Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot

Threat actors are conducting mass vulnerability scans across the web while spoofing legitimate AI bot identities (like ClaudeBot), exploiting the rapid growth of machine traffic to conceal malicious reconnaissance activity. This represents a critical security risk for IT organizations as attackers blend in with the 35% of legitimate bot traffic that now comprises the web ecosystem, making detection and attribution significantly more difficult. Organizations must implement enhanced bot detection, stricter authentication mechanisms, and advanced threat monitoring to distinguish between legitimate AI agents and malicious actors masquerading as trusted services.