TCGuard 2.0 ⚡ Universal Anti-Bot, Exploit, Packet & Crash Protection [1.8.8 - 1.21+]

[HR][/HR]
Why TCGuard?
Most server protection plugins are either outdated, bloated with unneeded features, or degrade server tick performance (TPS). **TCGuard** is built from the ground up to eliminate known exploit vectors, malicious packets, bot swarms, and unauthorized operator escalations with **zero performance overhead**.
[HR][/HR]
Key Features Overview
1. Next-Gen Anti-Bot & Subnet Shield
• 0.0ms Handshake Analysis: Traps automated bot software before the login phase by measuring packet timestamp intervals.
• Subnet (/24 CIDR) Limiter: Restricts bulk connection spikes originating from the same proxy IP ranges.
• Dynamic Attack Mode: Automatically enables heightened defense filters when join floods are detected.
2. ️ Exploit & Crash Prevention
• Log4J / JNDI Defense: Neutralizes CVE-2021-44228 injection attempts in chat, commands, and signs.
• NBT Sanitization: Drops nested shulker boxes (shulker bombs), oversized books, and high-particle fireworks.
• Position & Movement Security: Filters out NaN, infinite coordinates, and impossible pitch/yaw rotations.
• Format String Filter: Cleans translation exploit strings (%s, %d) that crash clients or servers.
3. ⚡ Netty Pipeline & Packet Filtering
• Netty Exception Shield: Catches corrupted frames and closes broken sockets cleanly to prevent server tick hangs.
• Auto-Clicker & Macro Guard: Blocks macro clickers (22+ CPS) using click interval standard deviation analysis.
• FastBreak & FastPlace: Drops impossible block breaking and placement speeds.
4. Admin Security, 2FA GuardCode & Auto-Deop Sync
• Mandatory Admin GuardCode: All OP and admin players must define and enter a secret PIN upon joining. Unverified admins are completely frozen.
• Console-Only Code Reset: GuardCode PINs can strictly be reset only from the server console for maximum security.
• Automatic Deop Sync: When an admin is deopped, TCGuard immediately strips their admin permissions and removes them from admins.yml.
• Console-Only Whitelist (Zero-OP): Having server OP does not bypass checks; administrators must be approved from the console.
5. Live GUI Dashboard & Multi-Language
• Type /guard gui in-game to view live TPS, RAM metrics, and toggle 14 protection modules in real time.
• Built-in support for English (en), Turkish (tr), and Spanish (es).
[HR][/HR]

​