Linux is absolutely popular for servers. If you put a WordPress installation on the IPv4 address space, or any other kind of PHP you usually find a webshell has appeared after just a few minutes.

true, i get these attempts on my server daily. but here too you got less popular alternatives, so the same principle applies.