Dear Henrik,

On 2/18/21 8:45 AM, Henrik Jensen - TeleDCIS wrote:
Could anyone tell me what to do about the following error (highlighted) in the Malware-Domain-List-Parser:

 

Failed to parse line.
Traceback (most recent call last):
  File "/usr/local/lib/python3.7/dist-packages/intelmq/lib/bot.py", line 978, in process
    events = list(filter(bool, value))
  File "/usr/local/lib/python3.7/dist-packages/intelmq/bots/parsers/malwaredomainlist/parser.py", line 21, in parse_line
    event.add("time.source", row[0].replace('_', ' ') + " UTC")
  File "/usr/local/lib/python3.7/dist-packages/intelmq/lib/message.py", line 249, in add
    raise exceptions.InvalidValue(key, old_value)
intelmq.lib.exceptions.InvalidValue: invalid value ' UTC'

It looks like there have been breaking changes at the malware domain list feed. The URL http://www.malwaredomainlist.com/updatescsv.php returns an empty text, therefore parsing fails.

The website doesn't show any current information. Maybe the feed has been discontinued?

best regards
Sebastian

-- 
// Sebastian Wagner <wagner@cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg