Looking at my logs I'm getting waves of daily hack attempts, most are basic scripts, but LLMs are getting more and more common.
I've built a tool which runs a bunch of obliterated LLMs (mainly deepseek, kimi and a few others specialized in cyber attacks), to try to hack my site.
If anyone wants to try it, we can run it and send you a report in about 24h
We do verify the request is legit, but yes, same as anyone can hire a pen test, this is all on public endpoints and chances are people are already running them, companies just don't know about it.