SECURITY Signal 514
Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot
↗
Attackers are conducting large-scale vulnerability scans while disguising their traffic as ClaudeBot, an AI data scraper.
Spoofing ClaudeBot makes malicious traffic appear as legitimate AI data scraping, which can bypass simple bot filters and inflate AI-related bot metrics. Given that AI Data Scrapers already account for roughly 10.9% of bot traffic, such spoofing can skew analytics and reduce trust in bot classification. Defenders may need to look beyond user-agent strings and rely on behavior-based detection.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
The activity consists of mass vulnerability scans.
The scans spoof the ClaudeBot user-agent, which is classified as an AI Data Scraper.
This can distort bot traffic metrics (AI Data Scrapers ~10.9% of bot traffic) and evade basic UA-based blocks.
THE CLUSTER