os

Netcraft:    www.hot-heidi.com is running Apache/1.3.12 (Unix) (Red Hat/Linux)
   PHP/3.0.15 mod_perl/1.21 on Linux
NMAP: Remote operating system guess: Linux 2.1.122 - 2.2.16
www.hot-heidi.com: Server: Apache/1.3.12 (Unix)  (Red Hat/Linux) PHP/3.0.15 mod_perl/1.21
 
mirror taken by: munge    
mirror taken on Wed Oct 25 18:55:46 MDT 2000
 
 1  gw.fe2-0.border1.phx.inficad.com (208.198.100.1)  0.487 ms  0.245 ms
 2  Serial2-1-1.GW1.PHX1.ALTER.NET (157.130.224.93)  2.849 ms  1.373 ms
 3  143.ATM2-0.XR1.LAX2.ALTER.NET (146.188.249.122)  17.28 ms  16.032 ms
 4  195.ATM2-0.TR1.LAX2.ALTER.NET (146.188.248.114)  18.123 ms  13.822 ms
 5  111.ATM7-0.TR1.NYC1.ALTER.NET (146.188.137.130)  81.013 ms  80.95 ms
 6  299.at-2-0-0.XR1.NYC8.ALTER.NET (152.63.19.165)  92.317 ms  84.887 ms
 7  193.ATM4-0-0.SR2.BLM1.ALTER.NET (152.63.22.33)  99.895 ms  89.859 ms
 8  tiba-nyc-gw.customer.alter.net (157.130.95.186)  623.735 ms  621.488 ms
 9  63.103.46.230 (63.103.46.230)  653.537 ms  677.229 ms
10  * *
11  200.51.67.37 (200.51.67.37)  676.145 ms  657.836 ms
 
Internic: Martin Sotelano (HOT-HEIDI-DOM)
Sitename: Martin Sotelano
Potentially offensive content on defaced page.
This is part of a MASS hack.
defacer: RSH
remote os: Lr
remote os: Linux 2.1.122 - 2.2.16
remote server: Apache/1.3.12 (Unix)  (Red Hat/Linux) PHP/3.0.15 mod_perl/1.21
Wed Oct 25 18:57:18 MDT 2000
mirror number:    8314
shared.lists.defaced@cert.org notified of defacement
nipc@fbi.gov notified of defacement
soportegrafico@SOPORTEGRAFICO.COM.AR notified
 
[00.10.25] Lr [RSH]            <a href="2000/10/25/www.hot-heidi.com/">Martin Sotelano</a> (<a href="http://www.hot-heidi.com/">www.hot-heidi.com</a>)