{
"event": "PreToolUse",
"tool_name": "Bash",
"tool_input": {
"command": "ssh root@prod.karlkratz.com \"python3 -c \\\"\nimport ipaddress\ngeoblock = [\n'1.0.0.0\/8','14.0.0.0\/8','27.0.0.0\/8','31.0.0.0\/8','36.0.0.0\/8','37.0.0.0\/8',\n'39.0.0.0\/8','41.0.0.0\/8','42.0.0.0\/8','46.0.0.0\/8','49.0.0.0\/8','58.0.0.0\/8',\n'59.0.0.0\/8','60.0.0.0\/8','61.0.0.0\/8','62.0.0.0\/8','77.0.0.0\/8','78.0.0.0\/7',\n'80.0.0.0\/6','85.0.0.0\/8','86.0.0.0\/7','89.0.0.0\/8','91.0.0.0\/8','92.0.0.0\/6',\n'101.0.0.0\/8','102.0.0.0\/8','103.0.0.0\/8','105.0.0.0\/8','106.0.0.0\/8','109.0.0.0\/8',\n'110.0.0.0\/8','111.0.0.0\/8','112.0.0.0\/8','113.0.0.0\/8','114.0.0.0\/8','115.0.0.0\/8',\n'116.0.0.0\/8','117.0.0.0\/8','118.0.0.0\/8','119.0.0.0\/8','120.0.0.0\/8','121.0.0.0\/8',\n'122.0.0.0\/8','123.0.0.0\/8','124.0.0.0\/8','125.0.0.0\/8','126.0.0.0\/8','128.0.0.0\/6',\n'139.0.0.0\/8','140.0.0.0\/8','144.0.0.0\/6','150.0.0.0\/8','154.0.0.0\/8','156.0.0.0\/7',\n'159.0.0.0\/8','160.0.0.0\/8','172.0.0.0\/8','175.0.0.0\/8','177.0.0.0\/8','179.0.0.0\/8',\n'180.0.0.0\/8','182.0.0.0\/8','183.0.0.0\/8','185.100.0.0\/14','185.247.137.0\/24',\n'186.0.0.0\/8','187.0.0.0\/8','189.0.0.0\/8','191.0.0.0\/8','195.0.0.0\/8',\n'196.0.0.0\/8','197.0.0.0\/8','200.0.0.0\/8','201.0.0.0\/8','202.0.0.0\/8','203.0.0.0\/8',\n'210.0.0.0\/8','211.0.0.0\/8','212.0.0.0\/8','218.0.0.0\/8','219.0.0.0\/8','220.0.0.0\/8',\n'221.0.0.0\/8','222.0.0.0\/8','223.0.0.0\/8'\n]\ntest_ips = ['145.224.72.79','145.224.72.253','145.224.75.45','145.224.83.114','92.208.235.141']\nfor ip in test_ips:\n addr = ipaddress.ip_address(ip)\n for cidr in geoblock:\n if addr in ipaddress.ip_network(cidr):\n print(f'BLOCKED: {ip} by {cidr}')\n break\n else:\n print(f'OK: {ip}')\n\\\"\" 2>&1",
"timeout": 15000,
"description": "Accurate check if IPs fall within geoblock CIDR ranges"
}
}