Skip to main content


This Integration is part of the Ipstack Pack.#

One of the leading IP to geolocation APIs and global IP database services.

Configure ipstack on Cortex XSOAR#

  1. Navigate to Settings > Integrations > Servers & Services.

  2. Search for ipstack.

  3. Click Add instance to create and configure a new integration instance.

    API KeyTrue
    Source ReliabilityReliability of the source providing the intelligence data.True
    Use system proxy settingsFalse
  4. Click Test to validate the URLs, token, and connection.


You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.


Queries an IP address in ipstack.

Base Command#



Argument NameDescriptionRequired
ipIP address to query.Required

Context Output#

IP.AddressstringIP address.
IP.Geo.LocationstringLatitude and longitude of the IP address.
IP.Geo.CountrystringCountry of origin of the IP address.
Ipstack.IP.addressstringIP address.
Ipstack.IP.typestringIP type (ipv4 or ipv6).
Ipstack.IP.continent_namestringContinent of the IP address.
Ipstack.IP.latitudestringLatitude of the IP address.
Ipstack.IP.longitudestringLongitude of the IP address.
DBotScore.IndicatorStringThe indicator that was tested.
DBotScore.ScoreNumberThe actual score.
DBotScore.ReliabilityStringHow reliable the score is (for example, "C - fairly reliable").
DBotScore.TypeStringThe indicator type.
DBotScore.VendorStringThe vendor used to calculate the score.