Enricher - IPQualityScore IP Lookup#

Note

This article describes how to configure a particular enrichment source. To see how to configure enrichers in general, see Configure enrichers.

	Specification
Enricher name	IPQualityScore IP Lookup
Supported observable types	`ipv4`
Output	Enriches supported observable types to produce: Indicator Entity with related observables
API endpoint	`https://ipqualityscore.com/api/json/ip`

Requirements#

IPQualityScore API Key.

Note

Required fields are marked with an asterisk (*).

Edit the enricher.
Set the Source reliability for this enricher. All objects produced by this enricher inherits this source reliability.

In the Parameters section, set the following fields:

Field name	Description
API URL*	Default: `https://ipqualityscore.com/api/json/ip` Change this to match your IPQualityScore account’s API URL.
API key*	Enter your API key.
User Agent	Provide browser or client identification string of the end user. Providing this helps improve bot detection and fraud scoring accuracy.(for example: Mozilla/5.0
Strictness Level	Set fraud detection sensitivity level (typically 0–3).
SSL verification	Select to enforce SSL verification.
Path to SSL certificate file	Enter the path to a SSL certificate file located on the EclecticIQ Intelligence Center host filesystem. To use an SSL certificate, it must be: Accessible on the EclecticIQ Intelligence Center host. Placed in a location that can be accessed by the `eclecticiq` user. Owned by `eclecticiq:eclecticiq`. To make sure that EclecticIQ Intelligence Center can access the SSL certificate: Upload the SSL certificate to a location on the EclecticIQ Intelligence Center host. On the EclecticIQ Intelligence Center host, open the terminal. Change ownership of the SSL certificate by running as root in the terminal: chown eclecticiq:eclecticiq /path/to/cert.pem Where `/path/to/cert.pem` is the location of the SSL certificate EclecticIQ Intelligence Center needs to access.