os

new fingerprint mailed to attrition_sigs@insecure.org for nmap upgrade
Netcraft:    The site www.thevtour.com runs Microsoft-IIS/4.0 on NT4/Windows 98
   
NMAP: Aggressive OS guesses: Windows NT4 / Win95 / Win98 (94%), Windows NT 4 SP3 (92%), Alteon AceSwitch 110 (software 4.0.37) (90%), Cisco Catalyst 1900 switch or Netopia DSL/ISDN router or Bay 350-450 (90%), Cisco 760 Series (non IOS) or IBM Stackable Hub (90%), Digital Link DL2001 Management Access Processor (90%), Windows for Workgroups 3.11 / TCP/IP-32 3.11b stack (90%), Microsoft NT 4.0 Server SP5 + 2047 Hotfixes (90%)
www.thevtour.com: Server: Microsoft-IIS/4.0
 
mirror taken by: jericho  
mirror taken on Wed Dec  6 09:05:28 MST 2000
 
 1  gw.fe2-0.border1.phx.inficad.com (208.198.100.1)  0.444 ms  1.938 ms
 2  Serial2-1-1.GW1.PHX1.ALTER.NET (157.130.224.93)  2.727 ms  1.328 ms
 3  143.ATM2-0.XR1.LAX2.ALTER.NET (146.188.249.122)  12.074 ms  12.254 ms
 4  195.ATM2-0.TR1.LAX2.ALTER.NET (146.188.248.114)  11.114 ms  10.824 ms
 5  111.at-6-1-0.TR3.SCL1.ALTER.NET (152.63.3.178)  19.476 ms  19.909 ms
 6  399.ATM7-0.XR1.PAO1.ALTER.NET (152.63.48.221)  24.368 ms  31.29 ms
 7  189.ATM5-0.GW3.PAO1.ALTER.NET (152.63.53.81)  56.797 ms  20.965 ms
 8  priori-gw1.customer.ALTER.NET (157.130.194.18)  24.19 ms  145.51 ms
 9  srp2-0.cr01.plal.eli.net (208.186.20.1)  57.958 ms  21.134 ms
10  p10-0.cr02.scrl.eli.net (207.173.114.46)  32.518 ms  34.042 ms
11  gw3-CWO-DOM.scrl.eli.net (209.210.249.98)  32.518 ms  38.832 ms
12  gw3-CWO-DOM.scrl.eli.net (209.210.249.98)  50.895 ms  51.475 ms
13  sac-main.cwo.com (209.210.78.20)  32.716 ms  44.591 ms
14  thevtour.com (207.173.11.163)  31.832 ms  33.762 ms
 
Internic: JB Webworks (THEVTOUR-DOM)
Sitename: The Vtour
Potentially offensive content on defaced page.
defacer: B4db0y
remote os: NT
remote os: Windows NT
remote server: IIS/4.0
Wed Dec  6 09:07:02 MST 2000
mirror number:    9313
shared.lists.defaced@cert.org notified of defacement
nipc@fbi.gov notified of defacement
jbelt@CWO.COM notified
domains@CWO.COM notified
 
[00.12.06] NT [B4db0y]            <a href="2000/12/06/www.thevtour.com/">The Vtour</a> (<a href="http://www.thevtour.com/">www.thevtour.com</a>)