IpLock

A server-side Fabric mod that prevents account takeovers on offline-mode Minecraft servers by binding each username to the IP address it first joined from.

How it works

When a player joins for the first time, their username is permanently bound to their IP address. If the same username later connects from a different IP, that IP is immediately banned and the connection is rejected. This makes it effectively impossible to impersonate an existing player from a different machine.

• First join — username is bound to the connecting IP, player joins normally.
• Same IP — player joins normally.
• Different IP — connection is rejected and the new IP is banned.

Data is stored in iplock/bindings.json and iplock/bans.json inside the server's run directory.

Commands

All commands require operator level 3 (admin).