Put a canary on your site.

Paste two invisible lines into your pages. People never see them. AI agents and scrapers do: one line asks an agent to fetch a URL, the other is a link that robots.txt forbids. Every time one takes the bait, your private page shows which agent it claimed to be, the network it came from, where, and whether it hid behind a VPN or a cloud server.