Since launching Scientology Business, this website has been under constant attack.
Attempts to log in to a website’s admin panel are not uncommon, however Scientology Business has seen a sustained and prolonged attack since its inception on 6th August 2023.
This website has been live for 26 days and in that period 3,279 attempts have been made to gain access to our administrator dashboard. That’s an average of 126 attempted log ins every day.
For context, a recent Reddit survey found that the majority of websites see less than 5 daily log in attempts from unknown sources.
The majority of IP addresses linked to the attack are from VPNs and dark web terminals based in the US, meaning it is impossible to trace the attack back to a single source. However, it is notable that when we upgraded the security on our website to block the largest repeat offenders, the attempted logins reduced to nearly zero. Several hours later, the attack resumed from numerous unknown IP addresses based in various locations across the globe. This indicates that the attack is intentional and its approach was changed in response to our counter-attack measures.
Although the Fair Game policy was officially cancelled in 1968, Scientology’s tactics of harassing and intimidating critics has continued for decades. The policy states enemies of the Church “may be tricked, sued or lied to or destroyed”, and it’s ongoing implementation is evidenced by Leah Remini’s recent lawsuit against the Church.
Thanks to the support of our subscribers, we were able to increase the security on our website which prevents these attempted logins from overloading our servers and taking our website down. However, this has not stopped the attack and we continue to see well over 140 hacking attempts every single day.
We will not be silenced. The fight goes on.
If you want to support Scientology Business, you can Buy Me a Coffee, or donate directly through Paypal.
8 responses
Please do! Thank you.
I will be reaching out to someone on this matter. I’ll let you know what I find.
Please do! Thank you.
I will be reaching out to someone on this matter. I’ll let you know what I find.
This happens to all web-facing login panels. It’s automated spam. Botnets happen, get used to it.
Just to check I did some testing with the IPs you have. Scientology has it’s own IP prefixes it trolls from: https://bgp.he.net/search?search%5Bsearch%5D=scientology&commit=Search. Here we can see the organisations and ASN IDs that have IPs which tried to log in to your site:
‘ALIBABA-CN-NET’ ‘@aut-45102-APNIC’ null
‘DIGITALOCEAN-ASN’ ‘DO-13-ARIN’ null
‘UMDNET’ ‘UNIVER-262-Z-ARIN’ null
‘ISI-AS’ ‘USC-32-ARIN’ null
‘LINODE-AP’ ‘ORG-LL3-AP-APNIC’ null
‘KIXS-AS-KR’ ‘@aut-45400-APNIC’ null
‘LINODE-AP’ ‘ORG-LL3-AP-APNIC’ null
‘DIGITALOCEAN-ASN’ ‘DO-13-ARIN’ null
‘ZWIEBELFREUNDE’ ‘ORG-ZE18-RIPE’ null
‘ZWIEBELFREUNDE’ ‘ORG-ZE18-RIPE’ null
‘ZWIEBELFREUNDE’ ‘ORG-ZE18-RIPE’ null
‘NARC-EROOT’ ‘NARC-ARIN’ null
‘IP-EEND-AS’ ‘ORG-SB3-RIPE’ null
‘OPENDNS’ ‘OPEND-2-ARIN’ null
‘THIN-NOLOGY’ ‘TL-976-ARIN’ null
‘THIN-NOLOGY’ ‘TL-976-ARIN’ null
‘THIN-NOLOGY’ ‘TL-976-ARIN’ null
‘EMERALD-ONION’ ‘EO-95-ARIN’ null
‘GOOGLE-CLOUD-PLATFORM’ ‘GOOGL-2-ARIN’ null
‘GOOGLE-CLOUD-PLATFORM’ ‘GOOGL-2-ARIN’ null
‘AMAZON-AES’ ‘AMAZO-4-ARIN’ null
‘CONTABO’ ‘ORG-GG22-RIPE’ null
‘AEZA-AS’ ‘ORG-AGL37-RIPE’ null
‘SUISSE-AS’ ‘ORG-SL1181-RIPE’ null
Thanks for your comment, Jeff. A number of the IP addresses attempting to log in to this website are linked to VPNs and TOR Exit Nodes – so it isn’t possible to trace their origin IPs. I manage several websites that have web-facing log in pages and I have never seen almost 200 attempts to gain access in a 24 hour period before – this website is clearly being targeted. The question is.. by whom?
This happens to all web-facing login panels. It’s automated spam. Botnets happen, get used to it.
Just to check I did some testing with the IPs you have. Scientology has it’s own IP prefixes it trolls from: https://bgp.he.net/search?search%5Bsearch%5D=scientology&commit=Search. Here we can see the organisations and ASN IDs that have IPs which tried to log in to your site:
‘ALIBABA-CN-NET’ ‘@aut-45102-APNIC’ null
‘DIGITALOCEAN-ASN’ ‘DO-13-ARIN’ null
‘UMDNET’ ‘UNIVER-262-Z-ARIN’ null
‘ISI-AS’ ‘USC-32-ARIN’ null
‘LINODE-AP’ ‘ORG-LL3-AP-APNIC’ null
‘KIXS-AS-KR’ ‘@aut-45400-APNIC’ null
‘LINODE-AP’ ‘ORG-LL3-AP-APNIC’ null
‘DIGITALOCEAN-ASN’ ‘DO-13-ARIN’ null
‘ZWIEBELFREUNDE’ ‘ORG-ZE18-RIPE’ null
‘ZWIEBELFREUNDE’ ‘ORG-ZE18-RIPE’ null
‘ZWIEBELFREUNDE’ ‘ORG-ZE18-RIPE’ null
‘NARC-EROOT’ ‘NARC-ARIN’ null
‘IP-EEND-AS’ ‘ORG-SB3-RIPE’ null
‘OPENDNS’ ‘OPEND-2-ARIN’ null
‘THIN-NOLOGY’ ‘TL-976-ARIN’ null
‘THIN-NOLOGY’ ‘TL-976-ARIN’ null
‘THIN-NOLOGY’ ‘TL-976-ARIN’ null
‘EMERALD-ONION’ ‘EO-95-ARIN’ null
‘GOOGLE-CLOUD-PLATFORM’ ‘GOOGL-2-ARIN’ null
‘GOOGLE-CLOUD-PLATFORM’ ‘GOOGL-2-ARIN’ null
‘AMAZON-AES’ ‘AMAZO-4-ARIN’ null
‘CONTABO’ ‘ORG-GG22-RIPE’ null
‘AEZA-AS’ ‘ORG-AGL37-RIPE’ null
‘SUISSE-AS’ ‘ORG-SL1181-RIPE’ null
Thanks for your comment, Jeff. A number of the IP addresses attempting to log in to this website are linked to VPNs and TOR Exit Nodes – so it isn’t possible to trace their origin IPs. I manage several websites that have web-facing log in pages and I have never seen almost 200 attempts to gain access in a 24 hour period before – this website is clearly being targeted. The question is.. by whom?