[IntelMQ-dev] A suitable collector for the Abusech Feodo Tracker feed

Sebix sebix at sebix.at
Fri Dec 13 18:38:52 CET 2024


On 12/13/24 1:29 PM, Mika Silander via IntelMQ-dev wrote:
>   I'm attempting to find a suitable collector for retrieving the Abusech Feodo Tracker feed (https://feodotracker.abuse.ch/downloads/ipblocklist.json). Afaiks, the ready-made Abusech Feodo Tracker parser expects reports in plain JSON but the available http collectors are manipulating the retrieved information in one way or the other before passing it on to the parser.

Not sure what you mean with the http collector data manipulation, but to 
me it appears that the feodotracker is either dysfunctional or dead. Not 
one of the data feed files contains actual data.

I'll try to get some information on the feed's status from Spamhaus.

best regards
Sebastian

-- 
Institute for Common Good Technology
gemeinnütziger Kulturverein - nonprofit cultural society
https://commongoodtechnology.org/
ZVR 1510673578



More information about the IntelMQ-dev mailing list