Proxy Bot attacks

Status
This thread has been locked.

MrRambo

Feedback score
0
Posts
36
Reactions
1
Resources
0
My server has a problem with proxies attacks.
ex:
861zqj

http://prntscr.com/861zqj

Could some one code me a plugin that will stop this?
I tried a lot of things and they don't work.
Budget is 10$
 
PebbleHost
High performance, consistent uptime and fast support. Minecraft hosting that just works.

MoeXIV

Feedback score
0
Posts
150
Reactions
52
Resources
0
Either look for a plugin that blocks VPNs (which are all over spigot) or a plugin to limit how many connections you can have per IP.
 

MoeXIV

Feedback score
0
Posts
150
Reactions
52
Resources
0
Check what ISP is hosting the bots that are joining your server and do a range IP ban on them.

That's all I can think of.
 

MrRambo

Feedback score
0
Posts
36
Reactions
1
Resources
0
Well the problem is I whitelist the server and the player count still goes up until it crash's my server completely.[DOUBLEPOST=1439936700,1439936615][/DOUBLEPOST]I need like a plugin that will block proxies from joining throw the bungeecord.
 

MoeXIV

Feedback score
0
Posts
150
Reactions
52
Resources
0
Once again, ban an IP range. It's obviously a proxy service as no regular ISP would allow 1000 connections running from one IP at the same time.

Look into buying an IP range banning system.
 

MrRambo

Feedback score
0
Posts
36
Reactions
1
Resources
0
Once again, ban an IP range. It's obviously a proxy service as no regular ISP would allow 1000 connections running from one IP at the same time.

Look into buying an IP range banning system.
Do u know anyone who could sell me this?
 
Last edited:

MrRambo

Feedback score
0
Posts
36
Reactions
1
Resources
0
Well MrNoxitePlays im not looking for a spambot im looking for a antiProxyBot
 

NoxitePlays

A Person
Premium
Feedback score
2
Posts
462
Reactions
179
Resources
0
Yeah and if he says its impossible its impossible the only thing you can do is what skionz said unless your a developer yourself and think its possible.
It's impossible. The best he can do is prevent them from talking in spawn, but they can still move.
 

Skionz

ogminecraft.com
Premium
Feedback score
1
Posts
1,544
Reactions
1,527
Resources
0
Well MrNoxitePlays im not looking for a spambot im looking for a antiProxyBot
Like I have already said, how would they magically know you're using a proxy? If someone random comes up to you, how would you know that their name is 'Jimmy' if they don't tell you? The same goes for proxies; why would they tell you that the connection is coming from a proxy server? All these servers do is load a list of public proxies and checks your IP against that list. They also check whether common proxy ports are open which is completely unreliable because anyone can setup a server on any port.
 

Jack

Retired Moderator
Supreme
Feedback score
11
Posts
1,209
Reactions
1,462
Resources
0
It's impossible.
There's a couple of methods to check and see if someone is running a proxy/VPN solely based on their IP.

You might not be able to do all of them within a plugin, but you could certainly forward a request containing the IP to an external script, check there, and then return.

Example - Just take a few of the most common proxy ports (I'm sure you can find some lists online), try to connect to their IP with said ports, if it works, return true.
Example - Lookup the IP (feel free to use my service - https://ip.uxs.us/ Includes JSON API - https://docs.uxs.us/ip) and if "isp" contains OVH, Amazon, etc (I'm sure you can find some lists online), return true.

Maybe do something stupidly strict and check to see if their ISP contains "AT&T", "Verizon", "Optimum" and if not label them as "spam" and require them to enter some ingame captcha of some sort.

Also would recommend caching IP ranges if you do decide to do any of these, to speed up the process and only have to do it once per range.
 

Skionz

ogminecraft.com
Premium
Feedback score
1
Posts
1,544
Reactions
1,527
Resources
0
There's a couple of methods to check and see if someone is running a proxy/VPN solely based on their IP.

You might not be able to do all of them within a plugin, but you could certainly forward a request containing the IP to an external script, check there, and then return.

Example - Just take a few of the most common proxy ports (I'm sure you can find some lists online), try to connect to their IP with said ports, if it works, return true.
Example - Lookup the IP (feel free to use my service - https://ip.uxs.us/ Includes JSON API - https://docs.uxs.us/ip) and if "isp" contains OVH, Amazon, etc (I'm sure you can find some lists online), return true.

Maybe do something stupidly strict and check to see if their ISP contains "AT&T", "Verizon", "Optimum" and if not label them as "spam" and require them to enter some ingame captcha of some sort.

Also would recommend caching IP ranges if you do decide to do any of these, to speed up the process and only have to do it once per range.
It is impossible to block all proxies. Anyone can buy a few private proxies, or a server, but checking whether the server is from OVH is a pretty good idea.
 
Status
This thread has been locked.
Top