Robtex IP and ASN Query

Query Robtex for an IP or ASN.

This playbook was featured in a “Playbook Friday” blog: https://threatconnect.com/blog/robtex-asn-query-ip-query/! The blog post includes installation instructions and a gif of how to setup the playbook.

Images

Here is a picture of the ASN Query playbook:

Here is a picture of the IP Query playbook:

Documentation for “Robtex ASN Query” Playbook

Triggers

  • UserAction

Variables Declared in the Playbook

The following variables are declared in this playbook:

  • robtexAPI: https://freeapi.robtex.com/asquery/#App:10683:asn!String
  • errorPrefix: [Robtex ASN Query]: 
  • slackChannel: #slack-channel

Documentation for “Robtex IP Query” Playbook

Triggers

  • UserAction

Variables Declared in the Playbook

The following variables are declared in this playbook:

  • robtexAPI: https://freeapi.robtex.com/ipquery/#Trigger:1003:trg.action.item!String
  • errorPrefix: [Robtex IP Query]: 
  • slackChannel: #slack-channel