Read-only demo. Sample data for a fictional server network, so nothing here can be edited.
Rules
First matching rule decides: allow, block or captcha. Exactly one preset is active.
Nordhaven custom
This preset is protecting your servers right now.
allow
Allow staff
Username in [Thornwick, Mireleth]
block
Block proxies
Is proxy is true OR Is hosting / datacenter is true
block
Block high risk
Risk score ≥ 78
captcha
Challenge VPNs
Is VPN is true
captcha
Challenge likely bots
Risk score ≥ 65 OR Fingerprint similarity to blacklisted ≥ 0.85
captcha
Challenge first joins from hosting ranges
First join (never seen before) is true AND Is hosting / datacenter is true
Rules evaluate top to bottom - the first match wins. An allow rule above a block rule acts as an exception.
Shadow mode (dry run)running
See what another preset would decide without enforcing it. Run it against new traffic going forward, or backtest it against your recent history for an instant answer.
Preset to dry-run
allow
48,903vs 51,284 real
block
7,622vs 5,106 real
captcha
2,342vs 2,477 real
Collected live over the last 24h. The dry run would have blocked 7,622 vs 5,106 actually blocked across 58,867 checks.
Divergent decisions
| When | Player | IP | Real → dry run |
|---|---|---|---|
| 9/16/2026, 8:09:33 PM | drifthollow | 198.51.100.153 | captcha→block |
| 9/16/2026, 7:22:33 PM | Pellworth | 203.0.113.228 | allow→captcha |
| 9/16/2026, 6:35:33 PM | CorvainX | 192.0.2.39 | allow→captcha |
| 9/16/2026, 5:48:33 PM | Halewynd | 203.0.113.23 | captcha→block |
| 9/16/2026, 5:01:33 PM | marrowlyn | 198.51.100.216 | allow→captcha |
| 9/16/2026, 4:14:33 PM | Vexley_ | 203.0.113.9 | allow→captcha |
| 9/16/2026, 3:27:33 PM | Ostrander | 192.0.2.196 | captcha→block |
| 9/16/2026, 2:40:33 PM | FennimoreQ | 192.0.2.74 | allow→captcha |
| 9/16/2026, 1:53:33 PM | Ravenholt | 203.0.113.159 | allow→captcha |
| 9/16/2026, 1:06:33 PM | ildrith | 203.0.113.199 | captcha→block |