**AI crawler user-agents are being spoofed to reach cloud metadata endpoints**

> The scanners spoofing AI crawler user-agents to hunt credentials turned out to be one HTTP client running on 26 addresses. On 25 August it switched from nine fixed strings to a generator that has produced 6,648 different spellings of Claude-User alone, which breaks every allow-list that matches on the name. Blog · 2026-09-08 · HoneyLabs 26 machines using 42,321 user-agents to spoof AI crawlers The scanners spoofing A...

**来源信息**
- **来源**：Hacker News：AI 热帖
- **分类**：ai-products
- **发布时间**：2026-09-08 13:44（北京时间）
- **原文**：[打开原文](https://honeylabs.net/blog/spoofed-ai-crawlers-one-client)