AntiBot

ABOUT

AntiBot is a lightweight protection plugin for Paper servers that detects suspicious connections and bot-like join activity before they become a problem.

Instead of relying on a single check, AntiBot combines several detection signals into a risk score. This makes it possible to react differently to normal players, suspicious connections, and larger bot waves.

The system is configurable, so you can adjust detection limits, actions, punishments, and bypass rules to match your server.

DETECTION

Connection Rate
Detects unusually high join activity within a short period of time.

Rapid Reconnect
Tracks repeated connection attempts from the same address and detects reconnect patterns that may indicate automated activity.

Username Protection
Checks suspicious username patterns including:

• Excessive numbers
• Too many underscores
• Repeated characters
• Configurable suspicious patterns
• Optional custom blacklist

IP Connection Limit
Limit how many players can connect from the same IP address at once.

BOT WAVE PROTECTION

AntiBot can detect sudden increases in player joins and automatically enable additional protection while the wave is active.

Configurable settings include:

• Joins per second
• Joins within 10 seconds
• Protection duration
• Additional risk score

This is useful for servers that suddenly receive large amounts of connection traffic.

RISK SCORE SYSTEM

Each detection signal can contribute points to a player's risk score.

The score can trigger different responses depending on your configuration:

40+ — Notify
60+ — Kick
80+ — Temporary Ban
100+ — Ban

These thresholds can be changed in the configuration.

FALSE-POSITIVE PROTECTION

AntiBot includes additional checks before applying stronger punishments.

You can configure:

• Minimum score for temporary bans
• Minimum score for bans
• Whether multiple detection signals are required
• Minimum number of signals required

This helps prevent a single suspicious action from immediately resulting in a severe punishment.

PUNISHMENTS

Automatic punishment can be enabled or disabled.

The default temporary ban duration is:

10 minutes

Punishment behavior can be adjusted through "config.yml".

DISCORD NOTIFICATIONS

AntiBot can send security events to Discord through a webhook.

Supported events include:

• Bot detected
• Bot wave detected
• Player kicked
• Player temporarily banned
• Player banned
• Protection enabled
• Protection disabled
• IP connection limit triggered

Discord notifications are disabled by default.

A built-in rate limit is also available to prevent excessive webhook messages.

PRIVACY

AntiBot includes configurable IP privacy options.

By default:

• IP logging is disabled
• IP addresses can be anonymized
• Connection tracking uses an internal cache
• Old tracking data expires automatically

You can also configure the maximum number of tracked addresses.

BYPASS SYSTEM

Trusted players can bypass AntiBot checks using:

Operators can also be configured to bypass the protection system.

Specific usernames and IP addresses can be added to the bypass configuration.

TESTING & DEBUG

AntiBot includes tools for testing the detection system without immediately punishing players.

Use the test command to check the protection system.

Debug mode can also be enabled when you need more information while troubleshooting detection behavior.

Testing punishments are disabled by default.

COMMANDS

Open the AntiBot command interface.

Reload AntiBot configuration.

View the current protection status.

Run a detection test.

Toggle/debug AntiBot detection information.

Alias:

PERMISSIONS

Full AntiBot administration access.

Reload the configuration.

View AntiBot status.

Use the testing command.

Use debug functionality.

Bypass AntiBot protection.

Administrative permissions are OP by default where applicable.

LANGUAGES

AntiBot currently includes:

• English
• Indonesian
• Vietnamese
• Chinese

Language can be selected through the configuration.

PLACEHOLDERAPI

PlaceholderAPI is supported as an optional dependency.

AntiBot does not require PlaceholderAPI to run.

CONFIGURATION

Most of the protection system can be configured without changing the plugin itself.

You can adjust:

• Detection limits
• Join thresholds
• Risk scores
• Punishment thresholds
• Temporary ban duration
• IP limits
• Bot-wave protection
• False-positive protection
• Bypass rules
• Privacy settings
• Discord webhook
• Language
• Debug mode

COMPATIBILITY

Platform: Paper
API: 26.2
Folia: Not supported
PlaceholderAPI: Optional

CONFIG FILES

AntiBot uses separate configuration files for different parts of the plugin:

Main protection and detection settings.

Discord webhook and notification settings.

English messages.

Indonesian messages.

Vietnamese messages.

Chinese messages.