hosts/bad: escape regexp properly [GH-4922]