credential scanning

Credential Scanners Are Wearing Crawler Costumes

71.9 percent of traffic claiming to be Googlebot was hunting for .env files. Of 13,670 credential probes wearing a named crawler user agent, zero came from a verified vendor IP.