v1.0.0

Protection Plus v1.0.0 — initial release

v0.3.0

protection v0.3.0

Install / upgrade:

curl -fsSL https://raw.githubusercontent.com/AnAverageBeing/protection/main/install.sh | sudo bash

New: full container network visibility

Containers have their own network namespace, so their sockets never appear in the host connection table. protection now reads each container namespace directly, so miners connecting to pools and port scans launched from inside a container are detected and attributed to that container — with no extra fd-scan cost.

Also adds a debug-conns [port] command to inspect every connection protection can see (host + all containers) with owning pid and container.

Starts in safe dry-run mode.

v0.2.0

protection v0.2.0

Install / upgrade:

curl -fsSL https://raw.githubusercontent.com/AnAverageBeing/protection/main/install.sh | sudo bash

New

• Protection modes (server / docker / both) chosen interactively in the installer
• neutralize smart action: kills the container for container threats, the process for host/VPS threats
• Event-driven zip-bomb detection: a CPU+disk-write spike instantly inspects the archive a process is extracting
• Beautiful Discord embeds with markdown + your installation name on every alert
• Interactive installer prompts for the important values; everything else stays in the config
• Performance: one shared system snapshot per tick, parallel time-budgeted socket→PID resolution, 5s polling, scan spinner

Starts in safe dry-run mode.

v0.1.0

First public release.

Install:

curl -fsSL https://raw.githubusercontent.com/AnAverageBeing/protection/main/install.sh | sudo bash

Static linux binaries for amd64 and arm64 are attached. Starts in safe dry-run mode.