Thanks all for the feedback.
I've updated intelmq and using the feed name from the list and seems to be working - at least not getting errors.
@Thomas, I will have to confirm whether the ASN feeds are still available now, that used to be a thing.
Just another question regarding the feedname. Is it possible to define multiple feeds in the feedname parameter like:
"feedname": " Ssl-Scan ", "Ssl-Freak-Scan", " Open-SNMP",
On Tue, 5 Jun 2018 at 11:54, Thomas Hungenberg th@cert-bund.de wrote:
On 05.06.2018 11:26, Sebastian Wagner wrote:
The feedname you are using in your configuration ("ASN Summary Report") is not in this list. Have a look at the list and see which feed name your report corresponds to.
A parser for the ASN Summary Report does not yet exist. Are those reports still provided by Shadowserver? Haven't seen them for a longer time.
- ThomasCERT-Bund Incident Response & Malware Analysis Team