I got hit with Negative SEO

Some asshole hacked into my site and created a bunch of fake pages on my domain. Then he started linking to those pages using anchor text such as Casino, drugs, porn, etc. The thing that is puzzling me is, the pages created are like this:

[domain] fgdfrdfshdb-? and some more gibberish. When I go to the link, I can see its hosted on my site.

However all of the new pages the asshole created on the domain have now been set to no-index in Google webmaster tools. He created 1,533 pages but since they all use the same 'fgdfrdfshdbz' text in all the links, I was able to set the URL parameters as "no crawl" so they are not indexed in Google.

So far my site has not been indexed and traffic is normal. But as you can see in the screenshot this asshole has been steadily building links to my site.



My question is, should I be worried about these links since they are linking to pages that are not indexed in Google?

wwallace1 said:

My question is, should I be worried about these links since they are linking to pages that are not indexed in Google?

Click to expand...

Google will still pass the toxic link-juice to your domain on whatever page(s) he's linking to. You should first try to remove those pages even if it's set to No-Index and Protect your site from further hacking attempts.

No-Index doesn't mean No-Follow.

Can you not just delete them?

It looks like a task done using an malicious automated script, it'll be an good idea to do a virus scan on your website and change your CPanel or FTP password to make sure no one will access your sites admin area again.

Remove the spam pages. Links to non-existent pages that deliver a proper 404 are removed from the link graph as if you'd remove the links themselves.

as skyflash said change your cpanel password , check your pc/laptop and contact your hosting provider let them know , tell them to block all other ip except your's . delete all those page , learn how to use disavow tool that will come handy .

First question you need to be asking yourself is how he got in, was the password weak, or your sites security is weak or your computer has virus. Then you should eliminate the problem and delete all those pages he created, but if you do backups regularly this shouldn't be an issue. Well about those links that link to your site, you should deindex them, but if they are porn and those kind of links they won't affect your rankings.

Disavow the links and keep the natural SEO campaign. If you got hit you will see a notification on Webmaster Tool anyway. It takes up to 6 - 12 months to recover depending on what they did.

Delete the spammer's pages ASAP, then start fixing your security bugs: change passwords, delete possible viruses, etc.