“Web scraping considered dangerous”: Exploiting the telnet service in scrapy < 1.5.2
Disclaimer: scrapy 1.5.2 has been released on January 22th, to avoid being exploited you must disable telnet console (enabled by default) or upgrade up to 1.5.2
at least.