Connection control
Per-IP windows, global login caps, subnet throttling, and malformed-handshake rejection run before a username exists.
The anti-bot edge for Minecraft proxies.
A proxy fork that filters, verifies, and observes connections inside the Netty pipeline — before they reach your world.
Leviathan is a fork, not a plugin. The anti-bot engine is compiled into the proxy and wired into the Netty connection path, so throttle, verification, and frame limits see traffic before a backend server does.
The design goal is boring reliability: a normal JVM process, HTTPS-only reputation calls, small versioned persistence, no system commands, and a clear line between Free Trial and the privately validated Premium edition.
Per-IP windows, global login caps, subnet throttling, and malformed-handshake rejection run before a username exists.
Reconnect challenges, username rules, name-flood detection, and FrameGuard — packet-rate, login-size, and login-deadline limits that detach after verification.
Offline MaxMind country and ASN blocks, plus optional HTTPS reputation checks that are cached and attack-gated to protect quota.
IP and username blacklists with auto-expiry, repeat-offender handling, and Discord webhook alerts on attack start and end.
Everything happens in the proxy process. Leviathan never runs system commands, edits firewall rules, or installs packages.
If the private entitlement validator is unreachable, protection stays active. The proxy does not die because a license server blinked.
Tell us what you are running and where it hurts. We will route the brief to the right system.
Start a brief