Spamcop

This Integration is part of the Spamcop Pack.#

Supported versions

Available on Cortex XSOAR and Cortex XSIAM.

SpamCop is an email spam reporting service. The integration allows checking the reputation of an IP address. This integration was integrated and tested with Spamcop.

Configure Spamcop in Cortex#

Commands#

You can execute these commands from the CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

ip#

Get IP details from Spamcop service

Base Command#

ip

Input#

Argument Name	Description	Required
ip	The IP which details you want to find	Required

Context Output#

Path	Type	Description
Spamcop.IP	String	IP details

Command Example#

!ip ip=xxx.xxx.xxx.xxx

Context Example#

{
    "DBotScore": {
        "Indicator": "xxx.xxx.xxx.xxx",
        "Score": 3,
        "Type": "ip",
        "Vendor": "Spamcop"
    },
    "IP": {
        "Address": "xxx.xxx.xxx.xxx",
        "Malicious": {
            "Description": null,
            "Vendor": "Spamcop"
        }
    },
    "Spamcop": {
        "IP": {
            "indicator": "xxx.xxx.xxx.xxx"
        }
    }
}

Human Readable Output#

Results#
indicator
xxx.xxx.xxx.xxx