Malus

@malus.zone

🏳️‍🌈 Computer science chee · likes to sit in trains · he/him · Germany · 25 · https://malus.zone I develop very niche things (https://github.com/Maluscat · https://gitlab.com/Maluscat)

GitHub having a "I appreciate your efforts but respectfully, your code is trash" button would make dependency management a bit more bearable

Update: AI crawler requests Note: No distinction is made between content scrapers and AI-invoked crawlers. Some AIs seem to have made a lot of malicious requests in the last few days, but it's difficult to asses without more data. See alt text for more.

Histogram showing the total amount of requests to my old website made by AI crawlers. The data ranges from approximately mid-2020 to early 2025. The data shows an influx of requests over time.Histogram showing the total amount of requests to my old website made by AI crawlers. The data ranges from approximately late 2023 to now (August of 2026). The data shows an influx of requests over time.
200, 301 and 304 requests are usually AI content scrapers because the requests are successful.
404 requests amount to "robots.txt", "sitemap.xml" (which are legitimate requests by content scrapers) and malicious requests (i.e. testing a lot of URLs in the hopes of finding a security vulnerability). The legitimate 404 requests have been filtered out in the "clean" version.Histogram showing the amount of requests to my new website made by AI crawlers. This diagram is equivalent to the previous one except that requests to "robots.txt" and "sitemap.xml", both 404 requests, have been filtered out.
This means that most of the shown 404 requests are malicious, i.e. requests which test a multitude of URLs in the hopes of finding a security vulnerability.
The spike at the end shows data since approximately the 8th of August. According to the sent user agents, the top initiators of malicious requests in this time period are GrokBot (358 requests), Applebot (216 requests) and ChatGPT (174 requests).
Keep in mind that these are only approximate observations. For example, I'm not sure why Applebot would send malicious requests all of sudden, it could be user agent spoofing.
Malus@malus.zone · 2y ago

Made my access data classifier a lot more robust and now the resulting data is very precise – Here are some diagrams from the (anonymous) access logs from both of my websites that I've been collecting since April 2020.

Pie chart showing the ratio of request types (malicious, crawler, PC and smartphone). Malicious requests are by far the most common, making up about 64% of requests, followed by PC (23%), crawler (9%) and smartphone (3.7%)

dear god just saw how an it looks when someone's hit with the account wide adult content warning and it's fucking MISERABLE blurred icon, blurred banner, every single post is hidden, even text posts, and posts that have images require you to hit unhide TWICE for the text and image, fucking nightmare

Our statement on the UK gov't's demand that all content on all devices sold or used in the UK be scanned, on the presumption of nudity, using a dystopian combination of age verification & content scanning. This proposal will not safeguard children. It endangers us all. signal.org/blog/pdfs/20...

signal.org

What the FUCK oh yeah they are doing this again huh fucking CHRIST accountwide, not just per post, not just tagging posts, but tagging entire fucking accounts so they are unreachable. This fucking **sucks*

Content warning

this user has ben flagged" adult content. learn more

go back show anyway

this story is so funny because it was entirely preventable if a single human had used their brain. this isn't even about AI, just about the brainrot in the industry. it used to be interns destroying prod with admin creds, today it's LLM chatbots. zero learnings.

Nash@radiodeadair.com · 5mo ago

It's amazing that nobody will understand this: They don't think. They don't remember. They have no cognition. They're pattern matching systems that produce answer-shaped responses. This is no different that giving a script admin privileges, except this script is rewritten on the fly.

I love JavaScript because every few months you stumble across a mention of some inconspicuous API you have never heard of and the next thing you know is that you've spent hours delving into a rabbit hole of pure insanity. #javascript

As a... Microsoft Teams user I want... randomly selected parts of my message be replaced with multiple emoji after I hit send So that... my coworkers do not have to worry about any incoming tasks

Do you like taking unscientific personality tests? I have developed one that will definitely tell you something about yourself. Guaranteed free of malware! Extremely shareable results!! It’s free and online!!!! wuffs.org/quiz/

screenshot of my quiz results: “Congratulations! You are a Quiz Destroyer. You answered 20 questions and didn’t break a sweat.”
badges say: “Hydrated…?”, “Breakfast Appreciator”, “Behaves Unprofessionally”, “Burger Supplier”, “No Mayo”, “Fun Guy”, “Inbox Zero”

I firmly believe that Spotify's ~7000 employees are actively working on dismantling their service. I have arrived at the point where my music stops when scrolling through a playlist because it takes too much processing power, and reloading the website takes 52 seconds.