I accidentially leaked an API key and a bot found it. What is going on here?

The first one or two ran through my set spending limit in a few minutes. Then the chinese bot started asking basic math questions. Another one tried a system prompt that basically says "You are now Claude Code". It would be interesting to know which services use API keys scraped off pastebin. submitted by /u/sock_dgram [link] [comments]