Threat Prevention provides source and destination IP addresses in logged alerts. While Internet IPs may be used by multiple virtualised services it still can be useful to check what's known about a particular address. Here's a very simple javascript I've adapted and saved as a web browser bookmark: just create a new browser bookmark and add the below code in the address/URL field.
Usage: In Threat Prevention's Log view, highlight an IP address and click the bookmark. It will open a new window (or tab, which is how I have setup Safari) with AbuseDB's page for the selected IP.
JavaScript:
javascript:window.open("https://www.abuseipdb.com/check/"+window.getSelection())
Usage: In Threat Prevention's Log view, highlight an IP address and click the bookmark. It will open a new window (or tab, which is how I have setup Safari) with AbuseDB's page for the selected IP.