os

Netcraft:    www.cabralsp.com.br is running Microsoft-IIS/4.0 on NT4 or Windows 98
   
NMAP: Remote operating system guess: Windows NT4 / Win95 / Win98
www.cabralsp.com.br: Server: Microsoft-IIS/4.0
 
mirror taken by: munge    
mirror taken on Sun Oct 29 06:32:22 MST 2000
 
 1  gw.fe2-0.border1.phx.inficad.com (208.198.100.1)  0.289 ms  0.271 ms
 2  Serial2-1-1.GW1.PHX1.ALTER.NET (157.130.224.93)  2.275 ms  1.178 ms
 3  143.ATM3-0.XR1.LAX2.ALTER.NET (146.188.249.130)  8.624 ms  8.567 ms
 4  195.at-2-0-0.TR1.LAX9.ALTER.NET (152.63.112.146)  11.664 ms  11.628 ms
 5  131.at-5-0-0.TR1.NYC8.ALTER.NET (152.63.5.98)  91.055 ms  90.924 ms
 6  185.ATM6-0.XR1.EWR1.ALTER.NET (152.63.20.217)  106.594 ms  98.632 ms
 7  193.ATM11-0-0.GW3.EWR1.ALTER.NET (146.188.177.173)  95.102 ms  91.951 ms
 8  Serial3-1-0.GW1.BLM1.ALTER.NET (157.130.12.246)  97.543 ms  97.15 ms
 9  198.3.149.14 (198.3.149.14)  648.411 ms  643.088 ms
10  ebt-P1-0-core03.spo.embratel.net.br (200.230.0.98)  407.38 ms  415.04 ms
11  ebt-P5-0-0-dist02.spo.embratel.net.br (200.230.0.13)  405.757 ms  403.814 ms
12  ebt-S4-0-dist01.sne.embratel.net.br (200.230.219.5)  404.955 ms  403.397 ms
13  * *
14  * 200.228.150.250 (200.228.150.250)  585.397 ms
 
Internic: owner:       Promocoes Artisitcas Tatuape Ltda
ownerid:     002.851.101/0001-00
owner-c:     AAS38
Sitename: Promocoes Artisitcas Tatuape Ltda
Potentially offensive content on defaced page.
This is part of a MASS hack.
defacer: prime suspectz
remote os: NT
remote os: NT4
remote server: Microsoft-IIS/4.0
Sun Oct 29 06:34:14 MST 2000
mirror number:    8398
shared.lists.defaced@cert.org notified of defacement
nipc@fbi.gov notified of defacement
 
[00.10.29] NT [prime suspectz]            <a href="2000/10/29/www.cabralsp.com.br/">Promocoes Artisitcas Tatuape Ltda</a> (<a href="http://www.cabralsp.com.br/">www.cabralsp.com.br</a>)