Skip to content

v0.5.48 — Scanner Cluster Block

Choose a tag to compare

View all tags
@creator35lwb-web creator35lwb-web released this 28 Jun 15:24
v0.5.48
e56de87
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.5.48 — Scanner Cluster Block

Security-hygiene patch: blocks a coordinated cluster of config/secret scanners plus a combined config/RCE scanner, all confirmed via GCP forensic analysis. The application-layer IP blocklist grows to 26 entries; one new rotation-proof UA-substring block added. Zero sensitive-path data was served to any blocked actor — existing defense layers (rate limiting, HTTP→HTTPS redirects, 404 handling) already fully deflected them.

  • Security: config/secret scanner cluster (2 IPs, same subnet as a prior probe) + a combined config/RCE scanner (1 IP, with active injection probing that our Python/FastAPI server ignored — zero execution, zero leak) blocked at the application layer
  • Security: rotation-proof UA-substring block added for a self-identifying scanner tool
  • Monitoring: two crawler user-agents flagged for a 14-day watch; no IP block warranted at current volume

No functional changes — reasoning visibility, the BYOK frontier-model menu, and the free default path are all unchanged. Existing tests pass.

🤖 Generated with Claude Code

Assets 2
Loading