Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot(knownagents.com)
300 points by gavinhking 9 days ago | 224 comments
tl;dr: Summary not available.
HN Discussion:
  • ~Mass vulnerability scanning is nothing new; only the bot impersonation angle is a minor twist
  • User-agent strings are unreliable; verify bots via reverse DNS or published IP ranges instead
  • Blocking VPS provider ASNs effectively eliminates most fake bot traffic
  • ~Questioning the motive for impersonating AI bots since they're already frequently blocked
  • Firsthand confirmation of the described attack pattern originating from GCP IP space