> like leaked .env routes, brute forcing admin panels, and so on

That sort of thing was very common long before agent based abuse scanners. Volume would wax and wane but never went away.

Though other scans for vulnerabilities have shot up in frequency now everyone script kiddie and their flee-bitten mutt can ask an AI to do it for them.