UsernameIpLock

IpLock

A server-side Fabric mod that prevents account takeovers on offline-mode Minecraft servers by binding each username to the IP address it first joined from.

How it works

When a player joins for the first time, their username is permanently bound to their IP address. If the same username later connects from a different IP, that IP is immediately banned and the connection is rejected. This makes it effectively impossible to impersonate an existing player from a different machine.

• First join — username is bound to the connecting IP, player joins normally.
• Same IP — player joins normally.
• Different IP — connection is rejected and the new IP is banned.

Data is stored in iplock/bindings.json and iplock/bans.json inside the server’s run directory.

Commands

All commands require operator level 3 (admin).

| Command | Description |
|—|—|
| /iplock list | Show all username → IP bindings |
| /iplock bans | Show all banned IPs and which username they tried to use |
| /iplock unban <ip> | Remove an IP from the ban list |
| /iplock reset <username> | Delete a username’s IP binding (allows them to re-bind from a new IP) |