Hacker News Reader

Wordpress has a huge footprint and that certainly is visible in these stats. Furthermore, with multi-tenant installs, multiple sites count as multiple installations when there is actually only one PHP application underneath.

Many PHP sites also don't announce themselves as well, so... how might you factor that in?

This explains why the vast majority of "probes" in my server's log are focused around PHP.

At the same time, this also makes it easy to instantly ban these wanna-be hackers.