As reported in #2295, we allow access from your public ip address if you do not have a private one available. This isn't a good default. To remedy this, we should make sure the address passes: ```js /^(10|172|192)[.]/ || /^fd\w{2}:/ ```
