New answers tagged

0 votes

Filter CGNAT IPs from Log

Some ISPs use addresses from the Private address ranges (10.0.0.0/8, 172,16.0.0.0/12, or more rarely 192.168.0.0/16), but IANA has set aside Shared address space (100.64.0.0.0/10) for CGN. As a ...
  • 3,198
0 votes

Filter CGNAT IPs from Log

The Carrier-Grade NAT (CGNAT) IP allocation is represented by the following CIDR address: 100.64.0.0/10 You can use that expression for your log filter.
  • 196k
2 votes

What things should I consider when identifying and rate limiting bots?

identifying and blocking bad bots take most of my time. Generally when I see such a remark I get the idea that an administrator has too much time on their hands and may be focussing on the wrong ...
  • 1,683
1 vote

How can I get the IP address of a remote desktop client? And how can I trigger a shell command upon RDP connect?

New answer to a very old question (Get-WinEvent -FilterHashtable @{LogName='Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational'; ID=1149; StartTime=(Get-Date).AddDays(-31);} | ...
  • 11
0 votes

How can i get ip address of client connected to remote desktop

This Powershell snippet when run in a Powershell session on the Terminal Server should give you the IP address of the current client. (Get-WinEvent -FilterHashtable @{LogName='Microsoft-Windows-...
  • 11
0 votes

Check if IP Belongs to a CIDR

A possible shell script: #!/bin/bash ip=$1 shift; shift for net in "$@" do nmap -sL -n $net | grep -q $ip && echo $net done If you need the list of cidrs in a file use ./...
  • 749
0 votes

My IP is being blocked in windows server 2012 R2

I figured it out. It was not my program but RDP that was the culprit using RDPGuard (something the hosting provider had installed). I found my IP there and whitelisted it.
0 votes

Apache, mod_authz_host, ineffective 'Allow from' clause

As the other poster replied, apache-2.4 uses other directives to change requirements. See https://httpd.apache.org/docs/2.4/mod/mod_authz_host.html With regards to the IP-filter itself you will have ...
  • 362
1 vote

Bind nginx to vpn address only

There is also an option to make it through NGINX configs, here it is: location / { allow 45.43.23.0/24; # Change this to appropriate range deny all; }
1 vote
Accepted

Bind nginx to vpn address only

If you are using UFW, you can just simply allow port access only for specific ranges. Here is an example: ufw allow from 172.29.70.0/24 to any port 443 proto tcp comment "HTTPS only zerotier"...
0 votes

How can I display the IP address of an interface?

on Ubuntu 20.04 $ sudo apt install moreutils $ ifdata -pa eth0 192.168.1.152
  • 101

Top 50 recent answers are included