os

new fingerprint mailed to attrition_sigs@insecure.org for nmap upgrade
Netcraft:    www.wmcstations.com is running Microsoft-IIS/4.0 on NT4 or Windows 98
   
NMAP: Aggressive OS guesses: Windows NT4 / Win95 / Win98 (94%), Windows NT 4 SP3 (92%), Alteon AceSwitch 110 (software 4.0.37) (90%), Cisco Catalyst 1900 switch or Netopia DSL/ISDN router or Bay 350-450 (90%), Cisco 760 Series (non IOS) or IBM Stackable Hub (90%), Digital Link DL2001 Management Access Processor (90%), Windows for Workgroups 3.11 / TCP/IP-32 3.11b stack (90%), Microsoft NT 4.0 Server SP5 + 2047 Hotfixes (90%)
www.wmcstations.com: Server: Microsoft-IIS/4.0
 
mirror taken by: jericho  
mirror taken on Sun Oct 15 17:55:39 MDT 2000
 
 1  gw.fe2-0.border1.phx.inficad.com (208.198.100.1)  0.402 ms  0.392 ms
 2  Serial2-1-1.GW1.PHX1.ALTER.NET (157.130.224.93)  2.448 ms  1.451 ms
 3  143.ATM2-0.XR1.LAX2.ALTER.NET (146.188.249.122)  13.262 ms  13.697 ms
 4  195.at-1-1-0.TR1.LAX9.ALTER.NET (152.63.112.142)  17.262 ms  16.858 ms
 5  131.at-5-0-0.TR1.ATL5.ALTER.NET (152.63.0.109)  88.622 ms  88.285 ms
 6  0.so-7-0-0.XR1.ATL5.ALTER.NET (152.63.9.230)  95.256 ms  91.085 ms
 7  193.ATM6-0.GW5.ATL5.ALTER.NET (152.63.82.9)  80.834 ms  88.312 ms
 8  interland1-gw.customer.alter.net (157.130.255.134)  79.541 ms  84.503 ms
 9  10.0.0.2 (10.0.0.2)  92.183 ms  91.251 ms
10  int-5500.interland.net (216.25.127.50)  90.024 ms  89.753 ms
11  wmcstations.com (209.35.87.249)  79.235 ms  77.723 ms
 
Internic: Gaylon Reasons (WMCSTATIONS-DOM)
Sitename: WMC Stations
Potentially offensive content on defaced page.
defacer: McM4us
remote os: NT
remote os: Windows NT
remote server: IIS/4.0
Sun Oct 15 17:56:37 MDT 2000
mirror number:    8167
shared.lists.defaced@cert.org notified of defacement
nipc@fbi.gov notified of defacement
dburke@RAYCOMMEDIA.COM notified
jjefferies@RAYCOMMEDIA.COM notified
 
[00.10.15] NT [McM4us]            <a href="2000/10/15/www.wmcstations.com/">WMC Stations</a> (<a href="http://www.wmcstations.com/">www.wmcstations.com</a>)