<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 12/13/24 6:38 PM, Sebix wrote:<br>
</div>
<blockquote type="cite"
cite="mid:8a48ff6d-58fa-414a-821b-9fbe25635ea8@sebix.at">On
12/13/24 1:29 PM, Mika Silander via IntelMQ-dev wrote:
<br>
<blockquote type="cite"> I'm attempting to find a suitable
collector for retrieving the Abusech Feodo Tracker feed
(<a class="moz-txt-link-freetext" href="https://feodotracker.abuse.ch/downloads/ipblocklist.json">https://feodotracker.abuse.ch/downloads/ipblocklist.json</a>).
Afaiks, the ready-made Abusech Feodo Tracker parser expects
reports in plain JSON but the available http collectors are
manipulating the retrieved information in one way or the other
before passing it on to the parser.
<br>
</blockquote>
<br>
Not sure what you mean with the http collector data manipulation,
but to me it appears that the feodotracker is either dysfunctional
or dead. Not one of the data feed files contains actual data.
<br>
</blockquote>
<p>Never mind, the other feeds are empty because there's simply no
data.<font size="5"> 😇️</font><br>
</p>
<p>Parsing the mentioned<br>
<a class="moz-txt-link-freetext" href="https://feodotracker.abuse.ch/downloads/ipblocklist.json">https://feodotracker.abuse.ch/downloads/ipblocklist.json</a><br>
works fine with<br>
intelmq.bots.parsers.abusech.parser_feodotracker<br>
as documented in
<a class="moz-txt-link-freetext" href="https://docs.intelmq.org/latest/user/feeds/#feodo-tracker">https://docs.intelmq.org/latest/user/feeds/#feodo-tracker</a></p>
<p>Could you please describe what erroneous behavior you see?</p>
<p>best regards<br>
Sebastian<br>
</p>
<pre class="moz-signature" cols="72">--
Institute for Common Good Technology
gemeinnütziger Kulturverein - nonprofit cultural society
<a class="moz-txt-link-freetext" href="https://commongoodtechnology.org/">https://commongoodtechnology.org/</a>
ZVR 1510673578</pre>
</body>
</html>