Singapore is climbing fast
Singapore sent 2,734 attacks this week after none the week before.
Live threat intelligence, refreshed every 15 minutes
Growing threats and trends across the web
Every day, bots and attackers around the world probe the sites running on VoVo and the other sites our firewall protects. This page shows what they are trying, where it comes from and what is growing across all of them. It never shows which site was targeted or who sent it.
Attacks stopped today
7,415
So far today
Last 7 days
11,148
New vs last week
Last 30 days
11,148
Attacks blocked
Countries
46
Sent attacks this month
Networks
102
Providers and hosts
Data through Oct 7, 11:00 PM UTC. The numbers run one hour behind on purpose.
This week
The headlines
Google LLC leads the networks
Addresses on Google LLC sent 45.3% of all attack traffic in the last 30 days.
Singapore sent the most attacks
2,734 attacks came from Singapore in the last 7 days, 23.8% of the total.
Around the world
Where attacks come from
The last 30 days of attack traffic across every site our firewall protects, grouped by where each attacking address is registered. The busiest countries are shaded. Hover one for its numbers.
Fewer
More attacks
Top countries this week
Attacks in the last 7 days, and the change from the week before.
-
Singapore2,734New
-
United States2,647New
-
Belgium1,684New
-
India1,501New
-
Australia1,280New
-
Hong Kong573New
-
Canada560New
-
United Kingdom85New
-
Iran73New
-
Finland43New
On the rise
What's growing fastest
Countries whose attack traffic climbed the most compared with the week before. Only countries with meaningful volume make the list.
Singapore
New
United States
New
Belgium
New
India
New
Australia
New
Tactics
What attackers are trying
Every attack our firewall catches is sorted into a plain-English attack type. The line shows each one over the last 30 days.
Hunting for secret files
New3,624this week
Scans for .env, .git and config files that leak passwords and keys.
31.6% of this week
Bots hiding who they are
New2,276this week
Traffic that refuses to say what software it is.
19.8% of this week
Vulnerability scanning
New1,971this week
Automated scanners walking a list of known weak spots one by one.
17.2% of this week
Country and network restrictions
New1,773this week
Traffic from countries and networks a protected site has chosen not to accept.
15.5% of this week
WordPress break-in attempts
New1,112this week
Bots knocking on wp-login and xmlrpc, hoping for a weak WordPress install.
9.7% of this week
Backdoor and web shell hunting
New281this week
Looking for shells and upload scripts an earlier attacker may have left behind.
2.4% of this week
Debug and setup page probing
New215this week
Looking for installers, phpinfo and debug consoles left switched on.
1.9% of this week
Servers posing as visitors
New191this week
Rented cloud servers pretending to be a real person in a browser.
1.7% of this week
Backup file grabs
New15this week
Attempts to download forgotten database dumps and site backups.
0.1% of this week
Database tool probing
New6this week
Searching for exposed phpMyAdmin and Adminer logins.
0.1% of this week
Volume
Attacks per day, last 30 days
Hover a day for its count. Spikes are usually one scanner sweeping the whole internet at once.
Peak Oct 7: 7,415
Hot spots
Networks behind the traffic
A network is named only when at least 3 separate attackers came from it, so no single person can be picked out.
Networks sending the most attack traffic
Every internet address belongs to a network, usually an internet provider or a hosting company. The attacks almost always come from servers their customers rent, so a place on this list shows where abuse is coming from and where reports to the network's abuse desk would do the most good. Last 30 days.
1
Google LLC
AS396982
5,198
New
45.3% of all attack traffic
2
Microsoft Corporation
AS8075
3,365
New
29.3% of all attack traffic
3
Google LLC
AS15169
1,348
New
11.8% of all attack traffic
4
DigitalOcean, LLC
AS14061
509
New
4.4% of all attack traffic
5
HostPapa
AS36352
173
New
1.5% of all attack traffic
6
Tencent Building, Kejizhongyi Avenue
AS132203
145
New
1.3% of all attack traffic
7
SEMrush CY LTD
AS209366
110
New
1% of all attack traffic
8
Cipher Operations Doo Beograd - Novi Beograd
AS215930
70
New
0.6% of all attack traffic
9
Space Exploration Technologies Corporation
AS14593
67
New
0.6% of all attack traffic
10
OVH SAS
AS16276
50
New
0.4% of all attack traffic
Privacy
How we keep this anonymous
No addresses, no sites
Individual IP addresses, the pages that were attacked and the sites they belong to never appear here.
One hour behind
Numbers are delayed an hour, so nobody can use this page to check whether a probe they just sent was noticed.
Safety in numbers
A country, network or attack type is named only after at least 3 separate attackers were seen.
Good bots left out
Search engines and link previews that prove who they are are not counted as attackers, even when they wander somewhere they should not.
Every VoVo site sits behind this firewall
The attacks on this page are what it faces across every site it protects, VoVo sites among them. Protection is built into every plan, with nothing extra to install.