Integration Scripts

Supported Services

• SniffCat
• AbuseIPDB
• SpamVerify

Used for

	SniffCat	AbuseIPDB	SpamVerify
UFW	UFW-SniffCat-Reporter	UFW-AbuseIPDB-Reporter	UFW-SpamVerify-Reporter
Cloudflare	Cloudflare-WAF-To-SniffCat	Cloudflare-WAF-To-AbuseIPDB
T-Pot	T-Pot-To-SniffCat	T-Pot-To-AbuseIPDB
Suricata	Soon	Suricata-To-AbuseIPDB

Terms

Key	Description
timestamp	Event timestamp (UTC format)
srcIp	Source IP address (attacker)
dstIp	Destination IP address (victim/server)
proto	Protocol used (e.g., TCP, SSH, TELNET, MONGOD)
spt	Source port number
dpt	Destination port number
in	Incoming network interface name (e.g., enp1s0, ens3)
out	Outgoing network interface name
mac	MAC address information
len	Total packet length (in bytes)
ttl	Packet TTL (Time To Live)
id	Packet ID
tos	Type of Service field in IP header
prec	Precedence value in TOS field
window	TCP window size
urgp	TCP urgent pointer