IPinfo

Integration version: 5.0

Configure IPinfo to work with Google Security Operations

To obtain your Access Token, first sign in to yourIPinfoAccount.

You will be redirected to aDashboard page, where you can find your AccessToken.

Configure IPinfo integration in Google SecOps

For detailed instructions on how to configure an integration inGoogle SecOps, seeConfigureintegrations.

Actions

Get Domain Information

Description

Fetch domain information for an address.

Parameters

N/A

Run On

This action runs on the Hostname entity.

Action Results

Entity Enrichment
Enrichment Field NameLogic - When to apply
countReturns if it exists in JSON result
domainReturns if it exists in JSON result
ipReturns if it exists in JSON result
rangeReturns if it exists in JSON result
domainsReturns if it exists in JSON result
asnReturns if it exists in JSON result
Insights

N/A

Script Result
Script Result NameValue OptionsExample
is_successTrue/Falseis_success:False
JSON Result
[{"EntityResult":{"count":939,"domain":"comcast.net","ip":"1.1.1.1","range":"1.1.1.1/12","domains":[["comcast.net","Comcast.com","Watchable.com","Comcastnow.com","Comcastsportsnet.com","Xfinityprepaid.net","Comcastaddelivery.com","Bigtoptestdrive.com","Gotgearamazingoutdoors.com","comcastspotlight-mediafactbook.com","Entertainmentmoney.com","footballmaniasweepstakes.com","Jobsatcomcast.com","anyscreem.org","amyscreen.net","amalunasweeps.com","Comcastlabs.com","anycreen.org","coloradotruckauthority.com","touchdownandtailgate.com","Readytoridemonroepbr.com","anysceren.net","Bostonhealthads.com","Comcastspotlight-3d-hlly.com","Fordfrugalista.com"]],"asn":"AS7922"},"Entity":"comcast.net"}]

Get IP Information

Description

This is one of the most common tools of any website, domain, or IP address tofind out the user, internet provider, and location. IP address scanning isuseful in finding the origin of unwanted emails or the source of spam, virus,and attacks. It will show you the domain owner's registered WHOIS and ARINcontact data, and the company that operates the associated server, wherever theyare. You may find out their internet service provider for dynamic IP addressesof private users to allow them to contact them for a complaint.

Parameters

N/A

Run On

This actionr runs on the IP Address entity.

Action Results

Entity Enrichment
Enrichment Field NameLogic - When to apply
cityReturns if it exists in JSON result
locReturns if it exists in JSON result
countryReturns if it exists in JSON result
companyReturns if it exists in JSON result
hostnameReturns if it exists in JSON result
asnReturns if it exists in JSON result
carrierReturns if it exists in JSON result
ipReturns if it exists in JSON result
postalReturns if it exists in JSON result
regionReturns if it exists in JSON result
Insights

N/A

Script Result
Script Result NameValue OptionsExample
is_successTrue/Falseis_success:False
JSON Result
[{"EntityResult":{"city":"Southbridge","loc":"42.0707,-72.0440","country":"US","company":{"domain":"sprint.com","type":"isp","name":"Sprint Springfield POP"},"hostname":"66-87-125-72.pools.spcsdns.net","asn":{"route":"1.1.1.1/24","type":"isp","domain":"spcsdns.net","name":"Sprint Personal Communications Systems","asn":"AS10507"},"carrier":{"mnc":"120","mcc":"310","name":"Sprint"},"ip":"1.1.1.1","postal":"01550","region":"Massachusetts"},"Entity":"1.1.1.1"}]

Ping

Description

Check API token validity.

Parameters

N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result NameValue OptionsExample
ping_statusTrue/Falseping_status:False
JSON Result
N/A

Need more help?Get answers from Community members and Google SecOps professionals.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-19 UTC.