Host asset filters
These filters specifically apply to host assets. Use these filters when searching for a specific subset of host assets.
Defined value filters
The following filters provide a drop-down list of options to select. The available values are predefined.
| Filter name | Description | Value format example | Applicable operators |
|---|---|---|---|
| IPv4 | Indicates that the host resolves to a 32-bit number notated in four octets (for example, 192.168.92.73). | true / false | Equals Not Equals |
| IPv6 | Indicates that the host resolves to an IP comprised of 128-bit hexadecimal digits noted in eight four-digit groups. | true / false | |
| Is Mail Server Record | Indicates that the host powers a mail server. | true / false | |
| Is Name Server Record | Indicates that the host powers a name server. | true / false | |
| Parked Domain | Indicates whether a domain is registered but not connected to an online service (website, email hosting). | true / false | |
| Web Server | Indicates that the host is a web server. | true / false | |
| Port Last Seen | Indicates the time frame in which a port was last observed on the host. | 7 days, 14 days, 30 days | Equals In |
| Domain Expiration | The registration expiry date range for the domain. | Expired, Expires in 30 days, Expires in 60 days, Expires in 90 days, Expires in > 90 days | Equals Not Equals In Not In |
Free form filters
The following filters require that the user manually enters the value with which they want to search. This list is organized according to the number of applicable operators for each filter, then alphabetically. Note that many values are case-sensitive.
| Filter name | Description | Value format example | Applicable operators |
|---|---|---|---|
| Port State | Indicates the status of the observed port. | Open, Filtered | Equals In |
| Port | Any ports detected on the asset. | 443, 80 | Equals Not Equals In Not In |
| ASN | Autonomous System Number is a network identification for transporting data on the Internet between Internet routers. An ASN is associated to any public IP blocks tied to it where hosts are located. | 12345 | Equals Not Equals In Not In Empty Not Empty |
| IANA ID | The allocated unique ID for a domain, IP or AS seen within WhoIs, IANA and ICANN records. | 1005 | |
| Affected CVSS Score | Searches for assets with a CVE that matches a specific numerical score or range of scores. | Numerical (1-10), supports decimal values (e.g. 8.6). | Equals Not Equals In Not In Greater Than or Equal To Less Than or Equal To Between Empty Not Empty |
| Affected CVSS v3 Score | Searches for assets with a CVE v3 that matches a specific numerical score or range of scores. | Numerical (1-10), supports decimal values (e.g. 8.6). | |
| Attribute Type | Services running on the asset. These services can include IP addresses trackers. | address, AdblockPlusAcceptableAdsSignature | Equals Not Equals Starts with Does not start with In Not in Starts with in Does not start with in Contains Does Not Contain Contains In Does Not Contain In Empty Not Empty |
| Attribute Type & Value | The attribute type and value within a single field. | address 192.168.92.73 | |
| Attribute Value | The values for any attributes found on the asset. | 192.168.92.73 | |
| CWE ID | Searches for assets by a specific CWE ID, or range of IDs. | CWE-89 | |
| City | The city of origin detected for this asset. | Redmond | |
| Country | The country/region of origin detected for this asset. | United States | |
| Country Code | The country code associated with the asset. | USA | |
| Domain Status | Any detected domain configurations. | clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited | |
| IP Address | Any known IPs associated to the host. | 192.168.92.73 | |
| IP Block | The IP block that is associated with the asset. | 192.168.92.73/16 | |
| Resource MD5 | The hash algorithm used to encode data. | ||
| State/Province | The state of origin detected for this asset. | Washington | |
| State/Province Code | The state or province code associated with the state of origin. | WA | |
| Web Component Type | The infrastructure type of a detected component. | Hosting Provider, DDOS Protection, Service, Server | |
| Cname | The canonical name in the DNS Record associated with the host. | host.contoso.com | Equals Not Equals Starts with Does not start with Matches Does Not Match In Not in Starts with in Does not start with in Matches in Does not match in Contains Does Not Contain Contains In Does Not Contain In Empty Not Empty |
| Cname Domain | The domain name of the Cname value. | contoso.com | |
| Domain | The domain associated with the host. | contoso.com | |
| Host | The host name. | host.contoso.com | |
| Name Server | Any name servers connected to the host. | dns.contoso.com | |
| Registrar | The name of the registrar within the Whois record. | GODADDY.COM, INC. | |
| Resource Host | The hosts of any resources running on the asset. | host.resource.com | |
| Resource URL | Any URLs associated to resources on the asset. | host.resource.com/supplychain.js | |
| Web Component Name | The name of a web component observed on an asset. | Netscaler Gateway | |
| Web Component Name & Version | Both the name and detected version observed on the asset. | jQuery 3.4.1 | |
| Web Component Version | The component version number running on the asset. | 3.4.1 | |
| Whois Admin Email | The email address of the listed administrator of a Whois record. | name@domain.com | |
| Whois Admin Name | The name of the listed administrator. | John Smith | |
| Whois Admin Organization | The organization associated with the administrator. | Contoso Ltd. | |
| Whois Email | The primary contact email in a Whois record. | name@domain.com | |
| Whois Registrant Email | The email address of the listed registrant. | name@domain.com | |
| Whois Registrant Name | The name of the listed registrant. | John Smith | |
| Whois Registrant Organization | An organization associated with the listed registrant. | Contoso Ltd. | |
| Whois Technical Email | The email address of the listed technical contact. | name@domain.com | |
| Whois Technical Name | The name of the listed technical contact. | John Smith | |
| Whois Technical Organization | The organization associated to the listed technical contact. | Contoso Ltd. |