CoralGate

On-the-fly packet inspection and real-time IP verification for Minecraft servers and networks.

CoralGate acts as a high-performance application firewall for your Minecraft infrastructure. By analyzing incoming packets: malicious payloads, scanners and bots are blocked before they truly reach your server. It secures your servers by spoofing your MOTD to appear as a generic server, verifies proper packet order and even checks certain incoming connection fields.

If you wish to get support, test or have any questions about CoralGate, make sure to join our Discord server!

Supported Platforms

CoralGate supports a wide range of Minecraft server implementations.

Platform	1.8.x	1.9.x – 1.15.x	1.16.x – 1.20.x	1.21.x	26.x	> 26.2
Spigot	⚠️	✅	✅	✅	✅	❓
Paper	✅	✅	⚠️	✅	✅	❓
BungeeCord	✅	✅	✅	✅	✅	❓
Velocity	✅	✅	✅	✅	✅	❓
Sponge	❌	❌	❌	❌	❌	❌
Fabric	❌	❌	❌	❌	❌	❌
Forge	❌	❌	❌	❌	❌	❌
NeoForge	❌	❌	❌	❌	❌	❌

View platform compatibility notes.

Spigot:

• < 1.8.3: not supported.
• 1.8.3: works with an outdated packetevents version (2.10.1).
• 1.19.3: not supported (broken server jar).

Paper:

• 1.19.3: not supported (broken server jar).
• 1.19.4 - 1.20.x: not supported (broken modern 'paper-plugin.yml').

Sponge, Fabric, Forge, NeoForge and any hybrid server platform is not officially supported.

View fully detailed platform and version support list.

Platform	<1.8	1.8	1.8.3	1.8.8	1.9	1.9.1	1.9.2	1.9.3/4	1.10.x	1.11	1.11.x	1.12	1.12.1	1.12.2	1.13	1.13.1	1.13.2	1.14	1.14.1	1.14.2	1.14.3	1.14.4	1.15	1.15.1	1.15.2	1.16	1.16.1	1.16.2	1.16.3	1.16.4/5	1.17	1.17.1	1.18	1.18.1	1.18.2	1.19	1.19.1/2	1.19.3	1.19.4	1.20/.1	1.20.2	1.20.3/4	1.20.5/6	1.21/.1	1.21.2/3	1.21.4	1.21.5	1.21.6	1.21.7/8	1.21.9/10	1.21.11	26.1.x	26.2	>26.2
Spigot	❌	❌	⚠️	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❓
Paper	❌	❌	❌	✅	❌	❌	❌	✅	✅	❌	✅	❌	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❓
BungeeCord	❌	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❓
Velocity	❌	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓	❓
Sponge	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌
Fabric	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌
Forge	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌
NeoForge	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌

Installation

This installation procedure is platform independent, it is the same for every supported platform above:

1. Download the latest version of packetevents.
2. Download the latest version of CoralGate for your platform (see download mirrors below).
3. Put both plugins in your "plugins" folder situated at the root of your server jar.
4. Restart your server.

CoralGate is now protecting your server from scanners!

Download Mirrors

To prevent any malware from infecting your server, only download CoralGate from our trusted sources:

• Official GitHub

Configuration

CoralGate has a very extensive and complete configuration file, situated in your plugins folder under the CoralGate folder. The file is named config.yml. Every default value is marked in the comments above the field with explanation on its impact.

If you ever mess up your configuration file, delete it and restart your server. The default configuration will be loaded.

API

CoralGate utilizes a proprietary, custom-built API hosted in Germany (fully GDPR-compliant) to determine IP reputation. The API is free, requires no authentication keys, and supports both IPv4 and IPv6.

You can manually query the API using the following structure: https://api.gteam.cloud/coralgate/v2/<ip_address>

Examples:

• https://api.gteam.cloud/coralgate/v2/185.65.134.164 (Returns malicious)
• https://api.gteam.cloud/coralgate/v2/9.9.9.9 (Returns safe)

False Positives

If your ISP, domain name, or personal IP is falsely flagged and blocked from CoralGate-protected servers, please open a ticket on our Discord. Provide the affected IP addresses and their primary use case, and our support team will assist with whitelisting.

Traffic routinely blocked by the API: Port/IP scanners, crawlers, MOTD/player-count fetchers, VPNs, proxies, TOR exit nodes, and automated hosting services (e.g., Shodan, OpenHeimer).

Traffic exempt from blocking: Known voting sites and verified server lists.

Privacy & Disclosure

By default, CoralGate automatically verifies the reputation of connecting players to block malicious traffic.

• Data Transmitted: When a player attempts to join, their IP address is sent via a secure GET request to our proprietary API.
• Endpoint: https://api.gteam.cloud/coralgate/v2/<ip_address>
• Privacy: The API is hosted in Germany (fully GDPR-compliant). No personally identifiable information (PII) beyond the IP is processed, and data is used strictly for real-time risk assessment.
• Opt-Out: You can entirely disable this external API lookup or route requests through your own custom endpoint by modifying the config.yml file.

Contributing & Support

Issues & Feature Requests: Please utilize the provided GitHub templates when opening an issue or requesting a feature. If your ticket requires urgent attention, you may reference it in our Discord support channels.

Contributing: We welcome pull requests. Ensure your code follows our existing naming conventions and indentation standards. When submitting a PR, detail the platform, exact version, and any other relevant plugins used during your testing.

Credits & License

CoralGate is built on top of these incredible open-source projects:

• packetevents by retrooper - Powers our core packet analysis.
• Lamp by Revxrsal - Handles our cross-platform command ecosystem.
• bStats by Bastian Oppermann - Provides anonymous usage metrics.
• Jankson by Falkreon - Parses our API JSON results.
• async-http-client by Aayush Atharva - Powers our network API queries and update checks.
• boosted-yaml by dejvokep - Drives our internal configuration engine.

This project is licensed under the GNU General Public License v3.0 (GPL).