Check IP Address For Whitelisting - RiskIQ Digital Footprint

Checks if the provided IP Address should be added to allow list and excluded or not. Use this playbook as a sub-playbook to loop over multiple IP Addresses to check if they should be added to allow list and excluded.

RiskIQ Digital Footprint · 7 tasks · 2 inputs · 2 outputs

Inputs

  • IP — IP Address for checking if it should be whitelisted. Use this playbook as a sub-playbook to loop over multiple IP Addresses to check if they should be whitelisted.
  • InternalRange — A list of IP ranges to check the IP in. The list should be provided in CIDR notation, separated by commas. An example of a list of ranges would be: "172.16.0.0/12,10.0.0.0/8,192.168.0.0/16" (without quotes). If a list is not provided, will use default list provided in the IsIPInRanges script (the known IPv4 private address ranges).

Outputs

  • IPWhitelist — The list of IP Address(es) to be whitelisted.
  • IPExclusionList — The list of IP Address(es) to be excluded.

Commands used

ip

Flowchart

yes yes Start Start Check the reputation of the IP Address - ip Check the reputation of t... ip Check if the IP Address is in the internal range - IsIPInRanges Check if the IP Address i... IsIPInRanges Is the IP Address internal and its reputation good? Is the IP Address interna... Add IP Address to the whitelist - Set Add IP Address to the whi... Set Done Done Add IP Address to the exclusions list - Set Add IP Address to the exc... Set