dokuwiki-plugin-botmon/data/rules.json

{
	"threshold": 100,
	"rules": [
		{"func": "fromKnownBotIP",
		 "id": "botIpRange", "desc": "Common Bot IP range",
		 "bot": 50
		},
		{"func": "obsoleteClient", "params": ["aol", "msie", "chromeold"],
		 "id": "oldClient", "desc": "Obsolete browser version",
		 "bot": 40
		},
		{"func": "obsoletePlatform", "params": ["winold", "macosold"],
		 "id": "oldOS", "desc": "Obsolete platform version",
		 "bot": 40
		},
		{"func": "smallPageCount", "params": [1],
		 "id": "onePage", "desc": "Visiter viewed only a single page",
		 "bot": 40
		},
		{"func": "noRecord", "params": ["log"],
		 "id": "noClient", "desc": "No client-side JS log was recorded",
		 "bot": 50
		},
		{"func": "noRecord", "params": ["tck"],
		 "id": "noTicks", "desc": "No client ticks were recorded",
		 "bot": 10
		},
		{"func": "noReferrer",
		 "id": "noRefs", "desc": "No referer field",
		 "bot": 30
		},
		{"func": "matchLang", "params": ["en"],
		 "id": "langMatch", "desc": "Client’s ‘Accept-Language’ header does not match the page language (except English pages)",
		 "bot": 20
		},
		{"func": "clientTest", "params": ["brave"],
		 "id": "susClient", "desc": "Client identifier that is popular with bot networks",
		 "bot": 10
		},
		{"func": "combTest", "params": [["macos", "chrome"]],
		 "id": "unusualPC", "desc": "Unusual combination of platform and client",
		 "bot": 10
		},
		{"func": "combTest", "params": [["macos", "chromeold"],["macosold", "brave"],["winold", "edge"],["winold", "brave"]],
		 "id": "suspPC", "desc": "Suspicious combination of platform and client",
		 "bot": 30
		},
		{"func": "combTest", "params": [["macos", "msie"], ["win10", "safari"]],
		 "id": "impPC", "desc": "Impossible combination of platform and client",
		 "bot": 100
		},
		{"func": "loadSpeed", "params": [3, 20],
		 "id": "speedRun", "desc": "Average time between page loads is less than 20 seconds",
		 "bot": 100
		}
	],
	"ipRanges": [
		{"from": "3.0.0.0", "to": "3.255.255.255", "isp": "Amazon Data Services", "loc":"us"},
		{"from": "8.127.0.0", "to": "8.223.255.254", "isp": "Alibaba", "loc":"cn"},
		{"from": "24.240.0.0", "to": "24.243.255.254", "isp": "Charter", "loc":"us"},
		{"from": "27.106.0.0", "to": "27.106.127.254", "isp": "Huawei", "loc":"hk"},
		{"from": "34.0.0.0", "to": "34.191.255.254", "isp": "Google LLC", "loc":"zz"},
		{"from": "45.224.0.0", "to": "45.227.195.254", "isp": "Various BR ISPs", "loc": "br"},
		{"from": "46.250.160.0", "to": "46.250.191.254", "isp": "Huawei", "loc":"mx"},
		{"from": "49.0.200.0", "to": "49.0.255.254", "isp": "Huawei", "loc":"sg"},
		{"from": "94.74.64.0", "to": "94.74.127.254", "isp": "Huawei", "loc":"hk"},
		{"from": "101.0.0.0", "to": "119.255.255.254", "isp": "SinNet", "loc":"cn"},
		{"from": "111.119.192.0", "to": "111.119.255.254", "isp": "Huawei", "loc":"sg"},
		{"from": "119.0.0.0", "to": "101.207.255.254", "isp": "Unicom", "loc":"cn"},
		{"from": "121.91.168.0", "to": "121.91.175.254", "isp": "Huawei", "loc":"hk"},
		{"from": "122.8.0.0", "to": "122.8.255.254", "isp": "CN-ISP", "loc":"cn"},
		{"from": "122.9.0.0", "to": "122.9.255.254", "isp": "Huawei", "loc":"cn"},
		{"from": "124.243.128.0", "to": "124.243.191.254", "isp": "Huawei", "loc":"sg"},
		{"from": "150.40.128.0", "to": "150.40.255.254", "isp": "Huawei", "loc":"hk"},
		{"from": "159.138.0.0", "to": "159.138.225.254", "isp": "Huawei", "loc":"th"},
		{"from": "162.128.0.0", "to": "162.128.255.254", "isp": "Zenlayer", "loc":"sg"},
		{"from": "166.108.192.0", "to": "166.108.255.254", "isp": "Huawei", "loc":"sg"},
		{"from": "177.0.0.0", "to": "177.223.255.254", "isp": "THS", "loc":"br"},
		{"from": "183.87.32.0", "to": "183.87.159.254", "isp": "Huawei", "loc":"hk"},
		{"from": "187.180.0.0", "to": "187.183.255.254", "isp": "Claro", "loc":"br"},
		{"from": "188.239.0.0", "to": "188.239.63.254", "isp": "Huawei", "loc":"sg"},
		{"from": "189.1.192.0", "to": "189.1.255.254", "isp": "Huawei", "loc":"hk"},
		{"from": "189.76.0.0", "to": "189.127.255.254", "isp": "Hard Online", "loc":"br"},
		{"from": "190.92.192.0", "to": "190.92.255.254", "isp": "Huawei", "loc":"hk"},
		{"from": "192.124.170.0", "to": "192.124.182.254", "isp": "Relcom ", "loc":"cz"},
		{"from": "2804:0000:0000:0000:0000:0000:0000:0000", "to": "2804:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF", "isp": "Inspire", "loc":"br"},
		{"from": "2600:1f00:0000:0000:0000:0000:0000:0000", "to": "2600:1fff:ffff:ffff:ffff:ffff:ffff:ffff", "isp": "Amazon Cloud", "loc":"us"},
		{"from": "2001:4800:0000:0000:0000:0000:0000:0000", "to": "2001:4fff:ffff:ffff:ffff:ffff:ffff:ffff", "isp": "Rackspace/Google", "loc":"us"}
	]
}