Security analysts tracking web traffic across over 5,000 websites have discovered malicious actors conducting mass vulnerability scans by spoofing AI bots like ClaudeBot. This deceptive scanning activity was identified within a broader, continuously updated study monitoring overall bot behavior, AI scraping, and robots.txt compliance.