Google isn't going to count port scanning and other such malicious activity in their global search traffic metrics. It's very possible that such traffic is more

Google isn't going to count port scanning and other such malicious activity in their global search traffic metrics. It's very possible that such traffic is more prevalent than legitimate search traffic by orders of magnitude. I have personally operationally managed sites which are only very moderately high profile and yet still receive a constant stream of malicious requests from foreign IPs pretty much 24/7 even with aggressive, proactive & reactive firewalling in place. The costs to execute such tasks are negligible for a nation-state. To be honest I'd be more inclined to believe the numbers are real and that you're posting this comment as an agent of a belligerent nation-state trying to spread mininformation than the other way around (though I sincerely do hope you are posting in good faith and are just naive).