http://3cbzkrvakrpetjjppdwzbzqrlkmzatjs7jbyazap5gwutj32gcltjpqd.onion
Well,
sometimes I get a single, one-off "GET /wp-login.php HTTP/1.1 , which is
strange enough it might not be a bot even, who knows. But in general, periods of
activity of this type are coming and going, probably aligned with new CVEs. And another surprising thing is that for this type of scanning to work (and I’ve
seen many over the years), the website framework/configuration must allow random
file download.