NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Nov 13, 2012@EroKunG
Check out Orebfuscator: http://dev.bukkit.org/server-mods/orebfuscator/
-
View User Profile
-
Send Message
Posted Nov 13, 2012Why ? It don't anti >>>> http://www.minecraftforum.net/topic/1393694-142-xray-mod-fullbright-xray-cavefinder-more-70000-downloads/
-
View User Profile
-
Send Message
Posted Nov 13, 2012@promiicn
I added some entries to the documentation (quickly), hopefully they make it more clear.
The Logins check limits the number of logins of any players, keeping track of the specified duration in seconds, limiting logins to the specified limit. the startupdelay entry specifies seconds after server start to keep the check inactive, it is made to allow many players joining after a restart.
The Relog check limits the speed with which players can log back in, you might set the warning number to 0 to kick with the first time, timeout (not the warning timeout) is the duration in milliseconds which the players must wait after logout.
-
View User Profile
-
Send Message
Posted Nov 13, 2012how do i protect myself from login/register spam, the bots are trying to login with multiple randomly generated accounts and register, but they get kicked before they can spam. However i would like to delay the login attempts from multiple ips and also delay the time it takes for them to register so that they cant register right away. I looked at the config and honestly i dont understand the delay like what is this: startup delay: what does that do and seconds:, limit ? its not mentioned in the documentation, all it says there is TODO. Also want to increase the tempban period. Please help.
-
View User Profile
-
Send Message
Posted Nov 13, 2012@SmashboxGaming
Seems i have replied by pm, the ticket has vanished somehow.
-
View User Profile
-
Send Message
Posted Nov 13, 2012@ha11oga11o
You can try this backport version for Minecraft 1.3.2 at your own risk: https://github.com/NoCheatPlus/NoCheatPlus/downloads
It is build 241 just made compatible with MC 1.3.2 concerning static code analysis, but no testing done!
The latest officially recommended release for 1.3.2 was build 201, available on BukkitDev (http://dev.bukkit.org/server-mods/nocheatplus/files/33-nocheat-plus-3-7-10-rc-b201/).
If the above backport version (b241) works, it should be prefered.
-
View User Profile
-
Send Message
Posted Nov 12, 2012Hello,
can someone tell me which dev version is compatible with 1.3.2 (latest recommended) and hopefully has anti - force-field working right?
This plugin is great, but seems in freaking N00b! I can get it work at best 60% of anti-hacks.
Many thnx guys :)
-
View User Profile
-
Send Message
Posted Nov 12, 2012@SmashboxGaming
I will comment the ticket.
-
View User Profile
-
Send Message
Posted Nov 12, 2012@asofold
Default chat settings are EXTREMELY over sensitive, and when they are adjusted it doesn't seem to make a difference.
I sent you a PM with the log so you can see for yourself.
-
View User Profile
-
Send Message
Posted Nov 11, 2012@Mortalsinn
There is no setting to allow higher jumping in general (yet). Are you speaking of the jump-boost potion effect? If so, which levels ?
-
View User Profile
-
Send Message
Posted Nov 11, 2012what setting in the config do I tweak to allow people to jump higher with out them being glitched back down? I have some PvP arenas with jump boosts and I am trying to smooth it out a bit.
-
View User Profile
-
Send Message
Posted Nov 11, 2012@andrewkm
The "Failed to login: Error" has nothing to do with NoCheat+, Mojang had some maintenance at the login servers and now this error is happening sometimes, even on a vanilla MC server. NoCheat+ would give out VLs in the console (by default) if someone fails the "too fast relogin" check.
The amount on players doesn't seem to be the problem, this issue even happens on my local server with only me joining it.
-
View User Profile
-
Send Message
Posted Nov 11, 2012@andrewkm
@Demonlover11
Looks like Minecraft / authentication stuff. If you restart client it should work, sometimes trying to relog works.
Especially when i connect to a local server which then runs in in online-mode=false and the connect to a server in online-mode i will get that error consistently. So i assume it is Minecraft authent.
-
View User Profile
-
Send Message
Posted Nov 11, 2012-
View User Profile
-
Send Message
Posted Nov 11, 2012Im pretty sure this is NoCheatPlus preventing too many logins at once; after a server restart a TON of people are getting Failed to login: Error
It works after a while however. I am running build #239 My configuration is absolutely default.
I remember once asking asofold to make the too many logins check delay itself after server start for massive servers who run auto restarts. Asofold added it and all was perfectly fine. However just recently for some reason this Failed to login: Error has been hitting us during too many logins. Any ideas what is going on and why this is happening? Perhaps an issue with NCP's delay?
We run a 200/200 user server; and after auto restart our player slots filling back up time quite some time now.
Seems to happen on other servers too. Hmm perhaps a Mojang session servers issue? The other servers do as well have NCP, now im confused.
-
View User Profile
-
Send Message
Posted Nov 11, 2012@Demonlover11
For mcmmo you can just use CompatNoCheatPlus with NoCheatPlus: http://dev.bukkit.org/server-mods/compatnocheatplus-cncp/
I check that snow one now, it would be very nice if you could make a ticket about this issue for us with more info's.
-
View User Profile
-
Send Message
Posted Nov 11, 2012-
View User Profile
-
Send Message
Posted Nov 11, 2012@OctyArThMc
Please use a paste or such logs and also rather create a ticket. Also paste the full exception trace and if possible include something of what happened afterwards.
A plugin list might be interesting too (pm or in ticket.).
Mind the latest development builds to be found at: http://www.nocheatplus.org:8080/job/NoCheatPlus/
-
View User Profile
-
Send Message
Posted Nov 11, 2012I use the last version 3.8.0 with CraftBukkit version git-Bukkit-1.4.2-R0.2-b2455jnks.
I have a big error, afther the message from nocheatplus my server crashed, can evryone help me?
19:55:49 [INFO] laureuu -> paicu: si tre sa ard blocku? 19:55:49 [INFO] [G] [Moderator] Griefer Ionut1: gata e ascuns! Indiciu : e dur acolo dati ./warp orasulapelor si cautati 19:55:49 [INFO] centurion -> kevinutu00: ok 19:55:49 [INFO] paicu -> laureuu: damil 19:55:49 [INFO] [NoCheatPlus] mha failed FastBreak: tried to break blocks (1) faster than possible. VL 0. 19:55:49 [INFO] [NoCheatPlus] Enginer failed FastBreak: tried to break blocks (18) faster than possible. VL 0. 19:55:49 [INFO] [NoCheatPlus] DJ_ANDY failed FastBreak: tried to break blocks (1) faster than possible. VL 1. 19:55:49 [INFO] [NoCheatPlus] grasunel failed FastBreak: tried to break blocks (5) faster than possible. VL 4. 19:55:50 [INFO] vladro1 issued server command: /tpaccept 19:55:53 [INFO] Connection reset 19:56:16 [INFO] Connection reset 19:56:28 [INFO] Connection reset 19:56:34 [INFO] Connection reset 19:56:35 [INFO] Connection reset 19:56:37 [INFO] Connection reset 2012-11-11 20:03:59 [SEVERE] null java.io.IOException: Input/output error at java.io.FileInputStream.readBytes(Native Method) at java.io.FileInputStream.read(FileInputStream.java:242) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at java.io.FilterInputStream.read(FilterInputStream.java:83) at org.bukkit.craftbukkit.libs.jline.console.ConsoleReader$1.read(ConsoleReader.java:167) at org.bukkit.craftbukkit.libs.jline.internal.InputStreamReader.read(InputStreamReader.java:267) at org.bukkit.craftbukkit.libs.jline.internal.InputStreamReader.read(InputStreamReader.java:204) at org.bukkit.craftbukkit.libs.jline.console.ConsoleReader.readCharacter(ConsoleReader.java:995) at org.bukkit.craftbukkit.libs.jline.console.ConsoleReader.readLine(ConsoleReader.java:1167) at net.minecraft.server.ThreadCommandReader.run(ThreadCommandReader.java:31)
-
View User Profile
-
Send Message
Posted Nov 11, 2012@mrchasez
If you have severe lag spikes you should adapt the configuration to not get spammed too much.
And to be plain - NCP certainly does not assume the world to be ending, it just prevents some actions of the players, because NCP can't really distinguish cheating from effects of lags in some cases. Some cases might be fixable for the case of server lag, some certainly are not fixable in a way that still prevents cheating.
I assume it might be seconds-range lag spikes rather than "dropping to 14 or 17 tps", so you should disable the ingame logging for lower vls for the checks that are most influenced by lag. Also take a look at the configuration page (fastbreak) increase the (yet hidden) contention setting to match lag better.
The topic of lag + skipping checks or notifications is still on the list, though.