Full rewrite. One shared detection core, five native builds.

New

• Native builds for Paper, Folia, BungeeCord, Velocity and Sponge, all behaving identically
• Country filtering in blacklist or whitelist mode
• Silent mode: no live alerts, while the log file and webhook keep recording
• Dry-run mode: detect and report without disconnecting anybody
• IP whitelist and blacklist with CIDR and range support, editable in game
• /proxyshield with twelve subcommands and tab completion
• English and German message files; add a language by copying one file
• Block log, statistics, and an on-disk cache so a restart during a feed outage stays protected

Fixed since 1.1

• The IP feeds never matched anything. The CIDR prefix was discarded and matching was a string comparison, so a /24 only ever matched its own network address. Against the live feed that was 42,510 addresses covered instead of 377,108,792.
• Proxy detection was a substring test for "true", which an ISP or country name could satisfy on its own
• The Discord payload was built by string concatenation and could be broken, or injected into, by a player name
• BungeeCord ran the lookup inline on the netty thread; Velocity checked after login, so a blocked player was briefly fully connected
• The lookup cache grew without bound and ignored the provider's rate limit
• Roughly a dozen empty catch blocks hid dead feed URLs and unreachable providers
• The whitelist was only read on Paper, and Velocity used a different config format entirely

Upgrading: config.yml from 1.1 is not compatible and is not migrated. Move it aside, let the plugin write a fresh one and re-apply your settings.

Note that 1.21.11 on Paper is the only combination verified on a live server so far; the other four builds are freshly released.