Can you lookup all hosted sites on any given DNS server?

[born2drv]

Just curious if the general public or advanced web whiz can look up a dns server (like ns1.hosthere.net or whatever) and view all domains being hosted by said company without actually hacking into it?

[pixel_juice]

The one way I can think of doing this is a DNS zone transfer, but only if the server (and your ISP) is set up to allow such activity.

Zone transfers are so you can copy all of the DNS from one server to another, however most servers will block this because of the security risk it represents.

[divaone]

if they host 100 or less websites you can use the reverse lookup at w/hois.sc (remove the slash). I believe you need to register as a member (for free).

[Itagnc]

That's pretty handy little function at w/hois.sc. It would be great if they could show all matches.

It appears they are querying this info from refreshed database, and not doing a live reverse nslookup on the server. My understanding is that a reverse nslookup will not provide a list of all domains associated with a particular IP or server.

[panic]

I know there's a way to do it in console, but I'm not sure exactly how. There's probably a few scripts/programs that can do it for you as well.

-p

[bignet]

you cannot trust the accuracy of w/hois.sc
it tracks limited types of domains and is not even good at it
uk domain for instance are not listed at all

[GeorgeGG]

Would this be the same as getting the IP Address
for ns1.hosthere.net, like: 123.123.123.123
and scanning all the the address from 123.123.123.0 throught
123.123.123.255 on port 80 and checking the return status?

GGG

[divaone]

you cannot trust the accuracy of w/hois.sc
it tracks limited types of domains and is not even good at it
uk domain for instance are not listed at all

the site states clearly what domains they index. if one is looking to include uk domains i'm sure there are lots of sites out there for examples we can share. its less a matter of accuracy and more a matter of limitations.

[nakulgoyal]

Are there any other tolls which do this even better?