Update config.default.js

This commit is contained in:
Sefinek committed 2025-12-21 20:46:55 +01:00
1 parent 04b34854d2
commit 1731ecf69c
1 file changed
+18 -17
+18 -17
View File
@@ -46,26 +46,27 @@ https://github.com/sefinek/UFW-AbuseIPDB-Reporter`; // Please don't delete this
// See: https://www.abuseipdb.com/categories
const { FLAGS, createFlagCollection } = require('./scripts/flags.js');
const CATEGORIES = {
21: [FLAGS.PORT_SCAN, FLAGS.FTP, FLAGS.BRUTE_FORCE],
22: [FLAGS.PORT_SCAN, FLAGS.SSH, FLAGS.BRUTE_FORCE],
23: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED, FLAGS.BRUTE_FORCE],
25: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
53: [FLAGS.PORT_SCAN, FLAGS.DNS_COMPROMISE, FLAGS.DNS_POISONING],
80: [FLAGS.PORT_SCAN, FLAGS.WEB_APP_ATTACK],
110: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
143: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
443: [FLAGS.PORT_SCAN, FLAGS.WEB_APP_ATTACK],
445: [FLAGS.PORT_SCAN, FLAGS.HACKING, FLAGS.BRUTE_FORCE],
3306: [FLAGS.PORT_SCAN, FLAGS.SQL_INJECTION],
3389: [FLAGS.PORT_SCAN, FLAGS.HACKING, FLAGS.BRUTE_FORCE],
5432: [FLAGS.PORT_SCAN, FLAGS.SQL_INJECTION],
6379: [FLAGS.PORT_SCAN, FLAGS.HACKING],
8080: [FLAGS.PORT_SCAN, FLAGS.WEB_APP_ATTACK],
27017: [FLAGS.PORT_SCAN, FLAGS.HACKING],
21: [FLAGS.PORT_SCAN, FLAGS.FTP],
22: [FLAGS.PORT_SCAN, FLAGS.SSH],
23: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
2323: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
5555: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
7547: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
8291: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
25: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
465: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
587: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
5060: [FLAGS.PORT_SCAN, FLAGS.FRAUD_VOIP],
5061: [FLAGS.PORT_SCAN, FLAGS.FRAUD_VOIP],
1900: [FLAGS.PORT_SCAN, FLAGS.BAD_WEB_BOT],
};
exports.DETERMINE_CATEGORIES = ({ dpt }) => {
const set = createFlagCollection();
set.add(...(CATEGORIES[dpt] || [FLAGS.PORT_SCAN]));
return set.toString();
return set.toString('AbuseIPDB');
};