Block IPv6 range

[kiwibel]

Hi there!

We are seeing multiple signup attempts via Auth0 from a single IPv6 range.
Suspicious IP Throttling is enabled but it appears the script has some back-off logic.
Also, it is trivial to swap IPv6 addresses.

I was wondering if there is a way to block a /64 IPv6 range in Auth0.

Thanks!
Vadim

[ale.vesga1]

Hi @kiwibel,

Our team is answering our most frequently asked questions.

To anyone who may be looking for a solution. It is possible to use the Auth0 Custom Actions to filter or disable IPv6. The following documentation contains a sample solution.

Deny User Access to Application if User is on IPV6

Problem statement This article is addressing to those who wish to disable/ filter IPV6 from IPV4. By default, it is not possible to disable only with a custom Action. Solution A custom Action can be used to filter or disable IPV6. The code snippet below disables access with an IPV6: const ipChecker = require('ip') exports.onExecutePostLogin = async (event, api) => { const ip = event.request.ip; ipChecker.isV4Format(ip) ? console.log('V4') : api.access.deny(`Access to ${event.user.nam…

Hope this helps!