Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot
Points and comments are a snapshot, not live.
Mass vulnerability scans are surging, spoofing AI bot user agents like ClaudeBot.
According to Known Agents, bot traffic makes up 35% of website visits (down 1% from 90 days prior), with 29% of bot traffic now AI-related (up 11%). AI data scrapers like ClaudeBot (27%), meta-externalagent (19.3%), and Amazonbot (19.1%) lead scraping activity. ChatGPT-User accounts for 86.1% of AI fetching. 98.5% of bots follow robots.txt rules.
What commenters are saying
Commenters agree the surge in spoofed AI bot user agents is just a new variant of routine vulnerability scans. Many note that fake user agents can be filtered by checking originating ASNs and blocking VPS providers. Some share tactics: using open-source IP databases, ASN-based categorization, or honeypot blocklists. One commenter cautions that attackers will switch to residential proxies if data centers are blocked.