Extracts IP addresses on block lists from AbuseIPDB, and Populates Indicators accordingly.
AbuseIPDB
- Details
- Content
- Dependencies
- Version History
Central repository to report and identify IP addresses that have been associated with malicious activity online. Check the Detailed Information section for more information on how to configure the integration.
Automations
| Name | Description |
|---|---|
| AbuseIPDBPopulateIndicators |
Integrations
| Name | Description |
|---|---|
| AbuseIPDB | Central repository to report and identify IP addresses that have been associated with malicious activity online. Check the Detailed Information section for more information on how to configure the integration. |
Automations
| Name | Description |
|---|---|
| AbuseIPDBPopulateIndicators | Extracts IP addresses on block lists from AbuseIPDB, and Populates Indicators accordingly. |
Integrations
| Name | Description |
|---|---|
| AbuseIPDB | Central repository to report and identify IP addresses that have been associated with malicious activity online. Check the Detailed Information section for more information on how to configure the integration. |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Aggregated Scripts | By: Cortex XSOAR |
1.1.0 - 7405158 (March 2, 2026)
- 43315
Download
Integrations
AbuseIPDB
- Added support for the Abuse.ch Hunting API URL parameter.
- Added support for the Abuse.ch Hunting API Key parameter.
- Added support for the abuseipdb-get-fplist command that returns a false positive list (fpl) from the abuse.ch file. The list contains indicators (ips and domains) that have been removed from their blocklists.
- 43315
Download
1.1.0 - 7405158 (March 2, 2026)
- 43315
Download
Integrations
AbuseIPDB
- Added support for the Abuse.ch Hunting API URL parameter.
- Added support for the Abuse.ch Hunting API Key parameter.
- Added support for the abuseipdb-get-fplist command that returns a false positive list (fpl) from the abuse.ch file. The list contains indicators (ips and domains) that have been removed from their blocklists.
- 43315
Download
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | November 9, 2020 | |
| Last Release | March 2, 2026 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
