We offer over 90 different reports, from activity like DDoS attacks and botnets to open Elasticsearch and MongoDB servers. You can see a full list of the reports we offer on the Network Reporting page.
What types of reports do you offer?
Other Questions
Can I select/change which reports I subscribe to?
Absolutely! Please send a request to report_admin@shadowserver.org with changes you want to make in your report setup.
Do you support STIX/TAXII?
Currently no. You can use our RESTful API to easily automate the processing of our API report data. You can receive test API data access to our sample reports to build your parsers. Contact us for API key access.
Are there tools that can automatically parse your feeds?
Yes! We have published a report-manager tool on our GitHub page. There are open source and commercial tools that have parsers of our reports, allowing for automation.
A good example of a free open source tool is IntelMQ. We maintain the Shadowserver feed parsers there, so it is most up to date!