Barracuda Reputation Block List (BRBL)

This integration enables reputation checks against IPs from Barracuda Reputation Block List (BRBL) This integration was integrated and tested with Barracuda Reputation Block List (BRBL)

Configure Barracuda Reputation Block List (BRBL) on Cortex XSOAR

  1. Navigate to Settings > Integrations > Servers & Services.
  2. Search for Barracuda Reputation Block List (BRBL).
  3. Click Add instance to create and configure a new integration instance.
  1. Click Test to validate the connection.

Commands

You can execute these commands from the Demisto CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

ip


Get IP Reputation

Base Command

ip

Input

Argument NameDescriptionRequired
ipIP to look upRequired

Context Output

PathTypeDescription
ipStringGet IP details from Barracuda(BRBL) service
Barracuda.IPStringIP details
DbotScore.IndicatorStringThe indicator itself
DbotScore.ScoreNumberScore
DbotScore.TypeStringType of the indicator
DbotScore.VendorStringVendor information
IP.AddressStringIP address
IP.Malicious.VendorStringThe vendor reporting the IP address as malicious.
IP.Malicious.DescriptionStringA description explaining why the IP address was reported as malicious.

Command Example

!ip ip=1.1.1.1

Context Example

{
"Barracuda": {
"IP": {
"indicator": "1.1.1.1"
}
},
"DBotScore": {
"Indicator": "1.1.1.1",
"Score": 0,
"Type": "ip",
"Vendor": "Barracuda"
},
"IP": {
"Address": "1.1.1.1"
}
}

Human Readable Output

Results

indicator
1.1.1.1