[Full-disclosure] www.whois.sc

[Jimmy Stewpot <squid@xxxxxxxxxx>]

Hello,

I have recently seen a web page www.whois.sc. One of the features that
they have is a "reverse ip" lookup. With that tool I can lookup the IP
address of a server and it will return how many domains are hosted on it.

What I have been trying to figure out is how does that work? I did a
tcpdump on the server that I looked up and it didnt see any abnormal
packets. Does anyone have any idea how that feature works?

For example If lookup the following :

http://www.whois.sc/reverse-ip/?lookup=210.193.162.9

It comes back and shows me several domain names hosted (two to be exact).

Can anyone shed some light on that?

Thanks
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/