Proxy Bot attacks

[MrRambo]

My server has a problem with proxies attacks.
ex:

http://prntscr.com/861zqj

Could some one code me a plugin that will stop this?
I tried a lot of things and they don't work.
Budget is 10$

 

[Jack]

Actually, here's a solution to your problem - you don't even have to worry about whether it's a proxy or VPN.

Every new IP that logs into your server has to enter some sort of captcha.
You can either do a chat based one (will be easier for bots to bypass though) or maybe even one of those fancy new GUI things (GUI menu pops up and they have to click on the DIAMOND(s) or the EMERALD(s) or the REDSTONE(s) or whatever).
Once their IP passes the captcha, it's added to a database and they won't have to do it again.

If they don't complete the captcha within 5-10 seconds, it kicks them. If it has to kick them 3 times in a row, it bans the IP (for however long you want - or permanently - with lenient ban appeal process).

#Solved?

 

[Skionz]

Actually, here's a solution to your problem - you don't even have to worry about whether it's a proxy or VPN.

Every new IP that logs into your server has to enter some sort of captcha.
You can either do a chat based one (will be easier for bots to bypass though) or maybe even one of those fancy new GUI things (GUI menu pops up and they have to click on the DIAMOND(s) or the EMERALD(s) or the REDSTONE(s) or whatever).
Once their IP passes the captcha, it's added to a database and they won't have to do it again.

If they don't complete the captcha within 5-10 seconds, it kicks them. If it has to kick them 3 times in a row, it bans the IP (for however long you want - or permanently - with lenient ban appeal process).

#Solved?

The client can tell what type an item is. You could actually send a link to a real captcha (like image) and have them enter that.

 

[Jack]

The client can tell what type an item is. You could actually send a link to a real captcha (like image) and have them enter that.

There might be ways to obfuscate it so only a real person looking at it could know which ones to click.

But yes, sending a link to a real captcha could work just fine as well.

I also believe there are ways to display images in Minecraft as wall-mounted map rasterbations (if users are too lazy to click the link).

Hopefully we've given enough ideas to solve OP's problems, provided he gets the right developer to do so.

 

[/usr/bin/]

Here you go: http://dev.bukkit.org/bukkit-plugins/vpnguard/

 

[MrRambo]

Limit the player slots will help.

Have u seen the prnt? I have 500 slots and the bots went over the limit to 1000.[DOUBLEPOST=1439999002,1439998911][/DOUBLEPOST]

Actually, here's a solution to your problem - you don't even have to worry about whether it's a proxy or VPN.

Every new IP that logs into your server has to enter some sort of captcha.
You can either do a chat based one (will be easier for bots to bypass though) or maybe even one of those fancy new GUI things (GUI menu pops up and they have to click on the DIAMOND(s) or the EMERALD(s) or the REDSTONE(s) or whatever).
Once their IP passes the captcha, it's added to a database and they won't have to do it again.

If they don't complete the captcha within 5-10 seconds, it kicks them. If it has to kick them 3 times in a row, it bans the IP (for however long you want - or permanently - with lenient ban appeal process).

#Solved?

That is not my problem my problem is there not joining the server there like spam botting my bungeecord until it crash's u can see the prmt.

 

[Skionz]

Have u seen the prnt? I have 500 slots and the bots went over the limit to 1000.

No, your max_players is set to 500. Read the configuration guide.
https://www.spigotmc.org/wiki/bungeecord-configuration-guide/

 

[MrRambo]

No, your max_players is set to 500. Read the configuration guide.
https://www.spigotmc.org/wiki/bungeecord-configuration-guide/

Thanks for the information? I know its set to 500 but cant u see the prnt screen?

 

[Skionz]

Thanks for the information? I know its set to 500 but cant u see the prnt screen?

Read the configuration guide.

 

[Jack]

Have u seen the prnt? I have 500 slots and the bots went over the limit to 1000.[DOUBLEPOST=1439999002,1439998911][/DOUBLEPOST]
That is not my problem my problem is there not joining the server there like spam botting my bungeecord until it crash's u can see the prmt.

I see the print screen, and my understanding of your problem is that you have someone with a bunch of alts on proxies logging into your server until it crashes.
The solution I gave and that you quoted would definitely solve your problem.
If all the alts on proxies join, they wouldn't be able to do the captcha and so they would get kicked. They login again, don't complete the captcha for the second time and get kicked again. Third time around - the same thing, except they get kicked, banned, and IP banned.
As you can see, it would solve your problem in less than 30 seconds and the spammer would have to get new accounts and proxies.

 

[Skionz]

Depending on the complexity of the client, you could set spawn to about 10 blocks in the air and have players fall when they join the game. If the client cannot move, the bots will float and be kicked for flying.

 

[MrRambo]

I see the print screen, and my understanding of your problem is that you have someone with a bunch of alts on proxies logging into your server until it crashes.
The solution I gave and that you quoted would definitely solve your problem.
If all the alts on proxies join, they wouldn't be able to do the captcha and so they would get kicked. They login again, don't complete the captcha for the second time and get kicked again. Third time around - the same thing, except they get kicked, banned, and IP banned.
As you can see, it would solve your problem in less than 30 seconds and the spammer would have to get new accounts and proxies.

The thing is they Don't join my minecraft server!

 

[Jack]

The thing is they Don't join my minecraft server!

You should have mentioned that.
Sorry, there's nothing I can do then.