Skip to content

Deprecate and remove TalosReputation analyzer #3451

@sanjib2006

Description

@sanjib2006

What happened

I am currently assigned working on refactoring the analyzers so that the external datasets are stored in DB #3427

while doing it i found out that
in file api_app/analyzers_manager/observable_analyzers/talos.py, line 42-44

url = "https://snort.org/downloads/ip-block-list"
            r = requests.get(url)
            r.raise_for_status()

This url requires accepting t&c and then redirects to amazonaws hosted file. read online that cisco updated to add this page in between in 2024.

So what should we do about it, use some other source or what?

Environment

  1. OS: Any
  2. IntelOwl version: 6.5.1

What did you expect to happen

The file should have been downloaded as .txt

How to reproduce your issue

Just visit the url here

Error messages and logs

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions