Edit

ipAddress resource type

  • Article

Namespace: microsoft.graph.security

Note

The Microsoft Graph API for Microsoft Defender Threat Intelligence requires an active Defender Threat Intelligence Portal license and API add-on license for the tenant.

Represents an IP address, which is (or has been) addressable over the internet. This resource acts as a grouping mechanism for related details about the hostname or IP address, such as the reputation, any related trackers or cookies, and so on.

You cannot retrieve this type directly. To access it, retrieve the host resource.

Inherits from host.

Methods

Method Return type Description
List components microsoft.graph.security.hostComponent collection Get a list of hostComponent resources.
List cookies microsoft.graph.security.hostCookie collection Get a list of hostCookie resources.
List passiveDns microsoft.graph.security.passiveDnsRecord collection Get a list of passiveDnsRecord resources.
List passiveDnsReverse microsoft.graph.security.passiveDnsRecord collection Get a list of passiveDnsRecord resources.
Get reputation microsoft.graph.security.hostReputation Get a list of hostReputation resources.
List trackers microsoft.graph.security.hostTracker collection Get a list of hostTracker resources.
Get whoisRecord microsoft.graph.security.whoisRecord Get the specified whoisRecord resource.

Properties

Property Type Description
autonomousSystem microsoft.graph.security.autonomousSystem The details about the autonomous system to which this IP address belongs.
countryOrRegion String The country/region for this IP address.
firstSeenDateTime DateTimeOffset The first date and time when this host was observed. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Inherited from microsoft.graph.security.host.
hostingProvider String The hosting company listed for this host.
id String The IP Address for this host. Read-only. Inherited from microsoft.graph.security.artifact.
lastSeenDateTime DateTimeOffset The most recent date and time when this host was observed. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Inherited from microsoft.graph.security.host.
netblock String The block of IP addresses this IP address belongs to.

Relationships

Relationship Type Description
components microsoft.graph.security.hostComponent collection The hostComponents that are associated with this host. Inherited from host.
cookies microsoft.graph.security.hostCookie collection The hostCookies that are associated with this host. Inherited from host.
passiveDns microsoft.graph.security.passiveDnsRecord collection Passive DNS retrieval about this host. Inherited from host.
passiveDnsReverse microsoft.graph.security.passiveDnsRecord collection Reverse passive DNS retrieval about this host. Inherited from host.
reputation microsoft.graph.security.hostReputation Represents a calculated reputation of this host. Inherited from host.
trackers microsoft.graph.security.hostTracker collection The hostTrackers that are associated with this host. Inherited from host.
whois microsoft.graph.security.whoisRecord The most recent whoisRecord for this host. Inherited from host.

JSON representation

The following is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.security.ipAddress",
  "autonomousSystem": {
    "@odata.type": "microsoft.graph.security.autonomousSystem"
  },
  "countryOrRegion": "String",
  "firstSeenDateTime": "String (timestamp)",
  "hostingProvider": "String",
  "id": "String (identifier)",
  "lastSeenDateTime": "String (timestamp)",
  "netblock": "String"
}