Temporary disable Miner / Malwaredomainlist offline

Fuerdauer — Tue, 10 Nov 2020 09:51:03 GMT

Hello!

Does anybody know how to temporary disabel a miner without deleting it from config ?

Problem is, that currently www.malwaredomainlist.com gets resolved to 127.0.0.1 and the miner alerts in the log files with

basepoller._poll ERROR: Exception in polling loop for Malwaredomain_IPs: HTTPSConnectionPool(host=www.malwaredomainlist.com, port=443): Max retries exceeded with url: /hostslist/ip.txt (Caused by SSLError(SSLError(1, u[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)),)))

Any suggestions about the malwaredomainlist or disabling ?

Thanks for help

Re: Temporary disable Miner / Malwaredomainlist offline

fwmike2 — Tue, 10 Nov 2020 15:31:03 GMT

Hi @Fuerdauer,

I noticed the MalwareDomainList miner issue as well. Haven't been able to find a reason for the localhost DNS answer. Anyone know what happened?

You can remove the miner from your processor input(s) if you don't want the indicators in your list.

topic Temporary disable Miner / Malwaredomainlist offline in General Topics

Temporary disable Miner / Malwaredomainlist offline

Re: Temporary disable Miner / Malwaredomainlist offline