Skip to content

Allow anonymous analytics?

Our cookieless analytics show us which features get used and store nothing on your device. We never sell your data or use it for advertising.

Privacy choices

Choose what ModDex may collect. You can change this anytime from Privacy choices in the footer.

Read the full privacy policy

Strictly necessary Required for the site to work: login sessions, security tokens, and abuse prevention. Always on and cannot be disabled. Always on
Analytics Cookieless analytics through PostHog's EU servers, used only to see which features get used. Nothing is stored on your device, and the anonymous visitor ID resets every day. Needs your consent because usage data goes to a third party. Never used for advertising or profiling. Off by default in the EU and UK.

DDoSDefender

Quick rating

Community listing page, reviews may not be monitored by the author.

How listings work Are you the author?

DDoSDefender

By IUDEX INC

No reviews yet

Real-time protection against bots and connection abuse.

Mod Loaders
Minecraft
26.3 26.2
Shockbyte server hosting: 35% off your first server with code MODDEX35 (opens in a new tab)

About

Description

DDoSDefender

Keeps bot attacks off your Minecraft server. It checks every connection as it comes in and blocks fake players, join spam and ping floods before they can cause lag or crashes.

Free, with no premium tier and nothing locked behind a paywall.

Works on: Paper, Spigot, Purpur, Folia, BungeeCord, Waterfall and Velocity

What it does

Blocks bots at the door. Spam connections, bad handshakes and login floods get dropped straight away, so your server doesn't waste resources on them.

Spots fake accounts. Every player is checked against a database of real Minecraft accounts, and their usernames are checked for the patterns bots tend to use, like random letters or keyboard mashing. Real players are rarely caught. Anything borderline gets a proper account check instead of an instant block.

Handles big attacks automatically. If a coordinated attack starts, Under-Attack Mode switches on and only your regular players can join. It turns itself off when things calm down, and your staff get a message in chat when it happens.

Remembers repeat offenders. Anyone who keeps failing account verification gets blocked for longer each time.

Gets your players in quickly. Once a player has been verified, they skip the checks next time. This works across up to 3 of their usual networks, like home, mobile data and a friend's house.

Won't slow your server down. All the checking runs off the main thread, so TPS stays steady.

Commands

  • /ii lockdown on | off | status - control Under-Attack Mode yourself
  • /ii fastpass add <player> - let a player in who's being blocked
  • /ii test <player> - see how a username scores

Works with

TCPShield, Geyser and Floodgate, ViaVersion, and offline-mode servers. All of these are picked up automatically, so there's nothing extra to set up.

What it can't do

DDoSDefender filters connection attempts and bot logins. It can't stop large floods aimed at your network itself, since no plugin can. For full protection, pair it with a proxy like TCPShield, which hides your IP and absorbs those floods while DDoSDefender handles the bots that get through.

Since it does its work on separate threads, a host with decent CPU headroom works best.

Requirements