XDEVS - Scrap the bots. Thank you. - Page 1
Forum section: electronics / general

author: manupthehills
author_rank: Contributor
timestamp: November 10, 2022, 04:39:20 am
content: It's a bit off topics here, but I guess it will get quicker to the source.What's happening? (Xdevs.com)

author: mendip_discovery
author_rank: Super Contributor
timestamp: November 10, 2022, 07:01:16 am
content: TiN is Ukrainian by birth and his website may have become a target for the hacking bots. I know he had issues with the FTP being messed with a few months back. If you need any info you might find it in the waybackmachine.

author: EEVblog
author_rank: Unknown
timestamp: November 10, 2022, 07:57:18 am
content: I've email him, will let you know if he replies.

author: mendip_discovery
author_rank: Super Contributor
timestamp: November 10, 2022, 11:44:20 am
content: He is in the US so physically safe(ish).My own website has been getting a lot of attention. I even host my local village (Parish) council website and I am having to keep a very close eye on that as it's got the script kiddies etc trying to brute force their way in.

author: JohanH
author_rank: Frequent Contributor
timestamp: November 10, 2022, 12:45:01 pm
content: Quote from: mendip_discovery on November 10, 2022, 11:44:20 amFail2ban and psad intrusion detection in combination with iptables makes a site relatively free from unwanted traffic. Occasionally permanently banning some Asian IP ranges (both IPv4 and IPv6) does wonders as well. And of course installing security updates when they are available. Also, if you run wordpress and such you are quite vulnerable. Nowadays I only have static web sites with some DB backend. FTP isn't recommended in this day and age.

author: JohanH
author_rank: Frequent Contributor
timestamp: November 10, 2022, 01:02:18 pm
content: Quote from: JohanH on November 10, 2022, 12:45:01 pmIf I had to use something ftp-like (like an anonymous upload service), I would use sftp server (using ssh), create an "anonymous" user with null password, create an ssh chroot and disable shell login. Users would have to use sftp clients to upload (Filezilla, WinSCP, any linux client). Web browsers don't support ftp any more, but the "ftp" file structure can be shared read-only through the web. It's very dangerous, though, so you have to know what you are doing. I wouldn't keep anything else on the same server and block it so they can't access anything else if it's hacked.

author: EEVblog
author_rank: Unknown
timestamp: November 10, 2022, 10:17:48 pm
content: I heard back from TiNQuote

author: Black Phoenix
author_rank: Super Contributor
timestamp: November 11, 2022, 03:36:22 am
content: There wasn't someone who offer to help TiN to host the website somewhere else? I remember reading that somewhere.Probably Dave you should put both in contact, no?

author: EEVblog
author_rank: Unknown
timestamp: November 13, 2022, 11:07:33 pm
content: xdevs site is now back up and running. The bot attack has subsided.

author: Zenwizard
author_rank: Regular Contributor
timestamp: November 30, 2022, 03:39:19 pm
content: TiN, If there is something that I can help with in the IT space let me know. I have a very deep background in IT.Zen

author: kada
author_rank: Contributor
timestamp: December 27, 2022, 11:38:52 pm
content: xdevs is down for me unfortunately, I'm located in Ireland.Could somebody please confirm is it still working?

author: sahko123
author_rank: Frequent Contributor
timestamp: December 27, 2022, 11:48:30 pm
content: im in ireland and its alright for me

author: kada
author_rank: Contributor
timestamp: December 28, 2022, 12:00:48 am
content: Thanks for the replying, looks like it's somehow related to the Chrome browser, works fine in Edge.