They are automated bots, it's economical when it's automated. Often, they have databases of technologies, see what they come across and try a bunch of things t

They are automated bots, it's economical when it's automated. Often, they have databases of technologies, see what they come across and try a bunch of things that have worked, or try to look at the version of the software on your server and try just that.