os

Netcraft:    www.banexpo.com is running Apache/1.3.12 (Unix) (Red Hat/Linux)
   PHP/4.0.3 on Linux
NMAP: Remote operating system guess: Linux 2.1.122 - 2.2.16
www.banexpo.com: Server: Apache/1.3.12 (Unix)  (Red Hat/Linux) PHP/4.0.3
 
mirror taken by: munge    
mirror taken on Tue Oct 17 05:35:00 MDT 2000
 
 1  gw.fe2-0.border1.phx.inficad.com (208.198.100.1)  0.324 ms  0.287 ms
 2  Serial2-1-1.GW1.PHX1.ALTER.NET (157.130.224.93)  1.251 ms  7.769 ms
 3  143.ATM3-0.XR2.LAX2.ALTER.NET (146.188.249.134)  11.702 ms  11.446 ms
 4  194.at-2-0-0.XR2.LAX9.ALTER.NET (152.63.112.98)  16.023 ms  13.922 ms
 5  190.ATM6-0.BR1.LAX9.ALTER.NET (152.63.113.17)  14.719 ms  14.056 ms
 6  137.39.52.86 (137.39.52.86)  19.765 ms  22.759 ms
 7  sl-bb21-ana-15-0.sprintlink.net (144.232.1.173)  19.748 ms  19.985 ms
 8  sl-bb21-sj-8-0.sprintlink.net (144.232.18.81)  29.094 ms  29.661 ms
 9  sl-bb20-sj-14-0.sprintlink.net (144.232.3.157)  29.138 ms  27.032 ms
10  sl-bb22-rly-12-0.sprintlink.net (144.232.9.217)  82.354 ms  82.951 ms
11  144.232.25.216 (144.232.25.216)  83.482 ms  83.703 ms
12  gip-wash-us-car-2-fd0-0.gip.net (204.59.144.200)  87.01 ms  81.925 ms
13  204.59.226.74 (204.59.226.74)  612.591 ms  631.289 ms
14  Banexpo-Serial-0-128K-Ibw-Serial6-1-2.ibw.com.ni (200.30.48.62)  654.001 ms  628.991 ms
15  200.30.49.142 (200.30.49.142)  653.229 ms  762.435 ms
 
Internic: Banexpo (BANEXPO2-DOM)
Sitename: Banexpo
Potentially offensive content on defaced page.
This is part of a MASS hack.
defacer: RSH
remote os: Lr
remote os: Linux 2.1.122 - 2.2.16
remote server: Apache/1.3.12 (Unix)  (Red Hat/Linux) PHP/4.0.3
Tue Oct 17 05:38:17 MDT 2000
mirror number:    8199
shared.lists.defaced@cert.org notified of defacement
nipc@fbi.gov notified of defacement
cpowell@ISTAR.CA notified
mark@COLOBROKERS.COM notified
 
[00.10.17] Lr [RSH]            <a href="2000/10/17/www.banexpo.com/">Banexpo</a> (<a href="http://www.banexpo.com/">www.banexpo.com</a>)