{ "description": "Event contains one or more entries of known hostname querying your source IP.", "list": [ "api.extralargecoffee.com", "ip.dyn.bortzmeyer.fr", "ip.parrotdns.com", "ns.rydgames.com", "o-o.myaddr.l.google.com", "resolver-identity.cloudfront.net", "resolver.00f.net", "resolver.dnscrypt.info", "whoami.akamai.net", "whoami.nisl-research.com", "whoami.v4.powerdns.org", "rr-mirror.research.nawrocki.berlin" ], "matching_attributes": [ "domain", "hostname", "domain|ip" ], "name": "List of known hostname used for querying your source IP. This can be used as exclusion for your Passive DNS lookup.", "type": "hostname", "version": 4 }