ipAddress resource type
Namespace: microsoft.graph.security
Note
The Microsoft Graph API for Microsoft Defender Threat Intelligence requires an active Defender Threat Intelligence Portal license and API add-on license for the tenant.
Represents an IP address, which is (or has been) addressable over the internet. This resource acts as a grouping mechanism for related details about the hostname or IP address, such as the reputation, any related trackers or cookies, and so on.
You cannot retrieve this type directly. To access it, retrieve the host resource.
Inherits from host.
Methods
| Method | Return type | Description |
|---|---|---|
| List components | microsoft.graph.security.hostComponent collection | Get a list of hostComponent resources. |
| List cookies | microsoft.graph.security.hostCookie collection | Get a list of hostCookie resources. |
| List passiveDns | microsoft.graph.security.passiveDnsRecord collection | Get a list of passiveDnsRecord resources. |
| List passiveDnsReverse | microsoft.graph.security.passiveDnsRecord collection | Get a list of passiveDnsRecord resources. |
| Get reputation | microsoft.graph.security.hostReputation | Get a list of hostReputation resources. |
| List trackers | microsoft.graph.security.hostTracker collection | Get a list of hostTracker resources. |
| Get whoisRecord | microsoft.graph.security.whoisRecord | Get the specified whoisRecord resource. |
Properties
| Property | Type | Description |
|---|---|---|
| autonomousSystem | microsoft.graph.security.autonomousSystem | The details about the autonomous system to which this IP address belongs. |
| countryOrRegion | String | The country/region for this IP address. |
| firstSeenDateTime | DateTimeOffset | The first date and time when this host was observed. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Inherited from microsoft.graph.security.host. |
| hostingProvider | String | The hosting company listed for this host. |
| id | String | The IP Address for this host. Read-only. Inherited from microsoft.graph.security.artifact. |
| lastSeenDateTime | DateTimeOffset | The most recent date and time when this host was observed. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Inherited from microsoft.graph.security.host. |
| netblock | String | The block of IP addresses this IP address belongs to. |
Relationships
| Relationship | Type | Description |
|---|---|---|
| components | microsoft.graph.security.hostComponent collection | The hostComponents that are associated with this host. Inherited from host. |
| cookies | microsoft.graph.security.hostCookie collection | The hostCookies that are associated with this host. Inherited from host. |
| passiveDns | microsoft.graph.security.passiveDnsRecord collection | Passive DNS retrieval about this host. Inherited from host. |
| passiveDnsReverse | microsoft.graph.security.passiveDnsRecord collection | Reverse passive DNS retrieval about this host. Inherited from host. |
| reputation | microsoft.graph.security.hostReputation | Represents a calculated reputation of this host. Inherited from host. |
| trackers | microsoft.graph.security.hostTracker collection | The hostTrackers that are associated with this host. Inherited from host. |
| whois | microsoft.graph.security.whoisRecord | The most recent whoisRecord for this host. Inherited from host. |
JSON representation
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.security.ipAddress",
"autonomousSystem": {
"@odata.type": "microsoft.graph.security.autonomousSystem"
},
"countryOrRegion": "String",
"firstSeenDateTime": "String (timestamp)",
"hostingProvider": "String",
"id": "String (identifier)",
"lastSeenDateTime": "String (timestamp)",
"netblock": "String"
}