Skip to main content

Spamcop

SpamCop is an email spam reporting service. The integration allows checking the reputation of an IP address. This integration was integrated and tested with Spamcop.

Configure Spamcop on Cortex XSOAR#

  1. Navigate to Settings > Integrations > Servers & Services.
  2. Search for Spamcop.
  3. Click Add instance to create and configure a new integration instance.
  1. Click Test to validate the URLs, token, and connection.

Commands#

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

ip#


Get IP details from Spamcop service

Base Command#

ip

Input#

Argument NameDescriptionRequired
ipThe IP which details you want to findRequired

Context Output#

PathTypeDescription
Spamcop.IPStringIP details

Command Example#

!ip ip=xxx.xxx.xxx.xxx

Context Example#

{
"DBotScore": {
"Indicator": "xxx.xxx.xxx.xxx",
"Score": 3,
"Type": "ip",
"Vendor": "Spamcop"
},
"IP": {
"Address": "xxx.xxx.xxx.xxx",
"Malicious": {
"Description": null,
"Vendor": "Spamcop"
}
},
"Spamcop": {
"IP": {
"indicator": "xxx.xxx.xxx.xxx"
}
}
}

Human Readable Output#

Results#

indicator
xxx.xxx.xxx.xxx