Just got Hacked

[alan s]

That IP resolves to TurkTelekom in Ankara, Turkey.

Yep these are the results i got

Results of IP Tracking for 85.108.255.110

IP address :   85.108.255.110
Hostname :   -
ISP :   Turk Telekom ADSL-alcatel
Country   : Turkey

[iwyen]

yep its DELi1 -- selma1220@hotmail.com -- Its the same user that hacked my website!!! bloody *beep*

ditto i'm falling off my chair.. my g. mod took 3 full minutes to figure out where the hacking was....

[unfluffybunny]

heh well I just had "serseri_591@hotmail.com" try and hack me, but he screwed up and i happened to be online, then "selma1220@hotmail.com" tried, which amused me because all they're doing is leaving little comments on the shoutbox which redirects you, easy enough to delete the message and ban the offender

[RoarinRow]

heh well I just had "serseri_591@hotmail.com" try and hack me, but he screwed up and i happened to be online, then "selma1220@hotmail.com" tried, which amused me because all they're doing is leaving little comments on the shoutbox which redirects you, easy enough to delete the message and ban the offender

I just posted the same thing on the 'Hacking Attempt' thread.  Same email address as you have above.

[YahMan]

Skhilled warned me today and I disabled the shoutbox. Should be ok now, right?

[RoarinRow]

"Just got hacked" is his tab that is open for viewing this thread.

Dah,  ohh yeah, lol

Anyway. I got this in my sites tracking log.  They are searching for us.

Powered by SMF 1.1 RC2 TinyPortal v0.8.6

http://www.google.com.tr/search?q=Powered+by+SMF+1.1+RC2+TinyPortal+v0.8.6&hl=tr&lr=&client=firefox-a&rls=org.mozilla:tr-TR:official&start=130&sa=N

Looks like we're definitely beening searched for.  What if the 'Powered by SMF 1.1 RC2 TinyPortal v0.8.6' was a .gif file instead of a text/a link.  Would that be safer?

[Paulie]

I just had him/her lurking on my site too.

[nite0859]

selma1220@hotmail.com just signed onto my forum as well.

Here's a copy and paste from my shoutbox.

Nothing happen, though, as I am already patched.

location="http://dogu_bey89.sitemynet.com/turkishackers.htm"
Yesterday at 05:46:16 PM
location="http://dogu_bey89.sitemynet.com/turkishackers.htm"

I went ahead and left it on my shoutbox so that you can see how it's being done -- I also left a nice comment in return for the attempted hack.

[WSA]

Just had another attempt from this person.  I am not deleting their accounts, only banning them.  That way I can block their IP's and utilize any other triggers they have.

This the the new redirect location that they wanted us to go to.  http://rccp.somee.com/hack.htm

Thanks for the fix bloc.  I can't believe I completely missed it.  Would have saved myself and alot of others from this headache.

[Xarcell]

@wsa

Contact their internet provider. Show them evidence of the hack. Then their service provider may deny them internet service.