How does the Imunify Anti-Bot Protection identifies suspicious IPs/bad actors?

Issue

• How does the Immunify Anti-Bot Protection work and identifies suspicious IPs/bad actors?
• Can the Immunify Anti-bot protection guard a website against scrapers using rotating residential IP proxy services?

Environment

• Imunify360

Solution

Imunify360 forms the dynamic global 'splashscreen' list on the server side based on heuristics. Once the IP address from this list reaches the server, it is presented with the simple JS challenge. If a visitor uses a web browser with JS capabilities, the challenge is invisible for them and they can continue browsing web pages without further challenges. However, a simple bot/crawler would not be able to pass the challenge and proceed to the web page contents.
As for attacks with rotating addresses, it depends on whether they were added to the 'splashscreen' list. If a "clean" IP address is used, it will not receive the challenge.