Thanks all for the feedback.

I've updated intelmq and using the feed name from the list and seems to be working - at least not getting errors.

@Thomas, I will have to confirm whether the ASN feeds are still available now, that used to be a thing.

Just another question regarding the feedname.
Is it possible to define multiple feeds in the feedname parameter like:

"feedname": " Ssl-Scan ", "Ssl-Freak-Scan", " Open-SNMP",

On Tue, 5 Jun 2018 at 11:54, Thomas Hungenberg <th@cert-bund.de> wrote:
On 05.06.2018 11:26, Sebastian Wagner wrote:
> The feedname you are using in your configuration ("ASN Summary Report")
> is not in this list. Have a look at the list and see which feed name
> your report corresponds to.

A parser for the ASN Summary Report does not yet exist.
Are those reports still provided by Shadowserver?
Haven't seen them for a longer time.


     - Thomas

CERT-Bund Incident Response & Malware Analysis Team