xref: /plugin/botmon/config/default-config.json (revision fe13424c2bc1285396db5da5e30f667fa003fc1d)
1{
2	"threshold": 100,
3	"rules": [
4		{"func": "fromKnownBotIP",
5		 "id": "botIpRange", "desc": "Common Bot IP range",
6		 "bot": 50
7		},
8		{"func": "matchesClient", "params": ["aol","msie","ffold","chromeold","oldedge","operaold"],
9		 "id": "oldClient", "desc": "Obsolete browser version",
10		 "bot": 40
11		},
12		{"func": "matchesPlatform", "params": ["winold", "macosold", "androidold"],
13		 "id": "oldOS", "desc": "Obsolete platform version",
14		 "bot": 40
15		},
16		{"func": "matchesPlatform", "params": ["winsrvr", "bsd"],
17		 "id": "serverOS", "desc": "Server OS",
18		 "bot": 40
19		},
20		{"func": "matchesPlatform", "params": ["null"],
21		 "id": "noOS", "desc": "Unknown or missing OS information",
22		 "bot": 40
23		},
24		{"func": "smallPageCount", "params": [1],
25		 "id": "onePage", "desc": "Visiter viewed only a single page",
26		 "bot": 30
27		},
28		{"func": "noRecord", "params": ["log"],
29		 "id": "noClient", "desc": "No client-side JS log was recorded",
30		 "bot": 40
31		},
32		{"func": "noRecord", "params": ["tck"],
33		 "id": "noTicks", "desc": "No client ticks were recorded",
34		 "bot": 10
35		},
36		{"func": "noReferrer",
37		 "id": "noRefs", "desc": "No referer field",
38		 "bot": 30
39		},
40		{"func": "matchesClient", "params": ["brave","operaold","msie","webkit"],
41		 "id": "susClient", "desc": "Client identifier that is popular with bot networks",
42		 "bot": 10
43		},
44		{"func": "combinationTest", "params": [["macos","chromeold"],["macos","msie"],["winold","edge"],["winold","brave"]],
45		 "id": "suspPC", "desc": "Suspicious combination of platform and client",
46		 "bot": 30
47		},
48		{"func": "combinationTest", "params": [["macos","msie"],["win10","safari"],["macosold","brave"]],
49		 "id": "impPC", "desc": "Impossible combination of platform and client",
50		 "bot": 70
51		},
52		{"func": "loadSpeed", "params": [3, 20],
53		 "id": "speedRun", "desc": "Average time between page loads is less than 20 seconds",
54		 "bot": 80
55		},
56		{"func": "noAcceptLang",
57		 "id": "noAcc", "desc": "No “Accept-Language” header",
58		 "bot": 40
59		},
60		{"func": "matchLang", "params": [],
61		 "id": "langMatch", "desc": "Client’s ‘Accept-Language’ header does not match the page language",
62		 "bot": 30
63		},
64		{"func": "matchesClient", "params": ["whatsapp","applemsgs"],
65		 "id": "previewClient", "desc": "Client is known to only load a page preview",
66		 "bot": -90
67		}
68	]
69}