Cortex-Analyzers icon indicating copy to clipboard operation
Cortex-Analyzers copied to clipboard

[Bug] Analyzer Threatcrowd_1_0 not working

Open dominiksr opened this issue 3 years ago • 2 comments

Describe the bug Analyzer Threatcrowd_1_0 not working. There is faulty execution and explanatory error.

To Reproduce Steps to reproduce the behavior:

  1. New Analysys
  2. Choose data type IP or mail or domain
  3. Enter data eg 1.1.1.1

Expected behavior Result of the analysis.

Complementary information err: Unexpected Error: HTTPSConnectionPool(host='www.threatcrowd.org', port=443): Max retries exceeded with url: /searchApi/v2/ip/report/?ip=1.1.1.1 (Caused by SSLError(SSLCertVerificationError("hostname 'www.threatcrowd.org' doesn't match '*.otxb.io'")))

Work environment

  • Server OS: Ubuntu
  • Cortex version: 3.1.7-1 deb
  • Cortex Analyzer name: Threatcrowd_1_0

Possible solutions Probably renewing the certificate would make it work again.

Additional context The analyzer stopped working about 2 months ago.

dominiksr avatar Nov 14 '22 08:11 dominiksr

the service is not available anymore at the address www.threatcrowd.org and the certificate is invalid.

jeromeleonard avatar Nov 29 '22 18:11 jeromeleonard

Will this analyzer be removed from the cortex analyzer database?

dominiksr avatar Dec 05 '22 07:12 dominiksr