Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot

Unknown actors are conducting widespread vulnerability scans on websites by spoofing legitimate AI bot identities, including ClaudeBot, according to security research tracking bot traffic patterns. The scans exploit the prevalence of AI agents accessing the web, with bot traffic now comprising a significant portion of overall web visits and AI-related bot activity increasing 28% in recent months. This represents a growing security concern as malicious actors disguise their scanning activities as legitimate AI assistants to evade detection.