Chinese Hijacking Theft 175,000 pages on Google

Discussion in 'Websites' started by 1001, Mar 6, 2005.

  1. ian_ok

    ian_ok Peon

    Messages:
    551
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    0
    #81
    lol

    Too true...I should have known to check before posting....Doh!

    Ian
     
    ian_ok, Mar 7, 2005 IP
  2. J.D.

    J.D. Peon

    Messages:
    1,198
    Likes Received:
    65
    Best Answers:
    0
    Trophy Points:
    0
    #82
    It seems that Google is doing something about it as we speak - I'm getting much fewer pages now when I search for inurl:"1bu.com".

    J.D.
     
    J.D., Mar 7, 2005 IP
  3. NewComputer

    NewComputer Well-Known Member

    Messages:
    2,021
    Likes Received:
    68
    Best Answers:
    0
    Trophy Points:
    188
    #83
    I have been watching that over the last 16 hours... 300K plus down to 128!

    Thank you Google for staying on top of these clowns who are really up to no good. I don't care what anyone says, what those guys are doing was NO GOOD!
     
    NewComputer, Mar 7, 2005 IP
  4. anthonycea

    anthonycea Banned

    Messages:
    13,378
    Likes Received:
    342
    Best Answers:
    0
    Trophy Points:
    0
    #84
    Google better do something as they are gaining a reputation like M$ has as a hackers toolbox.

    When search engines hurt websites instead of helping that is not such a good thing, they need to invest millions in security technology in a hurry as the same thing happened when hackers used search engines to take forums down in the past.
     
    anthonycea, Mar 7, 2005 IP
  5. ian_ok

    ian_ok Peon

    Messages:
    551
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    0
    #85
    Wouldn't be too sure.

    site:1bu.com brings 174k

    Plus STILL when you type in 1bu.com after your domain it still loads.

    Ian
     
    ian_ok, Mar 8, 2005 IP
  6. T0PS3O

    T0PS3O Feel Good PLC

    Messages:
    13,219
    Likes Received:
    777
    Best Answers:
    0
    Trophy Points:
    0
    #86
    Anyone used/abused this yet to take out a competitor?

    Some (co-op) links to them with the url variation required and out the go in no time...
     
    T0PS3O, Mar 8, 2005 IP
  7. ian_ok

    ian_ok Peon

    Messages:
    551
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    0
    #87
    I did read someone posted a XXX image on their site and 1bu soon dropped them...mind you I did read something before...(see previous post on this thread)....so i wouldn't believe anything my eyes have seen!

    Ian
     
    ian_ok, Mar 8, 2005 IP
  8. dfsweb

    dfsweb Active Member

    Messages:
    1,587
    Likes Received:
    55
    Best Answers:
    0
    Trophy Points:
    88
    #88
    Ian, this will work for any site. They must be grabbing the bit to the left of 1bu.com on the fly, doing a file_get_contents or something similar, replacing the links by their version, replacing all external links and re-displaying the page (which is why it takes longer to display the page using 1bu.com).

    And apart from that, they must have a list of URLs (randomly grabbed from the net I presume) that are permanently linked from theit site. Pages from these sites would be the ones appearing in the cache.

    So, if you want to check if your site is included in their list, run the site:www.yoursite.com.1bu.com command and check to see if there are any pages in the cache. If you don't find any, then it probably means that your site isn't on their list.
     
    dfsweb, Mar 8, 2005 IP
  9. anthonycea

    anthonycea Banned

    Messages:
    13,378
    Likes Received:
    342
    Best Answers:
    0
    Trophy Points:
    0
    #89
    Is anyone still finding these results in Google or does anyone have any proof of these SERP's with their URL's being high jacked that they can post :confused:

    Please post your Google or Yahoo links with your high jacked SERP's if you find them :cool:
     
    anthonycea, Mar 8, 2005 IP
  10. noppid

    noppid gunnin' for the quota

    Messages:
    4,246
    Likes Received:
    232
    Best Answers:
    0
    Trophy Points:
    135
    #90
    What's wrong with just blocking their IP's?

    This is the list I can gather...

    202.96.
    219.129.
    219.130.
    219.131.
    219.132.
    219.133.
    219.134.
    219.135.
    219.136.
    219.137.
     
    noppid, Mar 9, 2005 IP
  11. J.D.

    J.D. Peon

    Messages:
    1,198
    Likes Received:
    65
    Best Answers:
    0
    Trophy Points:
    0
    #91
    Nothing. You just have to pick right ranges. Speaking of which, your list will probably block half of China. Where did you get these from?

    J.D.
     
    J.D., Mar 9, 2005 IP
  12. anthonycea

    anthonycea Banned

    Messages:
    13,378
    Likes Received:
    342
    Best Answers:
    0
    Trophy Points:
    0
    #92
    OK, but what good is that going to do if the results are in the SERP's above yours?
     
    anthonycea, Mar 9, 2005 IP
  13. T0PS3O

    T0PS3O Feel Good PLC

    Messages:
    13,219
    Likes Received:
    777
    Best Answers:
    0
    Trophy Points:
    0
    #93
    Then the page can't be accessed anymore through their 'filter' so it will die and eventually disappear from Google's index.
     
    T0PS3O, Mar 9, 2005 IP
  14. noppid

    noppid gunnin' for the quota

    Messages:
    4,246
    Likes Received:
    232
    Best Answers:
    0
    Trophy Points:
    135
    #94
    I kept hitting a site I can monitor IP's from through their "filter" and did some research and found out the IP range blocks they own. Nothing special, anyone can do it.

    As far as blocking half of china... We will be ok I'm sure. I think I read the list correctly to get rid of the "filter" and then again, don't care about china to be honest.
     
    noppid, Mar 9, 2005 IP
  15. J.D.

    J.D. Peon

    Messages:
    1,198
    Likes Received:
    65
    Best Answers:
    0
    Trophy Points:
    0
    #95
    You quoted only two numbers out of four, which would block 64K for each line in your list. That would be roughly 640K worth of IP addresses. This isn't a good idea to block that many.

    J.D.
     
    J.D., Mar 9, 2005 IP
  16. noppid

    noppid gunnin' for the quota

    Messages:
    4,246
    Likes Received:
    232
    Best Answers:
    0
    Trophy Points:
    135
    #96
    Yep. it's an ISP in China and then some! I have to narrow that down. But I will block them when I can. ;)

    Thanks for the heads up.
     
    noppid, Mar 9, 2005 IP
  17. dfsweb

    dfsweb Active Member

    Messages:
    1,587
    Likes Received:
    55
    Best Answers:
    0
    Trophy Points:
    88
    #97
    Yeah, don't worry about it .... It's only got a billion people or so! :p

    I would still recommend grabbing the domain part, checking to see if it contains 1bu.com and then, blocking it rather than blocking "half of China" as someone else put it.
     
    dfsweb, Mar 9, 2005 IP
  18. J.D.

    J.D. Peon

    Messages:
    1,198
    Likes Received:
    65
    Best Answers:
    0
    Trophy Points:
    0
    #98
    Not going to work - they send the correct Host header (i.e. the actual correct domain name). Otherwise, virtual websites would be out of their reach.

    J.D.
     
    J.D., Mar 9, 2005 IP
  19. NewComputer

    NewComputer Well-Known Member

    Messages:
    2,021
    Likes Received:
    68
    Best Answers:
    0
    Trophy Points:
    188
    #99
    Is this site really affecting people? Has anyone seen them pass them in the SERP's for an period of time longer than a day?
     
    NewComputer, Mar 9, 2005 IP
  20. anthonycea

    anthonycea Banned

    Messages:
    13,378
    Likes Received:
    342
    Best Answers:
    0
    Trophy Points:
    0
    #100
    It is worse than a scam directory that has you submit your keywords, email address and URL for a listing and comes up ahead of you in the SERP's for your keywords.

    A lot of these scams just want to build a database of email addresses and steal your traffic by using your keywords to get in the SERP's and most folks do all the work for them when they submit.

    These guys just let your page do all the work for them and highjack your URL :p :) :eek:
     
    anthonycea, Mar 9, 2005 IP