[{"data":1,"prerenderedAt":1688},["ShallowReactive",2],{"navLinks":3,"sidebar_docs_navigation_\u002Fdocs\u002Fbot-detection":64,"navigation":191,"navLinks_footer":816,"\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fknown-threats_page":829,"\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fknown-threats_surround":1342,"\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fknown-threats":1345},{"id":4,"extension":5,"links":6,"meta":61,"stem":62,"__hash__":63},"navigationMenu\u002Fnavigation.json","json",[7,52,57],{"nested":8,"label":9,"icon":10,"to":11,"children":12},true,"Docs","i-lucide-book-open","\u002Fdocs\u002Fgetting-started",[13,19,26,32,39,45],{"label":14,"icon":15,"to":11,"description":16,"github":17,"badge":18},"Getting Started","i-lucide-rocket","An introduction to help you understand the core components.","https:\u002F\u002Fgithub.com\u002FSergo706\u002Fdocshub","Start Here",{"label":20,"icon":21,"to":22,"description":23,"github":24,"badge":25},"Auth H3 Client","i-lucide-key-round","\u002Fdocs\u002Fauth-h3client","Seamlessly enforce OAuth 2.0 authentication and session management integrated directly as the client of the IAM module.","https:\u002F\u002Fgithub.com\u002FSergo706\u002Fauth-h3client","Core",{"label":27,"icon":28,"to":29,"description":30,"github":31,"badge":25},"IAM","i-lucide-shield-check","\u002Fdocs\u002Fiam","Identity and Access Management featuring granular roles, permissions, and security policies.","https:\u002F\u002Fgithub.com\u002FSergo706\u002Fauth",{"label":33,"icon":34,"to":35,"description":36,"github":37,"badge":38},"Bot Detection","i-lucide-cpu","\u002Fdocs\u002Fbot-detection","Advanced behavioral analysis and request fingerprinting to stop malicious automated traffic.","https:\u002F\u002Fgithub.com\u002FSergo706\u002Fbot-detector","Security",{"label":40,"icon":41,"to":42,"description":43,"github":44,"badge":38},"Shield Base","i-lucide-database-zap","\u002Fdocs\u002Fshield-base","CLI and programmatic toolkit for compiling offline-ready IP intelligence databases from BGP, GeoIP, Tor, FireHOL, and other public threat feeds.","https:\u002F\u002Fgithub.com\u002FSergo706\u002Fshield-base-cli",{"label":46,"icon":47,"to":48,"description":49,"github":50,"badge":51},"Utils","i-lucide-wrench","\u002Fdocs\u002Futils","A standard library of highly optimized helpers for formatting, validation, and core logic.","https:\u002F\u002Fgithub.com\u002FSergo706\u002Futils","Library",{"nested":53,"label":54,"icon":55,"to":56},false,"Blog","i-lucide-pen-line","\u002Fblog",{"nested":53,"label":58,"icon":59,"to":60},"Website","lucide:app-window-mac","https:\u002F\u002Friavzon.com",{},"navigation","gkaQ0xRGxSLrLyM3kttLe0oBwkrR1EBjlepF8LSbwF8",[65],{"title":9,"path":66,"stem":67,"children":68,"page":53},"\u002Fdocs","docs",[69],{"title":70,"path":35,"stem":71,"children":72},"Bot Detector","docs\u002Fbot-detection\u002Findex",[73,74,77,81,85,106,180,183,187],{"title":70,"path":35,"stem":71},{"title":14,"path":75,"stem":76},"\u002Fdocs\u002Fbot-detection\u002Fgetting-started","docs\u002Fbot-detection\u002F00.getting-started",{"title":78,"path":79,"stem":80},"CLI","\u002Fdocs\u002Fbot-detection\u002Fcli","docs\u002Fbot-detection\u002F01.cli",{"title":82,"path":83,"stem":84},"Data Sources","\u002Fdocs\u002Fbot-detection\u002Fdata-sources","docs\u002Fbot-detection\u002F02.data-sources",{"title":86,"path":87,"stem":88,"children":89,"page":53},"Guides","\u002Fdocs\u002Fbot-detection\u002Fguides","docs\u002Fbot-detection\u002F03.guides",[90,94,98,102],{"title":91,"path":92,"stem":93},"Custom Checkers","\u002Fdocs\u002Fbot-detection\u002Fguides\u002Fcustom","docs\u002Fbot-detection\u002F03.guides\u002FCUSTOM",{"title":95,"path":96,"stem":97},"Scheduling Database Generation","\u002Fdocs\u002Fbot-detection\u002Fguides\u002Fgenerate","docs\u002Fbot-detection\u002F03.guides\u002FGENERATE",{"title":99,"path":100,"stem":101},"Logging","\u002Fdocs\u002Fbot-detection\u002Fguides\u002Flogging","docs\u002Fbot-detection\u002F03.guides\u002FLOGGING",{"title":103,"path":104,"stem":105},"Score Modes and Reputation Healing","\u002Fdocs\u002Fbot-detection\u002Fguides\u002Fscore","docs\u002Fbot-detection\u002F03.guides\u002FSCORE",{"title":107,"path":108,"stem":109,"children":110},"Checkers","\u002Fdocs\u002Fbot-detection\u002Fcheckers","docs\u002Fbot-detection\u002F04.checkers\u002Findex",[111,112,116,120,124,128,132,136,140,144,148,152,156,160,164,168,172,176],{"title":107,"path":108,"stem":109},{"title":113,"path":114,"stem":115},"IP Validation","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fip-validation","docs\u002Fbot-detection\u002F04.checkers\u002F01.ip-validation",{"title":117,"path":118,"stem":119},"Good \u002F Bad Bot Verification","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fgood-bots","docs\u002Fbot-detection\u002F04.checkers\u002F02.good-bots",{"title":121,"path":122,"stem":123},"Browser & Device Fingerprint","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fbrowser-device","docs\u002Fbot-detection\u002F04.checkers\u002F03.browser-device",{"title":125,"path":126,"stem":127},"Locale Map","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Flocale-map","docs\u002Fbot-detection\u002F04.checkers\u002F04.locale-map",{"title":129,"path":130,"stem":131},"Known Threats","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fknown-threats","docs\u002Fbot-detection\u002F04.checkers\u002F05.known-threats",{"title":133,"path":134,"stem":135},"ASN Classification","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fasn-classification","docs\u002Fbot-detection\u002F04.checkers\u002F06.asn-classification",{"title":137,"path":138,"stem":139},"Tor Analysis","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Ftor-analysis","docs\u002Fbot-detection\u002F04.checkers\u002F07.tor-analysis",{"title":141,"path":142,"stem":143},"Timezone Consistency","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Ftimezone-consistency","docs\u002Fbot-detection\u002F04.checkers\u002F08.timezone-consistency",{"title":145,"path":146,"stem":147},"Honeypot","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fhoneypot","docs\u002Fbot-detection\u002F04.checkers\u002F09.honeypot",{"title":149,"path":150,"stem":151},"Known Bad IPs","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fknown-bad-ips","docs\u002Fbot-detection\u002F04.checkers\u002F10.known-bad-ips",{"title":153,"path":154,"stem":155},"Behavior Rate","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fbehavior-rate","docs\u002Fbot-detection\u002F04.checkers\u002F11.behavior-rate",{"title":157,"path":158,"stem":159},"Proxy \u002F ISP \u002F Cookie","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fproxy-isp-cookies","docs\u002Fbot-detection\u002F04.checkers\u002F12.proxy-isp-cookies",{"title":161,"path":162,"stem":163},"Session Coherence","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fsession-coherence","docs\u002Fbot-detection\u002F04.checkers\u002F13.session-coherence",{"title":165,"path":166,"stem":167},"Velocity Fingerprint","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fvelocity-fingerprint","docs\u002Fbot-detection\u002F04.checkers\u002F14.velocity-fingerprint",{"title":169,"path":170,"stem":171},"UA & Header Analysis","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fua-header","docs\u002Fbot-detection\u002F04.checkers\u002F15.ua-header",{"title":173,"path":174,"stem":175},"Geolocation","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fgeolocation","docs\u002Fbot-detection\u002F04.checkers\u002F16.geolocation",{"title":177,"path":178,"stem":179},"Known Bad User-Agents","\u002Fdocs\u002Fbot-detection\u002Fcheckers\u002Fknown-bad-ua","docs\u002Fbot-detection\u002F04.checkers\u002F17.known-bad-ua",{"title":38,"path":181,"stem":182},"\u002Fdocs\u002Fbot-detection\u002Fsecurity","docs\u002Fbot-detection\u002F04.security",{"title":184,"path":185,"stem":186},"API Reference","\u002Fdocs\u002Fbot-detection\u002Fapi","docs\u002Fbot-detection\u002F05.api",{"title":188,"path":189,"stem":190},"Configuration","\u002Fdocs\u002Fbot-detection\u002Fconfiguration","docs\u002Fbot-detection\u002F06.configuration",[192],{"title":9,"path":66,"stem":67,"children":193,"page":53},[194,338,373,378,556,623],{"title":20,"path":22,"stem":195,"children":196},"docs\u002Fauth-h3client\u002Findex",[197,198,207,243,269,291,294,314,317],{"title":20,"path":22,"stem":195},{"title":14,"path":199,"stem":200,"children":201},"\u002Fdocs\u002Fauth-h3client\u002Fgetting-started","docs\u002Fauth-h3client\u002F00.getting-started\u002Findex",[202,203],{"title":14,"path":199,"stem":200},{"title":204,"path":205,"stem":206},"Nuxt Module","\u002Fdocs\u002Fauth-h3client\u002Fgetting-started\u002Fnuxt","docs\u002Fauth-h3client\u002F00.getting-started\u002F00.nuxt",{"title":208,"path":209,"stem":210,"children":211},"Essentials","\u002Fdocs\u002Fauth-h3client\u002Fessentials","docs\u002Fauth-h3client\u002F01.essentials\u002Findex",[212,213,217,221,225,229,233,236,240],{"title":208,"path":209,"stem":210},{"title":214,"path":215,"stem":216},"Session Management","\u002Fdocs\u002Fauth-h3client\u002Fessentials\u002Fsession","docs\u002Fauth-h3client\u002F01.essentials\u002F00.session",{"title":218,"path":219,"stem":220},"Route Protection","\u002Fdocs\u002Fauth-h3client\u002Fessentials\u002Froute-protection","docs\u002Fauth-h3client\u002F01.essentials\u002F01.route-protection",{"title":222,"path":223,"stem":224},"CSRF Protection","\u002Fdocs\u002Fauth-h3client\u002Fessentials\u002Fcsrf","docs\u002Fauth-h3client\u002F01.essentials\u002F02.csrf",{"title":226,"path":227,"stem":228},"Auth Flows","\u002Fdocs\u002Fauth-h3client\u002Fessentials\u002Fauth-flows","docs\u002Fauth-h3client\u002F01.essentials\u002F03.auth-flows",{"title":230,"path":231,"stem":232},"OAuth and OIDC","\u002Fdocs\u002Fauth-h3client\u002Fessentials\u002Foauth","docs\u002Fauth-h3client\u002F01.essentials\u002F04.oauth",{"title":33,"path":234,"stem":235},"\u002Fdocs\u002Fauth-h3client\u002Fessentials\u002Fbot-detection","docs\u002Fauth-h3client\u002F01.essentials\u002F05.bot-detection",{"title":237,"path":238,"stem":239},"Cookies","\u002Fdocs\u002Fauth-h3client\u002Fessentials\u002Fcookies","docs\u002Fauth-h3client\u002F01.essentials\u002F06.cookies",{"title":99,"path":241,"stem":242},"\u002Fdocs\u002Fauth-h3client\u002Fessentials\u002Flogging","docs\u002Fauth-h3client\u002F01.essentials\u002F07.logging",{"title":244,"path":245,"stem":246,"children":247},"MFA","\u002Fdocs\u002Fauth-h3client\u002Fmfa","docs\u002Fauth-h3client\u002F02.mfa\u002Findex",[248,249,253,257,261,265],{"title":244,"path":245,"stem":246},{"title":250,"path":251,"stem":252},"Built-in MFA","\u002Fdocs\u002Fauth-h3client\u002Fmfa\u002Fbuilt-in-flow","docs\u002Fauth-h3client\u002F02.mfa\u002F01.built-in-flow",{"title":254,"path":255,"stem":256},"Password Reset","\u002Fdocs\u002Fauth-h3client\u002Fmfa\u002Fpassword-reset","docs\u002Fauth-h3client\u002F02.mfa\u002F02.password-reset",{"title":258,"path":259,"stem":260},"Email Change","\u002Fdocs\u002Fauth-h3client\u002Fmfa\u002Femail-change","docs\u002Fauth-h3client\u002F02.mfa\u002F03.email-change",{"title":262,"path":263,"stem":264},"Custom MFA Flow","\u002Fdocs\u002Fauth-h3client\u002Fmfa\u002Fcustom-flow","docs\u002Fauth-h3client\u002F02.mfa\u002F04.custom-flow",{"title":266,"path":267,"stem":268},"Client-Side MFA","\u002Fdocs\u002Fauth-h3client\u002Fmfa\u002Fclient-side","docs\u002Fauth-h3client\u002F02.mfa\u002F05.client-side",{"title":270,"path":271,"stem":272,"children":273},"Client-side","\u002Fdocs\u002Fauth-h3client\u002Fclient","docs\u002Fauth-h3client\u002F03.client\u002Findex",[274,275,279,283,287],{"title":270,"path":271,"stem":272},{"title":276,"path":277,"stem":278},"useAuthData","\u002Fdocs\u002Fauth-h3client\u002Fclient\u002Fuse-auth-data","docs\u002Fauth-h3client\u002F03.client\u002F00.use-auth-data",{"title":280,"path":281,"stem":282},"useMagicLink","\u002Fdocs\u002Fauth-h3client\u002Fclient\u002Fuse-magic-link","docs\u002Fauth-h3client\u002F03.client\u002F01.use-magic-link",{"title":284,"path":285,"stem":286},"executeRequest","\u002Fdocs\u002Fauth-h3client\u002Fclient\u002Fexecute-request","docs\u002Fauth-h3client\u002F03.client\u002F02.execute-request",{"title":288,"path":289,"stem":290},"getCsrfToken","\u002Fdocs\u002Fauth-h3client\u002Fclient\u002Fget-csrf-token","docs\u002Fauth-h3client\u002F03.client\u002F03.get-csrf-token",{"title":38,"path":292,"stem":293},"\u002Fdocs\u002Fauth-h3client\u002Fsecurity","docs\u002Fauth-h3client\u002F04.security",{"title":86,"path":295,"stem":296,"children":297,"page":53},"\u002Fdocs\u002Fauth-h3client\u002Fguides","docs\u002Fauth-h3client\u002F05.guides",[298,302,306,310],{"title":299,"path":300,"stem":301},"H3 and Nitro Setup","\u002Fdocs\u002Fauth-h3client\u002Fguides\u002Fh3-nitro","docs\u002Fauth-h3client\u002F05.guides\u002F00.h3-nitro",{"title":303,"path":304,"stem":305},"HMAC Inter-service Auth","\u002Fdocs\u002Fauth-h3client\u002Fguides\u002Fhmac","docs\u002Fauth-h3client\u002F05.guides\u002Fhmac",{"title":307,"path":308,"stem":309},"Image Upload","\u002Fdocs\u002Fauth-h3client\u002Fguides\u002Fimage-upload","docs\u002Fauth-h3client\u002F05.guides\u002Fimage-upload",{"title":311,"path":312,"stem":313},"mTLS Configuration","\u002Fdocs\u002Fauth-h3client\u002Fguides\u002Fmtls","docs\u002Fauth-h3client\u002F05.guides\u002Fmtls",{"title":188,"path":315,"stem":316},"\u002Fdocs\u002Fauth-h3client\u002Fconfiguration","docs\u002Fauth-h3client\u002F06.configuration",{"title":184,"path":318,"stem":319,"children":320},"\u002Fdocs\u002Fauth-h3client\u002Fapi","docs\u002Fauth-h3client\u002F07.api\u002Findex",[321,322,326,330,334],{"title":184,"path":318,"stem":319},{"title":323,"path":324,"stem":325},"Routes Reference","\u002Fdocs\u002Fauth-h3client\u002Fapi\u002Fcontrollers","docs\u002Fauth-h3client\u002F07.api\u002F00.controllers",{"title":327,"path":328,"stem":329},"Middleware Reference","\u002Fdocs\u002Fauth-h3client\u002Fapi\u002Fmiddleware","docs\u002Fauth-h3client\u002F07.api\u002F01.middleware",{"title":331,"path":332,"stem":333},"Client-side Reference","\u002Fdocs\u002Fauth-h3client\u002Fapi\u002Fcomposables","docs\u002Fauth-h3client\u002F07.api\u002F02.composables",{"title":335,"path":336,"stem":337},"Utilities","\u002Fdocs\u002Fauth-h3client\u002Fapi\u002Futilities","docs\u002Fauth-h3client\u002F07.api\u002F03.utilities",{"title":70,"path":35,"stem":71,"children":339},[340,341,342,343,344,350,370,371,372],{"title":70,"path":35,"stem":71},{"title":14,"path":75,"stem":76},{"title":78,"path":79,"stem":80},{"title":82,"path":83,"stem":84},{"title":86,"path":87,"stem":88,"children":345,"page":53},[346,347,348,349],{"title":91,"path":92,"stem":93},{"title":95,"path":96,"stem":97},{"title":99,"path":100,"stem":101},{"title":103,"path":104,"stem":105},{"title":107,"path":108,"stem":109,"children":351},[352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369],{"title":107,"path":108,"stem":109},{"title":113,"path":114,"stem":115},{"title":117,"path":118,"stem":119},{"title":121,"path":122,"stem":123},{"title":125,"path":126,"stem":127},{"title":129,"path":130,"stem":131},{"title":133,"path":134,"stem":135},{"title":137,"path":138,"stem":139},{"title":141,"path":142,"stem":143},{"title":145,"path":146,"stem":147},{"title":149,"path":150,"stem":151},{"title":153,"path":154,"stem":155},{"title":157,"path":158,"stem":159},{"title":161,"path":162,"stem":163},{"title":165,"path":166,"stem":167},{"title":169,"path":170,"stem":171},{"title":173,"path":174,"stem":175},{"title":177,"path":178,"stem":179},{"title":38,"path":181,"stem":182},{"title":184,"path":185,"stem":186},{"title":188,"path":189,"stem":190},{"title":374,"path":11,"stem":375,"children":376},"Introduction","docs\u002Fgetting-started\u002Findex",[377],{"title":374,"path":11,"stem":375},{"title":27,"path":29,"stem":379,"children":380},"docs\u002Fiam\u002Findex",[381,382,385,520,523,539,542],{"title":27,"path":29,"stem":379},{"title":14,"path":383,"stem":384},"\u002Fdocs\u002Fiam\u002Fgetting-started","docs\u002Fiam\u002F00.getting-started",{"title":208,"path":386,"stem":387,"children":388},"\u002Fdocs\u002Fiam\u002Fessentials","docs\u002Fiam\u002F01.essentials\u002Findex",[389,390,394,398,402,406,410,414,418,422,426,430,433,437,441,445,449,452,456,460,463,467,470],{"title":208,"path":386,"stem":387},{"title":391,"path":392,"stem":393},"Tokens","\u002Fdocs\u002Fiam\u002Fessentials\u002Ftokens","docs\u002Fiam\u002F01.essentials\u002F00.tokens",{"title":395,"path":396,"stem":397},"Access Tokens","\u002Fdocs\u002Fiam\u002Fessentials\u002Faccess-tokens","docs\u002Fiam\u002F01.essentials\u002F01.access-tokens",{"title":399,"path":400,"stem":401},"Refresh Tokens","\u002Fdocs\u002Fiam\u002Fessentials\u002Frefresh-tokens","docs\u002Fiam\u002F01.essentials\u002F02.refresh-tokens",{"title":403,"path":404,"stem":405},"Anomaly Detection","\u002Fdocs\u002Fiam\u002Fessentials\u002Fanomalies","docs\u002Fiam\u002F01.essentials\u002F03.anomalies",{"title":407,"path":408,"stem":409},"Signup","\u002Fdocs\u002Fiam\u002Fessentials\u002Fsignup","docs\u002Fiam\u002F01.essentials\u002F04.signup",{"title":411,"path":412,"stem":413},"Login","\u002Fdocs\u002Fiam\u002Fessentials\u002Flogin","docs\u002Fiam\u002F01.essentials\u002F05.login",{"title":415,"path":416,"stem":417},"Logout","\u002Fdocs\u002Fiam\u002Fessentials\u002Flogout","docs\u002Fiam\u002F01.essentials\u002F06.logout",{"title":419,"path":420,"stem":421},"OAuth","\u002Fdocs\u002Fiam\u002Fessentials\u002Foauth","docs\u002Fiam\u002F01.essentials\u002F07.oauth",{"title":423,"path":424,"stem":425},"Magic Links","\u002Fdocs\u002Fiam\u002Fessentials\u002Fmagic-links","docs\u002Fiam\u002F01.essentials\u002F08.magic-links",{"title":427,"path":428,"stem":429},"Emails","\u002Fdocs\u002Fiam\u002Fessentials\u002Femails","docs\u002Fiam\u002F01.essentials\u002F09.emails",{"title":244,"path":431,"stem":432},"\u002Fdocs\u002Fiam\u002Fessentials\u002Fmfa","docs\u002Fiam\u002F01.essentials\u002F10.mfa",{"title":434,"path":435,"stem":436},"Fingerprinting","\u002Fdocs\u002Fiam\u002Fessentials\u002Ffingerprinting","docs\u002Fiam\u002F01.essentials\u002F11.fingerprinting",{"title":438,"path":439,"stem":440},"Backend for Frontend","\u002Fdocs\u002Fiam\u002Fessentials\u002Fbff","docs\u002Fiam\u002F01.essentials\u002F12.bff",{"title":442,"path":443,"stem":444},"HMAC Authentication","\u002Fdocs\u002Fiam\u002Fessentials\u002Fhmac","docs\u002Fiam\u002F01.essentials\u002F13.hmac",{"title":446,"path":447,"stem":448},"XSS Protection","\u002Fdocs\u002Fiam\u002Fessentials\u002Fxss","docs\u002Fiam\u002F01.essentials\u002F14.xss",{"title":99,"path":450,"stem":451},"\u002Fdocs\u002Fiam\u002Fessentials\u002Flogging","docs\u002Fiam\u002F01.essentials\u002F15.logging",{"title":453,"path":454,"stem":455},"Rate Limiting","\u002Fdocs\u002Fiam\u002Fessentials\u002Frate-limiting","docs\u002Fiam\u002F01.essentials\u002F16.rate-limiting",{"title":457,"path":458,"stem":459},"Database","\u002Fdocs\u002Fiam\u002Fessentials\u002Fdatabase","docs\u002Fiam\u002F01.essentials\u002F17.database",{"title":237,"path":461,"stem":462},"\u002Fdocs\u002Fiam\u002Fessentials\u002Fcookies","docs\u002Fiam\u002F01.essentials\u002F18.cookies",{"title":464,"path":465,"stem":466},"Service Startup","\u002Fdocs\u002Fiam\u002Fessentials\u002Fservice","docs\u002Fiam\u002F01.essentials\u002F19.service",{"title":254,"path":468,"stem":469},"\u002Fdocs\u002Fiam\u002Fessentials\u002Fpassword-reset","docs\u002Fiam\u002F01.essentials\u002F20.password-reset",{"title":471,"path":472,"stem":473,"children":474},"API Tokens","\u002Fdocs\u002Fiam\u002Fessentials\u002Fapi","docs\u002Fiam\u002F01.essentials\u002F21.api\u002Findex",[475,476,480,484,514,517],{"title":471,"path":472,"stem":473},{"title":477,"path":478,"stem":479},"Creating Tokens","\u002Fdocs\u002Fiam\u002Fessentials\u002Fapi\u002Fcreation","docs\u002Fiam\u002F01.essentials\u002F21.api\u002F00.creation",{"title":481,"path":482,"stem":483},"Verifying Tokens","\u002Fdocs\u002Fiam\u002Fessentials\u002Fapi\u002Fverification","docs\u002Fiam\u002F01.essentials\u002F21.api\u002F01.verification",{"title":485,"path":486,"stem":487,"children":488},"Manage Tokens","\u002Fdocs\u002Fiam\u002Fessentials\u002Fapi\u002Fmanagement","docs\u002Fiam\u002F01.essentials\u002F21.api\u002F02.management\u002Findex",[489,490,494,498,502,506,510],{"title":485,"path":486,"stem":487},{"title":491,"path":492,"stem":493},"Privileges","\u002Fdocs\u002Fiam\u002Fessentials\u002Fapi\u002Fmanagement\u002Fprivilege","docs\u002Fiam\u002F01.essentials\u002F21.api\u002F02.management\u002F00.privilege",{"title":495,"path":496,"stem":497},"Revocation","\u002Fdocs\u002Fiam\u002Fessentials\u002Fapi\u002Fmanagement\u002Frevocation","docs\u002Fiam\u002F01.essentials\u002F21.api\u002F02.management\u002F01.revocation",{"title":499,"path":500,"stem":501},"Rotation","\u002Fdocs\u002Fiam\u002Fessentials\u002Fapi\u002Fmanagement\u002Frotation","docs\u002Fiam\u002F01.essentials\u002F21.api\u002F02.management\u002F02.rotation",{"title":503,"path":504,"stem":505},"IP Restriction","\u002Fdocs\u002Fiam\u002Fessentials\u002Fapi\u002Fmanagement\u002Fip-updates","docs\u002Fiam\u002F01.essentials\u002F21.api\u002F02.management\u002F03.ip-updates",{"title":507,"path":508,"stem":509},"Metadata","\u002Fdocs\u002Fiam\u002Fessentials\u002Fapi\u002Fmanagement\u002Fmetadata","docs\u002Fiam\u002F01.essentials\u002F21.api\u002F02.management\u002F04.metadata",{"title":511,"path":512,"stem":513},"Token Listing","\u002Fdocs\u002Fiam\u002Fessentials\u002Fapi\u002Fmanagement\u002Flist","docs\u002Fiam\u002F01.essentials\u002F21.api\u002F02.management\u002F05.list",{"title":453,"path":515,"stem":516},"\u002Fdocs\u002Fiam\u002Fessentials\u002Fapi\u002Frate-limiting","docs\u002Fiam\u002F01.essentials\u002F21.api\u002F03.rate-limiting",{"title":38,"path":518,"stem":519},"\u002Fdocs\u002Fiam\u002Fessentials\u002Fapi\u002Fsecurity","docs\u002Fiam\u002F01.essentials\u002F21.api\u002F04.security",{"title":38,"path":521,"stem":522},"\u002Fdocs\u002Fiam\u002Fsecurity","docs\u002Fiam\u002F02.security",{"title":86,"path":524,"stem":525,"children":526,"page":53},"\u002Fdocs\u002Fiam\u002Fguides","docs\u002Fiam\u002F03.guides",[527,531,535],{"title":528,"path":529,"stem":530},"Deployment","\u002Fdocs\u002Fiam\u002Fguides\u002Fdeployment","docs\u002Fiam\u002F03.guides\u002Fdeployment",{"title":532,"path":533,"stem":534},"Operation Scripts","\u002Fdocs\u002Fiam\u002Fguides\u002Foperation-scripts","docs\u002Fiam\u002F03.guides\u002Foperation-scripts",{"title":536,"path":537,"stem":538},"Role-Based Access Control","\u002Fdocs\u002Fiam\u002Fguides\u002Frbac","docs\u002Fiam\u002F03.guides\u002Frbac",{"title":188,"path":540,"stem":541},"\u002Fdocs\u002Fiam\u002Fconfiguration","docs\u002Fiam\u002F04.configuration",{"title":543,"path":544,"stem":545,"children":546,"page":53},"Api","\u002Fdocs\u002Fiam\u002Fapi","docs\u002Fiam\u002F05.API",[547,550,553],{"title":184,"path":548,"stem":549},"\u002Fdocs\u002Fiam\u002Fapi\u002Fapi","docs\u002Fiam\u002F05.API\u002F00.api",{"title":327,"path":551,"stem":552},"\u002Fdocs\u002Fiam\u002Fapi\u002Fmiddlewares","docs\u002Fiam\u002F05.API\u002F02.middlewares",{"title":323,"path":554,"stem":555},"\u002Fdocs\u002Fiam\u002Fapi\u002Froutes","docs\u002Fiam\u002F05.API\u002F03.routes",{"title":40,"path":42,"stem":557,"children":558},"docs\u002Fshield-base\u002Findex",[559,560,563,567,608,612,616,620],{"title":40,"path":42,"stem":557},{"title":14,"path":561,"stem":562},"\u002Fdocs\u002Fshield-base\u002Fgetting-started","docs\u002Fshield-base\u002F00.getting-started",{"title":564,"path":565,"stem":566},"CLI Reference","\u002Fdocs\u002Fshield-base\u002Fcli","docs\u002Fshield-base\u002F01.cli",{"title":82,"path":568,"stem":569,"children":570},"\u002Fdocs\u002Fshield-base\u002Fdata-sources","docs\u002Fshield-base\u002F02.data-sources\u002Findex",[571,572,576,580,584,588,592,596,600,604],{"title":82,"path":568,"stem":569},{"title":573,"path":574,"stem":575},"BGP \u002F ASN","\u002Fdocs\u002Fshield-base\u002Fdata-sources\u002Fbgp","docs\u002Fshield-base\u002F02.data-sources\u002Fbgp",{"title":577,"path":578,"stem":579},"City Geolocation","\u002Fdocs\u002Fshield-base\u002Fdata-sources\u002Fcity","docs\u002Fshield-base\u002F02.data-sources\u002Fcity",{"title":581,"path":582,"stem":583},"Country Geolocation","\u002Fdocs\u002Fshield-base\u002Fdata-sources\u002Fcountry","docs\u002Fshield-base\u002F02.data-sources\u002Fcountry",{"title":585,"path":586,"stem":587},"Verified Crawlers","\u002Fdocs\u002Fshield-base\u002Fdata-sources\u002Fcrawlers","docs\u002Fshield-base\u002F02.data-sources\u002Fcrawlers",{"title":589,"path":590,"stem":591},"Disposable Emails","\u002Fdocs\u002Fshield-base\u002Fdata-sources\u002Femail","docs\u002Fshield-base\u002F02.data-sources\u002Femail",{"title":593,"path":594,"stem":595},"FireHOL Threat Intelligence","\u002Fdocs\u002Fshield-base\u002Fdata-sources\u002Ffirehol","docs\u002Fshield-base\u002F02.data-sources\u002Ffirehol",{"title":597,"path":598,"stem":599},"Proxy Detection","\u002Fdocs\u002Fshield-base\u002Fdata-sources\u002Fproxy","docs\u002Fshield-base\u002F02.data-sources\u002Fproxy",{"title":601,"path":602,"stem":603},"Tor Nodes","\u002Fdocs\u002Fshield-base\u002Fdata-sources\u002Ftor","docs\u002Fshield-base\u002F02.data-sources\u002Ftor",{"title":605,"path":606,"stem":607},"Suspicious User-Agents","\u002Fdocs\u002Fshield-base\u002Fdata-sources\u002Fuseragent","docs\u002Fshield-base\u002F02.data-sources\u002Fuseragent",{"title":609,"path":610,"stem":611},"Programmatic Usage","\u002Fdocs\u002Fshield-base\u002Fusage","docs\u002Fshield-base\u002F03.usage",{"title":613,"path":614,"stem":615},"Custom Data Sources","\u002Fdocs\u002Fshield-base\u002Fcustom-data-sources","docs\u002Fshield-base\u002F04.custom-data-sources",{"title":617,"path":618,"stem":619},"TypeScript Types","\u002Fdocs\u002Fshield-base\u002Ftypes","docs\u002Fshield-base\u002F05.types",{"title":184,"path":621,"stem":622},"\u002Fdocs\u002Fshield-base\u002Fapi","docs\u002Fshield-base\u002F06.api",{"title":335,"path":48,"stem":624,"children":625},"docs\u002Futils\u002Findex",[626,627,644,677,774],{"title":335,"path":48,"stem":624},{"title":628,"path":629,"stem":630,"children":631,"page":53},"Eslint","\u002Fdocs\u002Futils\u002Feslint","docs\u002Futils\u002Feslint",[632,636,640],{"title":633,"path":634,"stem":635},"React Config","\u002Fdocs\u002Futils\u002Feslint\u002Freact","docs\u002Futils\u002Feslint\u002Freact",{"title":637,"path":638,"stem":639},"TypeScript Config","\u002Fdocs\u002Futils\u002Feslint\u002Ftypescript","docs\u002Futils\u002Feslint\u002Ftypescript",{"title":641,"path":642,"stem":643},"Vue Config","\u002Fdocs\u002Futils\u002Feslint\u002Fvue","docs\u002Futils\u002Feslint\u002Fvue",{"title":645,"path":646,"stem":647,"children":648,"page":53},"Server","\u002Fdocs\u002Futils\u002Fserver","docs\u002Futils\u002Fserver",[649,653,657,661,665,669,673],{"title":650,"path":651,"stem":652},"Encryption","\u002Fdocs\u002Futils\u002Fserver\u002Fencryption","docs\u002Futils\u002Fserver\u002Fencryption",{"title":654,"path":655,"stem":656},"Path Resolver","\u002Fdocs\u002Futils\u002Fserver\u002Fpathresolver","docs\u002Futils\u002Fserver\u002FpathResolver",{"title":658,"path":659,"stem":660},"File Replacements","\u002Fdocs\u002Futils\u002Fserver\u002Freplace","docs\u002Futils\u002Fserver\u002Freplace",{"title":662,"path":663,"stem":664},"run","\u002Fdocs\u002Futils\u002Fserver\u002Frun","docs\u002Futils\u002Fserver\u002Frun",{"title":666,"path":667,"stem":668},"scheduleTask","\u002Fdocs\u002Futils\u002Fserver\u002Fscheduletask","docs\u002Futils\u002Fserver\u002FscheduleTask",{"title":670,"path":671,"stem":672},"spawnRun","\u002Fdocs\u002Futils\u002Fserver\u002Fspawnrun","docs\u002Futils\u002Fserver\u002FspawnRun",{"title":674,"path":675,"stem":676},"uploadCsv","\u002Fdocs\u002Futils\u002Fserver\u002Fuploadcsv","docs\u002Futils\u002Fserver\u002FuploadCsv",{"title":678,"path":679,"stem":680,"children":681,"page":53},"Shared","\u002Fdocs\u002Futils\u002Fshared","docs\u002Futils\u002Fshared",[682,686,690,694,698,702,706,710,714,718,722,726,730,734,738,742,746,750,754,758,762,766,770],{"title":683,"path":684,"stem":685},"BatchQueue","\u002Fdocs\u002Futils\u002Fshared\u002Fbatchqueue","docs\u002Futils\u002Fshared\u002FbatchQueue",{"title":687,"path":688,"stem":689},"capitalize","\u002Fdocs\u002Futils\u002Fshared\u002Fcapitalize","docs\u002Futils\u002Fshared\u002Fcapitalize",{"title":691,"path":692,"stem":693},"chunkProcess","\u002Fdocs\u002Futils\u002Fshared\u002Fchunkprocess","docs\u002Futils\u002Fshared\u002FchunkProcess",{"title":695,"path":696,"stem":697},"cleanObject","\u002Fdocs\u002Futils\u002Fshared\u002Fcleanobject","docs\u002Futils\u002Fshared\u002FcleanObject",{"title":699,"path":700,"stem":701},"createConfigManager","\u002Fdocs\u002Futils\u002Fshared\u002Fconfigurationdefiner","docs\u002Futils\u002Fshared\u002FconfigurationDefiner",{"title":703,"path":704,"stem":705},"debounce","\u002Fdocs\u002Futils\u002Fshared\u002Fdebounce","docs\u002Futils\u002Fshared\u002Fdebounce",{"title":707,"path":708,"stem":709},"ensureArray","\u002Fdocs\u002Futils\u002Fshared\u002Fensurearray","docs\u002Futils\u002Fshared\u002FensureArray",{"title":711,"path":712,"stem":713},"fetchWithRetry","\u002Fdocs\u002Futils\u002Fshared\u002Ffetchwithretry","docs\u002Futils\u002Fshared\u002FfetchWithRetry",{"title":715,"path":716,"stem":717},"filterEmptyValues","\u002Fdocs\u002Futils\u002Fshared\u002Ffilteremptyvalues","docs\u002Futils\u002Fshared\u002FfilterEmptyValues",{"title":719,"path":720,"stem":721},"findStringsInObject","\u002Fdocs\u002Futils\u002Fshared\u002Ffindobjectvalues","docs\u002Futils\u002Fshared\u002FfindObjectValues",{"title":723,"path":724,"stem":725},"fisherYatesShuffle","\u002Fdocs\u002Futils\u002Fshared\u002Ffisheryatesshuffle","docs\u002Futils\u002Fshared\u002FfisherYatesShuffle",{"title":727,"path":728,"stem":729},"getRandomImage","\u002Fdocs\u002Futils\u002Fshared\u002Fgetrandomimage","docs\u002Futils\u002Fshared\u002FgetRandomImage",{"title":731,"path":732,"stem":733},"isObjectHasValues","\u002Fdocs\u002Futils\u002Fshared\u002Fisobjecthasvalues","docs\u002Futils\u002Fshared\u002FisObjectHasValues",{"title":735,"path":736,"stem":737},"isAsyncOrPromise","\u002Fdocs\u002Futils\u002Fshared\u002Fispromise","docs\u002Futils\u002Fshared\u002FisPromise",{"title":739,"path":740,"stem":741},"MiniCache","\u002Fdocs\u002Futils\u002Fshared\u002Fminicache","docs\u002Futils\u002Fshared\u002FminiCache",{"title":743,"path":744,"stem":745},"parseCookies","\u002Fdocs\u002Futils\u002Fshared\u002Fparserawcookies","docs\u002Futils\u002Fshared\u002FparseRawCookies",{"title":747,"path":748,"stem":749},"safeAction","\u002Fdocs\u002Futils\u002Fshared\u002Fpromiselocker","docs\u002Futils\u002Fshared\u002FpromiseLocker",{"title":751,"path":752,"stem":753},"Random","\u002Fdocs\u002Futils\u002Fshared\u002Frandom","docs\u002Futils\u002Fshared\u002Frandom",{"title":755,"path":756,"stem":757},"range","\u002Fdocs\u002Futils\u002Fshared\u002Frange","docs\u002Futils\u002Fshared\u002Frange",{"title":759,"path":760,"stem":761},"rateLimiters","\u002Fdocs\u002Futils\u002Fshared\u002Fratelimiters","docs\u002Futils\u002Fshared\u002FrateLimiters",{"title":763,"path":764,"stem":765},"safeObjectMerge","\u002Fdocs\u002Futils\u002Fshared\u002Fsafemerge","docs\u002Futils\u002Fshared\u002FsafeMerge",{"title":767,"path":768,"stem":769},"textTruncation","\u002Fdocs\u002Futils\u002Fshared\u002Ftexttruncation","docs\u002Futils\u002Fshared\u002FtextTruncation",{"title":771,"path":772,"stem":773},"validateZodSchema","\u002Fdocs\u002Futils\u002Fshared\u002Fvalidatezodschema","docs\u002Futils\u002Fshared\u002FvalidateZodSchema",{"title":775,"path":776,"stem":777,"children":778},"Utility Types","\u002Fdocs\u002Futils\u002Ftypes","docs\u002Futils\u002Ftypes\u002Findex",[779,780,784,788,792,796,800,804,808,812],{"title":775,"path":776,"stem":777},{"title":781,"path":782,"stem":783},"Brand","\u002Fdocs\u002Futils\u002Ftypes\u002Fbrand","docs\u002Futils\u002Ftypes\u002FBrand",{"title":785,"path":786,"stem":787},"DeepPartial","\u002Fdocs\u002Futils\u002Ftypes\u002Fdeeppartial","docs\u002Futils\u002Ftypes\u002FDeepPartial",{"title":789,"path":790,"stem":791},"Merge","\u002Fdocs\u002Futils\u002Ftypes\u002Fmerge","docs\u002Futils\u002Ftypes\u002FMerge",{"title":793,"path":794,"stem":795},"NonNullable","\u002Fdocs\u002Futils\u002Ftypes\u002Fnonnullable","docs\u002Futils\u002Ftypes\u002FNonNullable",{"title":797,"path":798,"stem":799},"Prettify","\u002Fdocs\u002Futils\u002Ftypes\u002Fprettify","docs\u002Futils\u002Ftypes\u002FPrettify",{"title":801,"path":802,"stem":803},"PromiseType","\u002Fdocs\u002Futils\u002Ftypes\u002Fpromisetype","docs\u002Futils\u002Ftypes\u002FPromiseType",{"title":805,"path":806,"stem":807},"RequireKeys","\u002Fdocs\u002Futils\u002Ftypes\u002Frequirekeys","docs\u002Futils\u002Ftypes\u002FRequireKeys",{"title":809,"path":810,"stem":811},"StandardResponse","\u002Fdocs\u002Futils\u002Ftypes\u002Fstandardresponse","docs\u002Futils\u002Ftypes\u002FStandardResponse",{"title":813,"path":814,"stem":815},"ValueOf","\u002Fdocs\u002Futils\u002Ftypes\u002Fvalueof","docs\u002Futils\u002Ftypes\u002FValueOf",{"id":4,"extension":5,"links":817,"meta":828,"stem":62,"__hash__":63},[818,826,827],{"nested":8,"label":9,"icon":10,"to":11,"children":819},[820,821,822,823,824,825],{"label":14,"icon":15,"to":11,"description":16,"github":17,"badge":18},{"label":20,"icon":21,"to":22,"description":23,"github":24,"badge":25},{"label":27,"icon":28,"to":29,"description":30,"github":31,"badge":25},{"label":33,"icon":34,"to":35,"description":36,"github":37,"badge":38},{"label":40,"icon":41,"to":42,"description":43,"github":44,"badge":38},{"label":46,"icon":47,"to":48,"description":49,"github":50,"badge":51},{"nested":53,"label":54,"icon":55,"to":56},{"nested":53,"label":58,"icon":59,"to":60},{},{"id":830,"title":129,"body":831,"description":1334,"extension":1335,"icon":1336,"meta":1337,"module":1338,"navigation":8,"path":130,"rawbody":1339,"seo":1340,"stem":131,"__hash__":1341},"docs\u002Fdocs\u002Fbot-detection\u002F04.checkers\u002F05.known-threats.md",{"type":832,"value":833,"toc":1329},"minimark",[834,846,849,852,857,860,914,917,919,922,1155,1166,1215,1217,1221,1291,1293,1311,1325],[835,836,837,838,845],"p",{},"The known threats checker matches the client IP against compiled ",[839,840,844],"a",{"href":841,"rel":842},"https:\u002F\u002Fiplists.firehol.org\u002F",[843],"nofollow","FireHOL"," threat intelligence feeds. FireHOL aggregates data from dozens of public sources covering active attackers, scanning infrastructure, abuse participants, and anonymity networks. A match in any feed adds a penalty weighted by that feed's severity level.",[835,847,848],{},"This checker runs in the cheap phase with no network I\u002FO, all threat feeds are pre-compiled into MMDB databases loaded at startup.",[850,851],"hr",{},[853,854,856],"h2",{"id":855},"how-it-works","How It Works",[835,858,859],{},"The middleware maintains five MMDB databases compiled from the FireHOL feed collection:",[861,862,863,882,890,898,906],"ul",{},[864,865,866,873,874,877,878,881],"li",{},[867,868,869],"strong",{},[870,871,872],"code",{},"firehol_anonymous.mmdb",": VPNs, open proxies, and Tor exit nodes not already in the Tor database. A match sets ",[870,875,876],{},"ctx.anon = true"," and applies the ",[870,879,880],{},"anonymiseNetwork"," penalty.",[864,883,884,889],{},[867,885,886],{},[870,887,888],{},"firehol_l1.mmdb",": Confirmed active attack sources. FireHOL maintains this list with a strict no-false-positives policy.",[864,891,892,897],{},[867,893,894],{},[870,895,896],{},"firehol_l2.mmdb",": Current abuse participants: scanners, brute-force sources, spam senders.",[864,899,900,905],{},[867,901,902],{},[870,903,904],{},"firehol_l3.mmdb",": Broader web threat aggregation combining multiple exploit and scanning lists.",[864,907,908,913],{},[867,909,910],{},[870,911,912],{},"firehol_l4.mmdb",": Extended watch list with relaxed inclusion criteria. Higher false-positive rate than levels 1–3.",[835,915,916],{},"Each level applies a separate penalty. Multiple levels can fire for the same IP if it appears across feeds.",[850,918],{},[853,920,188],{"id":921},"configuration",[923,924,930],"pre",{"className":925,"code":926,"filename":927,"language":928,"meta":929,"style":929},"language-ts shiki shiki-themes light-plus light-plus dracula","await defineConfiguration({\n  store: { main: { driver: 'sqlite', name: '.\u002Fbot-detector.db' } },\n  checkers: {\n    enableKnownThreatsDetections: {\n      enable: true,\n      penalties: {\n        anonymiseNetwork: 20,\n        threatLevels: {\n          criticalLevel1: 40,\n          currentAttacksLevel2: 30,\n          threatLevel3: 20,\n          threatLevel4: 10,\n        },\n      },\n    },\n  },\n})\n","server.ts","ts","",[870,931,932,949,1004,1015,1025,1040,1050,1064,1074,1087,1100,1112,1125,1131,1137,1143,1149],{"__ignoreMap":929},[933,934,937,941,945],"span",{"class":935,"line":936},"line",1,[933,938,940],{"class":939},"sZ328","await",[933,942,944],{"class":943},"sHOzp"," defineConfiguration",[933,946,948],{"class":947},"sDd4n","({\n",[933,950,952,956,960,963,966,968,970,973,975,979,983,986,989,992,994,996,999,1001],{"class":935,"line":951},2,[933,953,955],{"class":954},"sjsA6","  store",[933,957,959],{"class":958},"s34zl",":",[933,961,962],{"class":947}," { ",[933,964,965],{"class":954},"main",[933,967,959],{"class":958},[933,969,962],{"class":947},[933,971,972],{"class":954},"driver",[933,974,959],{"class":958},[933,976,978],{"class":977},"sFkSl"," '",[933,980,982],{"class":981},"sFB1V","sqlite",[933,984,985],{"class":977},"'",[933,987,988],{"class":947},", ",[933,990,991],{"class":954},"name",[933,993,959],{"class":958},[933,995,978],{"class":977},[933,997,998],{"class":981},".\u002Fbot-detector.db",[933,1000,985],{"class":977},[933,1002,1003],{"class":947}," } },\n",[933,1005,1007,1010,1012],{"class":935,"line":1006},3,[933,1008,1009],{"class":954},"  checkers",[933,1011,959],{"class":958},[933,1013,1014],{"class":947}," {\n",[933,1016,1018,1021,1023],{"class":935,"line":1017},4,[933,1019,1020],{"class":954},"    enableKnownThreatsDetections",[933,1022,959],{"class":958},[933,1024,1014],{"class":947},[933,1026,1028,1031,1033,1037],{"class":935,"line":1027},5,[933,1029,1030],{"class":954},"      enable",[933,1032,959],{"class":958},[933,1034,1036],{"class":1035},"sjR7W"," true",[933,1038,1039],{"class":947},",\n",[933,1041,1043,1046,1048],{"class":935,"line":1042},6,[933,1044,1045],{"class":954},"      penalties",[933,1047,959],{"class":958},[933,1049,1014],{"class":947},[933,1051,1053,1056,1058,1062],{"class":935,"line":1052},7,[933,1054,1055],{"class":954},"        anonymiseNetwork",[933,1057,959],{"class":958},[933,1059,1061],{"class":1060},"spgvN"," 20",[933,1063,1039],{"class":947},[933,1065,1067,1070,1072],{"class":935,"line":1066},8,[933,1068,1069],{"class":954},"        threatLevels",[933,1071,959],{"class":958},[933,1073,1014],{"class":947},[933,1075,1077,1080,1082,1085],{"class":935,"line":1076},9,[933,1078,1079],{"class":954},"          criticalLevel1",[933,1081,959],{"class":958},[933,1083,1084],{"class":1060}," 40",[933,1086,1039],{"class":947},[933,1088,1090,1093,1095,1098],{"class":935,"line":1089},10,[933,1091,1092],{"class":954},"          currentAttacksLevel2",[933,1094,959],{"class":958},[933,1096,1097],{"class":1060}," 30",[933,1099,1039],{"class":947},[933,1101,1103,1106,1108,1110],{"class":935,"line":1102},11,[933,1104,1105],{"class":954},"          threatLevel3",[933,1107,959],{"class":958},[933,1109,1061],{"class":1060},[933,1111,1039],{"class":947},[933,1113,1115,1118,1120,1123],{"class":935,"line":1114},12,[933,1116,1117],{"class":954},"          threatLevel4",[933,1119,959],{"class":958},[933,1121,1122],{"class":1060}," 10",[933,1124,1039],{"class":947},[933,1126,1128],{"class":935,"line":1127},13,[933,1129,1130],{"class":947},"        },\n",[933,1132,1134],{"class":935,"line":1133},14,[933,1135,1136],{"class":947},"      },\n",[933,1138,1140],{"class":935,"line":1139},15,[933,1141,1142],{"class":947},"    },\n",[933,1144,1146],{"class":935,"line":1145},16,[933,1147,1148],{"class":947},"  },\n",[933,1150,1152],{"class":935,"line":1151},17,[933,1153,1154],{"class":947},"})\n",[835,1156,1157,1158,1161,1162,1165],{},"All weights live inside the ",[870,1159,1160],{},"penalties: {}"," sub-object. The four FireHOL level penalties live in the nested ",[870,1163,1164],{},"penalties.threatLevels"," object.",[1167,1168,1169,1180,1189,1198,1206],"field-group",{},[1170,1171,1173],"field",{"name":880,"type":1172},"number",[835,1174,1175,1176,1179],{},"Penalty for IPs matched in the FireHOL anonymity feed (VPNs, open proxies). Default: ",[870,1177,1178],{},"20",".",[1170,1181,1183],{"name":1182,"type":1172},"threatLevels.criticalLevel1",[835,1184,1185,1186,1179],{},"Penalty for IPs in FireHOL Level 1 (confirmed active attack sources). Default: ",[870,1187,1188],{},"40",[1170,1190,1192],{"name":1191,"type":1172},"threatLevels.currentAttacksLevel2",[835,1193,1194,1195,1179],{},"Penalty for IPs in FireHOL Level 2 (current scanners, brute-force, spam). Default: ",[870,1196,1197],{},"30",[1170,1199,1201],{"name":1200,"type":1172},"threatLevels.threatLevel3",[835,1202,1203,1204,1179],{},"Penalty for IPs in FireHOL Level 3 (broader web threat aggregation). Default: ",[870,1205,1178],{},[1170,1207,1209],{"name":1208,"type":1172},"threatLevels.threatLevel4",[835,1210,1211,1212,1179],{},"Penalty for IPs in FireHOL Level 4 (extended watch list, higher false-positive rate). Default: ",[870,1213,1214],{},"10",[850,1216],{},[853,1218,1220],{"id":1219},"reason-codes","Reason Codes",[1222,1223,1224,1237],"table",{},[1225,1226,1227],"thead",{},[1228,1229,1230,1234],"tr",{},[1231,1232,1233],"th",{},"Code",[1231,1235,1236],{},"Trigger",[1238,1239,1240,1251,1261,1271,1281],"tbody",{},[1228,1241,1242,1248],{},[1243,1244,1245],"td",{},[870,1246,1247],{},"ANONYMITY_NETWORK",[1243,1249,1250],{},"IP matched in the FireHOL anonymity feed.",[1228,1252,1253,1258],{},[1243,1254,1255],{},[870,1256,1257],{},"FIREHOL_L1_THREAT",[1243,1259,1260],{},"IP matched in FireHOL Level 1 (confirmed attackers).",[1228,1262,1263,1268],{},[1243,1264,1265],{},[870,1266,1267],{},"FIREHOL_L2_THREAT",[1243,1269,1270],{},"IP matched in FireHOL Level 2 (active abuse).",[1228,1272,1273,1278],{},[1243,1274,1275],{},[870,1276,1277],{},"FIREHOL_L3_THREAT",[1243,1279,1280],{},"IP matched in FireHOL Level 3 (web threats).",[1228,1282,1283,1288],{},[1243,1284,1285],{},[870,1286,1287],{},"FIREHOL_L4_THREAT",[1243,1289,1290],{},"IP matched in FireHOL Level 4 (watch list).",[850,1292],{},[1294,1295,1296],"tip",{},[835,1297,1298,1299,1302,1303,1306,1307,1310],{},"Run ",[870,1300,1301],{},"bot-detector init"," to download and compile the FireHOL feeds. The databases are written to ",[870,1304,1305],{},"_data-sources\u002F"," inside the package directory and reloaded automatically when the files change on disk. Re-run ",[870,1308,1309],{},"init"," periodically to keep the feeds current.",[1312,1313,1314],"warning",{},[835,1315,1316,1317,1320,1321,1324],{},"A Level 4 match on its own is a weak signal. Many residential IPs occasionally appear in Level 4 due to its relaxed inclusion criteria. Consider combining ",[870,1318,1319],{},"threatLevel4"," with other signals rather than raising it to ",[870,1322,1323],{},"banScore"," in isolation.",[1326,1327,1328],"style",{},"html pre.shiki code .sZ328, html code.shiki .sZ328{--shiki-light:#AF00DB;--shiki-default:#AF00DB;--shiki-dark:#FF79C6}html pre.shiki code .sHOzp, html code.shiki .sHOzp{--shiki-light:#795E26;--shiki-default:#795E26;--shiki-dark:#50FA7B}html pre.shiki code .sDd4n, html code.shiki .sDd4n{--shiki-light:#000000;--shiki-default:#000000;--shiki-dark:#F8F8F2}html pre.shiki code .sjsA6, html code.shiki .sjsA6{--shiki-light:#001080;--shiki-default:#001080;--shiki-dark:#F8F8F2}html pre.shiki code .s34zl, html code.shiki .s34zl{--shiki-light:#001080;--shiki-default:#001080;--shiki-dark:#FF79C6}html pre.shiki code .sFkSl, html code.shiki .sFkSl{--shiki-light:#A31515;--shiki-default:#A31515;--shiki-dark:#E9F284}html pre.shiki code .sFB1V, html code.shiki .sFB1V{--shiki-light:#A31515;--shiki-default:#A31515;--shiki-dark:#F1FA8C}html pre.shiki code .sjR7W, html code.shiki .sjR7W{--shiki-light:#0000FF;--shiki-default:#0000FF;--shiki-dark:#BD93F9}html pre.shiki code .spgvN, html code.shiki .spgvN{--shiki-light:#098658;--shiki-default:#098658;--shiki-dark:#BD93F9}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":929,"searchDepth":951,"depth":951,"links":1330},[1331,1332,1333],{"id":855,"depth":951,"text":856},{"id":921,"depth":951,"text":188},{"id":1219,"depth":951,"text":1220},"Checks the client IP against FireHOL threat intelligence feeds and anonymity network lists.","md","i-lucide-shield-alert",{},null,"---\ntitle: Known Threats\ndescription: Checks the client IP against FireHOL threat intelligence feeds and anonymity network lists.\nicon: i-lucide-shield-alert\n---\n\nThe known threats checker matches the client IP against compiled [FireHOL](https:\u002F\u002Fiplists.firehol.org\u002F) threat intelligence feeds. FireHOL aggregates data from dozens of public sources covering active attackers, scanning infrastructure, abuse participants, and anonymity networks. A match in any feed adds a penalty weighted by that feed's severity level.\n\nThis checker runs in the cheap phase with no network I\u002FO, all threat feeds are pre-compiled into MMDB databases loaded at startup.\n\n---\n\n## How It Works\n\nThe middleware maintains five MMDB databases compiled from the FireHOL feed collection:\n\n- **`firehol_anonymous.mmdb`**: VPNs, open proxies, and Tor exit nodes not already in the Tor database. A match sets `ctx.anon = true` and applies the `anonymiseNetwork` penalty.\n- **`firehol_l1.mmdb`**: Confirmed active attack sources. FireHOL maintains this list with a strict no-false-positives policy.\n- **`firehol_l2.mmdb`**: Current abuse participants: scanners, brute-force sources, spam senders.\n- **`firehol_l3.mmdb`**: Broader web threat aggregation combining multiple exploit and scanning lists.\n- **`firehol_l4.mmdb`**: Extended watch list with relaxed inclusion criteria. Higher false-positive rate than levels 1–3.\n\nEach level applies a separate penalty. Multiple levels can fire for the same IP if it appears across feeds.\n\n---\n\n## Configuration\n\n```ts [server.ts]\nawait defineConfiguration({\n  store: { main: { driver: 'sqlite', name: '.\u002Fbot-detector.db' } },\n  checkers: {\n    enableKnownThreatsDetections: {\n      enable: true,\n      penalties: {\n        anonymiseNetwork: 20,\n        threatLevels: {\n          criticalLevel1: 40,\n          currentAttacksLevel2: 30,\n          threatLevel3: 20,\n          threatLevel4: 10,\n        },\n      },\n    },\n  },\n})\n```\n\nAll weights live inside the `penalties: {}` sub-object. The four FireHOL level penalties live in the nested `penalties.threatLevels` object.\n\n::field-group\n::field{name=\"anonymiseNetwork\" type=\"number\"}\nPenalty for IPs matched in the FireHOL anonymity feed (VPNs, open proxies). Default: `20`.\n::\n\n::field{name=\"threatLevels.criticalLevel1\" type=\"number\"}\nPenalty for IPs in FireHOL Level 1 (confirmed active attack sources). Default: `40`.\n::\n\n::field{name=\"threatLevels.currentAttacksLevel2\" type=\"number\"}\nPenalty for IPs in FireHOL Level 2 (current scanners, brute-force, spam). Default: `30`.\n::\n\n::field{name=\"threatLevels.threatLevel3\" type=\"number\"}\nPenalty for IPs in FireHOL Level 3 (broader web threat aggregation). Default: `20`.\n::\n\n::field{name=\"threatLevels.threatLevel4\" type=\"number\"}\nPenalty for IPs in FireHOL Level 4 (extended watch list, higher false-positive rate). Default: `10`.\n::\n::\n\n---\n\n## Reason Codes\n\n| Code | Trigger |\n| --- | --- |\n| `ANONYMITY_NETWORK` | IP matched in the FireHOL anonymity feed. |\n| `FIREHOL_L1_THREAT` | IP matched in FireHOL Level 1 (confirmed attackers). |\n| `FIREHOL_L2_THREAT` | IP matched in FireHOL Level 2 (active abuse). |\n| `FIREHOL_L3_THREAT` | IP matched in FireHOL Level 3 (web threats). |\n| `FIREHOL_L4_THREAT` | IP matched in FireHOL Level 4 (watch list). |\n\n---\n\n::tip\nRun `bot-detector init` to download and compile the FireHOL feeds. The databases are written to `_data-sources\u002F` inside the package directory and reloaded automatically when the files change on disk. Re-run `init` periodically to keep the feeds current.\n::\n\n::warning\nA Level 4 match on its own is a weak signal. Many residential IPs occasionally appear in Level 4 due to its relaxed inclusion criteria. Consider combining `threatLevel4` with other signals rather than raising it to `banScore` in isolation.\n::\n",{"title":129,"description":1334},"ZufoU9yxI-5X3hbThbOZ-17oSwAAkijU27lLaROJyDc",[1343,1344],{"title":125,"path":126,"stem":127,"children":-1},{"title":133,"path":134,"stem":135,"children":-1},{"id":830,"title":129,"body":1346,"description":1334,"extension":1335,"icon":1336,"meta":1686,"module":1338,"navigation":8,"path":130,"rawbody":1339,"seo":1687,"stem":131,"__hash__":1341},{"type":832,"value":1347,"toc":1681},[1348,1353,1355,1357,1359,1361,1397,1399,1401,1403,1565,1571,1603,1605,1607,1659,1661,1671,1679],[835,1349,837,1350,845],{},[839,1351,844],{"href":841,"rel":1352},[843],[835,1354,848],{},[850,1356],{},[853,1358,856],{"id":855},[835,1360,859],{},[861,1362,1363,1373,1379,1385,1391],{},[864,1364,1365,873,1369,877,1371,881],{},[867,1366,1367],{},[870,1368,872],{},[870,1370,876],{},[870,1372,880],{},[864,1374,1375,889],{},[867,1376,1377],{},[870,1378,888],{},[864,1380,1381,897],{},[867,1382,1383],{},[870,1384,896],{},[864,1386,1387,905],{},[867,1388,1389],{},[870,1390,904],{},[864,1392,1393,913],{},[867,1394,1395],{},[870,1396,912],{},[835,1398,916],{},[850,1400],{},[853,1402,188],{"id":921},[923,1404,1405],{"className":925,"code":926,"filename":927,"language":928,"meta":929,"style":929},[870,1406,1407,1415,1453,1461,1469,1479,1487,1497,1505,1515,1525,1535,1545,1549,1553,1557,1561],{"__ignoreMap":929},[933,1408,1409,1411,1413],{"class":935,"line":936},[933,1410,940],{"class":939},[933,1412,944],{"class":943},[933,1414,948],{"class":947},[933,1416,1417,1419,1421,1423,1425,1427,1429,1431,1433,1435,1437,1439,1441,1443,1445,1447,1449,1451],{"class":935,"line":951},[933,1418,955],{"class":954},[933,1420,959],{"class":958},[933,1422,962],{"class":947},[933,1424,965],{"class":954},[933,1426,959],{"class":958},[933,1428,962],{"class":947},[933,1430,972],{"class":954},[933,1432,959],{"class":958},[933,1434,978],{"class":977},[933,1436,982],{"class":981},[933,1438,985],{"class":977},[933,1440,988],{"class":947},[933,1442,991],{"class":954},[933,1444,959],{"class":958},[933,1446,978],{"class":977},[933,1448,998],{"class":981},[933,1450,985],{"class":977},[933,1452,1003],{"class":947},[933,1454,1455,1457,1459],{"class":935,"line":1006},[933,1456,1009],{"class":954},[933,1458,959],{"class":958},[933,1460,1014],{"class":947},[933,1462,1463,1465,1467],{"class":935,"line":1017},[933,1464,1020],{"class":954},[933,1466,959],{"class":958},[933,1468,1014],{"class":947},[933,1470,1471,1473,1475,1477],{"class":935,"line":1027},[933,1472,1030],{"class":954},[933,1474,959],{"class":958},[933,1476,1036],{"class":1035},[933,1478,1039],{"class":947},[933,1480,1481,1483,1485],{"class":935,"line":1042},[933,1482,1045],{"class":954},[933,1484,959],{"class":958},[933,1486,1014],{"class":947},[933,1488,1489,1491,1493,1495],{"class":935,"line":1052},[933,1490,1055],{"class":954},[933,1492,959],{"class":958},[933,1494,1061],{"class":1060},[933,1496,1039],{"class":947},[933,1498,1499,1501,1503],{"class":935,"line":1066},[933,1500,1069],{"class":954},[933,1502,959],{"class":958},[933,1504,1014],{"class":947},[933,1506,1507,1509,1511,1513],{"class":935,"line":1076},[933,1508,1079],{"class":954},[933,1510,959],{"class":958},[933,1512,1084],{"class":1060},[933,1514,1039],{"class":947},[933,1516,1517,1519,1521,1523],{"class":935,"line":1089},[933,1518,1092],{"class":954},[933,1520,959],{"class":958},[933,1522,1097],{"class":1060},[933,1524,1039],{"class":947},[933,1526,1527,1529,1531,1533],{"class":935,"line":1102},[933,1528,1105],{"class":954},[933,1530,959],{"class":958},[933,1532,1061],{"class":1060},[933,1534,1039],{"class":947},[933,1536,1537,1539,1541,1543],{"class":935,"line":1114},[933,1538,1117],{"class":954},[933,1540,959],{"class":958},[933,1542,1122],{"class":1060},[933,1544,1039],{"class":947},[933,1546,1547],{"class":935,"line":1127},[933,1548,1130],{"class":947},[933,1550,1551],{"class":935,"line":1133},[933,1552,1136],{"class":947},[933,1554,1555],{"class":935,"line":1139},[933,1556,1142],{"class":947},[933,1558,1559],{"class":935,"line":1145},[933,1560,1148],{"class":947},[933,1562,1563],{"class":935,"line":1151},[933,1564,1154],{"class":947},[835,1566,1157,1567,1161,1569,1165],{},[870,1568,1160],{},[870,1570,1164],{},[1167,1572,1573,1579,1585,1591,1597],{},[1170,1574,1575],{"name":880,"type":1172},[835,1576,1175,1577,1179],{},[870,1578,1178],{},[1170,1580,1581],{"name":1182,"type":1172},[835,1582,1185,1583,1179],{},[870,1584,1188],{},[1170,1586,1587],{"name":1191,"type":1172},[835,1588,1194,1589,1179],{},[870,1590,1197],{},[1170,1592,1593],{"name":1200,"type":1172},[835,1594,1203,1595,1179],{},[870,1596,1178],{},[1170,1598,1599],{"name":1208,"type":1172},[835,1600,1211,1601,1179],{},[870,1602,1214],{},[850,1604],{},[853,1606,1220],{"id":1219},[1222,1608,1609,1617],{},[1225,1610,1611],{},[1228,1612,1613,1615],{},[1231,1614,1233],{},[1231,1616,1236],{},[1238,1618,1619,1627,1635,1643,1651],{},[1228,1620,1621,1625],{},[1243,1622,1623],{},[870,1624,1247],{},[1243,1626,1250],{},[1228,1628,1629,1633],{},[1243,1630,1631],{},[870,1632,1257],{},[1243,1634,1260],{},[1228,1636,1637,1641],{},[1243,1638,1639],{},[870,1640,1267],{},[1243,1642,1270],{},[1228,1644,1645,1649],{},[1243,1646,1647],{},[870,1648,1277],{},[1243,1650,1280],{},[1228,1652,1653,1657],{},[1243,1654,1655],{},[870,1656,1287],{},[1243,1658,1290],{},[850,1660],{},[1294,1662,1663],{},[835,1664,1298,1665,1302,1667,1306,1669,1310],{},[870,1666,1301],{},[870,1668,1305],{},[870,1670,1309],{},[1312,1672,1673],{},[835,1674,1316,1675,1320,1677,1324],{},[870,1676,1319],{},[870,1678,1323],{},[1326,1680,1328],{},{"title":929,"searchDepth":951,"depth":951,"links":1682},[1683,1684,1685],{"id":855,"depth":951,"text":856},{"id":921,"depth":951,"text":188},{"id":1219,"depth":951,"text":1220},{},{"title":129,"description":1334},1780436276926]