During the development of the next feature release IntelMQ 3.1.0, we corrected some issues that were found in the IntelMQ 3.0.0 release together with the IntelMQ community. We release new versions of IntelMQ, the IntelMQ API and the graphical user-interface IntelMQ Manager. The upgrade-instructions can be found in the documentation. An important upgrade hint is also in the release announcement.

Summary of changes

• Several fixes related to IEP01 implementation (change of the configuration file format and refactoring of internal parameter handling)
• The feed MalwareDomains is obsolete and was removed
• Numerous fixes to the ShadowServer-Parser, including support for these new reports:
  
  • Vulnerable SMTP Server
  • Microsoft Sinkhole Events Report & Microsoft Sinkhole HTTP Events Report
  • Honeypot HTTP Scan
• Heavy refactoring of IntelMQ-Manager's JavaScript parts to fix errors and usability issues.
• Various smaller fixes.

A detailed list of all changes can be read in the release notes:

• IntelMQ 3.0.1
• IntelMQ API 3.0.1
• IntelMQ Manager 3.0.1

The full documentation can be found at intelmq.readthedocs.io.

Acknowledgements

Thanks to all the contributors (in alphabetic order):

• abr4xc
• Alex Kaplan
• Birger Schacht (CERT.at)
• Mikk Margus Möll (CERT.ee)
• Sebastian Wagner (CERT.at)
• Sebastian Waldbauer (CERT.at)

Every contribution is very appreciated. Feel free to ask questions, reports issues or merge your code into the IntelMQ universe.

This blog post is part of a series of blog posts related to our CEF Telecom 2018-AT-IA-0111 and 2020-AT-IA-0254 projects, which also support our participation in the CSIRTs Network.