BotShield is the premier anti-bot and security solution for your Minecraft server, delivering exceptional performance and customizable checks while optimizing CPU and RAM usage, ensuring your server is resilient against all types of bots and DDoS attacks.
Why should you use BotShield?
1. Optimization and performance. BotShield has the best price and lightweight code that was optimized as much as it is possible. So when your server is under attack, BotShield will not heap your server resources because of its the best performance and optimization.
2. Sensitive checks. BotShield employs sophisticated algorithms to analyze player behavior and identify potential threats in real-time. For a detailed overview of all the checks and features we offer, please refer to the "Features" section.
3. Innovative silent Inspector. We understand that players often find CAPTCHA and other verification methods cumbersome and time-consuming. That is why we have integrated a unique silent Inspector that effectively prevents bots from joining your serverwithout the need for CAPTCHA, increasing the number of players and adding uniqueness to your server.
4. Unmatched market offering. BotShield stands out as the premier solution on the market, providing top-tier performance and comprehensive checks that can mitigate any kind of attack. Our dedicated support team is always available to assist you with any questions about the plugin on our official Discord server.
5. Trusted by major networks. Our development is already in use by popular and large networks to safeguard their infrastructure, demonstrating our reliability and effectiveness in real-world scenarios.
6. Broad compatibility. We support all major server cores to better serve our clients. Our compatible cores include Spigot (and its forks like Paper, Purpur, Dionysus, Pufferfish, etc.) and BungeeCord (along with all its forks).
7. Tailored protection. You can achieve any level of protection and capacity by properly configuring the settings. If you have any questions or need assistance, please do not hesitate to reach out to us on our official Discord server!
KEY BENEFITS
Easy Installation and Setup: Installing BotShield takes just a few minutes, and the intuitive interface allows for quick configuration of settings.
Flexible Configuration: Users can customize protection parameters according to the unique requirements of their server.
Regular Updates and Enhancements: We are continuously working on improving BotShield to ensure maximum protection and performance.
User Feedback System: Users can leave reviews and suggestions for improvements, helping us better understand their needs.
Extensive Documentation: Access to comprehensive guides and FAQs to assist users in resolving any issues.
Community Support: Join our Discord community to connect with other users, share experiences, and get assistance.
FREQUENTLY ASKED QUESTIONS (FAQ)
Q: How do I install BotShield? A: Installation is simple. Just download the plugin and upload it to your server.
Q: How do I configure BotShield after installation? A: After installation, navigate to the BotShield folder in your root directory of your server. You can customize various protection parameters to suit your needs.
Q: Is BotShield compatible with other plugins? A: Yes, BotShield is designed to work seamlessly with a variety of other plugins to enhance your server's security.
Q: What is the size of your Cloud databases? How will it help with DDoS and bot attacks? A: Our cloud databases are the largest on the security protection systems on the market. With this option enabled, BotShield will instantly block these IP addresses that made requests to your network. The cloud, as part of the unique Inspector security system, will stop any type of attack on your server.
Q: Which game versions does BotShield support? A: BotShield supports all versions of Minecraft, starting with 1.8.
Q: What types of threats does BotShield protect against? A: BotShield provides protection against various threats. It employs advanced algorithms to detect and mitigate these risks.
Q: Can I customize the protection settings? A: Absolutely! BotShield offers flexible configuration options, allowing you to tailor the protection settings to your server's specific needs.
Q: How often is BotShield updated? A: We release regular updates to enhance security features and improve performance. Users will be notified of new updates through the plugin interface.
Q: What is the refund policy for the premium version? A: We do not provide refunds.
Q: Can I suggest new features for BotShield? A: Yes, we welcome user feedback! You can submit your suggestions through our feedback Discord server, and we will consider them for future updates.
Q: How can I leave a review for BotShield? A: You can leave a review through the platform where you downloaded the plugin. Your feedback helps us improve and reach more users.
Q: What should I do if I encounter a bug? A: If you find a bug, please report it through our Discord server with detailed information about the issue. Our team will investigate and work on a fix.
Q: Does BotShield affect server performance? A: BotShield is designed to operate efficiently without significantly impacting server performance.
Q: My network was recently attacked, and I found IP addresses that made requests to my server. Can you check them and then add to your cloud database? A: Absolutely! If you want us to add malicious IP addresses to our database, you can do it on our Discord server!
Q: What are the system requirements for BotShield? A: Minimum Java version: 11. Recommended: Java 17 or higher for optimal performance.
FEATURES
Customizable Configuration: Tailor your server settings to meet specific needs and preferences, allowing for a highly personalized gaming experience. This flexibility empowers server administrators to adjust parameters based on player demographics, peak activity times, and specific gameplay requirements, ensuring that the server operates optimally under varying conditions.
AntiVPN/Proxy Detection: Implement customizable checks to identify and block users utilizing VPNs and Proxy services. This feature is crucial for maintaining the integrity of your gaming community, as it helps prevent players from circumventing geographical restrictions and engaging in unfair practices. By ensuring that only legitimate players can access your server, you foster a fair and competitive environment.
IPTables Integration: The seamless integration with IPTables allows you to block malicious bots directly at the system level using a firewall. This capability not only enhances security but also streamlines the process of managing unwanted traffic. By leveraging IPTables, server administrators can create specific rules that target known threats, ensuring that your server remains resilient against attacks.
Connection Rate Limiting: Control the number of connections and pings per second to mitigate potential abuse. This feature is essential for preventing server overload during peak times or in the event of a bot attack. By setting limits on connection rates, you can maintain a smooth and enjoyable experience for legitimate players while effectively managing server resources.
Nickname Filtering: Prevent the use of commonly adopted bot nicknames to enhance the integrity of the gaming community. By filtering out these frequently used names, you reduce the likelihood of bots infiltrating your server and disrupting gameplay. This proactive approach helps maintain a vibrant and engaging environment for all players.
Lockdown Mode: Activate lockdown mode during large-scale DDoS or bot attack to protect server resources. This feature allows you to temporarily restrict access to the server, ensuring that legitimate players are not adversely affected while you address the threat. Lockdown mode serves as a critical defense mechanism, enabling you to respond swiftly to potential crises.
Startup Mode: Enable startup mode when restarting the server under attack to safeguard server resources. This feature ensures that your server can recover quickly and efficiently, minimizing downtime and maintaining player engagement. By prioritizing resource protection during restarts, you enhance the overall stability of your gaming environment.
Inspector: Inspector is a groundbreaking solution designed to provide unparalleled protection for your gaming server against unwanted bots and malicious actors. This innovative tool employs advanced algorithms to meticulously analyze player behavior, identifying anomalies that may indicate bot or DDoS activity. Upon detection of suspicious behavior, Inspector automatically restricts access, ensuring a secure gaming environment and safeguarding server resources from potential abuse.
Watcher: Watcher is a unique development that operates based on behavioral analysis, meticulously examining the actions of each player. This component ensures that bots are never allowed to access the server, providing an additional layer of security and maintaining the integrity of your gaming experience.
IP Connection Limiting: Restrict the number of accounts that can be created or connected from a single IP address. This feature is vital for preventing mass account creation and potential exploitation of your server. By enforcing IP connection limits, you can maintain a healthy player base and deter malicious activities.
Latency Monitoring: Identify and block players or bots exhibiting excessively high ping rates. This capability is crucial for preserving the quality of gameplay, as high latency can lead to frustrating experiences for legitimate players. By monitoring and managing latency, you ensure that your server remains responsive and enjoyable for all participants.
Country Check: Verify players' countries to prevent unwanted connections and ensure compliance with geographical access requirements. This feature is essential for maintaining a secure and compliant gaming environment, as it helps you enforce regional restrictions and protect your server from potential threats.
Cloud Check: Cloud verification is a key component of effective protection. By verifying every player's IP against our extensive cloud database, you enhance security and identify potential threats using the latest threat intelligence. This proactive approach allows you to stay ahead of emerging risks and ensure that your server remains a safe haven for players.
COMMANDS
/botshield - shows the help message.
/botshield stats - shows the statistic message.
/botshield firewall add [ip] - adds an IP address to the firewall.
/botshield firewall remove[ip] - removes an IP address from the firewall.
settings:
inspector:
cloud: true # You can connect to the cloud services. It will provide the freshest information about malicious IP addresses that updates on our services in real time. With this option enabled, the system will block the new threats effectively (remember that the cloud system gets updates only after the server restart).
startup: # Disable startup mode after the time you set. It may give additional time to load the databases and can also help to mitigate large-scale attacks.
enabled: true
seconds: 10
kick: |
&a&lBOTSHIELD
&8{module}
&cThe server is loading. In this period, we are downloading and setting up all configurations to properly protect the network.
&cIt will not take more than 1 minute.
&fError? Contact us on &a&lhttps://discord.gg/eDPgKTYGQG
firstjoin: # If a player joins for the first time, they will be automatically kicked. This module is designed to help identify and mitigate slow bot attacks effectively.
enabled: true
kick: |
&a&lBOTSHIELD
&8{module}
&cWe have completed the analysis of your connection. You may now proceed to connect to the server.
&fError? Contact us on &a&lhttps://discord.gg/eDPgKTYGQG
whitelist:
seconds: 300 # How much time players have to play on the server to get whitelisted?
reset: 43200 # Reset the whitelist every time you set.
kick: |
&a&lBOTSHIELD
&8{module}
&cWe are unable to verify your identity as a genuine player. Please reconnect to the server to continue.
&fError? Contact us on &a&lhttps://discord.gg/eDPgKTYGQG
trigger:
connections: 8 # How many connections should be to enable under attack mode?
period: 60 # How many connections should be during the specified period to enable under attack mode?
seconds: 240 # The time that under attack mode will be enabled.
attempts:
# NOTE: Do not set both values below 0, as this will completely disable the verification process. We recommend setting the values to at least 2 for more accurate player verification.
# You may choose to disable one of these options and keep only one verification method enabled.
connect: 2 # How many times should the player connect to the server to pass the verification?
ping: 2 # How many times should the player refresh the server list to pass the verification?
symbol: '&a&l✓&f' # This symbol will be displayed at the place of completed verification stage.
watcher: # The Watcher component analyzes the behavior of players on a protected network and provides this information to other components to detect anomalies.
strict: false # You can enable this module for a more detailed verification process. Make sure that you use the second layout, which is specified in the comments, and the value for both attempts is greater than 0.
# NOTE: Do not change the values below if you do not know how does the Watcher work.
# Changing these parameters by uninformed people can lead to ineffective protection.
# Use this layout if strict mode is disabled:
1: # First layer of the behavior analysis (DO NOT CHANGE THE VALUES WITHOUT KNOWLEDGE)
min: 1585
max: 2980
2: # Second layer of the behavior analysis (DO NOT CHANGE THE VALUES WITHOUT KNOWLEDGE)
min: 1695
max: 8095
# Use this layout if the strict mode is enabled:
# 1: # First layer of the behavior analysis (DO NOT CHANGE THE VALUES WITHOUT KNOWLEDGE)
# min: 1595
# max: 4395
# 2: # Second layer of the behavior analysis (DO NOT CHANGE THE VALUES WITHOUT KNOWLEDGE)
# min: 1695
# max: 6085
kick: |
&a&lBOTSHIELD
&8{module}
&cYour connection is suspicious. Please verify yourself by
&ccompleting the tasks below:
&f1. Reconnect &a{attempts} &ftimes!
&f2. Refresh the server list &a{pings} &ftimes!
&c&l! Do it one at a time and not quickly.
&fError? Contact us on &a&lhttps://discord.gg/eDPgKTYGQG
nickname: # Block nicknames frequently used by bots.
enabled: true
pattern: # Advanced nickname filtering. Bots which have a pattern in their nickname will be blocked by default.
enabled: true
regex: "[a-zA-Z0-9_]*"
length: # Should the plugin check the length of the player nicknames?
enabled: true
min: 4 # The minimum length of the nickname.
max: 16 # The maximum length of the nickname.
blacklist:
- 'mcstorm'
- 'mcdrop'
- 'ttproxy'
- 'mcbot'
- 'mcspam'
- 'deathbot'
- 'evolution'
- 'theresa_bot'
- 'mcdown'
- 'neoware'
- 'hydra'
- 'mproxy'
kick: |
&a&lBOTSHIELD
&8{module}
&cYour nickname is either frequently used by bots, does not match the allowed pattern [a-zA-Z0-9_]*, or is not between 4-16 characters long. Please choose a different nickname.
&fError? Contact us on &a&lhttps://discord.gg/eDPgKTYGQG
firewall: # Block bots.
# NOTE: To use this function you have to run your Minecraft server as a root user on a Unix system (Ubuntu, Debian, etc.).
iptables: true # Firewall blacklisting module (IPTables + IPSet). We strongly recommend keeping it enabled, as it will instantly block any malicious IP addresses at the system level, dropping all traffic from those IPs for the specified duration below.
time: 120000 # The time after which mitigated IP will be unblocked.
kick: |
&a&lBOTSHIELD
&8{module}
&cYour connection has been identified as dangerous,
&cand our protection system has blocked it.
&fError? Contact us on &a&lhttps://discord.gg/eDPgKTYGQG
whitelist: # Will the plugin check the following IP addresses?
- '127.0.0.1'
ratelimiter: # Control the connections and pings.
enabled: true
period: 1000 # How many connections or pings should be in this period to block an IP?
connections: 3 # How many connections should be to block an IP?
pings: 6 # How many pings should be to block an IP?
kick: |
&a&lBOTSHIELD
&8{module}
&cYou are acting too suspiciously, which forces us to take
&cdefensive measures to protect our network.
&fError? Contact us on &a&lhttps://discord.gg/eDPgKTYGQG
whitelist: # Will the plugin check the following IP addresses?
- '127.0.0.1'
ip-limit: # Limit accounts for player.
enabled: true
max: 3 # How many different usernames can play with the same IP at the same time?
kick: |
&a&lBOTSHIELD
&8{module}
&cThere are too many accounts playing on the network!
&fError? Contact us on &a&lhttps://discord.gg/eDPgKTYGQG
whitelist: # Will the plugin check the following IP addresses?
- '127.0.0.1'
latency: # Limit players ping.
enabled: true
limit: 500 # How much ping should be to block an IP?
kick: |
&a&lBOTSHIELD
&8{module}
&cYour latency exceeds the limit!
&fError? Contact us on &a&lhttps://discord.gg/eDPgKTYGQG
lockdown: # Automatic activation of the lockdown mode if the number of connections listed below is exceeded at the time of the server attack.
enabled: true
connections: 5000 # How many connections should be to enable lockdown mode?
seconds: 30 # The time that lockdown mode will be enabled.
kick: |
&a&lBOTSHIELD
&8{module}
&cThe server is under lockdown. In this period, we are mitigating a large-scale DDoS attack to protect the network.
&cIt will not take more than 1 minute.
&fError? Contact us on &a&lhttps://discord.gg/eDPgKTYGQG
country: # Block specific countries.
enabled: true
list: # We have collected a lot of information about botnets in different countries and found out that countries listed below have the largest amount of botnets.
# You can add or remove countries from this list if needed.
- 'US'
- 'CN'
- 'IN'
- 'BR'
- 'ID'
- 'DZ'
- 'GB'
- 'UK'
- 'VN'
- 'IR'
- 'CA'
- 'KR'
- 'MA'
- 'AR'
- 'FR'
- 'JP'
- 'SG'
- 'DE'
- 'HK'
kick: |
&a&lBOTSHIELD
&8{module}
&cYou are unable to access the network in your country.
&fError? Contact us on &a&lhttps://discord.gg/eDPgKTYGQG
proxy: # Block malicious IP addresses (such as botnets, proxies, etc.).
enabled: true
delay: 5 # The delay at which the IP addresses will be downloaded, do not set this value too low if your server does not have a large amount of resources (in milliseconds).
kick: |
&a&lBOTSHIELD
&8{module}
&cPlaying on our server is not possible using a VPN or PROXY.
&fError? Contact us on &a&lhttps://discord.gg/eDPgKTYGQG
whitelist: # Will the plugin check the following IP addresses?
- '127.0.0.1'
list:
- 'https://raw.githubusercontent.com/Dan-Duran/vpn-checker/refs/heads/main/known-vpn/vpn-list.txt'
- 'https://raw.githubusercontent.com/TheSpeedX/SOCKS-List/master/socks4.txt'
- 'https://raw.githubusercontent.com/mmpx12/proxy-list/master/ips-list.txt'
- 'https://lists.blocklist.de/lists/all.txt'
- 'https://api.openproxylist.xyz/socks5.txt'
- 'https://raw.githubusercontent.com/mmpx12/proxy-list/master/socks5.txt'
- 'https://raw.githubusercontent.com/B4RC0DE-TM/proxy-list/main/SOCKS5.txt'
- 'https://raw.githubusercontent.com/rdavydov/proxy-list/refs/heads/main/proxies/http.txt'
- 'https://raw.githubusercontent.com/rdavydov/proxy-list/refs/heads/main/proxies/socks4.txt'
- 'https://raw.githubusercontent.com/rdavydov/proxy-list/refs/heads/main/proxies/socks5.txt'
- 'https://raw.githubusercontent.com/jetkai/proxy-list/refs/heads/main/online-proxies/txt/proxies-socks5.txt'
- 'https://raw.githubusercontent.com/TheSpeedX/PROXY-List/master/http.txt'
- 'https://raw.githubusercontent.com/clarketm/proxy-list/master/proxy-list-raw.txt'
- 'https://raw.githubusercontent.com/scriptzteam/ProtonVPN-VPN-IPs/main/exit_ips.txt'
- 'https://check.torproject.org/torbulkexitlist?ip=1.1.1.1'
- 'https://cinsscore.com/list/ci-badguys.txt'
- 'https://blocklist.greensnow.co/greensnow.txt'
- 'https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/stopforumspam_7d.ipset'
- 'https://raw.githubusercontent.com/jetkai/proxy-list/main/online-proxies/txt/proxies.txt'
- 'https://raw.githubusercontent.com/monosans/proxy-list/main/proxies/socks4.txt'
- 'https://raw.githubusercontent.com/duggytuxy/malicious_ip_addresses/refs/heads/main/blacklist_ips_for_fortinet_firewall_aa.txt'
- 'https://raw.githubusercontent.com/duggytuxy/malicious_ip_addresses/refs/heads/main/blacklist_ips_for_fortinet_firewall_ab.txt'
- 'https://raw.githubusercontent.com/duggytuxy/malicious_ip_addresses/refs/heads/main/botnets_zombies_scanner_spam_ips.txt'
- 'https://raw.githubusercontent.com/jetkai/proxy-list/refs/heads/main/online-proxies/txt/proxies-http.txt'
- 'https://github.com/jetkai/proxy-list/blob/main/online-proxies/txt/proxies-https.txt'
- 'https://github.com/jetkai/proxy-list/blob/main/online-proxies/txt/proxies-socks4.txt'
- 'https://github.com/jetkai/proxy-list/blob/main/online-proxies/txt/proxies-socks5.txt'
- 'https://github.com/jetkai/proxy-list/blob/main/online-proxies/txt/proxies.txt'
- 'https://raw.githubusercontent.com/mython-dev/free-proxy-4000/refs/heads/main/proxy-4000.txt'
filter: # Enable the log filter to avoid (exceptions, kick messages, initialhandler, etc).
enabled: true # Do not disable this component, because it will automatically filter out unnecessary messages and fix some exploits with their help.
alerts:
detailed-information: true # Will the plugin send information about reason why the IP was blocked?
attack-information: true # Will the plugin send information about the attack to the console?
messages: # You can edit the plugin’s command messages here. Feel free to customize the texts and translate them as needed.
no-permissions:
- " &8&m--------------"
- " &4&lERROR!"
- " &7■ &cYou do not have permissions!"
- " &8&m--------------"
stats:
- " &8&m--------------"
- " &a&lBotShield"
- " &7(By _Der_Wold_)"
- " "
- " &fStatistics:"
- " &7■ Mitigated IP(s): &e{1}"
- " &7■ Verified IP(s): &b{2}"
- " "
- " &7■ Connections: &a{3}"
- " &7■ Pings: &d{4}"
- " "
- " &7■ Status: {5}"
- " &8&m--------------"
help:
- " &8&m--------------"
- " &fCommands:"
- " &7■ &a/botshield stats &7- show a statistic."
- " &7■ &a/botshield firewall &7- firewall certain IP(s)."
- " &8&m--------------"
firewall:
usage:
- " &8&m--------------"
- " &7■ Usage: &a/botshield firewall [add/remove] [IP]"
- " &8&m--------------"
added:
- " &8&m--------------"
- " &7■ &fIP &a{0} &fwas successfully added to the firewall."
- " &8&m--------------"
already-exist:
- " &8&m--------------"
- " &7■ &fIP &a{0} &fis already in the firewall."
- " &8&m--------------"
removed:
- " &8&m--------------"
- " &7■ &fIP &a{0} &fwas successfully removed from the firewall."
- " &8&m--------------"
not-found:
- " &8&m--------------"
- " &7■ &fIP &a{0} &fwas not found in the firewall."
- " &8&m--------------"
bStats This plugin uses bStats to collect anonymous data from servers, including server location, Java version, server version, player count, and other related metrics. All collected information is anonymized to ensure privacy.
TERMS
You are not permitted to claim the plugin as your own work!
You are not permitted to decompile the plugin!
You are not permitted to reverse engineering or modify the plugin!
You are not permitted to share the plugin or re-sell it!
We may change these terms at any time, and you must comply with the latest version of these terms!
Failure to adhere to these policies and procedures may result in the blocking of your plugin!
CONCLUSION Please, do not forget to give a review✩✩✩✩✩ Please ask for help before leaving a bad review.
And of course, enjoy using our antibot protection plugin. Thank you! ❤️