How many times we need to find all the client's web servers on the same IP? Since System Administrators began using "virtual hosts" by domain name with Apache or other web servers, it has become so complicated to find out wich virtual host are hosted on a single IP.

In this cases, how can we figure out all domains on a given IP?

First of all, we need get the IP adreess of a webserver.

We can use nslookup to ge it.

hacking@behindthefirewalls.blogspot.com:~$ nslookup www.newyorktimes.com 8.8.8.8

Server:     8.8.8.8
Address:    8.8.8.8#53

Non-authoritative answer:
www.newyorktimes.com    canonical name = www.nytimes.com.
Name:    www.nytimes.com
Address: 170.149.172.130


Then, we can use the next alternatives.

ip.robtex.com





Bing



Yahoo


 




www.yougetsignal.com