login – Fooyah – Ian Parish

This communication follows Odd in a view of what’s going on with my website. This isn’t an interesting place, as I wrote on the home page nine years ago it is just a place for my ego and my thoughts which mostly aren’t pretty! I have found that trying to construct arguments for this site has helped me elucidate my reasoning where my “in head” arguments tend to be more: well, that seems the right thing to do. Why someone would try to login to my website is beyond me, maybe they want control to direct all my readers to spam or to be able to inject some ransomware? Who knows.

139.5.242.87

This IP address has tried to enter the control area of this website 21 times in the last week. It’s interesting, but I don’t know why. Maybe I’m in the wrong business? This is all I know about them using my limited resources. No doubt there’s much more out there somewhere and if I could be bothered.

City: Delhi
Region name: Delhi
Country name: India
◉ Latitude: 28.650406
◎ Longitude: 77.23721
org: Excitel
isp: Excitel

87.119.178.66

I wonder where this one comes from?
City: Tallinn
Region name: Harjumaa
Country name: Estonia
◉ Latitude: 59.433
◎ Longitude: 24.7323
org: Elisa Eesti
isp: Elisa Eesti

47.75.186.204

This one tried to login 19 times in a two minute window sometime last week.

IP address: 47.75.186.204
City: Ningbo
Region name: Zhejiang
Country name: China
◉ Latitude: 29.878204
◎ Longitude: 121.5495
org: Alibaba
isp: Alibaba

It would appear that these bots try to login using common login names a few times and when they get refused they move on to another poor soul who runs WordPress. I do wonder if I’ll get properly hacked soon. Time to run some back up software.

Here’s a strange thing: this website has been hacked twice. Once in 2016 and once in 2020. Someone managed to insert some code into the php that meant whenever I looked at the site it looked and behaved normal but to everyone else it took you off to a bad place. I’m not sure why they would target me, there are only about three people who regularly read these pages, I don’t have a massive audience. I would imagine that I wasn’t deliberately targeted but these people just keep trying with any website they find using automated processes. Every now and then they get this site and attempt to login or use a WordPress vulnerability.

In the last week there have been 33 attempts to login to the admin area of this website. I honestly don’t know why. I don’t have any financial details of anyone in this site. It’s quite strange, why would they target little ol’ me?

These are the places that the attacks have come from recently. Turkey is a new one on me, mostly it seems to be Russia and China whenever I look. No real surprise there as both countries are engaged in massive online media attacks and pushing fake news to empower themselves. Both those countries see the long term. Just look at Brexit and Trump.

Fortunately this website has survived on the recent server and I have become quite good at knowing what to look for. I’m also better at backing up this website. I have, in the past, considered leaving this place and consigning Fooyah to the death-eather but I think I actually enjoy this place and it gives me a focus and a particular way to think about things. Thanks all for reading.