Update config.default.js

This commit is contained in:
Sefinek committed 2025-12-21 20:46:55 +01:00
1 parent 04b34854d2
commit 1731ecf69c
1 file changed
+18 -17
+18 -17
View File
@@ -46,26 +46,27 @@ https://github.com/sefinek/UFW-AbuseIPDB-Reporter`; // Please don't delete this
// See: https://www.abuseipdb.com/categories // See: https://www.abuseipdb.com/categories
const { FLAGS, createFlagCollection } = require('./scripts/flags.js'); const { FLAGS, createFlagCollection } = require('./scripts/flags.js');
const CATEGORIES = { const CATEGORIES = {
21: [FLAGS.PORT_SCAN, FLAGS.FTP, FLAGS.BRUTE_FORCE], 21: [FLAGS.PORT_SCAN, FLAGS.FTP],
22: [FLAGS.PORT_SCAN, FLAGS.SSH, FLAGS.BRUTE_FORCE], 22: [FLAGS.PORT_SCAN, FLAGS.SSH],
23: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED, FLAGS.BRUTE_FORCE],
25: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM], 23: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
53: [FLAGS.PORT_SCAN, FLAGS.DNS_COMPROMISE, FLAGS.DNS_POISONING], 2323: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
80: [FLAGS.PORT_SCAN, FLAGS.WEB_APP_ATTACK], 5555: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
110: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM], 7547: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
143: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM], 8291: [FLAGS.PORT_SCAN, FLAGS.IOT_TARGETED],
443: [FLAGS.PORT_SCAN, FLAGS.WEB_APP_ATTACK],
445: [FLAGS.PORT_SCAN, FLAGS.HACKING, FLAGS.BRUTE_FORCE], 25: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
3306: [FLAGS.PORT_SCAN, FLAGS.SQL_INJECTION], 465: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
3389: [FLAGS.PORT_SCAN, FLAGS.HACKING, FLAGS.BRUTE_FORCE], 587: [FLAGS.PORT_SCAN, FLAGS.EMAIL_SPAM],
5432: [FLAGS.PORT_SCAN, FLAGS.SQL_INJECTION],
6379: [FLAGS.PORT_SCAN, FLAGS.HACKING], 5060: [FLAGS.PORT_SCAN, FLAGS.FRAUD_VOIP],
8080: [FLAGS.PORT_SCAN, FLAGS.WEB_APP_ATTACK], 5061: [FLAGS.PORT_SCAN, FLAGS.FRAUD_VOIP],
27017: [FLAGS.PORT_SCAN, FLAGS.HACKING],
1900: [FLAGS.PORT_SCAN, FLAGS.BAD_WEB_BOT],
}; };
exports.DETERMINE_CATEGORIES = ({ dpt }) => { exports.DETERMINE_CATEGORIES = ({ dpt }) => {
const set = createFlagCollection(); const set = createFlagCollection();
set.add(...(CATEGORIES[dpt] || [FLAGS.PORT_SCAN])); set.add(...(CATEGORIES[dpt] || [FLAGS.PORT_SCAN]));
return set.toString(); return set.toString('AbuseIPDB');
}; };