Get Hostname for IP Addresses
LAST UPDATED: AUG 07, 2024
Inputs a list of IP addresses and returns their hostnames
Implementation | System |
Command Category | Cyber Utility |
Tags | ARTIFACT CONDITION HOSTNAME |
Inputs
Parameter Name | Required/Optional | Description | Sample Data |
---|---|---|---|
IP Addresses | Required | IP Addresses array | [ |
Output
Remote Command API
The D3 command API allows you to send requests to D3 SOAR to execute this utility command via REST API.
Request
POST
https:/{base_url}/{api_namespace}/api/Command/GetHostFromIP
Headers
Please refer to the page Webhook Configuration Guide - Authentication Method: API Keys for more details.
Request Body
{
"Username": <Username here>,
"Site": <Site here>,
"CommandParams": {
"IP Addresses": <IP Addresses array>
}
}
Body Parameters
Parameter Name | Type | Required/Optional | Description |
---|---|---|---|
Username |
| Required | The username of your D3 SOAR account. |
Site |
| Required | The D3 SOAR site to run the remote command. |
IP Addresses |
| Required | IP Addresses array |
Sample Request
SAMPLE DATA
{
"Username": "Admin",
"Site": "Security Operations",
"CommandParams": {
"IP Addresses": [
"13.224.9.115",
"172.217.3.164",
"127.0.0.1"
]
}
}
Response
Response Fields
Field Name | Type | Description |
---|---|---|
error |
| The error message if the API request has failed. |
returnData |
| The return data from the API request. |
contextData |
| The context data from the API request. |
Sample Response
{
"error": "",
"returnData": "Succeed",
"contextData": [
{
"IPAddress": "13.224.9.115",
"hostname": "server-13-224-9-115.sea19.r.cloudfront.net"
},
{
"IPAddress": "172.217.3.164",
"hostname": "sea15s11-in-f164.1e100.net"
},
{
"IPAddress": "127.0.0.1",
"hostname": "JZhan_PC"
}
]
}