Skip to content
GitHub Forensics

This tool is not affiliated with, endorsed by or sponsored by GitHub, Inc. or Microsoft Corporation. GitHub and GitHub Actions are trademarks of GitHub, Inc. Other names are trademarks of their respective owners.

Glossary

IP allow list

A GitHub Enterprise Cloud control that blocks web, API and Git access to an organization or enterprise from IP addresses outside approved ranges.

An IP allow list restricts access to an organization's or enterprise's private resources to approved IP ranges. It applies to the web UI, the API and Git, including access with personal access tokens and SSH or deploy keys, so a stolen token fails from an attacker's VPS. It can optionally extend to installed GitHub Apps. It is a GitHub Enterprise Cloud feature.

Attackers disable it (ip_allow_list.disable) or quietly add their own range (ip_allow_list_entry.create). See GitHub organization takeover.

This tool is not affiliated with, endorsed by or sponsored by GitHub, Inc. or Microsoft Corporation. GitHub and GitHub Actions are trademarks of GitHub, Inc. Other names are trademarks of their respective owners.