os

Netcraft:    The site www.hebst.gov.cn runs Microsoft-IIS/4.0 on NT4/Windows 98
   
NMAP: Remote operating system guess: Windows NT4 / Win95 / Win98
www.hebst.gov.cn: Server: Microsoft-IIS/4.0
 
mirror taken by: jericho  
mirror taken on Fri Nov 24 19:05:32 MST 2000
 
 1  gw.fe2-0.border1.phx.inficad.com (208.198.100.1)  0.528 ms  0.345 ms
 2  Serial2-1-1.GW1.PHX1.ALTER.NET (157.130.224.93)  3.632 ms  1.686 ms
 3  143.ATM2-0.XR1.LAX2.ALTER.NET (146.188.249.122)  13.508 ms  13.752 ms
 4  195.ATM3-0.TR1.LAX2.ALTER.NET (146.188.248.118)  13.372 ms  12.998 ms
 5  111.at-6-0-0.TR1.SAC1.ALTER.NET (146.188.142.98)  27.13 ms  27.069 ms
 6  197.ATM6-0.XR1.PAO1.ALTER.NET (152.63.50.89)  24.813 ms  25.002 ms
 7  189.ATM7-0.GW9.PAO1.ALTER.NET (152.63.52.193)  51.253 ms  30.625 ms
 8  chinamotion-gw.customer.ALTER.NET (157.130.215.22)  32.343 ms  33.389 ms
 9  202.0.170.13 (202.0.170.13)  169.861 ms  176.487 ms
10  202.97.10.129 (202.97.10.129)  181.172 ms  168.313 ms
11  202.97.10.2 (202.97.10.2)  174.53 ms  170.494 ms
12  202.97.17.194 (202.97.17.194)  174.236 ms  216.069 ms
13  202.97.17.122 (202.97.17.122)  203.81 ms  194.421 ms
14  202.99.186.54 (202.99.186.54)  259.627 ms  237.413 ms
15  202.99.187.245 (202.99.187.245)  244.437 ms  239.994 ms
 
Internic: 
Sitename: Hebst Gov (CN)
Potentially offensive content on defaced page.
defacer: philer
remote os: NT
remote os: Windows NT
remote server: IIS/4.0
Fri Nov 24 19:07:37 MST 2000
mirror number:    9018
shared.lists.defaced@cert.org notified of defacement
nipc@fbi.gov notified of defacement
report@ccert.edu.cn notified of defacement
 
[00.11.24] NT [philer]            <a href="2000/11/24/www.hebst.gov.cn/">Hebst Gov (CN)</a> (<a href="http://www.hebst.gov.cn/">www.hebst.gov.cn</a>)