TurboShield

If you also struggling to protect your server from hacker who gets op by hacking, The problem is also had me, but i created a small security plugin that ensures your server/smp by blocking normal players from /op or /op %username%,. Only a player can get op, a op player give permissions to player to get OP!. The /op command is also blocked in console.

Introducing TurboShield OPGUARD. The plugin protect your server from hackers, Bye-Bye Hackers!

COMMANDS

/turboshield Shows help
/turboshield reload Reloads the configuration
/turboshield checkop [player] Shows the audit log + current operators, bypass list, disabled players
/turboshield disableop <player> Permanently removes a player's OP (name + IP — blocks alt accounts)
/turboshield bypass <player|ip> Adds a player or IP to the bypass list (shortcut)
/turboshield bypass add <player|ip> Adds a player or IP to the bypass list
/turboshield bypass remove <player|ip> Removes a player or IP from the bypass list
/turboshield bypass list Shows the bypass list
/turboshield unban <player> Unbans a mistakenly banned player (also resets strikes)
/turboshield help Shows help

PERMISSIONS

Permissions
turboshield.admin Access to all /turboshield commands + receives ban alerts OP players


Key notes:

• The bypass command can only be executed by an OP player — never from console (by design).
• The old bypass permission node was removed in v1.5.0 — protection is managed through the bypass list only.
• Console / RCON /op is blocked unless the target is on the bypass list
  
  
  
• Why server owners love it
  • Kills the classic "forceop exploit" — the #1 way servers get griefed by fake admins
  • No risky permission-node setups — a 1-second command protects a staff member
  • Works with vanilla /op, RCON and any permissions plugin (LuckPerms etc.)
  • Zero-config after install; sensible defaults, configurable everything
  • Paper 1.21 → 1.26.2+ compatible, Folia-friendly, no NMS — updates are safe