Keep in mind that some hacks send a fake client name "vanilla" to hide their real name.
Some of them don't and they send "fabric" "lunarclient" for example, so we can block them.
Some custom clients or hacked clients custonize the brand name from vanilla to a custom name.
This plugin can detect them, if you want you can also add any new brand name you find.
(Config file clients-config.yml).
For example to block Forge I created a new entry in the block-clients list specifying the brands.
Blocking clients that change last part of the brand
Some clients like lunarclient change their last part of the name with something like lunarclient:a54b912a.
To detect them you just have to add a ^ at the end of the name.