From f3be9f4e458eeafedc58ad26bcb936fbf2b3d6f3 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Tue, 31 Oct 2023 17:13:33 +0100
Subject: [PATCH] chg: [findip-host] updated (sourced from Passive DNS)

---
 lists/findip-host/list.json | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/lists/findip-host/list.json b/lists/findip-host/list.json
index 6061c48..e226213 100644
--- a/lists/findip-host/list.json
+++ b/lists/findip-host/list.json
@@ -2,10 +2,15 @@
   "description": "Event contains one or more entries of known hostname querying your source IP.",
   "list": [
     "api.extralargecoffee.com",
+    "ip.dyn.bortzmeyer.fr",
     "ip.parrotdns.com",
     "ns.rydgames.com",
     "o-o.myaddr.l.google.com",
-    "whoami.akamai.net"
+    "resolver-identity.cloudfront.net",
+    "resolver.00f.net",
+    "whoami.akamai.net",
+    "whoami.nisl-research.com",
+    "whoami.v4.powerdns.org"
   ],
   "matching_attributes": [
     "domain",
@@ -14,5 +19,5 @@
   ],
   "name": "List of known hostname used for querying your source IP. This can be used as exclusion for your Passive DNS lookup.",
   "type": "hostname",
-  "version": 2
+  "version": 3
 }