os

Netcraft:    [11]ar.ru is running Microsoft-IIS/4.0 on [12]NT4 or Windows 98
   
NMAP: Remote operating system guess: Windows NT4 / Win95 / Win98
ar.ru: Server: Microsoft-IIS/4.0
 
mirror taken by: mcintyre 
mirror taken on Sun Apr 16 14:34:35 MDT 2000
 
 1  gw.fe2-0.border1.phx.inficad.com (208.198.100.1)  0.771 ms  0.556 ms
 2  Serial2-1-1.GW1.PHX1.ALTER.NET (157.130.224.93)  2.847 ms  1.53 ms
 3  143.ATM2-0.XR2.LAX2.ALTER.NET (146.188.249.126)  10.223 ms  10.121 ms
 4  194.ATM3-0.TR2.LAX2.ALTER.NET (146.188.248.134)  9.76 ms  11.427 ms
 5  111.ATM7-0.TR2.NYC1.ALTER.NET (146.188.137.134)  74.202 ms  71.93 ms
 6  198.ATM6-0.XR2.NYC1.ALTER.NET (146.188.178.193)  71.362 ms  71.931 ms
 7  194.ATM3-0.GW1.NYC5.ALTER.NET (146.188.177.229)  73.999 ms  72.859 ms
 8  421.ATM4-0.BR1.NYC5.ALTER.NET (137.39.30.118)  73.54 ms  73.294 ms
 9  325.ATM1-0-0.CR1.STK2.Alter.Net (146.188.7.117)  170.802 ms  313.423 ms
10  322.ATM0-0-0.GW2.STK2.Alter.Net (146.188.14.162)  179.189 ms  178.157 ms
11  Macomnet-gw3.customer.ALTER.NET (146.188.36.134)  203.246 ms  216.901 ms
12  Telemost-macom.macomnet.net (195.128.65.189)  221.91 ms  219.723 ms
13  ns.telemost.ru (195.128.92.20)  228.718 ms  216.636 ms
14  www.stanford.ru (195.128.92.98)  217.778 ms  222.555 ms
 
Previously defaced on 00.01.01 twice by Irony and Adoni, hardc0rps
Internic: descr:   domen for publishing house Stanford Trident international
Sitename: Automobil Revue, Russia
Potentially offensive content on defaced page.
defacer: ErAZoR
remote os: Windows NT
remote server: Microsoft-IIS/4.0
Sun Apr 16 14:36:35 MDT 2000
ksa@goldsec.msk.su notified
ksa@telemost.ru notified