Check Types

Movement Checks

Check	Config ID	Description
Speed	speed	Detects players moving horizontally faster than their current movement conditions allow. It accounts for effects and common legitimate movement states.
Fly	fly	Detects sustained movement or hovering in the air without flight, a vehicle, or another legitimate cause.
Glide	glide	Detects players falling substantially slower than normal without a valid slow-falling or gliding condition.
Step	step	Detects players climbing blocks with an upward step larger than normal Minecraft movement permits.
HighJump	high-jump	Detects a player rising significantly higher than a normal jump without an allowed effect or movement source.
FastClimb	fastclimb	Detects climbing ladders, vines, and similar blocks faster than normally possible.
WaterWalk	water-walk	Detects sustained movement on top of liquid as if it were solid ground. Liquid-entry and exit grace reduces false flags.
NoFall	nofall	Detects players avoiding expected fall damage or falsely reporting a safe landing after a significant fall.
GroundSpoof	ground-spoof	Detects a client claiming to be on the ground while the server sees no valid supporting block.
InventoryMove	inventory-move	Detects movement while an inventory interface is open when that movement should not be possible.
Timer	timer	Detects clients running game movement ticks faster than the normal Minecraft tick rate.

Combat Checks

Check	Config ID	Description
Reach	reach	Detects attacks made from farther away than the configured legitimate combat reach.
NoSwing	no-swing	Detects attacks that are not accompanied by a normal arm-swing animation.
AttackSpeed	attack-speed	Detects an abnormally high number of attacks in a short time.
KillAura	killaura	Detects suspicious automated combat patterns, including rapid target switching and multi-target attacks.
AimAngle	aim-angle	Detects attacks where the player’s view direction is too far away from the target.
AimPattern	aim-pattern	Detects repeated, mechanically consistent, or implausible rotation patterns associated with automated aiming.
Criticals	criticals	Detects invalid critical hits produced without a legitimate falling state.
AutoClicker	autoclicker	Detects excessively high or suspiciously consistent clicking based on arm-animation packets.

Block and World Checks

Check	Config ID	Description
FastPlace	fastplace	Detects blocks being placed faster than the configured minimum placement interval.
AirPlace	air-place	Detects blocks placed without an adjacent supporting block, which normal placement does not permit.
BlockReach	block-reach	Detects block placement from farther away than legitimate interaction range.
Scaffold	scaffold	Detects repeated underfoot block placement while moving, using placement angle, timing, and movement patterns.
ScaffoldSuspicion	scaffold-suspicion	Tracks weaker scaffold indicators that are suspicious together but are not strong enough for the main Scaffold check alone.
Tower	tower	Detects rapidly placing blocks underneath oneself to rise vertically faster than normal.
FastBreak	fastbreak	Detects blocks being broken faster than expected for the block, tool, effects, and player state.

Player Action Checks

Check	Config ID	Description
FastConsume	fastconsume	Detects food, potions, and other consumable items being completed faster than their normal use duration.
InvalidPitch	invalid-pitch	Detects impossible vertical look angles outside Minecrafts valid pitch range of -90 to 90 degrees.

Packet Checks

Check	Config ID	Description
PacketTimer	packet-timer	Counts movement packets per second and detects clients sending them faster than the expected tick rate.
PacketMoveSim	packet-move-sim	Simulates packet-level movement limits and detects excessive horizontal movement, upward movement, hovering, or impossible airborne changes.
PacketGround	packet-ground	Compares the movement packet’s on-ground value with the server’s collision state.
PacketNoSwing	packet-noswing	Compares attack packets with recent arm-animation packets to detect packet-level NoSwing
PacketUseEntity	packet-use-entity	Detects an excessive rate of entity-interaction or attack packets.
PacketRotation	packet-rotation	Detects invalid pitch and implausibly large packet-level yaw or pitch changes.

Packet checks require ProtocolLib. If ProtocolLib is unavailable, the normal Bukkit-event checks continue working but these packet checks are disabled.

Behaviour Analasys

Check	Config ID	Description
BehaviorAnomaly	behavior-anomaly	Combines multiple behavior samples to identify a player whose overall movement or combat profile differs significantly from normal play. It is a supporting risk signal rather than proof by itself.

Client and Anti-Spoof Checks

Check	Detection ID	Description
HackingMod	hacking-mod	Matches exposed client brands, mod names, channels, and payload hints against configured hacked-client patterns.
BlockedChannel	blocked-channel	Detects a registered plugin channel matching a configured suspicious or forbidden channel pattern.
BrandSpoof	brand-spoof	Evaluates the client-reported brand against configured known and suspicious brand patterns.
ModDiscrepancy	mod-discrepancy	Detects inconsistent signals, such as a Fabric or Forge brand without the channels normally exposed by that loader.
Client fingerprint	Informational	Records the brand, detected loader/client, protocol version, client settings, channels, and custom payloads for staff review.

Important

• Client brand, channel, and fingerprint information can be hidden or spoofed by modified clients.
• A detected client or mod loader does not automatically prove cheating.
• Client fingerprints should support movement, combat, packet, and behavior evidence rather than be used as the only ban reason.
• Check thresholds, buffers, violation amounts, and kick levels are configured under checks.<config-id> in plugins/SMP/Anticheat/config.yml.