diff --git a/config.default.js b/config.default.js
index 670d61b..515ba0c 100644
--- a/config.default.js
+++ b/config.default.js
@@ -44,21 +44,12 @@ https://github.com/sefinek/UFW-AbuseIPDB-Reporter`; // Please don't delete this
 
 // See: https://www.abuseipdb.com/categories
 const categories = {
-	22: '14,22,18', // Port Scan | SSH | Brute-Force
-	80: '14,21', // Port Scan | Web App Attack
-	443: '14,21', // Port Scan | Web App Attack
-	8080: '14,21', // Port Scan | Web App Attack
-	25: '14,11', // Port Scan | Email Spam
-	21: '14,5,18', // Port Scan | FTP Brute-Force | Brute-Force
-	53: '14,1,2', // Port Scan | DNS Compromise | DNS Poisoning
-	23: '14,15,18', // Port Scan | Hacking | Brute-Force
-	3389: '14,15,18', // Port Scan | Hacking | Brute-Force
-	3306: '14,16', // Port Scan | SQL Injection
-	6666: '14,8', // Port Scan | Fraud VoIP
-	6667: '14,8', // Port Scan | Fraud VoIP
-	6668: '14,8', // Port Scan | Fraud VoIP
-	6669: '14,8', // Port Scan | Fraud VoIP
-	9999: '14,6', // Port Scan | Ping of Death
+	21:  '14,5,18', // FTP: Port Scan, FTP Brute-Force, Brute-Force
+	22:  '14,22,18', // SSH: Port Scan, SSH, Brute-Force
+	23:  '14,23,18', // Telnet: Port Scan, IoT Targeted, Brute-Force
+	53:  '14,1,2', // DNS: Port Scan, DNS Compromise, DNS Poisoning
+	80:  '14,21', // HTTP: Port Scan, Web App Attack
+	443: '14,21', // HTTPS: Port Scan, Web App Attack
 };
 
 exports.DETERMINE_CATEGORIES = ({ dpt }) => categories[dpt] || '14'; // Default: Port Scan
\ No newline at end of file