Yeah, it could all be the same campaign, and they're just accidentally getting huge, high-value targets out of it.

Yeah.

And, and kind of like Kendrick's saying, if I have an exploit, right, and let's do, let's go into the mind of consultants and do remediation testing, I'm going to test WAF bypasses.

So now I have an exploit I know works.

I hit an endpoint that I know responds.

I'm sure they didn't start at 50 with a lucky guess.

They probably crawled up to it and then got a response of 200.

Uh, what do we know about this so far?