NoPwnage
NoPwnage
Identify and ban bots that connect to the server for the sole purpose of spamming it
Introduction
NoPwnage will monitor the behaviour of players that connect to the server, especially their chat messages, timing, content etc. to decide if they may be spambots. If a player gets identified as such, he can first receive a warning, and if he continues to misbehave, he may get kicked or banned (configurable).
While the plugin is based on the concept of the discontinued AntiPwnage, it is not the same because it has been completely rewritten from scratch and extended, e.g. by providing configuration settings, a clearer, simpler code structure, the option to decide what should happen if a player gets identified as spamming and many more things.
Instructions
see the file "Instructions.txt" that gets generated when the plugin loads the first time, or look at them online here: Instructions.txt
Downloads/Changelogs/Source Code
- Downloads
- "Download" button somewhere on this page (usually top right corner) for the latest BukkitDev approved version
- "Recent Files" links in the "Facts" section (somewhere to the right) for one of the latest BukkitDev approved versions
- "Downloads" page that I made (all versions)
- direct link which should point always to the latest version
- Changelogs
- "Changelog" page that I made (all versions)
- Source Code
- Github.com link . NoPwnage is an open source plugin released under MIT license.
Contact / Support
You can reach me here in the comment section or opening a support ticket (if you have a bug report to make or need support). Those things are most likely to grab my attention. You can also follow me on Twitter http://twitter.com/Evenprime85 to get informed about new versions of my plugins and maybe a random rant about stuff that annoys me while coding.
Thank you for reading this!
@deleted_8156133
They get all of the accounts from those force op crap on YouTube lol
One time I downloaded one, I would never run it though. And norton 360 deleted it on site.
Google needs to clean up that crap on there...
@deleted_8156133
well that's more so just a bot for people who wanna click-and-drool
id make my own lol, the point of what i said though, was that with an upload of only 100KBps i could cause havoc with no problems for myself this is why that pwnage crap works, its built on the model of a lazy griefer
griefers are persistent but lazy, they will grind if they must but only if its little work, generally the biggest preventative measure is not to combat the griefer head on, just make the griefing hard work
no cheat does this for example, instead of booting you can just make it inconvenient and bye bye griefer, of course then some idiot made pwnage so griefers just use that since it so much easier than actually playing minecraft to grief -.-
EDIT: given what evenprime said, the smartest sort of method is to allow a pwange user to spam but only send the crpa he sends back to himself so he thinks hes clever and hurting the server but he's not ;P
@cvxx7q
Yeah, I have seen it on YouTube, that pwnage bot haha
@cvxx7q
i have an upload of 800kbps and download of 24000kbps, if i was to spambot a server myself i cud certainly cause a crapload of trouble
and my upload is pretty low (best ican get atm im afraid, ADSL2+ no Fibre yet XD)
@deleted_8156133
yeah, but they are downloading the messages (most people have higher dwnload than upload)
so a server upload can be insanely saturated just because of the spam multiplying
@cvxx7q
Oh yeah, alright I see what you mean.
Edit, don't the bots get a copy too? Even though they are not real players.
@deleted_8156133
sending to all the clients, the server is acting as a huge multiplier, send 1 message and 50 copies are sent
1 to each client
add 50 bots you have 100 clients
@Evenprime85
I think I know what you mean, but why would there be 50,000 messages in total? I mean you said it would be 1000 a second in the first part. I bet i just mis read something.
Can you make the plugin check for spam even after a captcha has been entered correctly? That would be human spam, but would be a good precaution, just an idea.
Just filtering messages (instead of kick/ban) isn't a performance problem. The high performance drops when people spam with multiple bots usually comes from bandwidth/network saturation.
E.g. on a server with 50 players, 50 additional bots join and spam 10 messages per second each. Reading those 1,000 messages per second is no big problem because the total amount of data per second is still small (200 bytes * 500 messages = 100 kb of messages). The problem is that the server will have to (after processing everything, appending prefixes, etc. etc.) send 50,000 messages per second in total, which would already be 10 mb traffic just for chat. That's what really kills the server, not the parsing/processing of messages.
So using a killswitch like "/muteall" that turns off chat is a good idea, if you can live with not having chat for some time.
@cvxx7q
Oh hah your right, maybe evenprime will come up with something to fix that, idk.
@deleted_8156133
pretty sure i mentioned the filtering stuff on the server-side causing lag even though u may not see it, it's a few posts back
i'm not stupid ;)
anyway, wait for evenprime to turn up he'll let you know
@cvxx7q
Yeah but it never runs the commands, after it mutes the bot. You would get a lot of lag because the server still has to filter the message.
@deleted_8156133
i didn't say it didn't work, i said it wasn't meant to fix your reported issue
@cvxx7q
Well this one stops slow spammers better if you set it to ban. Detects repeat and all.
@deleted_8156133
its not meant to stop humans spamming, this is about identifying bots, anti-spam is in NoCheat i think
however if u mean a user running a spambot/autotyper then answering the captcha then continuing, that still falls under user spam rather than bot spam
I think the new captchas work well, but they never run the commands if the user manages to enter the captcha, THEN start spamming a second time.
@dafreo1
its not the spamming that's the issue so much, its the rapid connections and message packets, even tho you mute the chat, the server still receives all those packets and has to "filter" them out to create that "mute" effect
@dafreo1
No, that is quite silly to mute the innocent players. It also wouldn't prevent the connect and disconnect spam and the server being full. It also requires no Admin intervention, so if you're not online it'll take care of it.
Couldnt someone just make a plugin '/muteall' mutes all players, you can unmute once they have given up?
http://dev.bukkit.org/server-mods/nopwnage/pages/changelogs-and-downloads/
The latest version there works for 1.2.3 and 1.2.4. It should appear soon in the "official" download list on the right side.