The access log of public http servers is truly interesting to watch.

You know that the scripts doing it are optimized for success rate, so the types of requests they send give you an impression of what's actually out there.

It's clear to me that once we finally achieve rogue AGI, it is going to propagate through unpatched WordPress WooCommerce instances.

▲

jamesfinlayson 19 hours ago | parent | next [-]

Yep I see this at work pretty regularly - a SpringBoot log file full of requests for all sorts of things (mostly WordPress but I think some IIS as well).

▲

mitxela a day ago | parent | prev | next [-]

Not success rate per request though.

▲

lyu07282 a day ago | parent | prev [-]

It seems the most common issue of them all is an exposed .env file by that measure.

	▲	graemep 16 hours ago \| parent [-]
		I think that is very likely to be common. It is an easy mistake to make if your code is in a directory the web server can read, which is common, and is usual with PHP.