Traffic increases 100-fold today.
Just looking at the traffic logs again today (Sunday), the number of “hits” on the blog has risen to 1.5m, up from yesterday’s fairly quiet 106,000. It is perfectly clear that another attack is being targeted at the blog, which is likely to go “off-air” again shortly. Monday – this had moved to 2.06 million hits in the previous 24 hours, so I can’t see the server lasting much longer this traffic.
This traffic is coming from exactly the same internet addresses as attacked the site last week. Interestingly an IP address at the bottom of the attached screen snap has managed to attempt to visit the blog on 167,000 occasions today.
The pattern confirms the identity of the person behind this, and steps are already in place to publish details that will hopefully end his somewhat speculative attempts to “earn” money.
As soon as this site goes down, as previously promised, madeirahacker.com will have the details, including a verbatim copy of a messenger conversation last July. Please make a note of this website address and publicize it if and when the inevitable happens, as it will obviously no longer be available here! The individual concerned clearly believes that I will not do this. Watch this space……………
A “Buy me a Beer” link has been added to the sidebar on the right of the blog (many thanks to those that have contributed – I now have approaching seventy beers to get through!). Any more contributions are welcome, as the overheads are now such that the website is nowhere near covering its costs with all the additional expense involved after the recent attacks! More will no doubt follow in the next 24 hours.
COVID-19 in Madeira: daily updates can be found on an earlier post
Have bookmarked that site 👍
If you go to 185.198.189.21 it takes you to an Apache web server that has no website. A lookup of that address shows it as a UK address and:–
185.198.189.21 reported as spam and brute force attacks
507 websites attacked, discovered Sep 04, 2020, last activity Feb 14, 2021 22:02:02.
1 brute force attacks, last activity Feb 14, 2021 21:58:04.
A further check shows that IP belongs to UK hosting company Clouvider. I wonder if they are aware they are being used for Ddos attacks?
I had got that far Maurice, but not much further. Clouvider is based in London and appears semi-reputable.
Report from Scamalytics (but not a great help here!)
IP address 185.198.189.21 is a low fraud risk. This IP address is owned by Clouvider Limited who are themselves a high risk ISP. Scamalytics see low levels of traffic from this IP address across our global network, little of which is fraudulent. We apply a risk score of 0/100 to 185.198.189.21, meaning that of the web traffic where we have visibility, 0% is suspected to be fraudulent. 185.198.189.21 is operating a public proxy, which is likely to be proxying traffic from another geographical location. The geographical location of 185.198.189.21 is in the United Kingdom, however the geographical location of the user could be anywhere in the world.
Thanks, Paul. You are quite correct that there is no question of any fraudulent activity by that IP address – it is the volume of totally harmless traffic that it is specifically delivering to the server that hosts this blog – in what is a straightforward “Denial of Service” attack designed to take the website offline (189,610 page requests in the last 24 hours, similar to the daily levels it has been keeping up for exactly two weeks now).
Difficult getting onto the site this morning.
Cloudflare seems to hold you on the checking browser screen when using Samsung Internet browser but get through ok using Firefox.
Sometimes you have to do a force-refresh (Ctrl + F5) to re-start the connection.
Also, if you use a VPN when the “Under Attack” mode is activated it can also refuse the connection.
Ok on iPad Safari today
lol we push mor for u
pay und we tell u peepol gif mony for fukc u