That can be tricky if the auto clicker has a Random var for the interval inbetween the clicks.
There are a few things you can do to detect/stop these guys:
1) Disable the part were the clicking occurs, if people need a bot to do some action it is simply too boring for a human being. (my no.1 suggestion, as it is not in your business to bannish players, and if the game itself is boring it is only your fault)
2) As for the detection of an auto clicker. There are a few types of auto clicking bots (I scripted bots for RuneScape) and there you would have:
Clicking on a specific 3d game object mesh inside the editor, all objects have an id. (ultra hard to detect).
Clicking on one specific gamespot for eg. the minimap, always one exact pixel in the players current pos. Players can set up an auto mouse to click in one point.
First thing you want to set, is the player online time table. - if
a player has an "insomniac" entry (playing over 20h/day) mark him
automatically as suspicious. In the game Tibia there is a fan website Pskonejott.com
where anyone can see the online time of all players. Some stay up for 40
hours, I hardly believe it is Redbull rather than C++ :)
Add it to his record if he plays over X hours.
Make up a Log for actions and if the time between the actions is
nearly identical mark that person as a bot. Player clicks on
something, then after some time he clicks again. if he repeats this
action every five minutes +- (1-2)% for 5hours, mark him as
Try to implement the web Captcha once every few hours if it is a browser game it will be easy to do. For instance the player gets> teleported and then he is supposed to type in the Captcha. No bot so far has been able to handle that. (Some humans got problems with that too)
http://areyouahuman.com/demo/ Doesn't matter how many mistakes he
makes, If he can't do it for 10 minutes/loggs out add this to his
Set up a quick report abuse system. With an ingame report abuse
button. Encourage players to report suspicious actions, tell them to
ask the suspicious characters if they are alive. If the player
responds immediately/the reporter doesn't speak to him directly using
his name "Hey Player, you there?" it likely means that the report is
Give all your workers ingame characters as Moderators/Game Masters
along with volountary game masters. They actually should sometimes log
into the game to know what is going on, and get a real bio from the
players not just forums, if a player has a feeling that he might
actually meet a Moderator it could prevent some of them from botting.
Have a community manager to manage the bans, there always should be a
judge to make sure no one gets deleted without an important issue. He
should look through the player logs marked as suspicious and define if
his actions can actually be botting.