samples
turbot/flowpipe-samples/lookup-iocs

Lookup IP In Different Tools

A composite Flowpipe mod that lookup an IP in VirusTotal, Urlscan and other tools.

Run the pipeline

To run this pipeline from your terminal:

flowpipe pipeline run lookup_iocs.pipeline.lookup_ip \
--arg 'ip_address=<string>'

Use this pipeline

To call this pipeline from your pipeline, use a step:

step "pipeline" "step_name" {
pipeline = lookup_iocs.pipeline.lookup_ip
args = {
ip_address = <string>
}
}

Params

NameTypeRequiredDescriptionDefault
abuseipdb_credstringYesName for AbuseIPDB credentials to use. If not provided, the default credentials will be used.default
ip2locationio_credstringYesName for ip2location.io credentials to use. If not provided, the default credentials will be used.default
urlscan_credstringYesName for URLScan.io credentials to use. If not provided, the default credentials will be used.default
ip_addressstringYesThe IP address to be scanned.-
max_age_in_daysnumberNoMaximum age in days for the AbuseIPDB reports to retrieve. Defaults to 30 days.30

Outputs

NameDescription
lookup_ip