Waraxe IT Security Portal

tinman · Active user

Hi - serious n00b here so forgive me. I've done a cursory search and found one other post of a similar nature but it doesn't give me much to work on.

Here is the scenario; An IIS6 server with a single IP hosting ten or so websites. The server is running on server 2003 but as a virtual server (probably a single machine running something like VMware at a guess). The whois of the IP reveals the hosting company name and not any of the hosted websites. Is there a way to find the names/domains hosted on that single IP?

I've tried the tools listed in this post:
http://www.waraxe.us/ftopict-2641.html

but they don't give anything away. I tried DIG {ipaddress} but that gave away nothing. The probably has to be a way to do it as the FQDN's must be resolved to an IP somewhere in the DNS system but my knowledge of this is basic to say the least.

It crossed my mind that Apache2 with virtual hosts on a single IP may also need the same method or approach.

I bet someone here is laughing at my inability to find the answer to this simple question! Put me out of my misery please!

TIA.