Search IP - BlinkOps Documentation

Get threat intelligence details for an IP address from Kaspersky Threat Intelligence Portal. The response includes a Zone verdict: Green (safe), Yellow (adware or suspicious), Orange (not trusted, may host malicious objects), Red (malicious), or Grey (not enough data).

External DocumentationTo learn more, visit the Kaspersky Threat Intelligence Portal documentation.

Parameters

Parameter	Description
IP Address	The IP address to investigate.

Example Output

{
	"Zone": "Green",
	"IpGeneralInfo": {
		"Status": "known",
		"CountryCode": "US",
		"HitsCount": 1500,
		"FirstSeen": "2020-01-15T10:30:00Z",
		"Ip": "<string>",
		"Categories": [
			"Data Center"
		],
		"CategoriesWithZone": [
			{
				"Name": "Data Center",
				"Zone": "Green"
			}
		]
	},
	"IpWhoIs": {
		"Asn": [
			{
				"Number": "12345",
				"Description": "Example ISP"
			}
		],
		"Net": {
			"RangeStart": "<string>",
			"RangeEnd": "<string>",
			"Created": "<string>",
			"Changed": "<string>",
			"Name": "<string>",
			"Description": "<string>"
		}
	}
}

Workflow Library Example

Search Ip with Kaspersky Threat Intelligence Portal and Send Results Via Email

Preview this Workflow on desktop