Были атаки неделю назад.
Большое число запросов такого вида:
85.72.196.104 - - [02/Jun/2022:07:27:19 +0300] "GET / HTTP/1.0" 200 23435 "http://www.abs-silos.de/en/plugins/content/plugin_googlemap2_proxy.php?url=https%3A// сайт/" "Microsoft URL Control - 6.00.8862"
46.232.121.207 - - [02/Jun/2022:07:27:18 +0300] "POST / HTTP/1.0" 200 11710 "http://www.sultanpalace.nl/site/plugins/content/plugin_googlemap2_proxy.php?url=https%3A// сайт/" "Mozilla/2.0 (compatible; Ask Jeeves/Teoma)"
128.201.160.107 - - [02/Jun/2022:07:27:19 +0300] "GET / HTTP/1.0" 200 23434 "http://gmodules.com/ig/creator?url=https%3A// сайт/" "Mozilla/4.0 (PDA; PalmOS/sony/model prmr/Revision:1.1.54 (en)) NetFront/3.0"
185.253.160.9 - - [02/Jun/2022:07:27:19 +0300] "GET / HTTP/1.0" 200 23435 "http://streamitwebseries.twww.tv/proxy.php?url=https%3A// сайт/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Acoo Browser; GTB5; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; Maxthon; InfoPath.1; .NET CLR 3.5.30729; .NET CLR 3.0.30618)"
79.131.49.27 - - [02/Jun/2022:07:27:19 +0300] "GET / HTTP/1.0" 200 23435 "https://www.facebook.com/sharer/sharer.php?u=https://www.facebook.com/sharer/sharer.php?u=https%3A// сайт/" "Mozilla/5.0 (X11; U; Linux armv6l; rv 1.8.1.5pre) Gecko/20070619 Minimo/0.020"
206.189.138.155 - - [02/Jun/2022:07:27:19 +0300] "ST / HTTP/1.0" 200 11710 "http://validator.w3.org/mobile/check?docAddr=https%3A// сайт/" "Mozilla/5.0 (Linux; U; Android 1.5; en-us; T-Mobile G1 Build/CRB43) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari 525.20.1"
212.5.159.3 - - [02/Jun/2022:07:27:18 +0300] "T / HTTP/1.0" 200 11710 "https://www.facebook.com/l.php?u=https://www.facebook.com/l.php?u=https%3A// сайт/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:69.0) Gecko/20100101 Firefox/69.0"
134.122.122.201 - - [02/Jun/2022:07:27:18 +0300] "ST / HTTP/1.0" 200 11710 "https://steamcommunity.com/market/search?q=https%3A// сайт/" "Mozilla/5.0 (iPad; U; CPU OS 4_3 like Mac OS X; en-us) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8F190 Safari/6533.18.5"
91.213.119.246 - - [02/Jun/2022:07:27:19 +0300] "POST / HTTP/1.0" 200 11710 "http://www.siroki.it/newsite/plugins/content/plugin_googlemap2_proxy.php?url=https%3A// сайт/" "Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.4) Gecko Netscape/7.1 (ax)"
122.3.255.114 - - [02/Jun/2022:07:27:19 +0300] "T / HTTP/1.0" 200 11710 "http://www.w3.org/RDF/Validator/ARPServlet?URI=https%3A// сайт/" "Opera/7.0 (compatible; MSIE 2.0; Windows 3.1)"
177.71.77.202 - - [02/Jun/2022:07:27:19 +0300] "GET / HTTP/1.0" 200 23433 "http://www.viewdns.info/ismysitedown/?domain=https%3A// сайт/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.8.0.1)"
66.135.227.181 - - [02/Jun/2022:07:27:19 +0300] "GET / HTTP/1.0" 200 23435 "http://translate.yandex.ua/translate?srv=yasearch&lang=ru-uk&url=https%3A// сайт/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.36 Safari/535.7"
Заблокировали, содержащие https%3A//forums.
И всё прошло. Осталось подключить Cloudflare или ddos-guard.