CloudCheck

A simple Python utility to check whether an IP address or hostname belongs to a cloud provider.

cloud_providers.json contains lists of domains and up-to-date CIDRs for each cloud provider (updated daily via CI/CD).

Used by BBOT and BBOT Server.

Installation

pip install cloudcheck

Usage - CLI

$ cloudcheck 168.62.20.37
168.62.20.37 belongs to Azure (cloud) (168.62.0.0/19)

$ cloudcheck test.evilcorp.azurewebsites.net
test.evilcorp.azurewebsites.net belongs to Azure (cloud) (azurewebsites.net)

Usage - Python

import cloudcheck

provider, provider_type, subnet = cloudcheck.check("168.62.20.37")
print(provider) # "Azure"
print(provider_type) # "cloud"
print(subnet) # IPv4Network('168.62.0.0/19')

Supported cloud providers

• Akamai (source)
• Amazon (source)
• Arvancloud (source)
• Azure (source)
• Cloudflare (source)
• Cloudfront (source)
• DigitalOcean (source)
• Fastly (source)
• Github (source)
• Google (source)
• Imperva (source)
• Oracle Cloud (source)
• Zoho (source)