Just got Hacked

[harzem]

HarzeM... no offence.... i guess the frustrated members are not doing any generalization... chill bro

Ok I can feel what they feel. It should be irritating to always be hacked by the hackers from the same nation.

[G6Cad]

Dont come on and put all people in one country in the same boat.
We will not tolerate that kind of posting here.
I removed th post with that idiotic statment about Arabic people.

[scsshell]

well, I got it too...  same dude.  here's the ip he used on my UNPATCHED shout box, which is being patched right now!

      85.96.123.187
here's a bit more info


  login name:  executioneÂÃ,®
  email          aykacilkkan@gmail.com


considering I have not posted here, just lurked for many moons, its not here they are getting us from.  I think the google search is a more likely idea.
Lemme see if I can find the referrer in my logs.

yep, that's where they are coming from, here's the log entry

http://www.google.com.tr/search?q=Powered+by+SMF+1.1+RC2+TinyPortal+v0.8.6+++sh&hl=tr&lr=&start=50&sa=N

[Techdomain]

I think they're finding the site via this one. Everyone that has had problems has a link here on this site.

that would make sense... up until scsshell everyone who got hacked also posted here... if you know what I mean - after all, you wouldnt know about ppl that got hacked but didnt post here...

[grabman]

are the hacks also linked to SOTM nominations?  Seems that many who are nominated then get hit!  My site got hit last night by same guy as scsshell did!

Just a thought

Grab

[basis]

are the hacks also linked to SOTM nominations?  Seems that many who are nominated then get hit!

Not entirely. I think they use google or another search engine as others have mentioned before. My site was never nominated for SOTM but we still got hit.

[grabman]

oh well was worth a thought!!!

Grab

[scsshell]

yep, that's where they are coming from, here's the log entry

http://www.google.com.tr/search?q=Powered+by+SMF+1.1+RC2+TinyPortal+v0.8.6+++sh&hl=tr&lr=&start=50&sa=N

lemme try that again....

I checked my server logs and the referer from the logs shows this guy came to my site thru the url above which is a google search...
here's the complete log entry...

85.96.123.187 - - [05/Jul/2006:13:08:48 -0700] "GET /smf/index.php?action=forum HTTP/1.1" 200 10180 "http://www.google.com.tr/search?q=Powered+by+SMF+1.1+RC2+TinyPortal+v0.8.6+++sh&hl=tr&lr=&start=50&sa=N" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"

I'm the 4th one down on that list... sin city sportbikes