Minecraft Blogs / Tutorial

Basic guide to catching hackers on Vanilla servers

  • 1,079 views, 2 today
  • 2
  • 1
  • 5
megaCOOL1's Avatar megaCOOL1
Level 8 : Apprentice Network
1
Obviously, you can't keep an eye on all players. That's when this handy little guide comes in. If you own a server, and are having trouble with hackers, read on! This guide makes use of the server console in order to catch hackers.

Catch people flying:
Look for players that have been kicked for floating too long. This is what you should find in the server console:
[size=85%][21:52:38] [Server thread/WARN]: megaCOOL1 was kicked for floating too long!
[21:52:38] [Server thread/INFO]: megaCOOL1 lost connection: TextComponent{text='Flying is not enabled on this server', siblings=[], style=Style{hasParent=false, color=null, bold=null, italic=null, underlined=null, obfuscated=null, clickEvent=null, hoverEvent=null, insertion=null}}
[21:52:38] [Server thread/INFO]: megaCOOL1 left the game
[21:52:38] [Server thread/WARN]: handleDisconnection() called twice[/size]
Any of these messages should indicate somebody using Fly or Jetpack. However, hackers don't ALWAYS get kicked for flying: they only get kicked for flying upwards for more than five seconds at a time. So they can stay in the air for as long as they want - as long as they keep flying up and then falling down again (even if they don't hit the ground).

Catch people using speedhack/Jumphack:
Look for messages that tell you if a player moved too quickly. This is what you should find in the server console:
[size=85%][21:52:23] [Server thread/WARN]: megaCOOL1 moved too quickly! -8.332041314093672,1.021599998474116,-6.05410023230894[/size]

How to be absolutely sure that somebody is hacking:
1) Make yourself invisible
2) TP to them (or set up a repeating command block to gain their field of view)
3) Observe their behaviour.
If it seems suspicious, you can decide whether to ban them or not.


Overall, this is a basic guide. It is incomplete and will be expanded.
Sometimes, it's useful for a member of staff themselves to use a hacked client just to help catch hackers, although be careful that other members of staff know that. I used the Wurst hacked client and the 1.11.2 vanilla server jar in this example. (I also got banned for hacking on a Vanilla server).
I hope you all find this useful! :D
Tags

Create an account or sign in to comment.

1
07/04/2017 2:15 pm
Level 9 : Apprentice Network
Jams1664
Jams1664's Avatar
1) Make yourself invisible
2) TP to them (or set up a repeating command block to gain their field of view)
3) Observe their behaviour.
If it seems suspicious, you can decide whether to ban them or not.


I'm sorry if this is too harsh but you shouldn't be running a vanilla minecraft server if you don't know about /gamemode 3 or /gamemode spectator (/gamemode sp) which allows you to float, clip blocks and teleport to the player without using /tp. You can also click on a player while in this mode to gain their point of view.
1
09/24/2017 3:26 pm
Level 8 : Apprentice Network
megaCOOL1
megaCOOL1's Avatar
For your information I haven't even started my server yet. And yes I already know about spectator mode, this was copied and pasted from a different guide I made, all the way from when 1.4 was the latest version.
1
07/04/2017 2:12 pm
Level 9 : Apprentice Network
Jams1664
Jams1664's Avatar
Hello.
I own the official, already open YourWorldMC Vanilla Survival Server.
The 'Flying is not enabled on this server' kick can also kick you for riding donkeys and horses etc. Its very unreliable. I suggest you make a fly hack detection system tailored for your own server like I have.

I detect players 10 blocks up with air below them and it alerts all Admins online and is displayed in the console for admins to see.

As Prince Oceanus said the '{name} moved too quickly!' is also very unreliable. I once again suggest you make a custom system with command blocks and possibly server side scripts (If running on a dedicated) to help catch hackers.

-Jams__
YourWorldMC Admin // play.yourworldmc.us
1
09/24/2017 3:27 pm
Level 8 : Apprentice Network
megaCOOL1
megaCOOL1's Avatar
Oh well, guess I have to change the name again.
1
06/05/2017 12:17 pm
Level 52 : Grandmaster Prince
Prince Oceanus
Prince Oceanus's Avatar
The '<player name> moved too quickly!' could also be from the server not having enough RAM and causing rubber-banding to happen. I've experienced this on my private Creative server my friend and I have.
Planet Minecraft

Website

© 2010 - 2024
www.planetminecraft.com

Welcome