dokuwiki-plugin-botmon/data/rules.json

{
	"threshold": 100,
	"rules": [
		{"func": "fromKnownBotIP",
		 "id": "botIpRange", "desc": "Common Bot IP range",
		 "bot": 50
		},
		{"func": "matchesClient", "params": ["aol", "msie", "chromeold","oldedge"],
		 "id": "oldClient", "desc": "Obsolete browser version",
		 "bot": 40
		},
		{"func": "matchesPlatform", "params": ["winold", "macosold"],
		 "id": "oldOS", "desc": "Obsolete platform version",
		 "bot": 40
		},
		{"func": "smallPageCount", "params": [1],
		 "id": "onePage", "desc": "Visiter viewed only a single page",
		 "bot": 40
		},
		{"func": "noRecord", "params": ["log"],
		 "id": "noClient", "desc": "No client-side JS log was recorded",
		 "bot": 50
		},
		{"func": "noRecord", "params": ["tck"],
		 "id": "noTicks", "desc": "No client ticks were recorded",
		 "bot": 10
		},
		{"func": "noReferrer",
		 "id": "noRefs", "desc": "No referer field",
		 "bot": 30
		},
		{"func": "matchLang", "params": ["en"],
		 "id": "langMatch", "desc": "Client’s ‘Accept-Language’ header does not match the page language (except English pages)",
		 "bot": 20
		},
		{"func": "matchesClient", "params": ["brave"],
		 "id": "susClient", "desc": "Client identifier that is popular with bot networks",
		 "bot": 10
		},
		{"func": "combinationTest", "params": [["macos", "chrome"]],
		 "id": "unusualPC", "desc": "Unusual combination of platform and client",
		 "bot": 10
		},
		{"func": "combinationTest", "params": [["macos", "chromeold"],["macosold", "brave"],["winold", "edge"],["winold", "brave"]],
		 "id": "suspPC", "desc": "Suspicious combination of platform and client",
		 "bot": 30
		},
		{"func": "combinationTest", "params": [["macos", "msie"], ["win10", "safari"]],
		 "id": "impPC", "desc": "Impossible combination of platform and client",
		 "bot": 100
		},
		{"func": "loadSpeed", "params": [3, 20],
		 "id": "speedRun", "desc": "Average time between page loads is less than 20 seconds",
		 "bot": 100
		}
	],
	"ipRanges": [
		{"from": "3...", "to": "3.255.255.255", "label": "Amazon Data Services [US]"},
		{"from": "8.127..", "to": "8.223.255.254", "label": "Alibaba [CN]"},
		{"from": "24.240..", "to": "24.243.255.254", "label": "Charter [US]"},
		{"from": "27.106..", "to": "27.106.127.254", "label": "Huawei [US]"},
		{"from": "34...", "to": "34.191.255.254", "label": "Google LLC"},
		{"from": "45.224..", "to": "45.227.195.254", "label": "Various BR ISPs [BR]"},
		{"from": "45.131.216.", "to": "45.131.219.254", "label": "Lonconnect [BR]"},
		{"from": "46.250.160.", "to": "46.250.191.254", "label": "Huawei [MX]"},
		{"from": "49.0.200.", "to": "49.0.255.254", "label": "Huawei [SG]"},
		{"from": "84.37.35.0", "to": "84.37.255.254", "label": "GTT.net [US]"},
		{"from": "94.74.64.0", "to": "94.74.127.254", "label": "Huawei [HK]"},
		{"from": "101...", "to": "119.255.255.254", "label": "SinNet [CN]"},
		{"from": "111.119.192.", "to": "111.119.255.254", "label": "Huawei [SG]"},
		{"from": "119...", "to": "101.207.255.254", "label": "Unicom [CN]"},
		{"from": "121.91.168.", "to": "121.91.175.254", "label": "Huawei [HK]"},
		{"from": "122.8..", "to": "122.8.255.254", "label": "CN-ISP [CN]"},
		{"from": "122.9..", "to": "122.9.255.254", "label": "Huawei [CN]"},
		{"from": "124.243.128.", "to": "124.243.191.254", "label": "Huawei [SG]"},
		{"from": "142.147.128.", "to": "1142.147.255.254", "label": "Web2Objects LLC [US]"},
		{"from": "150.40.128.", "to": "150.40.255.254", "label": "Huawei [HK]"},
		{"from": "159.138..", "to": "159.138.225.254", "label": "Huawei [TH]"},
		{"from": "162.128..", "to": "162.128.255.254", "label": "Zenlayer [SG]"},
		{"from": "166.108.192.", "to": "166.108.255.254", "label": "Huawei [SG]"},
		{"from": "177...", "to": "177.223.255.254", "label": "THS [BR]"},
		{"from": "183.87.32.", "to": "183.87.159.254", "label": "Huawei [HK]"},
		{"from": "187.180..", "to": "187.183.255.254", "label": "Claro [BR]"},
		{"from": "188.239..", "to": "188.239.63.254", "label": "Huawei [SG]"},
		{"from": "189.1.192.", "to": "189.1.255.254", "label": "Huawei [HK]"},
		{"from": "189.76..", "to": "189.127.255.254", "label": "Hard Online [BR]"},
		{"from": "190.92.192.", "to": "190.92.255.254", "label": "Huawei [HK]"},
		{"from": "192.124.170.", "to": "192.124.182.254", "label": "Relcom  [CZ]"},
		{"from": "2001:4800::::::", "to": "2001:4fff:ffff:ffff:ffff:ffff:ffff:ffff", "label": "Rackspace/Google [US]"},
		{"from": "2600:1f00::::::", "to": "2600:1fff:ffff:ffff:ffff:ffff:ffff:ffff", "label": "Amazon Cloud [US]"},
		{"from": "2804:::::::", "to": "2804:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF", "label": "Inspire [BR]"},
		{"from": "2a0a:4cc0:0:0:0:0:0:0", "to": "2a0a:4cc0:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF", "label": "Netcup [DE]"}
	]
}