os

Netcraft:    The site www.banrbank.com runs Microsoft-IIS/4.0 on NT4/Windows 98
   
NMAP: 
www.banrbank.com: Server: Microsoft-IIS/4.0
 
mirror taken by: munge    
mirror taken on Sat Dec  2 15:41:33 MST 2000
 
 1  gw.fe2-0.border1.phx.inficad.com (208.198.100.1)  0.377 ms  0.265 ms
 2  Serial2-1-1.GW1.PHX1.ALTER.NET (157.130.224.93)  3.04 ms  1.253 ms
 3  143.ATM2-0.XR2.LAX2.ALTER.NET (146.188.249.126)  12.883 ms  11.285 ms
 4  194.ATM2-0.TR2.LAX2.ALTER.NET (146.188.248.130)  14.798 ms  11.819 ms
 5  111.at-6-0-0.TR2.SLT4.ALTER.NET (146.188.142.118)  42.659 ms  36.944 ms
 6  190.at-2-0-0.XR2.SLT4.ALTER.NET (152.63.89.41)  35.326 ms  37.128 ms
 7  186.ATM10-0-0.GW1.DEN1.ALTER.NET (146.188.224.109)  181.149 ms  49.38 ms
 8  tamerica-gw.customer.ALTER.NET (157.130.161.190)  58.014 ms  149.79 ms
 9  199.96.35.205 (199.96.35.205)  67.398 ms  67.557 ms
10  216.166.177.2 (216.166.177.2)  76.137 ms  74.985 ms
11  10.200.200.1 (10.200.200.1)  76.037 ms  76.832 ms
12  * *
13  * *
14  * *
15  * *
16  * *
17  * *
18  * *
19  * *
20  * *
21  * *
22  * *
23  * *
24  * *
25  * *
 
Internic: 
Sitename: Northwest Financial Corporation
Potentially offensive content on defaced page.
This is part of a MASS hack.
defacer: McM4nus
remote os: NT
remote os: NT4
remote server: Microsoft-IIS/4.0
Sat Dec  2 15:49:19 MST 2000
mirror number:    9233
shared.lists.defaced@cert.org notified of defacement
nipc@fbi.gov notified of defacement
 
[00.12.02] NT [McM4nus]            <a href="2000/12/02/www.banrbank.com/">Northwest Financial Corporation</a> (<a href="http://www.banrbank.com/">www.banrbank.com</a>)