[IntelMQ-users] Error in parser module?

[Sebastian Wagner]

Dear Henrik,

On 2/18/21 8:45 AM, Henrik Jensen - TeleDCIS wrote:
> Could anyone tell me what to do about the following error
> (highlighted) in the Malware-Domain-List-Parser:
>
>  
>
> Failed to parse line.
> Traceback (most recent call last):
>   File "/usr/local/lib/python3.7/dist-packages/intelmq/lib/bot.py", line 978, in process
>     events = list(filter(bool, value))
>   File "/usr/local/lib/python3.7/dist-packages/intelmq/bots/parsers/malwaredomainlist/parser.py", line 21, in parse_line
>     event.add("time.source", row[0].replace('_', ' ') + " UTC")
>   File "/usr/local/lib/python3.7/dist-packages/intelmq/lib/message.py", line 249, in add
>     raise exceptions.InvalidValue(key, old_value)
> *intelmq.lib.exceptions.InvalidValue: invalid value ' UTC'*
>
It looks like there have been breaking changes at the malware domain
list feed. The URL http://www.malwaredomainlist.com/updatescsv.php
returns an empty text, therefore parsing fails.

The website doesn't show any current information. Maybe the feed has
been discontinued?

best regards
Sebastian

-- 
// Sebastian Wagner <wagner at cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20210218/8069ff68/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20210218/8069ff68/attachment.sig>