Asshole ripping entire sites + links....read this!
 

hey there guys

i was checking some links from yahoo and i accidentally found this

http://shopping.gabrio.com.1bu.com/ basically he ripped our entire blog + links, everything....and i have never seen such a thing, yet he is also ripping and running on his domain '1bu.com' all the pages, but serving the pictures from our server (thus hotlinking), AND if you look more carefully, he also changed all our referral links and sponsor links.....now, look at the row on the right, you will notice our hardlinks, he ripped off those as well, and on each of those sites, the links are changed there too!!

for example, some other domains he's doing this...

http://www.freeones.com.1bu.com/ => and EVERY site freeones.com is linked with....
http://www.pornstargalore.com.1bu.com/
http://www.nurglesnymphs.com.1bu.com/

they are all loading fucking slow, his server is infact in china, but it's worth the wait.

is there anything we can do to stop him doing so?

This is really easy to do.

Well you could try blocking his IP.

Damn! Hope you resolve this Gabrio! Good Luck! :thumbsup

with something within the apache conf i guess, else id have to edit each .htaccess manually and block his ip...

edit:: missed your last post.. never mind.

Do you need to allow hotlinking?

WTF...our sites on their too. Thanks for the info, will keep checking this thread for helpful info, this shit is crazy!!

no i block them BUT since they basically get your entire url as well, you gotta block the whole string...

that sucks dude. bump so more people can help out on this

no problem man, just spread the word if you want.

Actually, you guys... it works with ANY website on the internet. just type http:// +domain + .1bu.com .

So it means he's using a subdomain wildcard. He's probably just running the sites through a script to replace a whole bunch of items (ref links, etc.) with his own shit, hence it's a slow process.

setup hotlink protection, that should fuck them up

yeah i can understand that, BUT would he do that trying to steal our SE traffic or something like that in your opinion?

Hmm.. :/

The only way it could get indexed by a search engine is if he creates some links to the your.site.1bu.com pages. If he does that, and the .1bu site gets indexed, he could get SOME traffic from it. Well, SOME x 1 million sites = good $$$.

The issue is that a lot of search engines will drop urls for duplicate content, which is what he'll have indexed. This could mean your site getting kicked from search engines.

Now you've created a link to your .1bu.com site in this thread... which means it could get indexed and cause you a problem.

this is def fucked up, thanks for your input man.

Its Chinese - that should give you a clue why he is doing it, possibly to beat Chinese government filters. heh.

It's slow, but I realise it gives an effective anonymous browser :)

Seems he has me as well http://www.paulmarkhamteens.com.1bu.com but no one can get into the members area, or so it seems, so what's the problem

Unless I'm paying for the BW.

what an asshole, if his server is in China I'm not sure what you can do except modifying htaccess

What an asshat. :321GFY

Thanks for posting the warning mate.

Oh man, Maurice will rip his heart out if he finds out lol

thats what i think too, unfortunately.

no problem, i am always eager to help cleaning up the whole industry, it's ppl like this asshole ruining it and making surfers going away!

he's a good friend of mine, and yes, he'll get angry for sure.

in order to stop him, you have to contact your host and tell them to block his IP completely. i think it should be it. however we need to shut him down, this can be a good temp fix i guess.

really sorry to hear that. good luck!

this is why EVERY image in your public area should be watermarked with your domain.

then you can welcome hotlinkers.

LOL you guys are dumbasses.

and here's the WHOIS:

Registrant:
Li Tong [email protected] +86.75582972300
Li Tong
A801 World Trade Plaza,Fuhong Rd
Shenzhen,Guangdong,CN 518026


Domain Name:1bu.com
Record last updated at 2005-04-07 23:59:18
Record created on 2000/1/15
Record expired on 2008/1/15


Domain servers in listed order:
ns1.dns-diy.com ns3.zg1.net

Administrator:
A801 World Trade Plaza,Fuhong Rd
Shenzhen
Guangdong,
CN
518026

name:(Li Tong)
mail:([email protected]) +86.75582972300
Li Tong
Technical Contactor:
A801 World Trade Plaza,Fuhong Rd
Shenzhen
Guangdong,
CN
518026

name:(Tong Li)
mail:([email protected]) +86.75582972300
Li Tong
Billing Contactor:
A801 World Trade Plaza,Fuhong Rd
Shenzhen
Guangdong,
CN
518026

name:(no)
mail:([email protected]) +86.75582972300
Li Tong

Registration Service Provider:
name: LiTie
tel: +86.75582972300
fax: +86.75582972700
web:http://


i guess we can send him some nice email....

Thanks for the heads up. His IP has been blocked. If you have cpanel just go to IP Deny Manager and enter 1bu.com.

IP Deny Manager

1bu.com was resolved to the ip address 219.129.21.137. Users from the IP address 219.129.21.137 will not be able to access your site.

Easy fix but someone needs to take him down! :mad:

China Tightens Controls on Internet Access
http://english.chosun.com/w21data/ht...504150002.html
A new study says China has developed sophisticated methods of blocking what its citizens can read on the Internet.
----------------------------------------------------------------------
Do you people understand now? Its basically a proxy to the outside web lol I highly doubt he is specifically targetting porn sites and I highly doubt you will get many visits from it.

just for the note, if you click the first link for our blog, now it has been blocked with a firewall rule.

This can all be solved by blocking all Chinese traffic from your website. Then they can't steal your stuff. Chinese people don't buy anything anyway, all they know how to do is steal.

ipfw add deny all from 219.129.21.137 to any

problem solved

uh-oh, i just checked by chance freehostedgalleries.com - and they have indexed that site too, i wouldn't be surprised to see a TON of hosted galleries around, i checked ours for pp and they were all over the place!!

We get nice traffic from Google, Yahoo and other places that post pictures.

I've got a programmer doing research on a good program to block Czech surfers, to protect the girls, blocking place like China will be a bonus.

As for the images. Watermark them with you url. or change their location.

:1orglaugh

That also came up a 404.

:thumbsup :thumbsup

changing the pics url wont be effective since they setup a wildcard, so unless you block their server's IP they will still 'hack' your site. try it.

he also got big programs like ccbill, traffic cash gold, silvercash

sob
 

wot a fuckin son of a bitch, i would stick a bunch of chopsticks up his ass :mad:
thx for the info :thumbsup
nik

doesnt look like its worth crying about.

Deny from 219.129.21.137

That's his IP. Block it through .htaccess and the problem goes away. It's ripping the pages in realtime.

I just added that on one of our sites, and his version of the page instantly disappeared and brought up a default redhat page. He's got a script that's hitting your server, re-writing what he wants and then spitting it back out through his server.

Block the IP
and then re-check the IP every week in case they change it over time

Thanks for letting me know. At least this site is so fucking slow that probably 99% of the people already give up before they see anything. Nevertheless I prefer to see this site being blocked with a htaccess. I will do this after the weekend.

The evil never stops..... :mad:

thanks for the tip. Apparently affects everyone

www.gfy.com.1bu.com