DDoSDefender

V1.80 — Smarter Bot Detection

Detection suite: 19 → 27 checks, with 8 new checks targeting bot naming patterns — keyboard walks (qwerty, asdfgh), digit-stuffed names, xX_Name_Xx wrappers, impersonation of default names (Player123, Guest42), attack-tool vocabulary, and counter-driven name floods (name1, name2, name3...).

AccountGuard reworked — previously tracked everything by player name, so bots using a fresh unique name every connection reset its memory each time. It now also tracks reputation per subnet (IP range), so repeat bad behavior from the same source is actually remembered.

How enforcement works now:

• 🟢 Allow — normal players, untouched
• 🟡 Verify — suspicious activity silently triggers a Mojang ownership check. Real players pass invisibly; offline/spoofed bots don't.
• 🔴 Block — a single name is blocked briefly (60s) for hammering; a whole subnet is only blocked (30s) for extreme, sustained floods

Legitimate players are protected — returning regulars skip extra scrutiny entirely, and nobody is blocked just because someone else on their subnet is misbehaving.

Also fixed: connection frequency is now actually used in scoring (previously tracked but ignored), short-session detection can properly escalate again, and a memory cap was added to stop flood attacks from bloating server memory.

No config changes needed — just update and go.