Recommended Filter Set for TikTok (AND Mode)

The logic is the same — a real user passes all filters, TikTok moderation fails at least 2-3 and goes to WhitePage.

1. Country → IN

• Key: user_country, value: list of countries for which the offer is intended

• TikTok/ByteDance crawlers usually come from ByteDance data centers.

2. Bot Detect → IS NOT

• Key: user_bot, value: 1

• TikTok/ByteDance crawlers are identified as bots.

3. User Agent → NOT_IN

• Key: user_ua

• Values (patterns):

  *Bytespider*
  *Bytedance*
  *TikTokBot*
  *TikTok*bot*
  *PetalBot*
  *security-polaris*
  *hertz*
  

• Bytespider is the main ByteDance crawler, PetalBot is a related bot (Huawei/ByteDance ecosystem).

4. ASN Provider → NOT_IN

• Key: user_asn

• Values (ASN ByteDance/TikTok):

  138699   (ByteDance - Beijing)
  396986   (ByteDance - US)
  16509    (Amazon.com)
  396982   (Google LLC)
  

• Moderation comes from ByteDance data centers. Real users are from regular ISPs/mobile operators.

5. utm_content → NOT_IN

• Key: utm_content

• Values:

  __CAMPAIGN_ID__
  @empty
  

• Moderation goes through links with unfilled macros.

6. utm_term → NOT_IN

• Key: utm_term

• Values:

  __AID__
  @empty
  

• Moderation goes through links with unfilled macros.

7. Sub1→ NOT_IN

• Key: sub1

• Values:

  __CID__
  @empty
  

• Moderation goes through links with unfilled macros.

8. Browser → IS

• Key: user_browser, value: TikTok

• Filters out users opening ads not from the app.

9. ext_click_id → IS NOT @empty (optional)

• Key: ext_click_id

• Values: @empty

• A real click from TikTok Ads contains ttclid. Moderation often comes without click_id. We only pass traffic with a non-empty ID.

10. Proxy Detect → IS NOT (optional)

• Key: user_proxy, value: 1

• Filters out proxies/VPN.

11. IPv6 → IS NOT (optional)

• Key: user_ip_v6, value: 1

• If the target audience is on IPv4 — an additional barrier.

---

Final Configuration

Logical Relation: AND