IP address asset filters
These filters specifically apply to IP address assets. Use these filters when searching for a specific subset of IPs.
Defined value filters
The following filters provide a drop-down list of options to select. The available values are predefined.
| Filter name | Description | Value format | Applicable operators |
|---|---|---|---|
| IPv4 | Indicates that the host resolves to a 32-bit number notated in four octets (for example, 192.168.92.73). | true / false | Equals Not Equals |
| IPv6 | Indicates that the host resolves to an IP comprised of 128-bit hexadecimal digits noted in eight four-digit groups. | true / false | |
| Is Mail Server Record | Indicates that the host powers a mail server. | true / false | |
| Is Name Server Record | Indicates that the host powers a name server. | true / false | |
| Port Last Seen | Indicates the time frame in which a port was last observed on the host. | 7 days, 14 days, 30 days | Equals In |
Free form filters
The following filters require that the user manually enters the value with which they want to search. This list is organized by the number of applicable operators for each filter, then alphabetically.
| Filter name | Description | Value format | Applicable operators |
|---|---|---|---|
| Port State | Indicates the status of the observed port. | Open, Filtered | Equals In |
| Port | Any ports detected on the asset. | 443, 80 | Equals Not Equals In Not In |
| ASN | Autonomous System Number is a network identification for transporting data on the Internet between Internet routers. An ASN will have associated public IP blocks tied to it where hosts are located. | 12345 | Equals Not Equals In Not In Empty Not Empty |
| Banner | A banner is a text displayed by a host that provides details such as the type and version of software running on the system or server. | We recommend using the “matches” operator to search for HTML banners by keyword (for example, “HTTP/1.1”) | Matches Does not match Matches in Does not match in Empty Not empty |
| Affected CVSS Score | Searches for assets with a CVE that matches a specific numerical score or range of scores. | Numerical (1-10), supports decimal values (for example, 8.6). | Equals Not Equals In Not In Greater Than or Equal To Less Than or Equal To Between Empty Not Empty |
| Affected CVSS v3 Score | Searches for assets with a CVE v3 that matches a specific numerical score or range of scores. | Numerical (1-10), supports decimal values (for example, 8.6). | |
| Attribute Type | Additional services running on the asset. This can include IP addresses trackers. | address, AdblockPlusAcceptableAdsSignature | Equals Not Equals Starts with Does not start with In Not in Starts with in Does not start with in Contains Does Not Contain Contains In Does Not Contain In Empty Not Empty |
| Attribute Type & Value | The attribute type and value within a single field. | address 192.168.92.73 | |
| Attribute Value | The values for any attributes found on the asset. | 192.168.92.73 | |
| CWE ID | Searches for assets by a specific CWE ID, or range of IDs. | CWE-89 | |
| City | The city of origin detected for this asset. | Redmond | |
| Country | The country/region of origin detected for this asset. | United States | |
| Country Code | The applicable country code for the country/region of origin. | USA | |
| IP Address | Any known IPs associated to the primary IP. | 192.168.92.73 | |
| IP Block | The IP block that is associated with the asset. | 192.168.92.73/16 | |
| State/Province | The state of origin detected for this asset. | Washington | |
| State/Province Code | The state or province code associated with the state of origin. | WA | |
| Web Component Type | The infrastructure type of a detected component. | Hosting Provider, DDOS Protection, Service, Server | |
| Host | Any hosts associated with the asset. | host.contoso.com | Equals Not Equals Starts with Does not start with Matches Does Not Match In Not in Starts with in Does not start with in Matches in Does not match in Contains Does Not Contain Contains In Does Not Contain In Empty Not Empty |
| Web Component Name | The name(s) of any web components running on the asset. | Netscaler Gateway, jQuery | |
| Web Component Name & Version | A list of any detected web component names and associated versions that have been observed on the asset. | Netscaler Gateway 12.1, jQuery 3.4.1 | |
| Web Component Version | The version number associated to any web component detected on the asset. | 12.1, 3.4.1 |