Omni Anticheat

Server-side anti-cheat and staff tools for Minecraft 1.8.8 through 26.x on Spigot, Paper and Purpur.

One jar for every version. Java players and Bedrock players (Geyser/Floodgate) both work. Checks that your version does not have (elytra, totems, crystals, anchors, maces, spears) switch themselves off.

This is a normal plugin you drop in plugins/. It does not phone home, does not run remote code, and does not replace /ban or /kick unless you add those aliases yourself.

---

What it checks

62 detections plus 3 mitigations (AntiESP and AntiInfo on by default; OreObfuscator off, prefer Paper anti-xray).

• Movement: speed, strafe, fly, long jump, step, nofall, jesus, swim, climb, phase, teleport, sprint / omni-sprint / keep-sprint, noslow, inventory move, timer, blink, velocity, elytra, vehicles and mounts
• Combat: reach, wall hits, backtrack, hitboxes, killaura, rotation, aim, heuristics, autoclicker, criticals, autoblock, item swaps, auto mace / spear / pearl, crystal aura, auto anchor, surround / burrow, bow aimbot, fast use
• Player: auto totem, regen, potion saver, chest steal, inventory actions, auto fish, auto actions
• World: scaffold, build patterns, fast place / break, break delay, nuker / ghost hand, x-ray statistics
• Packets: client brand, bad packets, protocol, illegal items, exploits

Optional PacketEvents makes Timer, Blink, Reach, HitBox, AutoBlock and KeepSprint more precise. Without it the plugin still loads and every Bukkit-level check runs.

---

How it behaves

Prevention is on, but only once a check is confident: movement is set back, illegal hits / breaks / places / clicks are cancelled, NoFall applies the avoided fall damage. Statistical checks (AutoClicker, Aim, XRay, ...) only alert.

Automatic kicks and bans follow an escalation ladder (punishments.enabled). They need repeated evidence. You can turn them off.

Checks pause during join, teleport, world change and respawn, when TPS is low, and after server lag. A player's own lag or high ping only pauses timing checks. Movement physics, Reach and HitBox keep running, so fake lag is not a bypass. Bedrock and ViaVersion players get extra tolerance.

config.yml is fully commented. Every value is validated on /omni reload; a typo never silently disables protection. Older configs are upgraded and keep your settings. Any check option can also be set per client version (1.8, 1.9 to 1.21.1, 1.21.2+, Bedrock) in the check's versions: block, and AutoClicker ships with separate limits for each.

---

Staff tools

Alerts with check, VL, ping, TPS and client version. /omni gui, /omni stats, /omni debug. Staff mode, vanish, freeze, ban / mute / kick / warn (/omniban and friends, so they never steal Essentials' /ban), notes, invsee, locate, X-ray suspects, /watch, help requests, Discord webhook (async, never lags the server), PlaceholderAPI.

Optional Anti-VPN is off. When you enable it, joining IPs are sent over HTTPS to the provider you pick.

---

Install

1. Put OmniAnticheat-1.0.0.jar in plugins/ (remove the old jar).
2. Start once. Data folder is plugins/OmniAnticheat/. An old plugins/AntiCheat/ folder is moved there automatically.
3. Edit config.yml if you need to, then /omni reload.

Main command: /omnianticheat
Aliases: /omni, /omniac, /oac

Permissions: omniac.*
oneac.* and 1.x antisystem.* nodes still work as aliases. omniac.bypass is never given to anyone by default, not even ops.

Server	Java
1.8.8 - 1.16.5	8+
1.17 - 1.20.4	17+
1.20.5 - 1.21.x	21+
26.x	25+

Folia is not supported.

Optional: PacketEvents 2.x, PlaceholderAPI 2.12.3+, ViaVersion, Floodgate / Geyser.

---

Coverage of a popular cheat client's modules

Honest status per module: what a server can actually see. Module names are from a public client list (names only; no cheat code was used).

Covered = a check targets the module's core server-visible behaviour.
Partial = only some modes are visible, or the signal is statistical.
Not detectable = the client only changes what it renders or decides.

Blatant

Module	Status	Check(s)	Notes
AntiBot	Not detectable	-	Client-side filter that ignores server NPCs/bots.
AntiFML	Partial	ClientBrand	Hides the Forge handshake; flagged only when brand and registered channels disagree.
AntiFall	Partial	Fly, NoFall, Blink, Scaffold	Void-save via air jumps/teleports/ground spoof is flagged; a look-down block clutch in the air is Scaffold (Clutch).
AutoAnchor	Covered	AutoAnchor	1.16+ (respawn anchors). Place-charge-detonate timing, several charges per tick, no-look use.
AutoHeal	Partial	ItemSwap, Regen	Instant swap-to-heal-item-and-back; abnormal regen rates.
AutoLadder	Partial	Climb, FastPlace, Scaffold	Ladder speed and placement timing; perfect ladder placing itself looks human.
Backtrack	Partial	Backtrack, Blink	Hits that only fit older target positions; withheld/burst movement.
Blink	Covered	Blink, Timer	Movement gaps and bursts (tick-end aware on 1.21.2+ with PacketEvents).
Clutch	Covered	Scaffold, ItemSwap, NoFall	Air look-down snap onto a block underfoot, hidden-face / no-look placements and instant swaps.
DiscardedBlink	Partial	Blink	Gaps are seen; discarded (never sent) movement looks like a teleport/rubber-band.
Fly	Covered	Fly	Gravity prediction, air jumps, hover.
HitBoxes	Covered	HitBox, Reach	Hits that miss the real hitbox are cancelled after a confirmed miss.
InvWalk	Covered	InvMove, InventoryActions, ChestSteal	Movement/rotation with a container open; the player's own inventory is tracked from its clicks.
KeepSprint	Covered	Sprint	1.21.2+: a charged sprint hit on a player must drop speed to 60%. Older clients: illegal sprint states only.
KillAura	Covered	KillAura, Rotation, Aim, HitBox	Multi-target, through walls, out of view, hitting past the entity under the crosshair (target priority), with GUI open, combat jitter, teleport-look snaps, rotation analysis.
KnockbackTest	Partial	Velocity	Reduced/modified knockback.
LongJump	Covered	LongJump, Speed, Fly
NoFall	Covered	NoFall	Ground spoof and missing fall damage. Water, hay, slime, beds, cobwebs, powder snow, ladders and vines are respected.
NoSlowdown	Covered	NoSlow	Using items, sneaking, cobwebs.
OmniSprint	Covered	Sprint	Sprinting sideways/backwards.
Phase	Covered	Phase	Moving through solid blocks.
PotionSaver	Partial	PotionSaver, Blink	1.8 servers (frozen timers); on 1.9+ only the movement gaps are visible.
Regen	Covered	Regen
SafeWalk	Partial	SafeWalk	Edge clamping without sneaking (heuristic).
Scaffold	Covered	Scaffold, SafeWalk, FastPlace	Hidden faces, look-ray miss, no-rotation underfoot, 1.8 hit-vector centres, tower speed.
Speed	Covered	Speed
Step	Covered	Step, Fly
Strafe	Covered	Strafe, Speed	Air acceleration above vanilla air control.
Timer	Covered	Timer	Packet balance with lag-burst credit.

Combat

Module	Status	Check(s)	Notes
AimAssist	Partial	Aim	Sensitivity-grid (GCD) analysis and perfect-aim ratio; smooth humanised assists can pass.
AutoMace	Covered	ItemSwap, AutoMace	1.21+. Swap-smash, spoofed fall, grounded smash, wind/pearl smash, look-down smash.
BlockHit	Covered	AutoBlock	Attacking while blocking/using an item; 1.21.2+ unblock-attack-reblock in one tick is cancelled. Manual block-hitting is legal.
BowAimbot	Partial	BowAimbot	Arrows aimed at the predicted target position with machine precision.
ClickerMod	Covered	AutoClicker	CPS, interval deviation, kurtosis/skewness, outliers, tick-aligned bursts.
CrystalAura	Covered	CrystalAura, Surround	1.9+. Same-tick and break-before-visible hits, multi-break, place rate/reach/walls.
HitFlick	Partial	Aim	Large yaw snaps immediately before hits.
HitSelect	Covered	KillAura	Waiting to click until the target's hurt-time allows damage, then hitting that first legal tick.
HitSwap	Covered	ItemSwap
JumpReset	Partial	Velocity	Share of knockbacks answered with a same-tick jump.
KnockbackDelay	Partial	Velocity, Blink	Knockback applied much later than ping explains.
LeftClicker	Covered	AutoClicker
NoItemRelease	Partial	AutoBlock, FastUse
Reach	Covered	Reach	Ping-compensated history, X/Y/Z and look-ray range, per-entity hitboxes, Bedrock extra. Hits over vanilla + 0.03 are cancelled; 3.11+ flags on the first hit.
RightClicker	Covered	AutoClicker	Right-click CPS.
ShieldBreaker	Covered	ItemSwap	Instant swap to an axe against shields.
SilentAura	Covered	KillAura, Aim	Hits far outside the view direction.
Sprint	Partial	Sprint	Auto-sprint itself equals toggle-sprint; impossible sprint states are flagged.
Triggerbot	Covered	Aim	15 hits within one tick of the crosshair reaching the target, with no missed swings.
Velocity	Covered	Velocity	Horizontal/vertical knockback ratios after a transaction sandwich, ignored packets, 0% motion, round velocity modifiers. Remaining knockback is teleported and resent.
WTap	Covered	Sprint	Releasing and re-pressing the forward key with identical tick timing after 9 of 10 sprint hits (1.21.2+ clients). Manual W-taps and the vanilla sprint reset on hit pass.

Utility

Module	Status	Check(s)	Notes
ArmorSwitch	Covered	InventoryActions
AutoArmor	Covered	InventoryActions	Instant shift-click armour equips.
AutoFish	Covered	AutoFish	Reaction and re-cast timing deviation.
AutoHotbar	Covered	InventoryActions
AutoPearl	Covered	AutoPearl, ItemSwap	Flick-up throws (first throw), pearls before the 1.9+ cooldown, wind-charge then pearl while looking straight up, flying while a pearl is still in the air.
AutoTool	Partial	ItemSwap	Swap-dig-swap timing; hotkey users can look similar.
AutoTotem	Covered	AutoTotem	1.11+. Re-totem time after a pop vs ping; closed-inventory refills.
BlockIn	Covered	Scaffold, Surround	Many blocks around the player within a few ticks.
InvCleaner	Covered	InventoryActions
InventoryFill	Partial	InventoryActions
InventoryManager	Covered	InventoryActions
MLG	Partial	Scaffold, ItemSwap, NoFall	Bucket/block placements without looking, instant swaps.
Panic	Not detectable	-	Client-side "turn everything off" key.
Parkour	Not detectable	-	Jumping at block edges looks like a good player.
PearlCatch	Partial	ItemSwap
Refill	Covered	InventoryActions
ThrowDebuff	Covered	ItemSwap	Swap-throw-swap timing.
Throwpot	Covered	ItemSwap
WindCharge	Covered	AutoPearl, ItemSwap	1.21+. Flick-up throws and wind-then-pearl combos.

World

Module	Status	Check(s)	Notes
AntiAFK	Not detectable	-	Produces normal-looking input. Use an AFK plugin that checks for real activity.
BedBreaker	Covered	BlockInteract	Breaking beds out of reach or with every face hidden behind blocks.
ChestSteal	Covered	ChestSteal	First-click delay, take interval and regularity; closed-container clicks.
FakeLag	Partial	FakeLag, Blink, Timer, Backtrack	Statistical gaps plus ICMP to their IP vs a Minecraft ping every 10s. Real lag looks similar, so thresholds are lenient.
FastPlace	Covered	FastPlace
MurderFinder	Not detectable	-	Reads held items the server already sends to every client.
XRay	Partial	XRay (+ OreObfuscator)	Hidden-vein ratio statistics; for prevention use Paper's anti-xray or the optional OreObfuscator.

Render

Render modules only change what the client draws. The server cannot flag them, but AntiESP stops sending the hidden entity or block so they have nothing to draw.

Module	Status	Mitigation
ESP, Chams, Tracers, NameTags, Health, Indicators	Mitigated	AntiESP (on): players fully behind walls are not sent to the viewer. They stay in the tab list.
Health ESP, health nametags, ArmorHUD, armor durability/enchant ESP, ShulkerPeek, stack counters	Mitigated	AntiInfo (on): other players' health is sent as full, absorption as zero, and armor, held and dropped items lose durability, enchantment levels, names, lore, contents and stack size. Glint, dye and trims stay.
Search, StorageESP, SpawnerFinder, ItemESP, BedPlates	Mitigated	AntiESP hides chests, shulkers, spawners, beds and items behind walls; OreObfuscator / Paper anti-xray hides buried ores.
Fullbright, Freecam, Trajectories, Arrows, Explosions, AntiDebuff, PropHunt	Not detectable	None.

---

Notes

No anti-cheat is perfect. Review alerts before you lean on automatic punishments. If you report a false flag, include the check name, VL, ping, TPS, client version (all in the alert) and what the player was doing.