l-teles/detectify
steampipe plugin install l-teles/detectify

Table: detectify_ip

This table contains information about IP addresses monitored and scanned for vulnerabilities by Detectify.

The token_v3 argument is required to use this table, meaning you need to create an API key for v3 on Detectify.

Examples

List all IP Addresses

select
ip_address,
active,
domain_name,
geolocation ->> 'country_name' as "country"
from
detectify_ip;

List the currently active IP addresses

select
ip_address,
active,
domain_name,
geolocation ->> 'country_name' as "country"
from
detectify_ip;
where
active = 'true';

Group IP addresses by country

select
count(*) as ip_count,
geolocation ->> 'country_name' as "country"
from
detectify_ip
group by
"country";

Schema for detectify_ip

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form.
activebooleanIndicates if the IP is active.
asset_idtextAsset ID associated with the IP.
autonomous_systemjsonbDetailed information about the autonomous system.
disappeared_attimestamp with time zoneTimestamp when the IP disappeared.
domain_nametextDomain name associated with the IP.
enrichedbooleanIndicates if the IP is enriched.
first_seen_attimestamp with time zoneTimestamp when the IP was first seen.
geolocationjsonbDetailed information about the geolocation.
idtextUnique ID of the IP item.
ip_addresstextIP address.
ip_versiontextIP version (e.g., IPv4, IPv6).
sp_connection_nametext=, !=, ~~, ~~*, !~~, !~~*Steampipe connection name.
sp_ctxjsonbSteampipe context in JSON form.
team_idtextTeam ID associated with the IP.