Malicious actors do not search for random websites to hack; they search for specific patterns. The query parameter ?id= is a prime target for automated scanning tools because it frequently connects directly to a database.
: A Google search operator that restricts results to pages where the following text appears in the URL. inurl commy indexphp id best
Exploring Israel.php: Understanding URL Parameter 'id' - Covid Malicious actors do not search for random websites