Edit

Share via

IP address asset filters

  • Article

These filters specifically apply to IP address assets. Use these filters when searching for a specific subset of IPs.

Defined value filters

The following filters provide a drop-down list of options to select. The available values are predefined.

Filter name Description Value format Applicable operators
IPv4 Indicates that the host resolves to a 32-bit number notated in four octets (for example, 192.168.92.73). true / false Equals Not Equals
IPv6 Indicates that the host resolves to an IP comprised of 128-bit hexadecimal digits noted in eight four-digit groups. true / false
Is Mail Server Record Indicates that the host powers a mail server. true / false
Is Name Server Record Indicates that the host powers a name server. true / false
Port Last Seen Indicates the time frame in which a port was last observed on the host. 7 days, 14 days, 30 days Equals In

Free form filters

The following filters require that the user manually enters the value with which they want to search. This list is organized by the number of applicable operators for each filter, then alphabetically.

Filter name Description Value format Applicable operators
Port State Indicates the status of the observed port. Open, Filtered Equals In
Port Any ports detected on the asset. 443, 80 Equals Not Equals In Not In
ASN Autonomous System Number is a network identification for transporting data on the Internet between Internet routers. An ASN will have associated public IP blocks tied to it where hosts are located. 12345 Equals Not Equals In Not In Empty Not Empty
Banner A banner is a text displayed by a host that provides details such as the type and version of software running on the system or server. We recommend using the “matches” operator to search for HTML banners by keyword (for example, “HTTP/1.1”) Matches Does not match Matches in Does not match in Empty Not empty
Affected CVSS Score Searches for assets with a CVE that matches a specific numerical score or range of scores. Numerical (1-10), supports decimal values (for example, 8.6). Equals Not Equals In Not In Greater Than or Equal To Less Than or Equal To Between Empty Not Empty
Affected CVSS v3 Score Searches for assets with a CVE v3 that matches a specific numerical score or range of scores. Numerical (1-10), supports decimal values (for example, 8.6).
Attribute Type Additional services running on the asset. This can include IP addresses trackers. address, AdblockPlusAcceptableAdsSignature Equals Not Equals Starts with Does not start with In Not in Starts with in Does not start with in Contains Does Not Contain Contains In Does Not Contain In Empty Not Empty
Attribute Type & Value The attribute type and value within a single field. address 192.168.92.73
Attribute Value The values for any attributes found on the asset. 192.168.92.73
CWE ID Searches for assets by a specific CWE ID, or range of IDs. CWE-89
City The city of origin detected for this asset. Redmond
Country The country/region of origin detected for this asset. United States
Country Code The applicable country code for the country/region of origin. USA
IP Address Any known IPs associated to the primary IP. 192.168.92.73
IP Block The IP block that is associated with the asset. 192.168.92.73/16
State/Province The state of origin detected for this asset. Washington
State/Province Code The state or province code associated with the state of origin. WA
Web Component Type The infrastructure type of a detected component. Hosting Provider, DDOS Protection, Service, Server
Host Any hosts associated with the asset. host.contoso.com Equals Not Equals Starts with Does not start with Matches Does Not Match In Not in Starts with in Does not start with in Matches in Does not match in Contains Does Not Contain Contains In Does Not Contain In Empty Not Empty
Web Component Name The name(s) of any web components running on the asset. Netscaler Gateway, jQuery
Web Component Name & Version A list of any detected web component names and associated versions that have been observed on the asset. Netscaler Gateway 12.1, jQuery 3.4.1
Web Component Version The version number associated to any web component detected on the asset. 12.1, 3.4.1

Next steps

Understanding asset details

Inventory filters