IPv4Blacklist

Source

import demistomock as demisto
from CommonServerPython import *
from netaddr import IPAddress, IPNetwork


def main():
    ip_addresses = argToList(demisto.args()["value"])
    cidr_range_list = argToList(demisto.args()["cidr_ranges"])

    excluded_addresses = []

    for ip_address in ip_addresses:
        found = False
        ip = IPAddress(ip_address)

        for cidr_range in cidr_range_list:
            if ip in IPNetwork(cidr_range):
                found = True

        if not found:
            excluded_addresses.append(ip_address)

    if not excluded_addresses:
        demisto.results(None)
    else:
        demisto.results(excluded_addresses)


if __name__ == "__builtin__" or __name__ == "builtins":
    main()

README