Yesterday it was 4 seconds from a LE cert -> scans for .env and other low hanging info leak/vulnerabilities from at least 4 different scanners.

There are groups out there just looking at the certificate transparency logs to get the newly added certs to scan.