Obtaining Whois Information for a List of IPs

R.Henmi — Mon, 07 Apr 2025 09:04:32 GMT

I'm trying to perform whois queries on an array that contains the list of IPs.

My understanding is that I can pass the array to the Inputs of the "ip (whois)" script.

However, since there are over 1000 IPs, submitting them all at once results in an error.

Is there a way to split the array into chunks of 50?

I was considering using Transformers' "GetRange" for this purpose, but I encountered difficulties because specifying a range with a variable was not possible.

Re: Obtaining Whois Information for a List of IPs

michaelsysec242 — Mon, 21 Apr 2025 10:51:38 GMT

@R.Henmi

I would recommend you create a custom script to handle this with sleep intervals and an IP count. It is good practice to check the API limits and build your script based on them. I'm sure there are transformers for this but Python is far more friendly for bulk operations.

MSysec

topic Obtaining Whois Information for a List of IPs in Cortex XSOAR Discussions

Obtaining Whois Information for a List of IPs

Re: Obtaining Whois Information for a List of IPs