Live data from Hacker News

My website is being stolen in real time and I don't know what to do

news.ycombinator.com

81–90 of 111 posts

Re: My website is being stolen in real time and I don't know what to do

#81
If you end up trying to block his IP, don't just DROP or REJECT his packets. TARPIT [1] them! This way not only would you be denying him access, but you would also be draining his resources.

Another thing to try is to see just how much data his server will take. See if you can send him a GB-sized response.

[1] http://www.netfilter.org/projects/patch-o-matic/pom-external...

Re: My website is being stolen in real time and I don't know what to do

#82

Ok, time for a reality check If you can't imagine what to do in this situation you shouldn't be running a website of this nature This type of thing can (and does) happen and it's up to you to know how to defend yourself. The others have given plenty of ideas, but I guess there are more specific things that can be done depending on their page structure/ads etc

Do I need more karma to down vote people? Because, I would totally down vote this guy if I could.

I think you need 500 to downvote.

Re: My website is being stolen in real time and I don't know what to do

#83

Lot of good suggestions already. I am not sure if you are interested in contacting the perpetrator directly and asking them to stop this but I did a little research for you. looking up the whois info, it says that the registrant's email was bgrf@ymail.com When I put this email in google, I came across another spammy site called baklinks.blogspot.com. This site asks you to swap back links. At the bottom of the blog po…

Thanks, I hadn't thought of trying to find the person behind it. This is verified by checking a caches version of 4co.in with google: http://webcache.googleusercontent.com/search?q=cache:Gfp7QK3... as the username for the "Hello World!" post is "krnaveen".

Re: My website is being stolen in real time and I don't know what to do

#84

If you have time, go to war. Have a page that spits the IP/hostname of referrer in a hidden section. Using that you can identify the IP/hostnames, so if he changes, you can always detect it. Now that you can detect him, when he crawls your site, feed him garbage info for every single page, then constantly check his page for the hidden ip/hash in case he changes his IP/host. Hide that in a minified js. You can also fe…

The thing is that he isn't scraping the site ahead of time, he scrapes for content in real time. When a request is made to 4co.in he requests the corresponding page from altexplorer.net, does string replacement on the site name and url, and then outputs it to his users.

Re: My website is being stolen in real time and I don't know what to do

#86
Look for either the php user agent and/or the source ip. Why not use mod_redirect or something and redirect him to some bizarre internet meme site? I would suggest tub girl or goatse. It will get the point across very loud and clear. Or, just serve a different copy of your site to him that makes it loud and clear what he is doing is not ok. Either way, you can use mod_rewrite to cause this guy agony and prevent him from perpetrating this.

Re: My website is being stolen in real time and I don't know what to do

#87
post #50

"if(document.location.href!=' http://altexplorer.net')document.location='//goatse.cx ';">

This won't work as it seems they're replacing any mention of "altexplorer" with "4coin"

No post body was provided.

Re: My website is being stolen in real time and I don't know what to do

#88

Lot of good suggestions already. I am not sure if you are interested in contacting the perpetrator directly and asking them to stop this but I did a little research for you. looking up the whois info, it says that the registrant's email was bgrf@ymail.com When I put this email in google, I came across another spammy site called baklinks.blogspot.com. This site asks you to swap back links. At the bottom of the blog po…

People usually use the same username, too, so using the LinkedIn username on Twitter: https://twitter.com/krnaveen. There's this tweet from November:

  I started to earn money on 4co.in short links. It’s easy -
  make the short links and earn the biggest money. http://4co.in

Re: My website is being stolen in real time and I don't know what to do

#89
post #86

Look for either the php user agent and/or the source ip. Why not use mod_redirect or something and redirect him to some bizarre internet meme site? I would suggest tub girl or goatse. It will get the point across very loud and clear. Or, just serve a different copy of your site to him that makes it loud and clear what he is doing is not ok. Either way, you can use mod_rewrite to cause this guy agony and prevent him f…

I noticed that OP put a link to the legitimate site. How about serve a version of the site that redirects to the corresponding page on your own?
Post reply on HN