os

Netcraft:    user.onlinexpress.net is running Apache/1.3.12 (Unix) (Red Hat/Linux)
   PHP/3.0.15 on Linux
NMAP: Remote operating system guess: Linux 2.1.122 - 2.2.16
user.onlinexpress.net: Server: Apache/1.3.12 (Unix)  (Red Hat/Linux) PHP/3.0.15
 
mirror taken by: null     
mirror taken on Wed Sep 20 14:20:48 MDT 2000
 
 1  gw.fe2-0.border1.phx.inficad.com (208.198.100.1)  0.375 ms  0.275 ms
 2  Serial2-1-1.GW1.PHX1.ALTER.NET (157.130.224.93)  1.18 ms  3.79 ms
 3  143.ATM3-0.XR2.LAX2.ALTER.NET (146.188.249.134)  12.476 ms  12.9 ms
 4  194.at-2-0-0.XR2.LAX9.ALTER.NET (152.63.112.98)  16.85 ms  14.597 ms
 5  190.ATM7-0.BR1.LAX9.ALTER.NET (152.63.113.21)  13.186 ms  15.423 ms
 6  137.39.52.86 (137.39.52.86)  28.904 ms  20.349 ms
 7  sl-bb21-ana-13-0.sprintlink.net (144.232.1.197)  27.399 ms  30.925 ms
 8  sl-bb20-ana-14-0.sprintlink.net (144.232.1.169)  28.273 ms  34.915 ms
 9  sl-bb22-fw-12-0.sprintlink.net (144.232.9.250)  46.765 ms  44.768 ms
10  sl-bb20-atl-13-0.sprintlink.net (144.232.18.22)  70.521 ms  77.151 ms
11  sl-gw13-atl-0-0-0.sprintlink.net (144.232.12.207)  63.58 ms  64.097 ms
12  sl-onlinecomp-1-0.sprintlink.net (144.232.211.18)  80.031 ms  77.666 ms
13  skywalker.onlinexpress.net (208.21.183.4)  78.953 ms  82.597 ms
 
Internic: ONLINE COMPUTERS, INC. (ONLINEXPRESS4-DOM)
Sitename: Online Computers, INC.
Potentially offensive content on defaced page.
This is part of a MASS hack.
defacer: rsh
remote os: Lr
remote os: Red Hat/Linux 2.1.122 - 2.2.16
remote server: Apache/1.3.12
Wed Sep 20 14:26:29 MDT 2000
mirror number:    7692
shared.lists.defaced@cert.org notified of defacement
nipc@fbi.gov notified of defacement
ONLINE1@INFOAVE.NET notified
rclong@ONLINEXPRESS.NET notified
 
[00.09.20] Lr [rsh]            <a href="2000/09/20/user.onlinexpress.net/">Online Computers, INC.</a> (<a href="http://user.onlinexpress.net/">user.onlinexpress.net</a>)