new: [findip-host] New warning-list for known hostname used to lookup source IP of the resolver

pull/259/head
Alexandre Dulaunoy 2023-10-12 08:43:01 +02:00
parent e661c9ab92
commit a92ef80539
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 16 additions and 0 deletions

View File

@ -0,0 +1,16 @@
{
"description": "Event contains one or more entries of known hostname querying your source IP.",
"list": [
"whoami.akamai.net",
"ip.parrotdns.com",
"api.extralargecoffee.com"
],
"matching_attributes": [
"domain",
"hostname",
"domain|ip"
],
"name": "List of known hostname used for querying your source IP. This can be used as exclusion for your Passive DNS lookup.",
"type": "hostname",
"version": 1
}