I still don’t understand why some bots try to enumerate everything via the Vulnerability-Lookup API when full dumps, including all metadata, are available in one shot:

[adulau@infosec.exchange]

I still don’t understand why some bots try to enumerate everything via the Vulnerability-Lookup API when full dumps, including all metadata, are available in one shot:

https://vulnerability.circl.lu/dumps/

We currently don’t rate-limit bots, but we’re close to doing so.

#bot #internet

[corsac@mastodon.social]

@adulau well they’re bots, they just enumerate *everything*

[atluxity@infosec.exchange]

@adulau Your robots.txt say you disallow bots... https://vulnerability.circl.lu/robots.txt

[le0l@infosec.exchange]

@adulau you just found a way to estimate the age of whoever wrote them: if API, very young (or the AIs themselves), if wget ~ 40, if bash and nc, it could be me.