full-disclosure - www.whois.sc

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue Jun 14 14:04:26 2005
From: squid at oranged.to (Jimmy Stewpot)
Subject: www.whois.sc

Hello,

I have recently seen a web page www.whois.sc. One of the features that
they have is a "reverse ip" lookup. With that tool I can lookup the IP
address of a server and it will return how many domains are hosted on it.

What I have been trying to figure out is how does that work? I did a
tcpdump on the server that I looked up and it didnt see any abnormal
packets. Does anyone have any idea how that feature works?

For example If lookup the following :

http://www.whois.sc/reverse-ip/?lookup=210.193.162.9

It comes back and shows me several domain names hosted (two to be exact).

Can anyone shed some light on that?

Thanks