<![CDATA[I still don’t understand why some bots try to enumerate everything via the Vulnerability-Lookup API when full dumps, including all metadata, are available in one shot:]]>I still don’t understand why some bots try to enumerate everything via the Vulnerability-Lookup API when full dumps, including all metadata, are available in one shot:

Vulnerability-Lookup JSON dumps

favicon

(vulnerability.circl.lu)

We currently don’t rate-limit bots, but we’re close to doing so.

]]>https://board.circlewithadot.net/topic/cd713dfc-4eb3-466d-9bfb-7c745699c00b/i-still-don-t-understand-why-some-bots-try-to-enumerate-everything-via-the-vulnerability-lookup-api-when-full-dumps-including-all-metadata-are-available-in-one-shotRSS for NodeThu, 14 May 2026 20:51:46 GMTSat, 02 May 2026 08:59:09 GMT60<![CDATA[Reply to I still don’t understand why some bots try to enumerate everything via the Vulnerability-Lookup API when full dumps, including all metadata, are available in one shot: on Sat, 02 May 2026 10:00:45 GMT]]>@adulau you just found a way to estimate the age of whoever wrote them: if API, very young (or the AIs themselves), if wget ~ 40, if bash and nc, it could be me.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/le0l/statuses/116504398789533869https://board.circlewithadot.net/post/https://infosec.exchange/users/le0l/statuses/116504398789533869Sat, 02 May 2026 10:00:45 GMT<![CDATA[Reply to I still don’t understand why some bots try to enumerate everything via the Vulnerability-Lookup API when full dumps, including all metadata, are available in one shot: on Sat, 02 May 2026 09:47:47 GMT]]>@adulau Your robots.txt say you disallow bots... https://vulnerability.circl.lu/robots.txt

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/atluxity/statuses/116504347750541053https://board.circlewithadot.net/post/https://infosec.exchange/users/atluxity/statuses/116504347750541053Sat, 02 May 2026 09:47:47 GMT<![CDATA[Reply to I still don’t understand why some bots try to enumerate everything via the Vulnerability-Lookup API when full dumps, including all metadata, are available in one shot: on Sat, 02 May 2026 09:12:08 GMT]]>@adulau well they’re bots, they just enumerate *everything* 😕

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/corsac/statuses/116504207590937366https://board.circlewithadot.net/post/https://mastodon.social/users/corsac/statuses/116504207590937366Sat, 02 May 2026 09:12:08 GMT