Skip to main content

Find hard-coded private IPv4 addresses

org.openrewrite.text.FindHardcodedPrivateIPAddresses

Locates mentions of hard-coded IPv4 addresses from private IP ranges. Private IP ranges include: * 192.168.0.0 to 192.168.255.255 * 10.0.0.0 to 10.255.255.255 * 172.16.0.0 to 172.31.255.255 It is not detecting the localhost subnet 127.0.0.0 to 127.255.255.255.

Recipe source​

This recipe is only available to users of Moderne.

This recipe is available under the Moderne Proprietary License.

Example​

Before​
class Test {
    void ipTest() {
        String privateAddress1 = "10.10.20.20";
        String privateAddress2 = "192.168.20.20";
        String privateAddress3 = "172.16.20.20";
        String wordBoundaries = "1000000192.168.1.1aaa";
        String nonPrivate = "1.1.1.1";
        String nonAddress = "256.0.0.0";
        String springVersion = "5.2.2";
        String adding = "4.3+4.5";
        // address in a comment: 10.1.2.3
        // address in a comment: 192.168.2.3
        // address in a comment: 172.16.2.3
        String date = "30.11.2017";
        String ikeaProduct = "805.721.99";
    }
}
After​
class Test {
    void ipTest() {
        String privateAddress1 = "~~>10.10.20.20";
        String privateAddress2 = "~~>192.168.20.20";
        String privateAddress3 = "~~>172.16.20.20";
        String wordBoundaries = "1000000192.168.1.1aaa";
        String nonPrivate = "1.1.1.1";
        String nonAddress = "256.0.0.0";
        String springVersion = "5.2.2";
        String adding = "4.3+4.5";
        // address in a comment: ~~>10.1.2.3
        // address in a comment: ~~>192.168.2.3
        // address in a comment: ~~>172.16.2.3
        String date = "30.11.2017";
        String ikeaProduct = "805.721.99";
    }
}

Usage​

This recipe has no required configuration options. Users of Moderne can run it via the Moderne CLI:

You will need to have configured the Moderne CLI on your machine before you can run the following command.

shell
mod run . --recipe FindHardcodedPrivateIPAddresses

If the recipe is not available locally, then you can install it using:

mod config recipes jar install org.openrewrite.recipe:rewrite-java-security:3.14.0

See how this recipe works across multiple open-source repositories​

Run this recipe on OSS repos at scale with the Moderne SaaS.

The community edition of the Moderne platform enables you to easily run recipes across thousands of open-source repositories.

Please contact Moderne for more information about safely running the recipes on your own codebase in a private SaaS.

Data Tables​

Hardcoded private IP addresses​

org.openrewrite.text.table.HardcodedPrivateIPAddresses

This table lists locations of hardcoded private IPv4 addresses and their value found in source files.

Column NameDescription
Source PathThe path to the source file containing the hard-coded IP address.
IP AddressThe hard-coded private IPv4 address found in the source file.
Line NumberThe line number in the source file where the hard-coded IP address is found.

Contributors​

Merlin Bögershausen