IP2LocationIO

Details

ID	`IP2LocationIO`
Provider	IP2Location
Category	Utilities
From Version	6.0.0
Docker Image	`demisto/python3:3.12.8.3296088`
Supported Modules	Agentix XSIAM

README

IP2Location.io integration to query IP geolocation data.

Configure IP2LocationIO in Cortex

Parameter	Description	Required
Source Reliability	Reliability of the source providing the intelligence data.	False
IP2Location.io API		True
API Key		True
Trust any certificate (not secure)		False
Use system proxy settings		False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

ip

Return IP information and reputation

Base Command

ip

Input

Argument Name	Description	Required
ip	List of IPs.	Optional

Context Output

Path	Type	Description
DBotScore.Indicator	String	The indicator that was tested.
DBotScore.Score	Number	The actual score.
DBotScore.Type	String	The indicator type.
DBotScore.Vendor	String	The vendor used to calculate the score.
IP2LocationIO.IP.asn	String	The autonomous system name for the IP address.
IP2LocationIO.IP.asn_description	String	The ASN description.
IP2LocationIO.IP.ip	String	The actual IP address.
IP2LocationIO.IP.query	String	IP address that was queried.
IP2LocationIO.IP.raw	Unknown	Additional raw data for the IP address.
IP.Address	String	IP address.
IP.ASN	String	The autonomous system name for the IP address.
IP.Relationships.EntityA	string	The source of the relationship.
IP.Relationships.EntityB	string	The destination of the relationship.
IP.Relationships.Relationship	string	The name of the relationship.
IP.Relationships.EntityAType	string	The type of the source of the relationship.
IP.Relationships.EntityBType	string	The type of the destination of the relationship.

Configuration parameters

integrationReliability — Source Reliability
url — IP2Location.io API (required)
credentials — (required)
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings

Commands (1)

ip
Return IP information and reputation

Source

IP2LocationIO.py IP2LocationIO.yml IP2LocationIO_description.md

Download History Raw

category: Utilities
provider: IP2Location
commonfields:
  id: IP2LocationIO
  version: -1
configuration:
- additionalinfo: Reliability of the source providing the intelligence data.
  defaultvalue: C - Fairly reliable
  display: Source Reliability
  name: integrationReliability
  options:
  - A+ - 3rd party enrichment
  - A - Completely reliable
  - B - Usually reliable
  - C - Fairly reliable
  - D - Not usually reliable
  - E - Unreliable
  - F - Reliability cannot be judged
  required: false
  section: Collect
  type: 15
- defaultvalue: https://api.ip2location.io
  display: IP2Location.io API
  name: url
  required: true
  section: Connect
  type: 0
- display: ""
  displaypassword: API Key
  hiddenusername: true
  name: credentials
  required: true
  section: Connect
  type: 9
- advanced: true
  display: Trust any certificate (not secure)
  name: insecure
  required: false
  section: Connect
  type: 8
- advanced: true
  display: Use system proxy settings
  name: proxy
  required: false
  section: Connect
  type: 8
description: IP2Location.io integration to query IP geolocation data.
display: IP2LocationIO
name: IP2LocationIO
script:
  commands:
  - arguments:
    - default: true
      description: List of IPs.
      isArray: true
      name: ip
    description: Return IP information and reputation
    name: ip
    outputs:
    - contextPath: DBotScore.Indicator
      description: The indicator that was tested.
      type: String
    - contextPath: DBotScore.Score
      description: The actual score.
      type: Number
    - contextPath: DBotScore.Type
      description: The indicator type.
      type: String
    - contextPath: DBotScore.Vendor
      description: The vendor used to calculate the score.
      type: String
    - contextPath: IP2LocationIO.IP.asn
      description: The autonomous system name for the IP address.
      type: String
    - contextPath: IP2LocationIO.IP.asn_description
      description: The ASN description.
      type: String
    - contextPath: IP2LocationIO.IP.ip
      description: The actual IP address.
      type: String
    - contextPath: IP2LocationIO.IP.query
      description: IP address that was queried.
      type: String
    - contextPath: IP2LocationIO.IP.raw
      description: Additional raw data for the IP address.
      type: Unknown
    - contextPath: IP.Address
      description: IP address.
      type: String
    - contextPath: IP.ASN
      description: The autonomous system name for the IP address.
      type: String
    - contextPath: IP.Relationships.EntityA
      description: The source of the relationship.
      type: string
    - contextPath: IP.Relationships.EntityB
      description: The destination of the relationship.
      type: string
    - contextPath: IP.Relationships.Relationship
      description: The name of the relationship.
      type: string
    - contextPath: IP.Relationships.EntityAType
      description: The type of the source of the relationship.
      type: string
    - contextPath: IP.Relationships.EntityBType
      description: The type of the destination of the relationship.
      type: string
  dockerimage: demisto/python3:3.12.8.3296088
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)