How do I stop someone from hijacking my site?
-
I had lost a lot of search engine rankings & it almost put me out of business. I worked a lot on the site in April and in May my sales rebounded 37%+ almost back to where they typically are. I have blamed Panda and saw another Panda update in May and my traffic is declining again. Today I happened to decide to check what pages were being indexed and I also noticed that when I published an update this morning it said the page "<cite class="_Zd">www.cheaptubes.com/index2.asp</cite>" exists on the destination server but not in current site and it asked if I wanted to delete it. I said no at the time but am going to delete it right after this question. I went to google & put "site:cheaptubes.com" into the search. My website has about 50 pages but google has "About 2,160 results" @ 10X per page. The first four pages are mostly my pages but I noticed even on the first page, 3rd result was for Nike shoes and it isn't my site. Someone has hacked my site and put up over 21,000 pages! That must be the real reason behind my website problems, right? How do I stop this from happening again? Is this having the negative effect that I fear it is?
-
ok, thx for that. I will try it. I know the pages that need the 301 from the others. all the bad pages have index2.asp in the names. I have changed my ftp and login passwords
good to know the 404 don't count against me
-
I would definitely make sure not to 301 redirect any of the bad pages. You might get penalized for that.
They won't count the 404's against you, I would change them to a 410 error though for those pages. Then they will drop out of your GWT and the Google index quicker.
-
I went to GWT today and now that I deleted the 2 malicious pages, my site now had 1950 404 errors of which only 15 are legitimate that I need to 301. I'm not sure how to handle this now. I read that google doesn't count 404 or 410 against you but 1950 pages is a lot. I would like to deal with it. I thought about wiping out the site and uploading a new version of it but I think it will have the same errors. Any advice?
http://www.cheaptubes.com/: Increase in not found errors June 20, 2014
Google detected a significant increase in the number of URLs that return a 404 (Page Not Found) error. Investigating these errors and fixing them where appropriate ensures that Google can successfully crawl your site's pages.
Recommended action
- Check the Crawl Errors page in Webmaster Tools.
- Check that pages on your site don't link to non-existent pages. (If another site lists a broken link to your site, Google may list that URL but you may not be able to fix the error.)
-
Thank you for your help
-
Interesting, it sounds like they had a long term plan. Good thing you found about it in time.
I think the plan sounds good. I would definitely get off front page, it has been out of development for a while so there are vulnerabilities that have not been patched in years.
You might look into a cms like Wordpress or concrete5 to make things easier for you with transitioning the site. Then you would have to only learn minimal html / css, and could focus more on the content.
Good luck to ya.
-
Thank you so much. I changed my main login & FTP passwords today. I found that they had changed my email address to info@chatfieldstatepark.org & the last name on my account was changed to Puraty. I suspect it might be networksolutions who got hacked but i don't know for sure. I updated and scanned my computer last night and it is virus/malware free.
I am on shared hosting. I need to get my site updated and off frontpage & then off network solutions. You helped me back in April when i was trying to get my rankings back, thx. I have an interim plan.
1- I will use filezilla to FTP and it shouldn't have the same vulnerabilities as frontpage as it can be updated.
2- My theme designer said the theme doesn't rely on FP extensions. With this in mind I plan to download an HTML editor and can hopefully do future editing from there.
I think this is my short path to getting off frontpage. Does that make sense? I do realize I need to get from HTML2 to HTML5 or something more modern but I'm tryimng to handle this while juggling my other responsibilites in my 80hr work week.
-
Good that the site is clean. What scurri and programs like that do is analyze the site (your real site, not the made up pages) for malicious code. That means all the public facing files should be intact. Also GWT is google webmaster tools, if you passed the scurri check you should be fine there.
Since it sounds like you are on shared or managed hosting I would send a support email to your host and let them know the issue. They might be able to see where someone got in and when it happened, it is worth a shot at least.
What platform are you running on your site? Is it a cms or a custom platform?
More than likely the reason that Moz never detected the pages is because it is a crawler. It starts with your home page and follows every linking page on your site, if the pages were "orphaned" as it sounds like, the crawler would never have picked them up.
-
sucuri says my site is clean
-
Thanks you for your response. I had thought of changing my FTP password but the hosting co's servers were down for maintenance. They blamed it all on me. I did delete the index2.asp page and all the links are broken. I had deleted pages in April when cleaning up the site & I think I deleted this then but didn't know it. I do have a restorable version and I will pursue this tomorrow as well.I will check about the malware, thx as I wouldn't know where to do that. I have been having email problems for some time. I have moz scan my site every week (started in April) and they never detected 10,000 extra pages. I suspect I deleted it in April & they got back in. Maybe I should start selling Nike? : ) IS GWT google webmaster tools?
-
Change all of your passwords is the first thing you should do. Then you need to examine the server logs to see how they got in. I would check the ftp access logs first. Hopefully you have logging turned on. Then with those logs I would search for lines that are not your ip address. If you are on a static ip and you have had the same ip for a while it should be a lot easier. You will be looking for the other ip address. If you cannot find that the server was accessed from another ip address through ftp, then the next option is to look at the code. There might be an exploit in your site that will allow for it. One thing I would do is look at the files that were added via ftp, they will hold a time stamp on them. You can try to cross reference that time and day with the ftp log. If there is at those times (remember your server might not be set to your time zone) then start looking through the site for a "connector" file. It would have been the first that they created, it is basically a bot file that can create files on your server. If you can find that, check that time stamp against the log.
If you have a restorable version of the site, I would consider doing it. I would also see if your site is label as having malware on it. You can use GWT and sucurri to do that.
As for possibility hurting your rankings, yes, definitely. I would get the issue cleaned up, see if there is a pattern for the files that you can redirect to a 404 page and also the robots.txt file as well. I would also check GWT and see if you have a penalty as well. But I would do all of this ASAP if I were you.
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Can Anyone Recommend a Web Page Automated Tagging Solution for Large Sites?
We're looking for a way to automate content tagging on our site with a pre-existing solution/software/tool. This is mainly for content organization and to better establish internal linking connections for a large site. We work with Adobe Creative Suite.
Content Development | | ari_seo0 -
How best to handle on-site blogs for multiple site views in Magento?
Hi, I'm working with a site on Magento with views for UK, US and FR websites. Currently they have a French WordPress Blog that is pulled into the French site view and an English one that appears on both the US and UK views. Of course the problem here is that the US and UK views are duplicating content so these needs sorting super-fast. The plan is to disconnect the US view from the current English blog and create a dedicated US onsite blog. However, should we continue to use WordPress or instead use an alternative blog module or plugin for Magento? Cost is an issue and running three separate blogs and the cost of plugging these into each site view. However, getting these right for SEO is the most important factor here. I'm also concerned about the mess of multiple plugins causing page speed issues etc... My instinct is to go with WordPress, but I'm keen to hear what others think or have experience of.
Content Development | | ExtraDigital0 -
Renaming web pages vs new web site
I am struggling with renaming a lot of my web pages because I used short form acronyms vs long form keyword page names and now my pages aren't ranking where they should be and used to be. I am weighing a whole new web site or just a massive update with new page names. I also have an old domain that 301's to the new url but the old one outranks the new one. If you search google for cheap tubes the first domain you see is www.cheaptubesinc.com (the 301'd version) when the real url is www.cheaptubes.com. I know I am getting a duplicate content penalty and when moz crawls my site they see 2X the page that I really have. I tried fixing this with canonical tags but it only helped 5 pages according the moz crawls since doing them. Since last July 4th my business has been declining and I know there was an SEO algorithm update last July 4th. I think either method of renaming the web pages with better SEO for instance cheaptubes.com/single-wall-carbon-nanotubes.htm vs cheaptubes.com/swnts.htm as it is currently. In either case, it is still an HTML 2 website done on frontpage and the question I keep asking myself is if I should just scrap the whole site and start over with a more modern format. Should I try to get a new site together with good SEO and publish it quickly vs rename and 301 a bunch of pages? What about the old site? Do I need to track the old page names and 301 them to the new ones? Any help is appreciates Mike
Content Development | | cheaptubes0 -
How many categories should you have within a blog / Wordpress Site for SEO?
Hi Guys I am just wondering whether or not for SEO purposes it is better to have a small number of categories for your blog posts to fit into as opposed to numerous ones. The reason I ask is that I have one site which is fairly new to the search engines - 8 months old which has 7 general categories within the blog for instance "rail contractors", "railway construction" "airport construction" etc I have another site which is 10 years old which has built up 25 different types of categories for instance brand design, brand development, brand management (i guess you could put all these under 1 category "branding"? We've been writing lots of press for both sites... yet the younger site is getting more coverage on Google page 1. Would this be because the blogs / press are more concentrated under a specific category as opposed to being spread thinly throughout the site? Any help would be appreciated. Debs 🙂
Content Development | | lethalmarketing0 -
Suggest Me About my Site Content
I have build a " Healthy Breakfast " related website...I have some post on my site related "health breakfast" keywords.But i am not sure is my Content is Doing well to beat my Competitor or what type content i should write My Competitor for " healthy Breakfast" keywords are : http://www.realsimple.com/food-recipes/recipe-collections-favorites/healthy-meals/breakfast-to-go-10000001047596/index.html http://www.eatingwell.com/nutrition_health/nutrition_news_information/healthy_breakfast_foods_for_weight_loss http://www.womenshealthmag.com/nutrition/healthy-breakfast http://www.fitnessmagazine.com/recipes/healthy-eating/nutrition/the-you-can-do-it-diet-breakfast-choices-/ http://www.foodnetwork.com/topics/healthy-breakfast/ Actually I am confused what i should write to keep my traffics happy and get Good Rank in Google Let me know if you have any more info thanks
Content Development | | seolearner0070 -
Will a comment section on my site help with seo
I have never been a fan of comment pages such as the sun http://www.thesun.co.uk/sol/homepage/showbiz/tv/4783642/bruce-willis-appears-on-the-one-show-in-awkward-interview.html but i was told the other day that not only is it good for the reader but it is also good for seo and increase the number of times that google would visit the page and i would like to know if that is true. if you have added a comment section to your articles i would like to know if you have noticed any change.
Content Development | | ClaireH-1848860 -
Does a directory running on a subdomain help or hurt SEO on the main site?
I have a blog, with a directory on the subdomain: directory.fbforbusinessmarketing.com. Is that smart for SEO, as it gives the overall domain more traffic? Or bad for SEO because of the different topics and all those outbound links? I'd appreciate opinions. Thanks.
Content Development | | PegCorwin0 -
Second Blog on the Same Site? Best SEO Practice
I would like to start up another blog which has more of a "technical" topic coverage vs my regular blog, which appeals more to non-techie business folks. If the goal is to drive traffic ultimately to the main site, should I do this second blog on a different domain, a subdomain, or try to incorporate it as a separate-but-equal blog on the same domain as the currrent one? What would you do?
Content Development | | JMagary0