{
  "description": "Event contains one or more entries of known hostname querying your source IP.",
  "list": [
    "api.extralargecoffee.com",
    "ip.parrotdns.com",
    "ns.rydgames.com",
    "o-o.myaddr.l.google.com",
    "whoami.akamai.net"
  ],
  "matching_attributes": [
    "domain",
    "hostname",
    "domain|ip"
  ],
  "name": "List of known hostname used for querying your source IP. This can be used as exclusion for your Passive DNS lookup.",
  "type": "hostname",
  "version": 2
}