Erroneous Entry in "List of known public DNS resolvers expressed as hostname"

MISP / misp-warninglists

Warning lists to inform users of MISP about potential false-positives or other information in indicators

http://misp.github.io/misp-warninglists/

520 stars 170 forks source link

Erroneous Entry in "List of known public DNS resolvers expressed as hostname" #275

Closed cgrangerdc closed 3 months ago

cgrangerdc commented 3 months ago

This list appears to have a typo:

https://github.com/MISP/misp-warninglists/blob/fc9f8542e9e6a9a4c11bb0b94d2a7d326761929c/lists/public-dns-hostname/list.json#L9394

This issue causes any indicator containing the string "77" to match on this warning list.

adulau commented 3 months ago

Thanks for the report. It was useful as I discovered one of a generating script was not properly filtering out illegal domain. It should be fixed. If you see something else, don't hesitate.