I realized a few days ago that making a mostly static website, I can also make a script that parses the logs for hits on places that don’e exist and that bots usually hit, like POST requests on /xmlrpc.php. And I wasn’t surprised to notice that over nine days, I’ve discovered 196 requests coming from about 90 IPs (for privacy, my server doesn’t log the last block of the IP address). I could publish the list of those classes, but picking randomly from it, this looks like simple malware-infected home hosts, so it’s pretty useless. But it’s a nice to see the URLs the bots and spammers try to access. Here’s a list: