Protectcord Plugin für Minecraft 1.20.1, 1.21.1

ProtectCord — Advanced IP Protection & Moderation

Block VPNs, proxies, bots, and malicious connections with real-time IP intelligence. Built-in moderation, AutoMod chat filtering, alt detection, and MySQL multi-server sync — all in one lightweight plugin.

ProtectCord connects every joining player against a live threat intelligence database before they ever reach your server. Combined with a full moderation suite, it's the only tool you need to keep your server clean and your community safe.

✨ Milestones

• 2,300+ downloads on Modrinth
• 100,000+ ProtectCord API requests served
• 46 unique Minecraft servers running ProtectCord concurrently
• 203 concurrent protected players
• 1,000+ unique Discord users verified
• 3,000+ unique API requests per day
• 555 Discord Guilds using @ProtectCord#0253
• Watching over 100,000+ Discord users

bStats: https://bstats.org/plugin/bukkit/Protectcord/24623

✨ Key Features

IP Protection

• 🛡️ Real-Time IP Verification — Every connection checked against live threat intelligence
• 🚫 VPN, Proxy & Tor Blocking — Stop ban evaders and alt accounts instantly
• 🏢 Datacenter IP Detection — Flag and block hosting provider IPs used for bots
• ⚠️ Risk-Based Blocking — Configurable threat levels: UNKNOWN → LOW → MEDIUM → HIGH → CRITICAL
• 🌍 Geo-Blocking — Block or whitelist entire countries using ISO codes
• 👥 Accounts-Per-IP Limiting — Cap simultaneous connections from a single IP
• ✅ Smart Whitelist System — Bypass protection by player name, UUID, or IP

Moderation Suite

• ⚡ Progressive Warning System — Configurable auto-escalation from warn → kick → ban
• ⏱️ Temp Bans & Temp Mutes — Time-limited punishments with human-readable durations (1h, 7d, 30d)
• 🔇 Mute System — Persistent mutes with reasons, issuer tracking, and auto-expiry
• 🔍 Alt Account Detection — Find alts by shared IP (/pc alts ) — names only, never raw IPs
• 📋 Warning History — Full timestamped warning logs for any player, online or offline
• 🧹 Clear & Remove Warnings — Remove individual warnings by index or clear all at once
• 🗄️ Audit Log — Automatic log of all moderation actions
• 💾 Offline Player Support — Warn, ban, mute, or check players who aren't online

AutoMod (Chat Filtering)

• 🔗 Anti-Link — Block URLs with domain whitelist support
• 📢 Anti-Advertising — Block server IPs and Discord invites
• 💬 Anti-Spam — Rate limiting with configurable message window and duplicate detection
• 🤬 Anti-Swear — Custom word blacklist with regex support and per-word exceptions
• 🔠 Anti-Caps — Configurable caps threshold by percentage
• 🌊 Anti-Flood — Block repeated character flooding
• 🔣 Anti-Unicode/Zalgo — Block invisible text and character abuse
• ⚙️ Per-Rule Actions — Each rule independently set to: BLOCK, WARN, KICK, MUTE, or TEMPMUTE

Storage & Multi-Server

• 🗃️ YAML Flatfile Storage — Zero setup, works out of the box
• 🐬 MySQL Storage — Full MySQL backend with HikariCP connection pooling
• 🌐 Multi-Server Sync — Share one MySQL database across your entire network; bans and mutes are enforced on every server
• 🔄 Live Migration — Migrate between YAML and MySQL at any time with /pc migrate
• 🧹 Data Purge — Clean up old warnings, bans, mutes, IP logs, audit entries, and inactive players with /pc purge

Staff Tools

• 📣 In-Game Staff Alerts — Real-time notifications for kicks, bans, warns, mutes, automod actions, and more
• 🎭 IP Masking — Show staff masked IPs (192.168.1.*) until they earn the protectcord.ip.full permission
• 📝 Player Reports — Players submit reports with /report; staff are notified in-game and via Discord
• 📊 API Stats — Check usage, rate limits, and API health with /pc stats
• 🔎 Manual IP Check — /pc check for on-demand threat analysis

Platform & Integration

• 🌐 6-Platform Support — Paper, Spigot, Folia, BungeeCord, Velocity, and Forge
• 📢 Discord Webhooks — Rich embeds with country flag, city, VPN/proxy/tor/risk fields, per-event control, rate limiting, and retry logic
• 📣 Moderation Alert Webhooks — Separate webhook channel for ban/warn/mute/kick staff events
• ⚡ 100% Async — All IP checks are non-blocking; no main-thread impact

🎮 Supported Platforms

Platform - Versions - Notes

Paper - 1.13 – 1.21+ - Recommended for standalone servers Spigot - 1.8.8 – 1.21+ - Full legacy support Folia - 1.19+ - Multithreaded scheduler support Velocity - 3.0+ - Recommended for proxy networks BungeeCord - 1.8.8 – 1.21+ - Waterfall compatible Forge - 1.20.1+ - Server-side only; checks at post-login

Network tip: Install only on your proxy (Velocity/BungeeCord) to protect all backend servers with a single API key.

📥 Quick Setup

1️⃣ Get Your Free API Key

• Visit protectcord.com
• Create a free account
• Generate an API key from Dashboard → API Keys
• Free tier includes 32 requests/minute — enough for most servers

2️⃣ Install the Plugin

• Download the correct JAR for your platform from Modrinth
• Drop it into your plugins/ folder (or mods/ for Forge)
• Start your server — config generates automatically
• Add your API key to plugins/ProtectCord/config.yml
• Run /protectcord reload or restart
• ✅ Your server is now protected

⚙️ Full Configuration Reference

The config file is auto-generated at plugins/ProtectCord/config.yml on first run. Every option is explained below.

Velocity uses config.toml (same structure, TOML syntax). Forge uses config/protectcord-forge.toml.

API Settings

Your ProtectCord API key — get one free at https://protectcord.com/dashboard/api-keys

api-key: "YOUR_API_KEY_HERE"

How long to wait (ms) for the API to respond before giving up

api-timeout: connect: 15000 # Time to establish the connection (default: 15s) read: 15000 # Time to wait for a response after connecting (default: 15s)

Automatic retry for failed/timed-out API requests

api-retry: max-attempts: 3 # Max number of retries before allowing/denying the player (1–5) initial-delay: 1000 # Wait this long before the first retry (ms) max-delay: 5000 # Never wait longer than this between retries (ms) multiplier: 2.0 # Multiply delay by this factor each retry (exponential backoff)

Server Identity

Used for player tracking and multi-server MySQL identification

server: name: "My Server" # Friendly name — stored in MySQL as server_id on every row ip: "" # Your public IP — leave blank to auto-detect port: 25565 # Your server port type: "spigot" # Platform: paper / spigot / bungeecord / velocity / forge / folia

Player Tracking

UUID-based tracking via the ProtectCord API

player-tracking: enabled: true block-flagged-players: true # Block players flagged as malicious by the API block-inactive-players: false # Block players whose accounts are marked inactive

IP Protection

Master switch — set to false to disable all IP checking (not recommended)

enable-ip-check: true

Choose which connection types to block

block-vpn: true # Virtual private networks (ban evaders, alt accounts) block-proxy: true # HTTP/SOCKS proxies and anonymizers block-tor: true # Tor exit nodes block-datacenter: true # Hosting provider IPs (common source of bots) block-bogon: true # Invalid, reserved, or unroutable IP ranges

Risk-based blocking (optional, runs in addition to the flags above)

Enable this to block by overall threat score instead of (or as well as) individual flags

enable-risk-level-blocking: false blocked-risk-level: "HIGH"

Levels (each blocks itself and everything above it):

LOW — blocks LOW, MEDIUM, HIGH, CRITICAL (very strict)

MEDIUM — blocks MEDIUM, HIGH, CRITICAL

HIGH — blocks HIGH, CRITICAL (recommended if enabling)

CRITICAL — blocks CRITICAL only (very lenient)

Geographic Blocking

geo-blocking: enabled: false mode: "blacklist" # "blacklist" = block listed countries

"whitelist" = ONLY allow listed countries (everyone else blocked)

countries: # ISO 3166-1 alpha-2 country codes

• "CN"
• "RU"

Accounts Per IP

Limit how many Minecraft accounts can connect simultaneously from the same IP

account-per-ip-limit: enabled: false max-accounts: 3 # Maximum simultaneous connections from one IP enforcement: "BLOCK" # "BLOCK" — deny the new connection

"KICK_OLDEST" — kick the oldest session to make room

Discord Webhook (Connection Events)

discord-webhook: enabled: false url: "" # Paste your Discord webhook URL here timeout: 10000 # HTTP timeout for sending the webhook (ms)

Retry failed webhook deliveries

retry: enabled: true max-attempts: 3 # How many times to retry a failed delivery (1–10) initial-delay: 1000 # Wait before first retry (ms) max-delay: 10000 # Maximum wait between retries (ms) multiplier: 2.0 # Exponential backoff multiplier

Rate limiting — Discord allows ~5 requests per 2 seconds per webhook

rate-limit: max-per-second: 2 # Requests sent per second (1–5) burst-limit: 5 # Maximum burst before throttling kicks in

Which events send a webhook message

events: denied: true # Player was blocked by ProtectCord accepted: false # Player passed all checks and joined (high volume — off by default) whitelisted: true # A whitelisted player joined error: true # An API error occurred during a check

Which data fields appear in the embed

data-fields: show-country: true show-country-flag: true # 🇺🇸 flag emoji next to country name show-city: true show-vpn: true show-proxy: true show-datacenter: true show-tor: true show-mobile: true show-satellite: true show-crawler: true show-bogon: true show-risk-level: true show-abuser: true show-blacklisted: true show-company: true # ISP / hosting provider name show-company-risk: true

Customise the appearance of each embed type

embeds: denied: title: "Connection Denied" emoji: "x" color: 15158332 # Decimal RGB — red footer: "" # Optional footer text thumbnail-url: "" # Optional image in top-right corner accepted: title: "Connection Accepted" emoji: "white_check_mark" color: 3066993 # Green footer: "" thumbnail-url: "" whitelisted: title: "Whitelisted Player Joined" emoji: "white_circle" color: 16776960 # Yellow footer: "" thumbnail-url: "" error: title: "API Error" emoji: "warning" color: 15105570 # Orange footer: "" thumbnail-url: ""

Advanced webhook behaviour

advanced: validate-url-on-startup: true # Send a test ping when the plugin loads log-failures: true # Print failed deliveries to console log-retries: true # Print retry attempts to console queue-size: 100 # Max webhooks queued before dropping oldest

Staff Alerts

In-game and Discord notifications for moderation actions

alerts: enabled: true

Broadcast to online staff with the protectcord.alerts permission

in-game: enabled: true

Separate webhook channel just for mod-team events

discord-webhook: enabled: false url: ""

Fine-tune exactly which actions trigger an alert

events: kick: true ban: true unban: true warn: true clear-warnings: true remove-warning: true automod: true mute: true unmute: true tempmute: true tempban: true

Warning System

warnings:

Automatically take action when a player accumulates enough warnings

auto-action: enabled: true action: "BAN" # "BAN" — permanent ban | "KICK" — kick only threshold: 3 # Number of warnings before auto-action fires

Kick the player with a "final warning" message at a lower threshold

kick-on-warn: enabled: true threshold: 2 # Kick at this warning count (before the ban threshold)

Warnings older than this are not counted toward thresholds

expiry: duration: "0" # "0" = warnings never expire