From 1731ecf69c4c509312a95e1dd4f0e840f90e131b Mon Sep 17 00:00:00 2001
From: Sefinek <contact@sefinek.net>
Date: Sun, 21 Dec 2025 20:46:55 +0100
Subject: [PATCH] Update config.default.js

---
 config.default.js | 35 ++++++++++++++++++-----------------
 1 file changed, 18 insertions(+), 17 deletions(-)

diff --git a/config.default.js b/config.default.js
index 3756822..ed7a010 100644
--- a/config.default.js
+++ b/config.default.js
@@ -46,26 +46,27 @@ https://github.com/sefinek/UFW-AbuseIPDB-Reporter`; // Please don't delete this
 // See: https://www.abuseipdb.com/categories
 const { FLAGS, createFlagCollection } = require('./scripts/flags.js');
 const CATEGORIES = {
-	21: [FLAGS.PORT_SCAN, FLAGS.FTP, FLAGS.BRUTE_FORCE],
-	22: [FLAGS.PORT_SCAN, FLAGS.SSH, FLAGS.BRUTE_FORCE],
-	23: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED, FLAGS.BRUTE_FORCE],
-	25: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
-	53: [FLAGS.PORT_SCAN, FLAGS.DNS_COMPROMISE, FLAGS.DNS_POISONING],
-	80: [FLAGS.PORT_SCAN, FLAGS.WEB_APP_ATTACK],
-	110: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
-	143: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
-	443: [FLAGS.PORT_SCAN, FLAGS.WEB_APP_ATTACK],
-	445: [FLAGS.PORT_SCAN, FLAGS.HACKING, FLAGS.BRUTE_FORCE],
-	3306: [FLAGS.PORT_SCAN, FLAGS.SQL_INJECTION],
-	3389: [FLAGS.PORT_SCAN, FLAGS.HACKING, FLAGS.BRUTE_FORCE],
-	5432: [FLAGS.PORT_SCAN, FLAGS.SQL_INJECTION],
-	6379: [FLAGS.PORT_SCAN, FLAGS.HACKING],
-	8080: [FLAGS.PORT_SCAN, FLAGS.WEB_APP_ATTACK],
-	27017: [FLAGS.PORT_SCAN, FLAGS.HACKING],
+	21:   [FLAGS.PORT_SCAN, FLAGS.FTP],
+	22:   [FLAGS.PORT_SCAN, FLAGS.SSH],
+
+	23:   [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
+	2323: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
+	5555: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
+	7547: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
+	8291: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
+
+	25:   [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
+	465:  [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
+	587:  [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
+
+	5060: [FLAGS.PORT_SCAN, FLAGS.FRAUD_VOIP],
+	5061: [FLAGS.PORT_SCAN, FLAGS.FRAUD_VOIP],
+
+	1900: [FLAGS.PORT_SCAN, FLAGS.BAD_WEB_BOT],
 };
 
 exports.DETERMINE_CATEGORIES = ({ dpt }) => {
 	const set = createFlagCollection();
 	set.add(...(CATEGORIES[dpt] || [FLAGS.PORT_SCAN]));
-	return set.toString();
+	return set.toString('AbuseIPDB');
 };
\ No newline at end of file