> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Search IP

Get threat intelligence details for an IP address from Kaspersky Threat Intelligence Portal.

The response includes a `Zone` verdict: `Green` (safe), `Yellow` (adware or suspicious), `Orange` (not trusted, may host malicious objects), `Red` (malicious), or `Grey` (not enough data).

<Note>
  External Documentation

  To learn more, visit the [Kaspersky Threat Intelligence Portal documentation](https://opentip.kaspersky.com/Help/Doc_data/en-US/IPLookupAPI.htm).
</Note>

## Parameters

<div className="integrations-table">
  | Parameter | Description |
  | - | - |
  | IP Address | The IP address to investigate. |
</div>

## Example Output

```json theme={"dark"}
{
	"Zone": "Green",
	"IpGeneralInfo": {
		"Status": "known",
		"CountryCode": "US",
		"HitsCount": 1500,
		"FirstSeen": "2020-01-15T10:30:00Z",
		"Ip": "<string>",
		"Categories": [
			"Data Center"
		],
		"CategoriesWithZone": [
			{
				"Name": "Data Center",
				"Zone": "Green"
			}
		]
	},
	"IpWhoIs": {
		"Asn": [
			{
				"Number": "12345",
				"Description": "Example ISP"
			}
		],
		"Net": {
			"RangeStart": "<string>",
			"RangeEnd": "<string>",
			"Created": "<string>",
			"Changed": "<string>",
			"Name": "<string>",
			"Description": "<string>"
		}
	}
}
```

## Workflow Library Example

[Search Ip with Kaspersky Threat Intelligence Portal and Send Results Via Email](https://library.blinkops.com/workflows/search-ip-with-kaspersky-threat-intelligence-portal-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/search-ip-with-kaspersky-threat-intelligence-portal-and-send-results-via-email/canvas" />
</div>