{"description":"An abusive login-attack report",
 "type":"object",
 "properties":{
   "Reported-From":{
     "type":"string",
     "format":"email"
   },
   "Report-ID":{
     "type":"string",
     "format":"email"
   },
   "Category":{
     "type":"string",
     "enum":["abuse"]
   },
   "Report-Type":{
     "type":"string",
     "enum":["login-attack"]
   },
   "Service":{
     "type":"string"
   },
  "Port":{
     "type":"integer"
   },
   "User-Agent":{
     "type":"string"
   },
   "Date":{
     "type":"string",
     "format":"date-time"
   },
   "Source":{
     "type":"string"
   },
   "Source-Type":{
     "type":"string",
     "enum":["ipv4","ipv6","ip-address"]
   },
   "Destination":{
     "type":"string",
     "optional":true,
     "requires":"Destination-Type"
   },
   "Destination-Type":{
     "type":"string",
     "enum":["ipv4","ipv6","ip-address"],
     "optional":true
   },
   "Attachment":{
     "type":"string",
     "enum":["text/plain"]
   },
   "Schema-URL":{
     "type":"string",
     "format":"uri"
   },
   "Version":{
     "type":"number",
     "optional":true
   },
   "Occurrences":{
     "type":"integer",
     "optional":true
   },
   "TLP":{
     "type":"string",
     "enum":["white","green","amber","red"],
     "optional":true
   }
 }
}