Page 1 of 2

Help for web-providor

Posted: Fri Jun 04, 2004 11:56 am
by Joe
I have been offered a little job with some web providor where I have to create a few scripts but one of which I am pretty confused about. What I am required to do is whois a given IP address so the domain names are shown, very similar to, http://whois.webhosting.info/213.165.237.226 but im not sure whether all I need to do is a whois or if its alot more complicated. Can anyone please help out as im in desperate need of the cash, hehe to continue my studys.


All the best!

Posted: Fri Jun 04, 2004 12:28 pm
by magicrobotmonkey
you're just trying to resolve the domain name given the IP?

Posted: Fri Jun 04, 2004 12:34 pm
by Joe
yes i am trying to resolve and display all of the domain names which are related to the given IP. I gave an example. http://whois.webhosting.info/213.165.237.226

Posted: Fri Jun 04, 2004 1:01 pm
by launchcode
10 seconds on Google found this:

http://www.phpwhois.com/

Should be ideal, no?

Posted: Fri Jun 04, 2004 1:09 pm
by Joe
Hmmm that doesn't display all of the actual domain names, instead it displays details of one in particular. Hmm any more help!

Posted: Fri Jun 04, 2004 1:30 pm
by magicrobotmonkey
You could try modifying that one! I doubt if you'll get something that does *exactly* what you want it to!

Posted: Fri Jun 04, 2004 2:16 pm
by launchcode
Joe - that's exactly what a WHOIS search does, it returns the information about the given domain. If you want to search a whole load of them, you'll need to write a script to send those requests off to the whois search and collate the responses. That is what they're paying you for, right? ;)

Posted: Fri Jun 04, 2004 10:33 pm
by d3ad1ysp0rk
launchcode wrote:Joe - that's exactly what a WHOIS search does, it returns the information about the given domain. If you want to search a whole load of them, you'll need to write a script to send those requests off to the whois search and collate the responses. That is what they're paying you for, right? ;)
Well, he wants a reverse WHOIS search almost.

Say my computer hosts 3 sites, (bob.com, sally.com, and steve.net), he wants to be able to get all 3 domains just by typing in my IP into his script.

Posted: Sat Jun 05, 2004 9:05 pm
by launchcode
Ahhh.. ok. That isn't actually possible - even via tools like nslookup, whois, host, dig, etc. WebHostingInfo (the site in question) must crawl whois information and store the results of forward-resolution for later display when you look-up an IP address. In any case their information appears to be wrong, for some of my domains it listed sites that no longer resolve and for other IPs it was missing hundreds of names - so basically you cannot rely on it.

Posted: Sat Jun 05, 2004 9:07 pm
by tim
LiLpunkSkateR wrote: Say my computer hosts 3 sites, (bob.com, sally.com, and steve.net), he wants to be able to get all 3 domains just by typing in my IP into his script.
ahhhhh, so your the one who took sally.com! I wanted that

:wink: :P

Posted: Sun Jun 06, 2004 4:52 pm
by anotherJean
well you could hack bind :wink:

(not recommended , this is illegal and absolutely unethical)

Posted: Sun Jun 06, 2004 5:43 pm
by Joe
Well how would I go about doing that. :)

Posted: Sun Jun 06, 2004 6:57 pm
by launchcode
Bind is just a DNS server - open source - and easily modified. There isn't a single hack you could install into it that would reveal multi-homed domains - unless you ran every single ISP and hosting company in the world of course :)

Posted: Sun Jun 06, 2004 9:14 pm
by anotherJean
Joe wrote:Well how would I go about doing that. :)
easy as pie, hacking on the fly 8)

well, the information you desire is inside bind(dns server).
so you just need to hack the server, read out the zones and... voila.
you got it!

Posted: Mon Jun 07, 2004 10:56 am
by Joe
Well im sort of confused here. I don't know what you really mean by this hacking a server and reading the zones. How would I do this. Is there any references on this particular subject that anyone is aware of? :)

Thanks