From 5e9905fc9eb0cce8e741e16ed8b04751498c3bc7 Mon Sep 17 00:00:00 2001 From: wes Date: Tue, 13 Nov 2018 19:12:43 -0500 Subject: [PATCH] removing old packetmail feeds (#433) --- rules/default/packetmail.yml | 35 ----------------------------------- 1 file changed, 35 deletions(-) delete mode 100644 rules/default/packetmail.yml diff --git a/rules/default/packetmail.yml b/rules/default/packetmail.yml deleted file mode 100644 index 53b3405a..00000000 --- a/rules/default/packetmail.yml +++ /dev/null @@ -1,35 +0,0 @@ -parser: semicolon - -defaults: - protocol: tcp - provider: packetmail.net - tlp: green - altid_tlp: white - confidence: 8 - description: honeypot traffic - tags: - - scanner - - honeynet - - suspicious - - values: - - indicator - - lasttime - - null - - null - -feeds: - iprep: - remote: https://www.packetmail.net/iprep.txt - description: 'TCP SYN to 206.82.85.196/30 to a non-listening service or daemon' - - iprep_mail: - remote: https://www.packetmail.net/iprep_mail.txt - values: - - indicator - - lasttime - - description - - iprep_ramnode: - remote: https://www.packetmail.net/iprep_ramnode.txt - description: 'TCP SYN to 81.4.103.251 to a non-listening service or daemon' \ No newline at end of file