Host asset filters

These filters specifically apply to host assets. Use these filters when searching for a specific subset of host assets.

Defined value filters

The following filters provide a drop-down list of options to select. The available values are predefined.

Filter name	Description	Value format example	Applicable operators
IPv4	Indicates that the host resolves to a 32-bit number notated in four octets (for example, 192.168.92.73).	true / false	Equals Not Equals
IPv6	Indicates that the host resolves to an IP comprised of 128-bit hexadecimal digits noted in eight four-digit groups.	true / false
Is Mail Server Record	Indicates that the host powers a mail server.	true / false
Is Name Server Record	Indicates that the host powers a name server.	true / false
Parked Domain	Indicates whether a domain is registered but not connected to an online service (website, email hosting).	true / false
Web Server	Indicates that the host is a web server.	true / false
Port Last Seen	Indicates the time frame in which a port was last observed on the host.	7 days, 14 days, 30 days	Equals In
Domain Expiration	The registration expiry date range for the domain.	Expired, Expires in 30 days, Expires in 60 days, Expires in 90 days, Expires in > 90 days	Equals Not Equals In Not In

Free form filters

The following filters require that the user manually enters the value with which they want to search. This list is organized according to the number of applicable operators for each filter, then alphabetically. Note that many values are case-sensitive.

Filter name	Description	Value format example	Applicable operators
Port State	Indicates the status of the observed port.	Open, Filtered	Equals In
Port	Any ports detected on the asset.	443, 80	Equals Not Equals In Not In
ASN	Autonomous System Number is a network identification for transporting data on the Internet between Internet routers. An ASN is associated to any public IP blocks tied to it where hosts are located.	12345	Equals Not Equals In Not In Empty Not Empty
IANA ID	The allocated unique ID for a domain, IP or AS seen within WhoIs, IANA and ICANN records.	1005
Affected CVSS Score	Searches for assets with a CVE that matches a specific numerical score or range of scores.	Numerical (1-10), supports decimal values (e.g. 8.6).	Equals Not Equals In Not In Greater Than or Equal To Less Than or Equal To Between Empty Not Empty
Affected CVSS v3 Score	Searches for assets with a CVE v3 that matches a specific numerical score or range of scores.	Numerical (1-10), supports decimal values (e.g. 8.6).
Attribute Type	Services running on the asset. These services can include IP addresses trackers.	address, AdblockPlusAcceptableAdsSignature	Equals Not Equals Starts with Does not start with In Not in Starts with in Does not start with in Contains Does Not Contain Contains In Does Not Contain In Empty Not Empty
Attribute Type & Value	The attribute type and value within a single field.	address 192.168.92.73
Attribute Value	The values for any attributes found on the asset.	192.168.92.73
CWE ID	Searches for assets by a specific CWE ID, or range of IDs.	CWE-89
City	The city of origin detected for this asset.	Redmond
Country	The country/region of origin detected for this asset.	United States
Country Code	The country code associated with the asset.	USA
Domain Status	Any detected domain configurations.	clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited
IP Address	Any known IPs associated to the host.	192.168.92.73
IP Block	The IP block that is associated with the asset.	192.168.92.73/16
Resource MD5	The hash algorithm used to encode data.
State/Province	The state of origin detected for this asset.	Washington
State/Province Code	The state or province code associated with the state of origin.	WA
Web Component Type	The infrastructure type of a detected component.	Hosting Provider, DDOS Protection, Service, Server
Cname	The canonical name in the DNS Record associated with the host.	host.contoso.com	Equals Not Equals Starts with Does not start with Matches Does Not Match In Not in Starts with in Does not start with in Matches in Does not match in Contains Does Not Contain Contains In Does Not Contain In Empty Not Empty
Cname Domain	The domain name of the Cname value.	contoso.com
Domain	The domain associated with the host.	contoso.com
Host	The host name.	host.contoso.com
Name Server	Any name servers connected to the host.	dns.contoso.com
Registrar	The name of the registrar within the Whois record.	GODADDY.COM, INC.
Resource Host	The hosts of any resources running on the asset.	host.resource.com
Resource URL	Any URLs associated to resources on the asset.	host.resource.com/supplychain.js
Web Component Name	The name of a web component observed on an asset.	Netscaler Gateway
Web Component Name & Version	Both the name and detected version observed on the asset.	jQuery 3.4.1
Web Component Version	The component version number running on the asset.	3.4.1
Whois Admin Email	The email address of the listed administrator of a Whois record.	name@domain.com
Whois Admin Name	The name of the listed administrator.	John Smith
Whois Admin Organization	The organization associated with the administrator.	Contoso Ltd.
Whois Email	The primary contact email in a Whois record.	name@domain.com
Whois Registrant Email	The email address of the listed registrant.	name@domain.com
Whois Registrant Name	The name of the listed registrant.	John Smith
Whois Registrant Organization	An organization associated with the listed registrant.	Contoso Ltd.
Whois Technical Email	The email address of the listed technical contact.	name@domain.com
Whois Technical Name	The name of the listed technical contact.	John Smith
Whois Technical Organization	The organization associated to the listed technical contact.	Contoso Ltd.

Next steps

Understanding asset details

Inventory filters