Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 6 additions & 5 deletions Packs/ipinfo/Integrations/ipinfo_v2/README.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,5 @@
Use the IPinfo.io API to get data about an IP address.
The integration supports all subscription tiers (Lite, Core, Plus, Max, and Enterprise) with context outputs adapting to match your specific plan's data fields.

## Differences from IPinfo (v1)

Expand Down Expand Up @@ -60,11 +61,11 @@ Check IP reputation (when information is available, returns a JSON with details)
| IP.Tags | String | Tags related the IP use \(hosting, proxy, tor, vpn\). |
| IP.FeedRelatedIndicators.value | String | Names of indicators associated with the IP. |
| IP.FeedRelatedIndicators.type | String | Types of indicators associated with the IP. |
| IP.Relationships.EntityA | string | The source of the relationship. |
| IP.Relationships.EntityB | string | The destination of the relationship. |
| IP.Relationships.Relationship | string | The name of the relationship. |
| IP.Relationships.EntityAType | string | The type of the source of the relationship. |
| IP.Relationships.EntityBType | string | The type of the destination of the relationship. |
| IP.Relationships.EntityA | String | The source of the relationship. |
| IP.Relationships.EntityB | String | The destination of the relationship. |
| IP.Relationships.Relationship | String | The name of the relationship. |
| IP.Relationships.EntityAType | String | The type of the source of the relationship. |
| IP.Relationships.EntityBType | String | The type of the destination of the relationship. |
| IP.Geo.Location | String | The IP geographic location \(coordinates as lat:lon\) |
| IP.Geo.Country | String | The IP country. |
| IP.Geo.Description | String | The IP location as <City, Region, Postal Code, Country>. |
Expand Down
23 changes: 13 additions & 10 deletions Packs/ipinfo/Integrations/ipinfo_v2/ipinfo_v2.py
Original file line number Diff line number Diff line change
Expand Up @@ -135,16 +135,19 @@ def parse_results(ip: str, raw_result: dict[str, Any], reliability: str) -> List
coordinates = loc.split(",")
lat, lon = float(coordinates[0]), float(coordinates[1])

entry_context = {
"Address": raw_result.get("ip"),
"Hostname": hostname, # type: ignore
"ASN": asn,
"ASOwner": as_owner,
"Tags": tags, # type: ignore
"Organization": organization,
"Geo": {"Location": loc, "Country": country, "Description": description}, # type: ignore
"Registrar": {"Abuse": abuse} if abuse else None,
}
entry_context = raw_result.copy()
Comment thread
kamalq97 marked this conversation as resolved.
entry_context.update(
{
"Address": raw_result.get("ip"),
"Hostname": hostname, # type: ignore
Comment thread
kamalq97 marked this conversation as resolved.
"ASN": asn,
"ASOwner": as_owner,
"Tags": tags, # type: ignore
"Organization": organization,
"Geo": {"Location": loc, "Country": country, "Description": description}, # type: ignore
"Registrar": {"Abuse": abuse} if abuse else None,
}
)

outputs_key_field = "Address" # marks the ip address

Expand Down
14 changes: 7 additions & 7 deletions Packs/ipinfo/Integrations/ipinfo_v2/ipinfo_v2.yml
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ configuration:
section: Connect
advanced: true
required: false
description: Use the IPinfo.io API to get data about an IP address.
description: "Use the IPinfo.io API to get data about an IP address. The integration supports all subscription tiers (Lite, Core, Plus, Max, and Enterprise) with context outputs adapting to match your specific plan's data fields."
display: IPinfo v2
name: ipinfo_v2
script:
Expand Down Expand Up @@ -124,19 +124,19 @@ script:
type: String
- contextPath: IP.Relationships.EntityA
description: The source of the relationship.
type: string
type: String
- contextPath: IP.Relationships.EntityB
description: The destination of the relationship.
type: string
type: String
- contextPath: IP.Relationships.Relationship
description: The name of the relationship.
type: string
type: String
- contextPath: IP.Relationships.EntityAType
description: The type of the source of the relationship.
type: string
type: String
- contextPath: IP.Relationships.EntityBType
description: The type of the destination of the relationship.
type: string
type: String
- contextPath: IP.Geo.Location
description: The IP geographic location (coordinates as lat:lon).
type: String
Expand Down Expand Up @@ -167,7 +167,7 @@ script:
- contextPath: DBotScore.Vendor
description: The vendor used to calculate the score.
type: String
dockerimage: demisto/python3:3.12.12.5490952
dockerimage: demisto/python3:3.12.13.7444307
runonce: false
script: '-'
subtype: python3
Expand Down
4 changes: 3 additions & 1 deletion Packs/ipinfo/Integrations/ipinfo_v2/ipinfo_v2_description.md
Original file line number Diff line number Diff line change
@@ -1 +1,3 @@
Use the ipinfo.io API to get data about an IP address.
Use the ipinfo.io API to get data about an IP address.

The integration supports all subscription tiers (Lite, Core, Plus, Max, and Enterprise) with context outputs adapting to match your specific plan's data fields.
8 changes: 8 additions & 0 deletions Packs/ipinfo/ReleaseNotes/2_1_29.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@

#### Integrations

##### IPinfo v2

- Updated the documentation to reflect support for all plan types: Lite, Plus, Core, and Enterprise.
- Updated the integration to return the full API response into the context.
- Updated the Docker image to: *demisto/python3:3.12.13.7444307*.
2 changes: 1 addition & 1 deletion Packs/ipinfo/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Ipinfo",
"description": "Use the ipinfo.io API to get data about an IP address",
"support": "xsoar",
"currentVersion": "2.1.28",
"currentVersion": "2.1.29",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Loading