AntiRaidSystem

EN / English ------------ Protection plugin against offline-mode raid/scanner attacks for Spigot/Paper 1.21.x.

Features

- Nickname ⇄ IP lock with multi-IP grace and optional /24 subnet allowance - Player/IP allowlists - New-player restrictions (blocked commands + command cooldown) - Global block for dangerous commands (e.g., execute) - RU/EN i18n with auto locale detection - Strict protection mode for admin nicknames (only pre-authorized IPs)

Compatibility

- Spigot/Paper 1.21 – 1.21.x (api-version: 1.21)

Installation

1. Place build/libs/AntiRaidSystem-0.0.1.jar into plugins. 2. Start server to generate the config. 3. Adjust config.yml to your needs.

Quick start (routine steps)

1. Keep strict defaults (1 IP, no /24, trust after 24h). 2. Add your admin nicknames to protected.players (or use /ars protect <player>). 3. On first admin logins, authorize their IPs via /ars authorize <player> <ip>. 4. For users with frequently changing IPs, either use /ars authorize as needed or increase general.ip_lock_auto_learn_up_to. 5. Watch plugin logs for pre-login and command blocks.

Scenarios & solutions

- Player with dynamic IP: - Default behavior: kick on IP change. Solution: /ars authorize <nick> <new-ip>. - Changes often? Increase general.ip_lock_auto_learn_up_to (e.g., 2–3) or enable /24 (ip_lock_allow_same_subnet_24: true). - Admin nickname targeted: - Add to protected.players. Only pre-authorized IPs may join. - New players spamming commands: - Raise security.command_cooldown_seconds (e.g., 2–3). - Attempts to abuse WorldEdit: - Untrusted already blocked for // and common WE commands. Keep them untrusted (24h) or grant trust manually /ars trust <player>. - Curious users checking plugins/version: - Untrusted blocked for pl/plugins/version/help. Extend security.blocked_for_untrusted if needed. - Need to quickly allow full commands to a user: - Grant trust: /ars trust <player> (adds to trusted.nicknames). Revoke: /ars untrust <player>.

Commands

- /ars reload — reload config - /ars authorize <player> <ip> — authorize IP for a nickname - /ars allowplayer <player> — add allowed player - /ars allowip <ip> — add allowed IP - /ars protect <player> — enable strict protection for nickname - /ars unprotect <player> — disable strict protection Permission: ars.admin (default: OP).

Config (highlights)

- general.ip_lock_enabled: enable nickname ⇄ IP lock - general.ip_lock_auto_learn_up_to: auto-learn up to N IPs per nickname - general.ip_lock_allow_same_subnet_24: allow same /24 subnet - general.allowlist_players_only / general.allowlist_ips_only: strict allowlist modes - general.block_dangerous_commands_globally: block commands for all - security.command_cooldown_seconds: per-player command cooldown - security.blocked_for_untrusted: blocked commands for new players (WorldEdit/FAWE, scoreboard, plugin info) - protected.players: nicknames with strict protection - messages: RU/EN messages, bilingual kick texts for unknown locale See config.yml for fully documented options (RU/EN comments).

License (short)

- Allowed: use the plugin; redistribute the original, unmodified JAR with attribution. - Prohibited: selling; modifying/decompiling/forking and distributing derivatives; removing attribution; changing the license. - You may modify source code only for personal use on your own servers. Publishing/distributing modified versions is prohibited. See LICENSE for details.