XyndraShield is a Windows desktop shield for game and service hosts. It combines WinDivert-backed packet filtering, proxy-based port routing, adaptive temporary bans, Windows failed-logon monitoring, service hardening, Discord webhooks, emergency defense modes, and built-in licensing and update workflows in one interface.
XyndraShield is designed for operators who need one control surface for protected ports, traffic visibility, Windows login abuse monitoring, service hardening, webhook alerts, licensing, and updates. When WinDivert mode is enabled, it can inspect and deny protected traffic before it reaches the target service. When WinDivert is disabled, it falls back to a TCP proxy model for the mapped ports.
Every mapping can carry its own limits, probation rules, and protocol profile.
Security analysis, brute-force monitoring, webhooks, hardening, and routing live in one dashboard.
XyndraShield is aimed at Windows-hosted game servers and other public-facing TCP services that need practical front-door protection, clearer monitoring, and safer operational controls. It works well as a host-level shield for game login ports, game traffic ports, admin services, and similar routed workloads.
Optional WinDivert mode inspects inbound traffic for protected ports and can drop or deny new connections before they reach the target service.
Each mapping can use its own window, rate, concurrent limit, new-IP probation mode, and protocol profile instead of one shared global rule.
Monitors Windows Security Event ID 4625 for failed logons, tracks abusive IPs, and can apply temporary or permanent firewall bans depending on your settings.
The current build includes layered controls for routed services, admin visibility, emergency response, and host hardening.
Temporary bans, escalation, reputation scoring, subnet burst detection, and post-connect heuristics can be tuned globally and overridden per protected port.
Balanced, Aggressive, and Extreme attack modes can be enabled for a timed window or until disabled. Extreme mode blocks all new protected-port connections except loopback and whitelisted IPs.
Successful license verification stores signed cached license data and offline validation material so the app can continue operating during short-term connectivity loss.
Optional hardening controls can disable or restore selected Windows services such as Print Spooler, Remote Registry, SSDP Discovery, UPnP Device Host, and LLTD service exposure.
Webhook notifications can send admin login events, firewall changes, brute-force bans, CPU spikes, and memory spikes to a Discord channel you control.
The app can check for updates through the licensing service, download a ZIP package, and launch a PowerShell updater that applies the update after the running process exits.
XyndraShield is a Windows desktop application intended for Windows game or service hosts. Some features require administrator rights and Windows-specific components.
This section shows example log lines styled after the desktop client so visitors can see the kind of events XyndraShield surfaces in the app.
| Area | Current State | Where It Runs | Notes |
|---|---|---|---|
| Protected Port Filtering | ✔ Available | WinDivert mode or proxy mode | Applies to the ports you add and enable in Port Routing. |
| Per-Port Protection Profiles | ✔ Available | Routing mappings | Each mapping can carry its own limits, probation, and protocol profile. |
| Windows Failed-Logon Monitoring | ✔ Available | Windows Security Event Log | Uses Event ID 4625 for the brute-force monitor. |
| Emergency Defense Modes | ✔ Available | Shield runtime override | Balanced, Aggressive, and Extreme modes are built in. |
| Service Hardening | ✔ Available | Windows services | Targets a selected list of optional Windows services. |
Contact us if you want help choosing protection profiles, planning routed ports, or setting up a game host cleanly.
No. XyndraShield is a Windows host-level security tool that works alongside Windows Firewall. Some protections use WinDivert, some use the app's proxy routing mode, and the brute-force monitor can also add Windows Firewall rules.
It hooks into Windows Security Event Logs, specifically watching for Event ID 4625 (Failed Logon). When an IP reaches your configured threshold, XyndraShield can add a temporary or permanent firewall ban depending on your settings.
No. The routing and shield engine are generic and can be used with other Windows-hosted game or service ports too. The optional Lineage 2 ban-file sync is just one specific integration layer.
No. It can help at the host layer by rate-limiting, banning, and filtering protected-port traffic, but it cannot solve upstream bandwidth saturation on its own. Very large attacks still require upstream mitigation from your provider or edge layer.
Contact the listed support address for product access and deployment guidance.