Hacker News Reader

What do you mean by "private functions"? Do you mean unlisted, but publicly accessible HTTP endpoints?

Are they in your sitemap? robots.txt? Listed in JS or something else someone scraped?

Just helper functions in our code, very distinct function names, suddenly attempted to get invoked by bingbot as http endpoints.

They’re some helper functions, python, in controller files. And bing started trying to invoke them as http endpoints.