1{ 2 "threshold": 100, 3 "rules": [ 4 {"func": "fromKnownBotIP", 5 "id": "botIpRange", "desc": "Common Bot IP range", 6 "bot": 50 7 }, 8 {"func": "matchesClient", "params": ["aol", "msie", "chromeold","oldedge"], 9 "id": "oldClient", "desc": "Obsolete browser version", 10 "bot": 40 11 }, 12 {"func": "matchesPlatform", "params": ["winold", "macosold"], 13 "id": "oldOS", "desc": "Obsolete platform version", 14 "bot": 40 15 }, 16 {"func": "matchesPlatform", "params": ["winsrvr", "bsd"], 17 "id": "serverOS", "desc": "Server OS", 18 "bot": 40 19 }, 20 {"func": "smallPageCount", "params": [1], 21 "id": "onePage", "desc": "Visiter viewed only a single page", 22 "bot": 40 23 }, 24 {"func": "noRecord", "params": ["log"], 25 "id": "noClient", "desc": "No client-side JS log was recorded", 26 "bot": 50 27 }, 28 {"func": "noRecord", "params": ["tck"], 29 "id": "noTicks", "desc": "No client ticks were recorded", 30 "bot": 10 31 }, 32 {"func": "noReferrer", 33 "id": "noRefs", "desc": "No referer field", 34 "bot": 30 35 }, 36 {"func": "matchLang", "params": [], 37 "id": "langMatch", "desc": "Client’s ‘Accept-Language’ header does not match the page language", 38 "bot": 30 39 }, 40 {"func": "matchesClient", "params": ["brave"], 41 "id": "susClient", "desc": "Client identifier that is popular with bot networks", 42 "bot": 10 43 }, 44 {"func": "combinationTest", "params": [["macos", "chrome"]], 45 "id": "unusualPC", "desc": "Unusual combination of platform and client", 46 "bot": 10 47 }, 48 {"func": "combinationTest", "params": [["macos", "chromeold"],["macosold", "brave"],["winold", "edge"],["winold", "brave"]], 49 "id": "suspPC", "desc": "Suspicious combination of platform and client", 50 "bot": 30 51 }, 52 {"func": "combinationTest", "params": [["macos", "msie"], ["win10", "safari"]], 53 "id": "impPC", "desc": "Impossible combination of platform and client", 54 "bot": 80 55 }, 56 {"func": "loadSpeed", "params": [3, 20], 57 "id": "speedRun", "desc": "Average time between page loads is less than 20 seconds", 58 "bot": 80 59 }, 60 {"func": "noAcceptLang", 61 "id": "noAcc", "desc": "No “Accept-Language” header", 62 "bot": 40 63 }, 64 {"func": "matchesCountry", "params": ["BR", "CN", "RU", "US", "MX", "SG", "IN", "UY"], 65 "id": "isFrom", "desc": "Location is in a known bot-spamming country.", 66 "bot": 50 67 }, 68 {"func": "matchesCountry", "params": ["ZZ"], 69 "id": "zzCtry", "desc": "Location could not be determined", 70 "bot": 20 71 } 72 ], 73 "ipRanges": [ 74 {"from": "3.0.0.0", "to": "3.255.255.254", "label": "Amazon Data Services [US]"}, 75 {"from": "8.127.0.0", "to": "8.223.255.254", "label": "Alibaba [CN]"}, 76 {"from": "24.240.0.0", "to": "24.243.255.254", "label": "Charter [US]"}, 77 {"from": "27.106.0.0", "to": "27.106.127.254", "label": "Huawei [US]"}, 78 {"from": "34.0.0.0", "to": "34.191.255.254", "label": "Google LLC"}, 79 {"from": "45.0.0.0", "to": "45.255.255.254", "label": "Various small ISPs, mostly BR"}, 80 {"from": "46.250.160.0", "to": "46.250.191.254", "label": "Huawei [MX]"}, 81 {"from": "49.0.200.0", "to": "49.0.255.254", "label": "Huawei [SG]"}, 82 {"from": "84.37.35.0", "to": "84.37.255.254", "label": "GTT.net [US]"}, 83 {"from": "94.74.64.0", "to": "94.74.127.254", "label": "Huawei [HK]"}, 84 {"from": "101.0.0.0", "to": "101.255.255.254", "label": "ChinaNet [CN]"}, 85 {"from": "110.238.96.0", "to": "110.238.127.254", "label": "Huawei [SG]"}, 86 {"from": "111.119.192.0", "to": "111.119.255.254", "label": "Huawei [SG]"}, 87 {"from": "119.0.0.0", "to": "101.207.255.254", "label": "Unicom [CN]"}, 88 {"from": "121.91.168.", "to": "121.91.175.254", "label": "Huawei [HK]"}, 89 {"from": "122.8.0.0", "to": "122.8.255.254", "label": "CN-ISP [CN]"}, 90 {"from": "122.9.0.0", "to": "122.9.255.254", "label": "Huawei [CN]"}, 91 {"from": "124.243.128.0", "to": "124.243.191.254", "label": "Huawei [SG]"}, 92 {"from": "142.147.128.0", "to": "1142.147.255.254", "label": "Web2Objects LLC [US]"}, 93 {"from": "150.40.128.0", "to": "150.40.255.254", "label": "Huawei [HK]"}, 94 {"from": "159.138.0.0", "to": "159.138.225.254", "label": "Huawei [TH]"}, 95 {"from": "162.128.0.0", "to": "162.128.255.254", "label": "Zenlayer [SG]"}, 96 {"from": "166.108.192.0", "to": "166.108.255.254", "label": "Huawei [SG]"}, 97 {"from": "177.0.0.0", "to": "177.255.255.254", "label": "BrasilNET [BR]"}, 98 {"from": "179.0.0.0", "to": "179.255.255.254", "label": "BrasilNET [BR]"}, 99 {"from": "183.87.32.0", "to": "183.87.159.254", "label": "Huawei [HK]"}, 100 {"from": "186.0.0.0", "to": "186.255.255.254", "label": "South-American ISPs (186.x)"}, 101 {"from": "187.0.0.0", "to": "187.255.255.254", "label": "South-American ISPs (187.x)"}, 102 {"from": "188.0.0.0", "to": "188.255.255.254", "label": "South-American ISPs (188.x)"}, 103 {"from": "189.0.0.0", "to": "189.255.255.254", "label": "South-American ISPs (189.x)"}, 104 {"from": "190.0.0.0", "to": "190.255.255.254", "label": "South-American ISPs (190.x)"}, 105 {"from": "192.124.170.0", "to": "192.124.182.254", "label": "Relcom [CZ]"}, 106 {"from": "195.37.0.0", "to": "195.37.255.255", "label": "DFN [DE]"}, 107 {"from": "2001:4800::::::", "to": "2001:4fff:ffff:ffff:ffff:ffff:ffff:ffff", "label": "Rackspace/Google [US]"}, 108 {"from": "2001:0ee0::::::", "to": "2001:ee3:ffff:ffff:ffff:ffff:ffff:ffff", "mask": 30, "label": "VNPT [VN]"}, 109 {"from": "2600:1f00::::::", "to": "2600:1fff:ffff:ffff:ffff:ffff:ffff:ffff", "label": "Amazon Cloud [US]"}, 110 {"from": "2804:::::::", "to": "2804:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF", "label": "Inspire [BR]"}, 111 {"from": "2a0a:4cc0::::::", "to": "2a0a:4cc0:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF", "label": "Netcup [DE]"} 112 ] 113}