# Best Minecraft antibot plugins in 2026

Anti-bot plugins for Minecraft work in two very different ways. Some test every new player in a small verification world; others look at where the connection comes from. Here is what is maintained in 2026 and how the main options compare.

Updated: 2026-11-03

## In short

- Verification plugins (Sonar, LimboFilter) check that a new player behaves like a real Minecraft client before letting them in.
- Sonar 2 is free and open source; Sonar 3.0 is a paid hosted version with VPN and country blocking.
- Paid plugins such as BotSentry and BotShield add CAPTCHAs, firewalls and VPN checks.
- Address-based protection like Kordon's attack mode stops bot waves from proxy networks without a verification step, and works well next to a verification plugin.
- UltimateAntiBot and EpicGuard are no longer maintained.
- We make Kordon. All facts were checked on 3 November 2026.

## Two ways to stop bots

A verification plugin sends each new player to a lightweight fake server first and checks things a simple bot gets wrong: gravity, collisions, the network protocol, sometimes a CAPTCHA drawn on a map. A real client passes in a second or two, then joins as usual. This catches bots no matter which address they use, but every new player goes through the extra step.

Address-based protection looks at the connection instead: VPNs, proxies, hosting networks, and sudden waves of joins from the same networks. Bots for attacks almost always come through proxy lists, so closing those networks stops most of a wave without bothering real players. It does not catch a bot that comes from a clean home address.

## Verification plugins

### Sonar

One of the most widely used anti-bots, with about 75,000 downloads on Modrinth. Sonar 2 is free and open source (GPL-3.0) and runs on Velocity, BungeeCord, Waterfall, Paper, Spigot and Folia. It checks gravity, block collisions, vehicle packets and the vanilla protocol, and queues joins during a flood. It does not do VPN checks and has no CAPTCHA by default. [Sonar on Modrinth](https://modrinth.com/plugin/sonar)

Sonar 3.0 is a separate hosted product: cloud checks, a web CAPTCHA, VPN, proxy and Tor blocking, country rules and a panel. It is paid only, from €5 a month for one server with up to 150 players. [sonar.top](https://sonar.top) [Kordon compared with Sonar](https://kordonlabs.com/guides/sonar-alternative)

### LimboFilter

A Velocity-only plugin built on LimboAPI. New players land in a virtual limbo world with a customizable map CAPTCHA and a check of client settings and brand. Free and open source (AGPL-3.0). The last tagged release is from June 2024, though development builds kept coming in 2026. [LimboFilter on Modrinth](https://modrinth.com/plugin/limbofilter)

## Paid all-in-one plugins

### BotSentry

A long-running paid plugin (€10.99 on SpigotMC) for BungeeCord, Spigot, Sponge and Velocity. It switches on during an attack: players with at least two minutes of play time get in, new players solve a CAPTCHA on BotSentry's site. It also has an IP blacklist, an optional system firewall, a bad-packet filter and, since version 9.2, VPN and country blocking. [BotSentry on SpigotMC](https://www.spigotmc.org/resources/55924/)

### BotShield

A newer paid plugin (€5.99, a sale price on 3 November 2026) for Velocity, BungeeCord and Paper that checks each connection before the player object is created and includes an AntiVPN module. No CAPTCHA or fall checks. Updated in October 2026. [BotShield on SpigotMC](https://www.spigotmc.org/resources/121084/)

### nAntiBot and AlixSystem

nAntiBot has a free version with cloud checks, an invalid-packet check, an online CAPTCHA and country restrictions; we could not confirm the price of its premium version. AlixSystem is a free login system for Spigot (with a separate Velocity version) that bundles a CAPTCHA, anti-bot and AntiVPN checks; it suits cracked servers that need a login plugin anyway. [nAntiBot](https://voxel.shop/resource/nantibot-free-antibot.3225), [AlixSystem](https://www.spigotmc.org/resources/109144/)

## Address-based: Kordon

Kordon is our hosted AntiVPN and anti-bot service for BungeeCord, Waterfall and Velocity. It does not have a verification world. It checks every login within the plan's daily limit, and every login during an attack. When a wave of bots arrives it switches the server to attack mode: new players who look like the attack are refused, residential proxies are closed on every protection level, and players your server already let in before the attack are not affected by the attack checks. Attack mode is on every plan, including the free one, and checks during an attack do not count toward the daily limit.

Because it works at the address level, Kordon fits well next to Sonar 2: Sonar catches bots from clean addresses, Kordon closes VPNs and proxy networks and gives you a login log and attack reports in a panel. See [how attack mode works](https://kordonlabs.com/guides/minecraft-bot-attack-protection).

## Side by side

|  | How it works | Platforms | Price | VPN checks | Maintained |
| --- | --- | --- | --- | --- | --- |
| Sonar 2 | Verification server | Velocity, BungeeCord, Paper, Spigot, Folia | Free, open source | No | Yes |
| Sonar 3.0 | Hosted checks, web CAPTCHA | Velocity, BungeeCord, Paper 1.21+ | From €5/month | Yes | Yes |
| LimboFilter | Limbo world, map CAPTCHA | Velocity | Free, open source | No | Dev builds only |
| BotSentry | Attack mode, web CAPTCHA, firewall | BungeeCord, Spigot, Sponge, Velocity | €10.99 | Yes | Yes |
| BotShield | Early connection checks | Velocity, BungeeCord, Paper | €5.99 (sale) | Yes | Yes |
| **Kordon** | Address checks, attack mode | BungeeCord, Waterfall, Velocity | Free plan, paid per server | Yes | Yes |

## No longer maintained

UltimateAntiBot still has tens of thousands of downloads, but its last update was in July 2024. EpicGuard's repository is archived, the last version came out in August 2025. Both may still work on older setups, but they will not get fixes for new Minecraft or proxy versions.

## Which one to choose

If you only need to stop floods of fake players, Sonar 2 is free, maintained and easy to set up. If bots come through proxies and you also deal with VPN users and ban evasion, add address checks, either from a paid all-in-one plugin or a service like Kordon. During an attack, follow [this checklist](https://kordonlabs.com/guides/minecraft-bot-attack-what-to-do).

## Try it on your server

Start in observe mode: Kordon shows who it would keep out, and you turn protection on when you are ready. [Create an account](https://panel.kordonlabs.com/register)

## More guides

- [Sonar alternative: Kordon compared with Sonar](https://kordonlabs.com/guides/sonar-alternative): Sonar for Minecraft compared with Kordon: how the Sonar anti-bot works, whether Sonar blocks VPNs (Sonar AntiVPN in 3.0), pricing, and when to run both.
- [How to protect a Minecraft server from bot attacks](https://kordonlabs.com/guides/minecraft-bot-attack-protection): What a bot attack on a Minecraft server looks like, why it comes through proxies, and how Kordon's attack mode closes the networks bots come from while real players keep joining.
- [Best Minecraft AntiVPN plugins in 2026](https://kordonlabs.com/guides/best-minecraft-antivpn-plugins): Best AntiVPN plugins for Minecraft compared: Connection Guard, FoxGate, KauriVPN, antivpn.io, v4Guard and Kordon. Free and paid, Velocity and Paper.