Skip to main content

Find hard-coded private IPv4 addresses

org.openrewrite.text.FindHardcodedPrivateIPAddresses

Locates mentions of hard-coded IPv4 addresses from private IP ranges. Private IP ranges include: * 192.168.0.0 to 192.168.255.255 * 10.0.0.0 to 10.255.255.255 * 172.16.0.0 to 172.31.255.255 It is not detecting the localhost subnet 127.0.0.0 to 127.255.255.255.

Recipe source

This recipe is only available to users of Moderne.

This recipe is available under the Moderne Proprietary License.

Example

Before
class Test {
void ipTest() {
String privateAddress1 = "10.10.20.20";
String privateAddress2 = "192.168.20.20";
String privateAddress3 = "172.16.20.20";
String wordBoundaries = "1000000192.168.1.1aaa";
String nonPrivate = "1.1.1.1";
String nonAddress = "256.0.0.0";
String springVersion = "5.2.2";
String adding = "4.3+4.5";
// address in a comment: 10.1.2.3
// address in a comment: 192.168.2.3
// address in a comment: 172.16.2.3
String date = "30.11.2017";
String ikeaProduct = "805.721.99";
}
}
After
class Test {
void ipTest() {
String privateAddress1 = "~~>10.10.20.20";
String privateAddress2 = "~~>192.168.20.20";
String privateAddress3 = "~~>172.16.20.20";
String wordBoundaries = "1000000192.168.1.1aaa";
String nonPrivate = "1.1.1.1";
String nonAddress = "256.0.0.0";
String springVersion = "5.2.2";
String adding = "4.3+4.5";
// address in a comment: ~~>10.1.2.3
// address in a comment: ~~>192.168.2.3
// address in a comment: ~~>172.16.2.3
String date = "30.11.2017";
String ikeaProduct = "805.721.99";
}
}

Usage

This recipe has no required configuration options. Users of Moderne can run it via the Moderne CLI:

You will need to have configured the Moderne CLI on your machine before you can run the following command.

shell
mod run . --recipe FindHardcodedPrivateIPAddresses

If the recipe is not available locally, then you can install it using:

mod config recipes jar install org.openrewrite.recipe:rewrite-java-security:3.14.0

See how this recipe works across multiple open-source repositories

Run this recipe on OSS repos at scale with the Moderne SaaS.

The community edition of the Moderne platform enables you to easily run recipes across thousands of open-source repositories.

Please contact Moderne for more information about safely running the recipes on your own codebase in a private SaaS.

Data Tables

Hardcoded private IP addresses

org.openrewrite.text.table.HardcodedPrivateIPAddresses

This table lists locations of hardcoded private IPv4 addresses and their value found in source files.

Column NameDescription
Source PathThe path to the source file containing the hard-coded IP address.
IP AddressThe hard-coded private IPv4 address found in the source file.
Line NumberThe line number in the source file where the hard-coded IP address is found.

Contributors

Merlin Bögershausen