#                 _   _ ____        _   _____       _
#     /\         | | (_)  _ \      | | |  __ \     | |
#    /  \   _ __ | |_ _| |_) | ___ | |_| |  | | ___| |_   ___  _____
#   / /\ \ | '_ \| __| |  _ < / _ \| __| |  | |/ _ \ | | | \ \/ / _ \
#  / ____ \| | | | |_| | |_) | (_) | |_| |__| |  __/ | |_| |>  <  __/
# /_/    \_\_| |_|\__|_|____/ \___/ \__|_____/ \___|_|\__,_/_/\_\___|
#


###############################
##            Info           ##
###############################

# FAQ: https://antibotdeluxe.com/webpanel/faq
# Web Panel: https://antibotdeluxe.com/webpanel/
# Discord: https://discord.gg/xTAzMCx

# If you require support, join our Discord as that is the ONLY location that we provide it.
# Anonymous statistics are sent to bStats.

# Thank you for purchasing AntiBotDeluxe.
# The default config requires very little configuring to make it fit your server.
# Some IMPORTANT options of the plugin is only available via the WEB PANEL.

Version: 9


###############################
##          General          ##
###############################

General:
  # The prefix of all messages.
  Prefix: '&7✔ &a'
  # Enable or disable the AntiBotDeluxe log. If this is disabled, you will not receive support, as essential data is contained here.
  Log: true
  # You must enable this if you use a modified proxy, eg Waterfall, Hexacord or Travertine.
  Log4J: false
  # If enabled the Console will be spammed with for you useless Developer stuff
  Debug: false
  # Should we show a animation while there is no attack?
  Animation: true
  # Let Whitelisted players pass
  Whitelist: true

  ConsoleFilter:
    - "logged in with entity id"
    - "com.mojang.authlib.GameProfile@"
    - "lost connection"
    - "timed"
    - "reset"
    - "UUID of player"
    - "InitialHandler"
    - "UpstreamBridge has disconnected"

  Statistics:
    AttackAlert:
      Enabled: true
      # If enabled it will alert everyone with the permission antibotdeluxe.alert even without /ab toggle
      AlertPerm: true
      Interval: 15
      TriggerAmount: 5
    BlacklistAlert:
      Enabled: true
      # If enabled it will alert everyone with the permission antibotdeluxe.alert even without /ab toggle
      AlertPerm: true
      Interval: 15
  AutoWhitelist:
    Enabled: true
    ActTime: 120

Storage:
  # Options Available: MySQL, FlatFile
  # If you are only running AntiBotDeluxe on one server, flat-file is recommended.
  Mode: FlatFile

  # Here you can set how the configuration file should update
  # Available options: LIVE, FREQUENTLY, NEVER
  # FREQUENTLY will cause a minutely update, when set on NEVER the use of /ab reload is needed.
  ConfigUpdate: FREQUENTLY

  MySQL:
    Host: '127.0.0.1'
    Username: 'root'
    Password: ''
    Database: antibotdeluxe
    MaximumPoolSize: 10
    MinimumIdle: 10
    MaximumLifetime: 1800000
    ConnectionTimeOut: 5000

###############################
##            Geo            ##
###############################

Geographical:
  Mode: Blacklist
  Countries:
    - "N/A"
    - "Anonymous Proxy"
    - "Other Country"
    - "Andorra"
    - "United Arab Emirates"
    - "Afghanistan"
    - "Antigua and Barbuda"
    - "Anguilla"
    - "Bangladesh"
    - "Brazil"
    - "Belize"
    - "China"
    - "Congo, The Democratic Republic of the"
    - "Czech Republic"
    - "Denmark"
    - "Egypt"
    - "Ethiopia"
    - "Guam"
    - "Hong Kong"
    - "Haiti"
    - "Indonesia"
    - "India"
    - "Iraq"
    - "Iran, Islamic Republic of"
    - "Kenya"
    - "Korea, Democratic People's Republic of"
    - "Korea, Republic of"
    - "Luxembourg"
    - "Malaysia"
    - "Mongolia"
    - "Nigeria"
    - "Philippines"
    - "Pakistan"
    - "Poland"
    - "Romania"
    - "Serbia"
    - "Russian Federation"
    - "Rwanda"
    - "Singapore"
    - "Slovenia"
    - "Slovakia"
    - "Thailand"
    - "Turkey"
    - "Taiwan"
    - "Ukraine"
    - "Uzbekistan"
    - "Vietnam"
    - "Yemen"
    - "Mayotte"
    - "South Africa"
    - "Zambia"
    - "Zimbabwe"

IPTables:
  Enabled: true

  AddCommand: "sudo iptables -A INPUT -s %ips% -j DROP  -m comment --comment \"AntiBotDeluxe\" -w"
  RemoveCommand: "sudo iptables -D INPUT -s %ips% -j DROP  -m comment --comment \"AntiBotDeluxe\" -w"

  # Flush all rules only added by AntiBotDeluxe on every plugin load.
  # Disabled by default to keep rules for following attacks.
  Flush: false

  # Blacklist a IP if they get blacklisted.
  # This wont add IP's that are downloaded
  # This option allows efficient mitigation of attacks and is recommended.
  AddWhenBlacklisted: true

  # Get IPTables to limit the speed of joins.
  # This is highly recommended to block sources of mass bot joins.
  ConnectLimit:
    Enabled: true
    # When set to AUTOMATIC the Plugin will try to get the Server's Port automatically
    ServerPort: AUTOMATIC
    Limit: 3

ProxyScraper:
  Enabled: false
  Threads: 350

  # Toggle proxy types to scrape for.
  # SOCKS is more common for bot attacks.
  SearchFor:
    HTTP: true
    SOCKS: true


###############################
##          Checks           ##
###############################

Checks:
  # This is the order of how checks work. You can comment them out here to disable them but is not recommended for blocking bots.
  # The default order is highly recommended to keep.
  Priority:
    - MaxPlayersPerIP
    - MaxAccountsPerIP
    - MaxConnectionsPerSecond
    - MaxPlayersPerSecond
    - APNCheck
    - GeoCheck
    - ForceRejoin
    - Condition01
    - ProxyDetection
    - DNSBLCheck

  # Those checks will be executed before everything else, bots kicked by this will neither be logged or announced in any way.
  # This is made to take stress of the server and help handle the attack
  # All PreChecks will be ran by DeluxeAI workers.
  PreChecks:
    Checks:
      - ServerListPing
      - BlacklistCheck
      - Nameprefix
      - SmartHeuristic
      - BlacklistCheck
      - ProxyDetection
      - ForceRejoin
    # Can be set to NONE if it does not want to be used
    Condition: Condition01


  # This check looks how often the same IP tries to connect per second
  MaxConnectionsPerSecond:
    Value: 3

  # This is looking on how often a IP tries to connect with different names in a specific time, other then MaxPlayersPerIP this is not checking the online players
  MaxAccountsPerIP:
    Value: 3
    Action: Blacklist

  MaxPlayersPerIP:
    Value: 2

  # Remember in default config this is just a condition
  MaxPlayersPerSecond:
    Value: 3

  Nameprefix:
    Blockprefix:
      - "MCBot_"
      - "MCSpam_"

  # Define the percentage of SmartHeuristic
  # The first value has to be reached if its very likely a bot
  # The second value has to be reached if its not that likely a bot
  # Therefore a higher percentage needs to be reached.
  SmartHeuristics:
    Percentage: 80.0
    Unlikely:
      Percentage: 99.0

  # Enable or disable checks to use the hold dynamic mode for.
  # If you do not know what this is, leave it alone.
  Hold:
    - MaxPlayersPerSecond
    - MaxAccountsPerIP
    - MaxConnectionsPerSecond

  # Enable or disable checks to use the conditional dynamic checks for.
  # If you do not know what this is, leave it alone.
  Conditional:
    '01':
      - MaxPlayersPerSecond

###############################
##         Blacklist         ##
###############################

Blacklist:
  # Configure the sites where blacklisted IPs are loaded from.
  # The default settings are accurately chosen to be efficient and with few false positives.
  Synchronization:
    SyncBlacklist: false
    DirectAccess:
      - "http://lists.blocklist.de/lists/all.txt"
      - "http://cinsscore.com/list/ci-badguys.txt"
      - "https://www.stopforumspam.com/downloads/toxic_ip_cidr.txt"
      - "http://blocklist.greensnow.co/greensnow.txt"
      - "http://myip.ms/files/blacklist/csf/latest_blacklist.txt"
    ClickAccess:
      - "http://proxy-daily.com/"
      - "http://www.sslproxies24.top/"
      - "http://socksproxylist24.blogspot.ro/"

  # You can control the blocked APNs here.
  # If you do not know what this is, leave it alone.
  APN:
    - OVH
    - INFOLINK
    - TELEF
    - CHINANET
    - GoDaddy
    - PARSONLINE
    - "CORPORACION NACIONAL"
    - contabo
    - server
    - "TWC Central"
    - "USA COMPANIES"
    - "Fibrenoire"
    - "Fibrenoire Inc."

###############################
##           Proxy           ##
###############################

# These sites check if an account is a proxy.
# The condition just disables the site if requirements aren't reached.
ProxySettings:
  Sites:
    '1':
#      URL: "http://www.stopforumspam.com/api?ip=%ip%"
#      Keyword: "<appears>yes</appears>"
#      Action: KICK
#    '2':
#      URL: "http://www.shroomery.org/ythan/proxycheck.php?ip=%ip%"
#      Keyword: "Y"
#      Action: KICK
    '1':
      URL: "http://proxycheck.io/v2/%ip%&vpn=1"
      Keyword: "\"yes\""
      Action: KICK
#    '4':
#      URL: "http://botscout.com/test/?ip=%ip%"
#      Keyword: "Y"
#      Action: KICK
    '2':
      URL: "http://api.antibotdeluxe.com/system/1/check?ip=%ip%"
      Keyword: "\"1\""
      Action: KICK
      Condition: PLUS

  DNSBL:
    Services:
    # Confirmed Proxies
    - "dnsbl.proxybl.org"
    # Zombie Networks
    - "zombie.dnsbl.sorbs.net"
    # HTTP Proxies
    - "http.dnsbl.sorbs.net"
    # Socks Proxies
    - "socks.dnsbl.sorbs.net"
    # Misc Proxies
    - "misc.dnsbl.sorbs.net"
    # XBL
    - "xbl.spamhaus.org"

###############################
##          Locale           ##
###############################

Locale:
  # Available presets are English (EN), German (DE), French (FR), Italian (IT), Dutch (NL), Turkish (TU), Romanian (RO),
  # Messages are configurable over in the messages_locale.yml.
  # You can enter the name of your presence here.
  # NOT SUPPORTED IN BETA VERSIONS!
  Preset: EN