diff --git a/windows/security/threat-protection/windows-defender-atp/find-machine-info-by-ip-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/find-machine-info-by-ip-windows-defender-advanced-threat-protection.md
index 85a6256afb..78a31363f6 100644
--- a/windows/security/threat-protection/windows-defender-atp/find-machine-info-by-ip-windows-defender-advanced-threat-protection.md
+++ b/windows/security/threat-protection/windows-defender-atp/find-machine-info-by-ip-windows-defender-advanced-threat-protection.md
@@ -23,6 +23,9 @@ ms.date: 06/25/2018
 
 Find a machine entity around a specific timestamp by internal IP.
 
+>[!NOTE]
+>The timestamp must be within the last 30 days.
+
 ## Permissions
 User needs read permissions.