Skip to content

Latest commit

 

History

History
51 lines (40 loc) · 1.89 KB

README.md

File metadata and controls

51 lines (40 loc) · 1.89 KB
Raw

One of the leading IP to geolocation APIs and global IP database services.

Configure ipstack on Cortex XSOAR

  1. Navigate to Settings > Integrations > Servers & Services.

  2. Search for ipstack.

  3. Click Add instance to create and configure a new integration instance.

    Parameter Description Required
    API Key True
    Source Reliability Reliability of the source providing the intelligence data. True
    Use system proxy settings False

  4. Click Test to validate the URLs, token, and connection.

Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

ip

Queries an IP address in ipstack.

Base Command

ip

Input

Argument Name Description Required
ip IP address to query. Required

Context Output

Path Type Description
IP.Address string IP address.
IP.Geo.Location string Latitude and longitude of the IP address.
IP.Geo.Country string Country of origin of the IP address.
Ipstack.IP.address string IP address.
Ipstack.IP.type string IP type (ipv4 or ipv6).
Ipstack.IP.continent_name string Continent of the IP address.
Ipstack.IP.latitude string Latitude of the IP address.
Ipstack.IP.longitude string Longitude of the IP address.
DBotScore.Indicator String The indicator that was tested.
DBotScore.Score Number The actual score.
DBotScore.Reliability String How reliable the score is (for example, "C - fairly reliable").
DBotScore.Type String The indicator type.
DBotScore.Vendor String The vendor used to calculate the score.