• There seems to be an uptick in Political comments in recent months. Those of us who are long time members of the site know that Political and Religious content has been banned for years. Nothing has changed. Please leave all political and religious comments out of the forums.

    If you recently joined the forums you were not presented with this restriction in the terms of service. This was due to a conversion error when we went from vBulletin to Xenforo. We have updated our terms of service to reflect these corrections.

    Please note any post refering to a politician will be considered political even if it is intended to be humor. Our experience is these topics have a way of dividing the forums and causing deep resentment among members. It is a poison to the community. We appreciate compliance with the rules.

    The Staff of SOH

  • Server side Maintenance is done. We still have an update to the forum software to run but that one will have to wait for a better time.

soh fixed again

Ickie

Ickie

SOH Administrator
it appeared we got hacked by a virgin, and i figured it out this morning. I think it/she/he came from Iran by looking at the logs

this is the redirect I found
74-33 - 0/0/174877 . 0.15 28253 699 0.0 0.00 3469.07 204.116.125.188 sim-outhouse.com GET /index.php?lloc=http://217.218.225.2:2082/index.html? HTTP/


this happened last night between 11-12:30 server time

CHANGE YOUR PASSWORD IF YOU TRIED TO LOGIN
 
I was sick worried last night, Last time i logged in was about 9pm (EST) I tried to log in again at about 3am, and was unable to... a friend told me not to use my password ever, cause they suspect it is being hacked, locked for some reason... I used my password anyway... now, i have to change password..the hacker might have gotten it somehow!!

Thank God everything's back to normal!!!!

Eli :running:

PS...

Thanks Ickie!! :icon29:
 
This is really starting to become annoying. Why don't these pimple-faced hackers climb out of their parents' basement and discover women and sports like the rest of us? :angryfir:
 
yes change your password, if you have given it durning the outage trying to log in, this is what they may have been looking for.
 
Glad I didn't try to login. It displayed a login popup window, but I thought It was some admin thing and didn't bother LOL.
 
I suspected it when I saw the Login window, so I didn't attempt to log in. Figured the word would come down eventually.

I wonder if it's just Flight Sim sites or if these people are just working overtime on hacking anything they can?

Jim
 
I figured a new configuration -- the first time,
but my second thought was -- not good -- Poor Ickie is going to be losing sleep (again).

It did occur to me that I had used my password but by then . . . .

Changed now.
 
I and canelo are looking over files and folders, this was just too easy to find and fix. I suspect they were looking for passwords and got them too, but they made it so simple to find, makes me wonder. They ought to have known that we would tell everyone to change their passwords. ...it doesn't make sence...........

more to come.
 
To be honest, it doesn't necessarily have to make sense. They know, much like a telemarketer making sales calls, that they will indeed get a small percentage of passwords that will indeed work, or that they may be able to utilize these same usernames AND passwords.

What's also to say that they didn't get the e-mail addresses based off the accounts of said users, and now that they have the passwords are not attempting to hack the e-mail addresses as well (Lord knows so many of us for our sanity use the same passwords).

Point is, as I see it, if you used your password like I myself did, then you need to make a round of password changes.
 
Yeah Ickie... thanks for the head-up!

But, like a moron, I typed-in my password, thinking it was some glitch due to SOH's overhaul...

I'm not getting younger, and getting used to a new password (which I changed per your instructions) won't be easy.

Iran you say? If the hacker is caught - assuming that he's not working for Mahmoud junta - I hope that hand-cutting is still in fashion over there.
 
they did only get user name and password if you did indeed try to login
the rest was hidden behind the site not working.

if you want to change your email addy dont ask me to do it for you as I have too much to do.
 
I made a post here at 11:50 EST last night and was chatting on Teamspeak with another member. He went to check my post and ran into the problem so "right on Midnight" is the time frame.

First reaction was: "This isn't normal, don't do it!" so I never tried to submit name/PW -- whew!
 
May want to consider forcing ALL to replace theirs, so those that DID fall prey (yeah, me too...:blind:) will be forced to make the change here...
 
You must log in or register to reply here.
Back
Top