> ## Documentation Index
> Fetch the complete documentation index at: https://docs.abusix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Inbound Processing, Event Types

### **Overview**

Here is a list of the event types we classify during parsing. This is helpful when building Case Groups and other inbound rules and filters.

| Type                                                               | Mapping                                                          |
| :----------------------------------------------------------------- | :--------------------------------------------------------------- |
| Copyright                                                          |                                                                  |
| [Spam](https://abusix.com/glossary/spam/)                          |                                                                  |
| Content                                                            |                                                                  |
| Activity                                                           |                                                                  |
| Vulnerability                                                      |                                                                  |
| Open                                                               |                                                                  |
| MailRelayAttempt                                                   |                                                                  |
| Bot                                                                |                                                                  |
| [Malware](https://abusix.com/glossary/malware/)                    |                                                                  |
| MalwareHosting                                                     |                                                                  |
| [Phishing](https://abusix.com/glossary/phishing/)                  |                                                                  |
| NotSpam?                                                           |                                                                  |
| Spamvertised?                                                      |                                                                  |
| [Blacklist](https://abusix.com/glossary/real-time-blocklist/)      | [Blocklist](https://abusix.com/glossary/real-time-blocklist/)    |
| Trademark                                                          |                                                                  |
| PortScan                                                           |                                                                  |
| [DDos](https://abusix.com/glossary/distributed-denial-of-service/) |                                                                  |
| DDosAmplification                                                  |                                                                  |
| IpSpoof                                                            |                                                                  |
| LoginAttack                                                        |                                                                  |
| IPReclamation                                                      |                                                                  |
| DNSProblems                                                        |                                                                  |
| Exploit                                                            |                                                                  |
| ChildAbuse                                                         | [CSAM](https://abusix.com/glossary/child-sexual-abuse-material/) |
| RPZ                                                                |                                                                  |
| Trap                                                               |                                                                  |
| CompromisedAccount                                                 |                                                                  |
| CompromisedServer                                                  |                                                                  |
| CompromisedWebsite                                                 |                                                                  |
| CVE                                                                |                                                                  |
| Backdoor                                                           |                                                                  |
| Fraud                                                              |                                                                  |
| Defacement                                                         |                                                                  |
| RogueDNS                                                           |                                                                  |
| Doxing                                                             |                                                                  |
| WebHack                                                            |                                                                  |
| WebCrawler                                                         |                                                                  |
| AuthFailure                                                        |                                                                  |
| Censorship                                                         |                                                                  |
| CompromisedMicrosoftExchange                                       |                                                                  |
| DNSBlocklist                                                       |                                                                  |
| SSLPoodle                                                          |                                                                  |
| OutdatedDNSSEC                                                     |                                                                  |
| SSLFreak                                                           |                                                                  |
| Propaganda                                                         |                                                                  |
| Violence                                                           |                                                                  |
| DeviceIdentification                                               |                                                                  |
| IllegalAdvertisement                                               |                                                                  |
| MaliciousActivity                                                  |                                                                  |
| Harassment                                                         |                                                                  |

# **Open Subtypes**

Each open event signifies the existence of open ports, with the corresponding sub-events providing details about the services associated with these open ports.

| Type                                                         | Mapping |
| :----------------------------------------------------------- | :------ |
| socks                                                        |         |
| proxy                                                        |         |
| router                                                       |         |
| redis                                                        |         |
| mongodb                                                      |         |
| elasticsearch                                                |         |
| portmapper                                                   |         |
| snmp                                                         |         |
| ntp                                                          |         |
| tftp                                                         |         |
| ftp                                                          |         |
| rdp                                                          |         |
| rsync                                                        |         |
| netbios                                                      |         |
| mqtt                                                         |         |
| mc\_sqlr                                                     |         |
| mdns\_resolver                                               |         |
| dns\_resolver                                                |         |
| ipmi                                                         |         |
| ldap                                                         |         |
| adb                                                          |         |
| afp                                                          |         |
| ard                                                          |         |
| ipp                                                          |         |
| ssl                                                          |         |
| [tls](https://abusix.com/glossary/transport-layer-security/) |         |
| vpn                                                          |         |
| cwmp                                                         |         |
| ms\_exchange                                                 |         |
| chargen                                                      |         |
| memcached                                                    |         |
| mssql                                                        |         |
| natpmp                                                       |         |
| qotd                                                         |         |
| ssdp                                                         |         |
| isakmp                                                       |         |
| vnc                                                          |         |
| telnet                                                       |         |
| xdmcp                                                        |         |
| db2                                                          |         |
| smb                                                          |         |
| hadoop                                                       |         |
| cisco\_smart\_install                                        |         |
| mail\_server                                                 |         |
| grafana                                                      |         |
| bitbucket                                                    |         |
| apache\_server                                               |         |
| gitlab\_server                                               |         |
| imap                                                         |         |
| pop3                                                         |         |
| http                                                         |         |
| radmin                                                       |         |
| ubiquiti                                                     |         |
| [ssh](https://abusix.com/glossary/secure-shell-protocol/)    |         |
| coap                                                         |         |
| vpn                                                          |         |
| smi                                                          |         |
| bosmon                                                       |         |
| ms\_sharepoint                                               |         |
| secvest\_alarm\_system                                       |         |
| directory\_listing                                           |         |
| citrix                                                       |         |
| amqp                                                         |         |
| modbus                                                       |         |
| kubernetes\_api\_server                                      |         |
| epmd                                                         |         |
| postgresql                                                   |         |
| quic                                                         |         |
| couchdb                                                      |         |
| docker                                                       |         |
| sip                                                          |         |
| stun                                                         |         |
| dvr                                                          |         |
| ics                                                          |         |
| hp\_ilo                                                      |         |
| smarter\_mail\_server                                        |         |
| log4j                                                        |         |
| zimbra\_server                                               |         |
| sap                                                          |         |
| bacnet                                                       |         |
| qnap                                                         |         |
| confluence                                                   |         |
| sophos                                                       |         |
| h2\_web\_console                                             |         |
| fortigate                                                    |         |
| ivanti                                                       |         |
| fortios                                                      |         |
| canon                                                        |         |
| ws-discovery                                                 |         |
| slp                                                          |         |
| msmq                                                         |         |