Just noticed in the last 4 weeks that this user-agent string has gone crazy on the sites I support.

20 million requests in the last 4 weeks or about 500k a day and alot of it looks to try and 'hack'......

user-agent: Mozilla/5.0 (compatible; Applebot-Extended/0.1; +http://www.apple.com/go/applebot)

i.e. /key.pem /nginx_status /.hermes/config.yaml etc