Anti Bot system

Minecraft 版本： 1.21 1.21.1 1.21.2 1.21.3 1.21.4 1.21.5 1.21.6 1.21.7 1.21.8 1.21.9 1.21.10 1.21.11

平台： bukkit paper

标签： game-mechanics management storage

AntiBot — Advanced Bot Protection for Paper 1.21+

Keep bots off your server with a multi-layered protection system that combines
rate limiting, CAPTCHA challenges, automatic shield mode, and persistent security bans.

Features

Math CAPTCHA

New players must solve a simple math problem (+, −, ×) before they can move or
interact. They are frozen in place until they answer correctly in chat.

• Configurable number range, attempts, and timeout
• Repeating reminder every X seconds so players don't miss the question
• Beautiful formatted chat messages with title screen display
• Verified players are remembered permanently — they never see the CAPTCHA again

IP Rate Limiting

Limits how many times a single IP can connect within a rolling time window.
Blocks connection floods before they reach your server logic.

Auto-Shield Mode

Monitors the global join rate every second. When it exceeds the configured
threshold (e.g. 5 joins/second), shield mode activates automatically and blocks
all unverified players. Deactivates itself once traffic normalizes.
Can also be toggled manually via command.

Security Bans

Players who reconnect suspiciously fast (3 times within 60 seconds by default)
receive a 7-day security ban that is stored persistently.
Admins can unban players at any time with /antibot unban <player>.

Whitelist

Exempt trusted players from all checks permanently.
Managed via command and stored in your chosen storage backend.

Flexible Storage

Choose between MariaDB (for multi-server setups) or YAML (zero setup)
in a single config option. All data — verified players, whitelist, and bans —
is stored in the selected backend.

Commands

Permission: antibot.admin (default: op)
Bypass permission: antibot.bypass

Requirements

• Paper 1.21.1+
• Java 21+
• MariaDB (optional — YAML works out of the box)

Configuration

Every threshold, message, and color is fully configurable via config.yml.
Storage backend, CAPTCHA math range, ban duration, shield sensitivity,
rate limit windows — all adjustable without recompiling.

This plugin uses:

• HikariCP (Apache 2.0) by Brett Wooldridge
• MariaDB Connector/J (LGPL-2.1) by MariaDB Corporation