---
title: "Retrieve threat intelligence information for a given IP address"
method: GET
path: "/score/ip/{ip}"
tags: ["Scoring"]
---

# Retrieve threat intelligence information for a given IP address

`GET /score/ip/{ip}`

## Request

- Base URL: `https://v2.greipapi.com`
- URL: `https://v2.greipapi.com/score/ip/{ip}`
- Auth: HTTP bearer

Access comprehensive threat intelligence data linked to a specific IP address. This endpoint provides insights into malicious activity, reputation scoring, and potential security risks associated with the IP address.

## Path parameters

- `ip` string, required

## Query parameters

- `format` string
- `mode` string
- `source` string
- `user_id` string

## Response `200`

OK

- GreipJsonSuccessEnvelope
  - `success` boolean, required
  - `data` object, required: Endpoint-specific payload.
  - `execution_ms` integer, required

## Changes

- **2026-11-03** `5ef5b288383a`: 2 info
  - api tag `Scoring` added
  - added the media type `application/json` for the response with the status `200`
- **2026-10-19** `9346ce4dfd7c`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/greip/apis/greip-api/changes/score/ip/:ip/get.md)

---

[API](https://skmtc.dev/greip/apis/greip-api.md) - [All operations](https://skmtc.dev/greip/apis/greip-api/llms.txt) - [OpenAPI document](https://skmtc.dev/greip/apis/greip-api/revisions/5ef5b288383a?raw)