Scanners Pose as ClaudeBot to Hunt for .env Files

Over seven days, unknown clients requested a site's .env file 20 times while claiming to be ClaudeBot. GreyNoise counted 824 addresses forging AI crawler names between July 28 and August 23, none of which ever requested robots.txt.

• 20 requests for /.env in seven days under the ClaudeBot name
• GreyNoise: 824 addresses forged AI crawler names
• Fake scanners never requested robots.txt once
• Real ClaudeBot spends 12% of its traffic on robots.txt