https://github.com/jblukach/distillery

Distillery allows researchers to glean additional context about IP addresses during analysis, such as determining services operating in a specific cloud region using open-source intelligence.
https://github.com/jblukach/distillery

aws azure cdk cloud gcp ipv4 ipv6

Last synced: over 1 year ago
JSON representation

Distillery allows researchers to glean additional context about IP addresses during analysis, such as determining services operating in a specific cloud region using open-source intelligence.

• Host: GitHub
• URL: https://github.com/jblukach/distillery
• Owner: jblukach
• License: apache-2.0
• Created: 2021-10-13T01:15:06.000Z (over 4 years ago)
• Default Branch: main
• Last Pushed: 2024-10-29T09:30:44.000Z (over 1 year ago)
• Last Synced: 2024-10-29T09:51:02.043Z (over 1 year ago)
• Topics: aws, azure, cdk, cloud, gcp, ipv4, ipv6
• Language: Python
• Homepage: https://cidr.tundralabs.net
• Size: 521 KB
• Stars: 3
• Watchers: 3
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# distillery

Distillery aims to provide network IP addresses and associated metadata for cloud service providers like AWS, Azure, and GCP. It allows researchers to glean additional context about IP addresses during analysis, such as determining services operating in a specific cloud region using open-source intelligence.

### Public Clouds & SaaS Providers

Top of the hour, Classless Inter-Domain Routing (CIDR) prefixes collection occurs from **twenty-seven** Cloud and SaaS sources.

- Amazon Web Services

- Censys

- Cloudflare

- Digital Ocean

- Fastly

- GitHub

- Google Cloud

- Linode

- Microsoft Azure

- Microsoft o365

- NetSPI

- New Relic

- Okta

- Oracle Cloud

- Tailscale

- Tenable

- Vultr

- Zscalar

### Building SQLite Database

A quarter past the hour, the relational database containing the following schema gets generated for distribution.

| Column | Type |

|:------:|:----:|

| pk | INTEGER PRIMARY KEY |

| source | TEXT |

| service | TEXT |

| region | TEXT |

| cidr | BLOB |

| firstip | INTEGER |

| lastip | INTEGER |

### Application Usage

Half past the hour, the API updates with the latest SQLite database.

```

https://cidr.tundralabs.net/116.129.226.132

```

The API will look up the source origination if no IP address is available.

![Distillery](images/distillery.png)