intelmq icon indicating copy to clipboard operation
intelmq copied to clipboard

Various missing Shadowserver report types

Open ghost opened this issue 4 years ago • 2 comments

These reports are currently not supported by the Shadowserver parser as of IntelMQ 2.3.0:

  • [ ] Accessible QUIC Report
  • [ ] Accessible SSH Report
  • [ ] Accessible SSL Report
  • [ ] Click-Fraud Report
  • [ ] DDoS Report
  • [ ] Honeypot URL Report
  • [ ] Open Proxy Report
  • [ ] Sandbox Connection Report
  • [ ] Sandbox IRC Report
  • [ ] Sandbox SMTP Report
  • [ ] Scan Report
  • [ ] Sinkhole DNS report
  • [ ] Synful Scan Report

All of them are optional reports which are not automatically sent, but only available if explicitly subscribed to them.

ghost avatar Mar 24 '21 07:03 ghost

@elsif2

sebix avatar Jul 01 '22 19:07 sebix

All supported report types will be added with https://github.com/certtools/intelmq/pull/2143.

elsif2 avatar Jul 01 '22 19:07 elsif2

All Shadowserver reports are now supported in the current develop branch and will be included in the 3.1.0 release.

elsif2 avatar Aug 22 '22 14:08 elsif2