Skip to content

v0.5.45 — Probe Blocklist

Choose a tag to compare

View all tags
@creator35lwb-web creator35lwb-web released this 15 Jun 16:27
v0.5.45
8885018
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.5.45 — Probe Blocklist

Security + metrics-integrity patch. Blocks an MCP-endpoint scanner family that was polluting engagement metrics, plus a self-declared MCP scanner caught via GCP forensic analysis.

What changed

  • Blocked an MCP-endpoint scanner family at the application layer — one member was generating cron-driven traffic that would otherwise register as verified engagement. Total 12 IPs added to the blocklist.
  • Added a self-declared MCP endpoint scanner (identified via Sentinel GCP forensic analysis): a single high-rate dictionary sweep of MCP transport paths. Defense stack held — zero content served, zero leak.
  • Added rotation-proof User-Agent blocks for the scanner families (defense-in-depth vs IP rotation).

Why

Without these blocks, upcoming metrics reports would have inherited automated scanner activity as if it were genuine engagement. Our honest-metrics gate held the next analytics report until this shipped. No real handler was reached by any blocked actor.

Tests: 684 passing. No change to the 13 free tools.

PR: #260

Assets 2
Loading