AquaAntiBot 🛡️

Bots can't fake both checks.
The ultimate two-factor bot mitigation framework combining web-based Discord OAuth verification, real-time proxy filtering, and un-scrapable pixel-rendered map graphics in-game.

🚀 Overview

AquaAntiBot is a next-generation security solution engineered specifically to eliminate bot attacks, alt-account spam, and automated join scripts. Unlike standard anti-bot plugins that rely on simple chat prompts or easily bypassable kick routines, AquaAntiBot forces incoming connections to prove human authenticity both off-game and in-game.

By combining browser-level Discord OAuth2 authentication with packet-proof map rendering, AquaAntiBot guarantees that throwaway scripts simply cannot breach your server network.

⚡ How It Works

• 01. One-Time Link: Player joins and is stuck with a unique, one-time verification link.
• 02. Discord & VPN Check: They open the link, log in with Discord, and pass the proxy/VPN detection check.
• 03. In-Game Freeze: They rejoin the server, get frozen, and receive a custom map displaying a code.
• 04. Map Code Verification: They type the code in chat and their IP is instantly whitelisted.
• 05. Ready to Play: They refresh the server list, rejoin, and play!

🛡️ Key Features

• Real Account, Real Human (Discord OAuth): Requires players to sign in with Discord before joining. Throwaway scripts do not have authentic Discord accounts to sign in with.
• Rendered, Not Readable (Map Code): The code is drawn onto a map item as raw pixels. Because it is rendered visually on the client canvas, bots cannot scrape it out of chat or incoming network packets.
• Outbound Only: The plugin only sends outbound requests to register and check tokens. You never touch your firewall or open additional inbound ports.
• Built-in Anti-VPN / Proxy Shield: Automatically detects and filters out datacenter IPs, proxies, and malicious VPNs before players reach your world.

📌 Dependencies

• AquaCore: Required server core manager for session handling and player routing. https://modrinth.com/plugin/aqua-core (if not released yet wait for it or contact me in discord)

🔧 Installation & Setup

1. Ensure AquaCore is installed on your server network.
2. Drop AquaAntiBot.jar into your server's plugins folder.
3. Restart your server to generate the configuration files.
4. Add your web app credentials in config.yml.
5. Reload or restart your server to apply changes!