Home›Java›Mods›⭕ Orion [1.8-1.21+] ➡️ Free anticrasher, blocks exploits instantly
⭕ Orion [1.8-1.21+] ➡️ Free anticrasher, blocks exploits instantly
ModsJava

⭕ Orion [1.8-1.21+] ➡️ Free anticrasher, blocks exploits instantly

Java mod listed for Minecraft 1.8–26.x. Downloads from the MC Java Mods app on Android.

ORION Anticrasher & Server Protector Blocks crash exploits, malicious packets & bot attacks | 1.8 – 1.21+ | 100% Free ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ ​…

⬇ Download on Spigot
[​IMG]
ORION
Anticrasher & Server Protector
Blocks crash exploits, malicious packets & bot attacks | 1.8 – 1.21+ | 100% Free
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬​
ABOUT ORION
Every public server eventually runs into the same problem: someone finds a packet exploit, a malformed NBT tag, or a bot script that brings the whole thing down in seconds. Orion exists to close that door. It sits between your players and your server core, inspecting traffic in real time and cutting off anything that looks like an attack before it can do damage.
It was built specifically for server owners who don't want to babysit a security plugin — install it, configure the messages once, and forget about it. No premium tier, no paywalled detection modules, no "upgrade for full protection" nonsense. Everything Orion does is available from the first install.

WHY SERVER OWNERS USE ORION
• Crash exploits get patched by Mojang eventually — but not fast enough to protect you today
• Bot networks scan public server lists constantly, looking for anything unprotected
• A single successful crash can mean lost playtime, lost trust, and players who don't come back
• Most anticrashers are either bloated, outdated, or locked behind a paywall — Orion is none of those

FEATURES
Packet Exploit Protection — detects and blocks known crash vectors, including malformed book/sign NBT, invalid CustomPayload data, and corrupted packet structures
Bot & Proxy Filtering — cross-checks incoming connections against known VPN/proxy ranges and behavioral bot patterns
Instant Auto-Kick — the moment a connection is flagged, it's disconnected — no delay, no exploit window
Live Notifications — console logging for every blocked attempt, plus optional in-game alerts for staff
Fully Configurable Messages — every kick message, alert, and prefix is editable in config.yml with full color code support
Adjustable Thresholds — tune packet-per-second limits and detection sensitivity to match your server's traffic
Built for Scale — tested under sustained high-connection load with no measurable TPS drop
Broad Version Support — runs on 1.8 through 1.21.8 and above, including legacy versions most modern plugins drop support for
Reload Without Restart — apply config changes instantly with /orion reload
Free, No Catch — every feature listed above is available with zero cost, permanently

COMMANDS & PERMISSIONS
/orion — Show plugin status and current protection state (orion.use)
/orion reload — Reload config.yml without restarting the server (orion.admin)
/orion toggle — Enable or disable protection on the fly (orion.admin)
orion.alert — Receive in-game notifications when an attack is blocked
orion.bypass — Exempt a player or role from Orion's checks (use with care)

IN ACTION
Startup and activation:
[​IMG]
An attack detected and blocked in real time:
[​IMG]
/orion command output:
[​IMG]
CONFIGURATION
Everything below ships as the default config.yml. Every value can be changed to match how your server is set up.
Code (YAML):

# ==========================================
#                  ✦ O R I O N ✦
#        Anti-Crasher & Server Protector
#                 By BoyHoly
# ==========================================
# Author: BoyHoly
# Support: https://discord.gg/SRbgKEZGSP
# ==========================================

locale
: "en"

# Web link used on the messages
web
: "discord.gg/SRbgKEZGSP"

# Shows notifications to console and players with permissions.
notifications
:
  enabled
: true

  # Placeholders: %player% %ping% %check% %vls%
  message
: "&8[&5&l✦&8] &3&lOrion &5&l &8» &f%player% &7(&b%ping%ms&7) &f→ &d%check% &8(&c%vls%&7/&5MAX&8)"

  # This shows extra information about blocked packets.
  debug
: false

# Fixes exploits that do not require kicking/banning.
patcher
:
  # Prevents moving if the chunk is null. (Prevents chunk overloading)
  null_chunk
: true

  # Prevents players from damaging themselves and consuming ram.
  self_damage
: true

  # Prevents players from breaking ender portals.
  ender_portal_break
: true

  # Disables maps player locations when put in itemframes to fix chunk overflow crash.
  disable_tracking
: true

  # Prevents crashing when using dispensers that drop items out of the bounds.
  dispenser_crash
: true

  # Prevents portal teleport spam crash.
  portal_crash
: true

  # Prevents duplicating items with some inventory plugins.
  inventory_exploit
: true

  # Prevents duplication with mules
  close_unloaded_entities_inventories
: true

  # Prevents doing insta-kill with bows
  bow_bomb
: true

  # Prevents the server from reading packets while player is offline.
  offline_packets
: true

  # Prevents crops duplication with beds
  bed_duplication
: true

  # Prevents crashers with redstone and trapdoors
  redstone_trapdoor_crash
: true

item-analysis
:
  enabled
: true

  # Amount of vls required to start cancelling packets.
  cancel_vls
: 1

  # Amount of vls to reduce per second.
  reduce_vls
: 1

  # Amount of vls to add per fail
  vls
: 1

  # Placeholders: %player%, %vls%, %ping%, %check%
  # Commands to run when a player reaches certain violation level.
  violations
:
    2
:
     - "notification"
    4
:
     - "notification"
    6
:
     - "notification"
    8
:
     - "notification"
      - "kick"

# Prevents the use of invalid packets to crash the server.
packets
:
  enabled
: true

  # Amount of vls required to start cancelling packets.
  cancel_vls
: 25

  # Amount of vls to reduce per second.
  reduce_vls
: 25

  # This will check if integers, floats, doubles and items have an invalid size in packets.
  data
:
    # Vls to add when a packet fails the check. (Set to -1 to disable)
    vls
: 100

    # Maximum amount of bytes allowed per packet. (Set to -1 to disable)
    max_size
: 12288

    # Maximum amount of bytes allowed per book page. (Set to -1 to disable)
    max_size_book
: 300

    # Maximum amount of bytes allowed per sign line. (Set to -1 to disable)
    max_size_sign
: 47

    # Maximum amount of flags allowed per packet. (Set to -1 to disable)
    max_flags
: 64

    # Maximum amount of flags allowed per firework. (Set to -1 to disable)
    max_firework_flags
: 12

  # Cancels book packets when a book is not in hand. (Can sometimes becaused by lag)
  # Vls to add when a packet fails the check. (Set to -1 to disable)
  book
: 10

  # Cancels CustomPayload packets with invalid tags
  # Vls to add when a packet fails the check. (Set to -1 to disable)
  tag
: 100

  # Checks if players send PacketPlayInWindowClick packets with invalid data.
  # Vls to add when a packet fails the check. (Set to -1 to disable)
  window_click
: 100

  # Checks if players send PacketPlayInBlockPlace packets with invalid data.
  # Vls to add when a packet fails the check. (Set to -1 to disable)
  block_place
: 100

  # Checks if players send PacketPlayInBlockDig packets with invalid data.
  # Vls to add when a packet fails the check. (Set to -1 to disable)
  block_dig
: 100

  # Checks if players send PacketPlayInCreativeSlot packets without creative.
  # Vls to add when a packet fails the check. (Set to -1 to disable)
  set_creative_slot
: 100

  # This option adds vls per byte received.
  # This works as a packet limiter feature.
  # Violations to add per byte received. (Set to -1 to disable)
  byte_multiplier
: 0.0001

  # Set a permission for some players to bypass this check. (Uncomment to enable)
  # WARNING: Players with this permission can crash and corrupt worlds FOREVER with hacked clients.
  #bypass-permission: "exploitfixer.packets.bypass"

  # These packets will be completely cancelled.
  # Change to blacklist: [] to completely disable the blacklist
  blacklist
: [ ]
    # Recipe Book can be used to duplicate items and crash the server.
  #- "PacketPlayInAutoRecipe"

  # Violations to add when a normal packet is received from a player.
  # This works as a packet limiter feature.
  # Unlisted packets are considered as "PacketPlayInOther" by default.
  # Remember to take a look at byte_multiplier option.
  rate_multipliers
:
    PacketPlayInOther
: 0.1
    MC|BSign
: 4.5
    MC|BEdit
: 4.5
    MC|BOpen
: 4.5
    PacketPlayInUpdateSign
: 5
    PacketPlayInAbilities
: 0.25
    PacketPlayInArmAnimation
: 0.125
    PacketPlayInBlockDig
: 0.125
    PacketPlayInBlockPlace
: 0.5
    PacketPlayInCustomPayload
: 0.01
    PacketPlayInEntityAction
: 0.5
    PacketPlayInFlying
: 0.25
    PacketPlayInLook
: 0.4
    PacketPlayInSteerVehicle
: 0.05
    PacketPlayInPositionLook
: 0.05
    PacketPlayInPosition
: 0.2
    PacketPlayInSetCreativeSlot
: 0.15
    PacketPlayInSettings
: 0.1
    PacketPlayInTabComplete
: 0.75
    PacketPlayInUseEntity
: 0.25
    PacketPlayInUseItem
: 0.1
    PacketPlayInWindowClick
: 0.45
    PacketPlayInAutoRecipe
: 5

  # Placeholders: %player%, %vls%, %ping%, %check%
  # Commands to run when a player reaches certain violation level.
  violations
:
    25
:
     - "notification"
    50
:
     - "notification"
    75
:
     - "notification"
    100
:
     - "notification"
      - "kick"

# Removes custom/invalid NBT tags from items to prevent harm to your server.
# This prevents creative mode players from corrupting worlds FOREVER and crashing the server.
# This checks only applies to creative mode players.
creative-items-fix
:
  enabled
: true

  # Maximum stack size obtainable with creative packets. (-1 to allow anything)
  max-stack-size
: 64

  # Maximum enchant level obtainable with creative packets.
  # -1 removes all enchants, 0 forces vanilla values
  enchant-limit
: 0

  # Whitelist already created items to improve performance and stability.
  # Items created with commands will not be checked when enabled.
  # Set to false if your server has already created crasher items.
  whitelist-items
: true

  # Set a permission for some players to bypass this check. (Uncomment to enable)
  # WARNING: Players with this permission can crash and corrupt worlds FOREVER with hacked clients.
  #bypass-permission: "exploitfixer.itemsfix.bypass"

  # List of materials that are blocked from Creative.
  blacklist
:
   - "END_PORTAL"
    - "NETHER_PORTAL"
  #  - "BARRIER"
  #  - "COMMAND_BLOCK"

# Checks if players try to crash/exploit the server with commands.
commands
:
  enabled
: true

  # Amount of vls required to start cancelling packets.
  cancel_vls
: 1

  # Amount of vls to reduce per second.
  reduce_vls
: 1

  # Amount of vls to add per fail
  vls
: 1

  # Set a permission for some players to bypass this check. (Uncomment to enable)
  # WARNING: Players with this permission can crash and corrupt worlds FOREVER with hacked clients.
  #bypass-permission: "exploitfixer.commands.bypass"

  # Commands that are exempt from this server.
  commands
:
    # WorldEdit exploit
    - "//calc"
    - "//calculate"
    - "//eval"
    - "//evaluate"
    - "//solve"
    # HolographicDisplays exploit
    - "/hd readtext"
    - "/holo readtext"
    - "/hologram readtext"
    - "/holograms readtext"
    - "/holographicdisplays readtext"
    # PermissionsEx exploit
    - "/pex promote"
    - "/pex demote"
    - "/promote"
    - "/demote"
    - "/execute"
    # Multiverse exploit
    - "/mv ^"
    - "/mv help <"
    - "/mvhelp <"
    - "/$"

  # Placeholders: %player%, %vls%, %ping%, %check%
  # Commands to run when a player reaches certain violation level.
  violations
:
    1
:
     - "notification"
      - "kick"

  modules
:
    creativeitemsfix
:
      enabled
: true
      blacklist
:
       - "DIAMOND_SWORD"
        - "NETHERITE_SWORD"
        - "BEDROCK"
        - "COMMAND_BLOCK"
        - "BARRIER"
        - "STRUCTURE_BLOCK"
        - "END_PORTAL_FRAME"
 
INSTALLATION
1. Download and install HamsterAPI first — Orion depends on it and will not load without it
2. Download Orion.jar from this page
3. Drop both files into your server's /plugins folder
4. Restart the server
5. Edit config.yml to match your setup
6. Run /orion reload to apply changes

REQUIREMENTS
• HamsterAPI — required dependency, must be installed before Orion
• Java 8+ (Java 17+ recommended)
• Spigot / Paper / Purpur 1.8 – 1.21.8+
• No other plugins required beyond HamsterAPI

FAQ
Is Orion actually free? Yes — no premium version, no hidden costs, no feature paywall.
Does it support 1.8.8? Yes, from 1.8.8 through the latest release.
Will it cause lag? No — it's built to run with no measurable TPS impact, even under heavy load.
Can I edit the messages? Every message, prefix, and color is configurable in config.yml.
Do I really need HamsterAPI? Yes — it's a hard dependency. Orion won't enable without it.
Does it work with BungeeCord/Velocity? Orion targets Spigot/Paper servers directly. For proxy-level protection, reach out for a custom setup.
What happens when Orion blocks something? The offending connection is disconnected immediately, and the event is logged to console (and optionally broadcast in-game to staff).

SUPPORT
For bugs, questions, or feature requests, PM me here on Spigot or join the Discord below. Typical response time is under 12 hours.
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
ENJOYING ORION?
Orion is maintained solo, updated for free, and will always stay that way. The only thing that keeps a project like this alive is knowing people actually use it — and the fastest way to tell me that is a rating.
If Orion is protecting your server right now, take 30 seconds and leave a star rating and a short review on this page. It costs you nothing, it takes almost no time, and it directly affects whether other server owners find this plugin at all. Every single review helps.

Rate it. Star it. Say something — even one line helps more than you'd think.​

Commands

Plugin details

Read from the plugin's own plugin.yml.

Quick facts

Install steps are the general flow for this file type — How to install Minecraft Java mods & modpacks walks through it step by step.

⭕ Orion [1.8-1.21+] ➡️ Free anticrasher, blocks exploits instantly is a free Minecraft Java mod. Compatible with Minecraft 1.8, 1.13, 1.14, 1.15 and newer. Downloaded 55 times (via Spigot). Download it and open it directly in the game.

Explore more