EpicGuard | Advanced Server Protection (AntiBot & More) 3.13.0

Spigot & Bungee | Advanced server protection package!

  1. MrDiamondPL
    Native Minecraft Version:
    1.15
    Tested Minecraft Versions:
    • 1.8
    • 1.12
    • 1.14
    • 1.15
    Source Code:
    https://github.com/PolskiStevek/EpicGuard
    Contributors:
    iShift (Author), rusekh (Co-Dev)
    Languages Supported:
    English, Polish, Russian
    About plugin
    • Is your server under attack? Do you want your server to be protected from bot attacks? That's why we created this plugin! It is free, so the only thing you need to do is to click the "Download" button and drop it in your server's plugin directory! This antibot is not like most of the free antibots out there. It isn't enabling whitelist mode when there are many connections per second. It uses many checks, to detect if there is a bot or a player connecting to your servers. Annoying "rejoin server" or "add the server to your list" will only happen when there is real bot attack detected. Real players will be whitelisted forever so they will be skipped. But there are more features, like custom tab complete, op protection, command blocking and more! All features are listed below.

    Supported platforms
    • Bukkit, Spigot, Paper etc.. [1.8.x - 1.15.x] - Our main version contains most features and is our top priority.
    • BungeeCord, Waterfall etc.. - Our second version, designed for proxies based on BungeeCord, contains fewer features than spigot version, but it has the same antibot checks.
    • Velocity - Our third version, designed for Velocity proxy, which is not a fork of BungeeCord. It contains only antibot features, same as other versions, but compared to them it is the most efficient version.
    Our features
    • BungeeCord and Spigot (1.8.x - 1.15.x) support.
    • Highly configurable and customizable.
    • Almost no performance impact.
    • Blocking VPN services and proxies.
    • Country filter - allow or block specified countries.
    • Fast attack detection, you can configure on which connect/ping speed attack will be detected.
    • Automatic whitelisting, so real players won't be detected by antibot, and they can join while bots can't.
    • Firewall commands support.
    • Anti ForceOP/Backdoor - only players added to the exclusive list can have operator permissions (it can also protect from PermissionsEx "*" permission).
    • See every player's address history (if you enabled this module).
    • Block commands that you don't want players/staff to execute.
    • Configure a list of allowed commands that can regular players execute.
    • Display custom tab-completions (on /<tab>), or completely disable tab completion.
    • Manage your server using GUI instead of annoying commands!
    • Filter console messages.
    • Cloud blacklist synchronizing.
    • ActionBar and/or Title notifications.
    Code (YAML):
    #
    #    ███████╗██████╗ ██╗ ██████╗ ██████╗ ██╗   ██╗ █████╗ ██████╗ ██████╗
    #    ██╔════╝██╔══██╗██║██╔════╝██╔════╝ ██║   ██║██╔══██╗██╔══██╗██╔══██╗
    #    █████╗  ██████╔╝██║██║     ██║  ███╗██║   ██║███████║██████╔╝██║  ██║
    #    ██╔══╝  ██╔═══╝ ██║██║     ██║   ██║██║   ██║██╔══██║██╔══██╗██║  ██║
    #    ███████╗██║     ██║╚██████╗╚██████╔╝╚██████╔╝██║  ██║██║  ██║██████╔╝
    #    ╚══════╝╚═╝     ╚═╝ ╚═════╝ ╚═════╝  ╚═════╝ ╚═╝  ╚═╝╚═╝  ╚═╝╚═════╝
    #

    ###############################
    ##           Countries       ##
    ###############################

    countries
    :
     # This has three values:
      # WHITELIST = countries listed below CAN join, every other can't.
      # BLACKLIST = countries listed below CAN'T join, every other can.
      # DISABLED = disable this module.
      mode
    : DISABLED
      # List of country codes:
      # https://dev.maxmind.com/geoip/legacy/codes/iso3166/
      list
    :
       - GB
        - DE
        - PL

    ###############################
    ##           AntiBot         ##
    ###############################

    antibot
    :
     # You can fully disable ALL antibot modules if you don't want them.
      # Disabling antibot will not disable country checking (look above)
      enabled
    : true
      # New players will need to rejoin the server to play!
      force-rejoin
    : false
      # If a player/bot's nickname contains one of the values below, he will be blocked.
      # This SHOULD be lower-case
      name-contains
    :
       - mcstorm
        - mcspam
        - bot
        - proxy
      # HIGHLY RECOMMENDED: Register on https://proxycheck.io/dashboard and get a free API KEY!
      # You can leave it empty, but your protection will be limited.
      # With key - 1000 requests/24h
      # Without key - 100 requests/24h
      api-key
    : "YOUR_KEY"

    ###############################
    ##        Settings           ##
    ###############################

    # Configuration of EpicCloud - synchronizing and calculating
    # between plugin local data, and plugin's cloud, to increase performance.
    cloud
    :
     # Should plugin enable this feature
      enabled
    : true
      # Time in seconds before next sync
      sync-every-seconds
    : 58800
      features
    :
       # Enable synchronizing blacklist (recommended)
        blacklist
    : true
        # Protection Requests.
        protection-req
    : true

    # Heurisitcs check, allows you to detect bots even faster and decrease bypasses,
    heuristics
    :
      enabled
    : true
      # Minimal difference between current attack speed and fastest attack speed detected
      # during current bot-attack. Default value is equal to speed.connection in 'config.yml'.
      # You can experiment with this value, and see what value is best for detecting attacks.
      min-difference
    : 7

    # If console log contains text listed below, it
    # will be hidden. This will decrease CPU usage.
    console-filter
    :
      enabled
    : true
      messages
    :
       - Disconnecting
        - lost connection
        - authlib
        - GameProfile

    # If a player doesn't send MC|Brand packet within the time provided below (delay) after joining,
    # he will be kicked. Normal clients send this packet after join, but bots don't.
    # WARN: Disable this if you have issues! (eg. when using ViaVersion or ProtocolSupport).
    channel-verification
    :
      delay
    : 40
      enabled
    : true
      punish
    : "kick {PLAYER} &cException occurred in your connection, please rejoin!"
    # If a player sends MC|Brand packet with a value listed below, he will be kicked.
    # Normal (Vanilla) clients use 'vanilla'
    blocked-brands
    :
      enabled
    : true
      punish
    : "kick {PLAYER} &cYour client is not allowed on this server!"
      list
    :
       - some_blocked_brand

    # Enabling beta-layout will hide the title and change the design of the action bar on the attack.
    # New layout is better than the old one because it does not contain bot names, just statistics.
    # Screenshot: https://cdn.discordapp.com/attachments/659146286972403766/675713594276446219/unknown.png
    beta-layout
    : false

    updater
    : true
    ###############################
    ##           Advanced        ##
    ###############################
    # You SHOULD configure it, to fit your server's player amount.
    # If you have small server, don't change it, or change it to smaller values

    speed
    :
     # How many connections per second should be made, to block connections to the server.
      # Whitelisted players still can join, if CPS is below this value, connection blocking will be disabled.
      # If deny-join is triggered, Proxy/VPN checking is skipped.
      connection
    : 7
      # How many pings per second should be made to block connections to the server.
      ping-speed
    : 10
      # How many successful joins per second should be made to block connections to the server
      join-speed
    : 5
      # Time (in ticks) before the antibot will disable.
      attack-timer-reset
    : 800

    # Block tab-complete packet using ProtocolLib.
    # Useful when using a multi-version server, because 1.13+ players
    # receive different packet than older version players.
    fully-block-tab-complete
    : false

    # When the server is attacked with PING method, server
    # MOTD and player slots, won't be displayed to optimize bandwidth
    bandwidth-optimizer
    : true

    auto-whitelist
    :
     # Enable automatic player whitelisting.
      # When a player is whitelisted, all checks are skipped (like a Proxy check).
      # Whitelisted players can join even when ATTACK_MODE is activated.
      enabled
    : true
      # How much time (in ticks), the player should be online to be added to the whitelist.
      # 20 ticks = 1 second
      time
    : 8400

    ###############################
    ##     Server Protection     ##
    ###############################

    ip-history
    :
      enabled
    : true

    op-protection
    :
      enabled
    : false
      # EXPERIMENTAL: Protection from backdoor using PermissionsEx "*" permission.
      # Enable this if you are using PEX plugin and you want additional protection.
      pex-protection
    : false
      # Permission to see alert: epicguard.protection.notify
      alert
    : "&cPlayer &6{PLAYER} &chas been banned for Force-OP."
      command
    : "ban {PLAYER} Force-OP"
      # List of players who can have OP
      list
    :
       - "Admin"

    # If someone tries to execute command listed here,
    # event will be canceled, and the player will see a custom message
    # defined in messages.yml

    command-protection
    :
      enabled
    : false
      list
    :
       - /op
        - /stop

    # If someone tries to execute a command not listed
    # in this module, and does not have bypass permission,
    # event will be canceled, and custom message will be shown

    allowed-commands
    :
      enabled
    : false
      # If someone execute command not listed below,
      # without permission to bypass, will get custom message
      # defined in messages.yml
      list
    :
       - /msg
        - /home

    # Replaces default tab completion in /<tab>,
    # with your custom list, provided below.
    # WARN: You NEED ProtocolLib!
    custom-tab-complete
    :
      enabled
    : false
      list
    :
       - /msg
        - /home

    # Toggle ability to bypass specific modules
    # if player has permission for it.
    bypass
    :
     # Permission: epicguard.bypass.allowed-commands
      allowed-commands
    : true
      # Permission: epicguard.bypass.custom-tab-complete
      custom-tab-complete
    : false
    ###############################
    ##           Firewall        ##
    ###############################

    firewall
    :
     # Don't use on free / shared hosting!
      # You need private machine with IPTables (or something else) installed.
      enabled
    : false
      # Executed in /guard blacklist <player> OR while player was detected as a BOT
      command-blacklist
    : "iptables -A INPUT -s {IP} -j DROP"
      # Executed in /guard whitelist <player>
      command-whitelist
    : "iptables -D INPUT -s {IP} -j DROP"
    1.PNG 2.PNG 4.PNG
    3.PNG
    Commands & Permissions
    • /guard - List of all commands.
    • /guard menu - Opens plugin GUI
    • /guard whitelist <adress> - Manually add the specified address to plugin whitelist (Removing from the blacklist if it is).
    • /guard blacklist <adress> - Manually add the specified address to plugin blacklist.
    • /guard status - Toggle antibot notifications.
    • /guard player <player> - Some information about specific player.
    • /guard reload - Reload plugin config and messages.
    • epicguard.admin - necessary permission for commands, and alerts.
    • epicguard.protection.notify - permission to see alerts from OP-protection.
    • epicguard.bypass.allowed-commands - allows you to bypass the "allowed-commands" module.
    • epicguard.bypass.custom-tab-complete - allows you to bypass "custom-tab-complete" module.
    Recommendations/Dependencies
    Spigot:
    • ProtocolLib - Required for block/display custom TabComplete.
    • ExploitFixer - Block many exploits, which can crash your server.
    BungeeCord:
    • QuietCord (Or any other console filtering plugin) - to disable "InitialHandler" console spam, when the server is attacked. The console filter is only working on spigot right now.
    That's all!
    • You can join our discord server to get real-time support, and be informed about next updates! Just click the image below to join!
    Discord-Logo+Wordmark-Black.png
    ~~ Adversitiment ~~
    [​IMG]

    Looking for Minecraft server hosting? Try ApexHosting! Click the image below to see more information.

Recent Reviews

  1. iJosePlay_
    iJosePlay_
    5/5,
    Version: 3.9.4
    -------------------------
    ¡Buen plugin!
    -------------------------
    80 characters
  2. BoniHamzallari
    BoniHamzallari
    3/5,
    Version: 3.9.4
    1. MrDiamondPL
      Author's Response
      This is already fixed, please use latest version.
  3. KhrysAK47
    KhrysAK47
    3/5,
    Version: 3.9.3
    At first glance the plugin looks good, but it is not if we talk about servers of great magnitude. I've tried it on a network with more than 500 players having multiple BungeeCords with 64GB of RAM and a very powerful processor. And still Leymooo Bots (Russian Bot Program, 20-30k bots/s) break the server in a couple of minutes.
    1. MrDiamondPL
      Author's Response
      Thank you for your review. If there is really too powerful bot attack (as you said, 20-30k b/s) it just can't be blocked by a plugin (API can't handle that big amount of event calls). Big networks should use a firewall, and custom bungeecord, not an antibot plugin.
  4. shadowpotato
    shadowpotato
    5/5,
    Version: 3.9.0
    great but i have a little question about this plugin do i have to install this plugin on bungeecord and spigot?
    1. MrDiamondPL
      Author's Response
      This plugin work on both platforms, but I suggest using it only on bungeecord. If you have any additional questions, feel free to ask :) (you can join our discord).
  5. nikv2
    nikv2
    5/5,
    Version: 3.9.0
    I'm impressed by this wonderful plugin ! Really glad it is free and i hope it keeps updating over time. Big fan. Keep going!
  6. SnowCutieOwO
    SnowCutieOwO
    5/5,
    Version: 3.8.3
    Good server protect plugin!
    Should give you 5 stars!
    Can I share it to mcbbs.net?
    They also need such a free and powerful anti-cheat plugin!
    1. MrDiamondPL
      Author's Response
      Thank you for your review! As far as I know, someone already shared it on mcbbs :)
  7. wormecode
    wormecode
    5/5,
    Version: 3.7.0
    Absolutely awsome, antibot protaction working pretty good for a free plugin, Features very unusual and useful, thenks so match for perfect job!
  8. Xanter
    Xanter
    3/5,
    Version: 3.6.0
    1. MrDiamondPL
      Author's Response
      Thanks for the review, fixed on the latest version! :)
  9. nikv2
    nikv2
    5/5,
    Version: 3.6.0
    Best anti-bot out there! easy to configure and blocks any type of anti bot attack, Highly recommended for production servers ! Please keep updating!
  10. Khax_Bridge
    Khax_Bridge
    5/5,
    Version: 3.5-b1
    Forgive me for commenting that this is really one of the few good plugins! Because I don't have to adjust the configuration of players!