ConfirmOP

Plugin secures Minecraft servers, tracks OP player IPs and detects logins from unknown IPs.

Features

- OP Player IP Tracking: Stores and tracks the IP of the specified player

- Unknown IP Login Detection: Automatically detects when a player logs in from a different IP than the saved IP

- Discord Notifications: Sends alerts and authentication codes via Discord webhook

- Require Authentication: Players logging in from an unknown IP must authenticate using a code sent via Discord

- Restrict Interaction Before Authenticating: Players cannot move, interact with the world, or use commands before authenticating

- Authentication Time Limit: Players have 60 seconds to authenticate, otherwise they will be banned

- Auto-Ban: Bans a player if they enter the wrong authentication code 3 times

Settings

1. Place the JAR file in the server's plugins folder

2. Restart the server

3. Configure the config.yml file in the plugins/ConfirmOP folder

4. Restart the server or use /cop reload command

Commands

- /cop add <player>: Add player to watchlist

- /cop remove <player>: Remove player from watchlist

- /cop list: View list of players being watched

- /cop reload: Reload configuration

- /cop auth <authentication code>: Authenticate when logging in from unknown IP

Permissions

- confirmop.admin: Allows use of management commands (add, remove, list, reload)

- Auth commands do not require permissions and can always be used

How it works

1. When a player logs in, the plugin checks if they are on the watchlist

2. If the login IP is different from the saved IP, the plugin will:

- Send a notification via Discord

- Generate a random authentication code and send it via Discord

- Restrict the player (cannot move, interact, use commands)

3. Players must use the command /cop auth <authentication code> to authenticate

4. If the authentication is successful, the player can continue playing normally

5. If the wrong code is entered 3 times or the authentication is not performed within 60 seconds, the player will be banned

Security Features

- Regardless of permissions: All players, including OP, must authenticate when logging in from an unknown IP

- Block all interactions: Players cannot interact with the world before authentication

- Block all commands: Players cannot use any commands except the authentication command

- Invisibility and immortality: Players are invisible and immortal before authentication

Support

If you have any problems or questions, please message via discord nhanshinpa