Scanner Probed a Site for 400 Secret Files in One Minute; None Were Exposed

A single client sent about 1,180 requests to a domain in one minute, requesting roughly 400 sensitive file paths such as environment files, WordPress configs, and cloud credentials. The client identified itself as tlm-scanner/2.0, and the site returned no sensitive files, with only the home page and redirects or refusals for the rest. Shortly afterward, a slower sweep disguised with browser user agents targeted a subdomain and included a path tied to AI provider keys. The author argues that such scans are routine and that site owners should check their own logs, since successful probes often go unnoticed.