
pgp.net keyservers. Key ID: A6D24837

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQA/LVQBBPYwh6bSSDcRAsLRAKCAcW4FjK965UUwSh5VkZeqfynUNg CgoWdV
kyeaEpTw6a28OxBa7c5NmCU=
=ov6Q
-----END PGP SIGNATURE-----

[Hall Stevenson]

* Hall Stevenson (hallstevenson@mindspring.com) [030803 13:52]:

> Is there a tool along the lines of nslookup, dig, host, and so on that
> can list what websites, i.e. domain names, are hosted on a particular IP
> address ??

I wasn't aware of such a tool and told the person who asked me the same.
I told them I didn't think it was really possible... Well, it *may* be
possible, but not a simple thing. From the responses so far, I guessed
fairly well. :-)

Hall


--
To UNSUBSCRIBE, email to [email]debian-user-request@lists.debian.org[/email]
with a subject of "unsubscribe". Trouble? Contact [email]listmaster@lists.debian.org[/email]