How are reports delivered?

We currently have a few types of delivery, depending upon your subscription for your area of responsibility.

Each day, an email will go out for each report type, if we’ve collected any data on it for your network. Within the email will be a URL leading to the download location of the appropriate file. We’ll maintain older downloads as long as possible, space permitting.

An example of the URL looks like this:

http://dl.shadowserver.org/Gi3MOXk0n1f2UvV0vXrFaXx7U8s?-QPI5glAxzKER0Axncp1yQ

We strongly suggest that when importing data from our files, you take into account the header names and do not use column counting. Occasionally we will re-order or add columns, and this can make a mess of your datasets if you’re doing column counting.

You can also access the reports directly by visiting the download website. If you’re subscribed to more than one list, you’ll need to sync your mailing list accounts to do so. Once your email list accounts are synced, the downloads can be accessed here.

If more than three bad downloads are attempted within a five minute period, the IP attempting the downloads will be blocked. All blocks are removed at Midnight (UTC-7) every day.

Note that no reports greater than 833kB will be sent. Only the download URL will be included in the email message for these reports. This is to help save bandwidth and reduce resource consumption.

By default, all available reports are enabled for all our consumers.

Other Questions