Playbook All on Content Hub
IP reputation verdict with VirusTotal
Looks up an IP on VirusTotal and branches on the malicious-engine count.
@ftnt-dspilleMaintainer v1.0.0 Platform 7.4.0+ Published Sep 2, 2026
Download JSON · 7.6 KB
virustotal-ip-verdict.json
sha256:2749533600e4633e61a62266423372aca83ddb2c7b0d1b73b277d4b76cd67395
Sanitized by the pipeline and shipped inactive. Follow the before turning it on.
Takes an IP as a manual-trigger input, queries VirusTotal and records a malicious or clean verdict based on how many engines flagged it.
A compact starting point for any reputation lookup: swap the connector step for your preferred intel source and keep the decision logic.
Something wrong with this item? Sign in to report