Best AntiVPN plugins at a glance
- Kordon (our service): for networks on BungeeCord or Velocity. Every plan, including the free one with 1,000 checks a day per server, checks new addresses online and has an attack mode against bot waves, an observe mode and a web panel. Paid plans add country and nickname rules (from Basic) and client version rules (from Pro).
- Connection Guard: the best free choice for one server or a small network. No API keys, with an observe mode and country lists.
- FoxGate: the widest platform support, from Paper and Velocity to Bedrock servers and Hytale, with many detection services built in.
- AdvancedAntiVPN: a paid plugin with a lot of control (country rules, a mode that blocks all new joins, MySQL sync), if you don't mind setting up your own API keys.
- antivpn.io: a hosted service with a free plan of 5,000 requests a month and a web panel.
How we picked
We only included tools that had an update in 2026 and that work on at least one proxy (BungeeCord, Waterfall or Velocity), since that is where most networks run their checks. For each one we looked at the official plugin page or website: supported platforms, price, whether you need to register for API keys, and what else it does besides blocking VPNs.
We did not run our own accuracy test. Detection quality changes every week as VPN providers add addresses, so a test from last month says little about next month. Where an outside test exists, we mention it.
Self-hosted plugins
These run entirely on your server. They check addresses against their own lists or ask outside detection services, and they keep results in a local cache.
Connection Guard
A free, MIT-licensed plugin and the successor of LNDNR's Anti-VPN. It runs on Paper, Spigot, Folia, BungeeCord, Waterfall and Velocity, works without API keys out of the box and checks its own VPN and Tor lists locally. It has country allow and block lists, exceptions by IP or range, a Discord webhook and an observe mode. An optional free dashboard signs in with Discord. Version 0.6.1 came out on 13 October 2026. Connection Guard on Modrinth
FoxGate AntiVPN
One of the most downloaded AntiVPN plugins on Modrinth, with over 18,000 downloads there. It supports Spigot, Paper, Folia, BungeeCord, Velocity, Bedrock servers and proxies (Nukkit, WaterdogPE) and Hytale. Thirteen detection services work without keys, and you can add more with your own keys. It can also filter by provider or network, limit accounts per IP and look up alts. The base plugin is free; FoxGate+, which adds country blocking, costs $8.99 on SpigotMC and Polymart. FoxGate on Modrinth
AdvancedAntiVPN
A paid plugin (£7.99 on SpigotMC) for Spigot, BungeeCord and Velocity. Most of its detection services need your own API keys, one works without a key. In return you get a lot of control: country rules, a mode that blocks all new joins, a per-IP account limit, wildcard lists, a Discord webhook and MySQL sync between servers. AdvancedAntiVPN on SpigotMC
KauriVPN
KauriVPN has about 38,000 downloads on SpigotMC, among the most for an AntiVPN plugin there. A single free jar (Apache-2.0) runs on Spigot, BungeeCord and Velocity. Instead of third-party APIs it asks its developer's own lookup service: 20,000 lookups a month are free without a key, and more need a paid licence from funkemunky.cc. It has country allow and block lists, staff alerts, a whitelist and a name prefix rule that lets Floodgate players through. It checks a player after they have joined and kicks them if the address is flagged. The last release on SpigotMC and Modrinth came out on 3 May 2026. KauriVPN on SpigotMC
ProxyShield, VPNGuard and Gatekeeper
Three small free plugins that are still maintained. ProxyShield (GPL-3.0) runs on almost every platform (on backend servers from Minecraft 1.21) and has a country filter, Discord alerts and a dry-run mode. VPNGuard has a cache, a UUID and IP whitelist and a request queue; API keys are optional. ProxyShield and VPNGuard both had updates in the last week of October 2026. Gatekeeper (GPL-3.0, version 1.6.3 from 31 August 2026) filters by network, public proxy lists, country and accounts per IP, and also works without keys. ProxyShield, VPNGuard, Gatekeeper
An open benchmark from the Connection Guard team (mc-antivpn-bench, runs from 7 October to 5 November 2026) tested six of these plugins on Velocity. Without keys, Connection Guard, ProxyShield, VPNGuard and FoxGate blocked 95.8 to 99.7% of the VPN, Tor and proxy addresses in its set, KauriVPN 70.5% and AdvancedAntiVPN 55.6%. With free keys added, AdvancedAntiVPN reached 99.5%. The results are updated daily. Keep in mind that the authors make one of the tested plugins.
Hosted services
Here the plugin is a thin client. The check runs on the service side, settings live in a web panel, and the service sees connections from many servers at once. You depend on the service being online, and the plugin needs an account.
Kordon
Our Minecraft AntiVPN service, for BungeeCord, Waterfall and Velocity. Besides the VPN check it has protection levels, an attack mode against bot waves, country, nickname and client version rules, and an observe mode that shows who would be blocked for VPN, proxy or country before you switch protection on. The free plan gives 1,000 checks a day per server, with the same online check of every new address as the paid plans; country and nickname rules and the login log start with Basic, client version rules with Pro. It does not run on a standalone Paper or Spigot server without a proxy. Pricing
antivpn.io
Its plugin, Anti VPN, has about 15,000 downloads on Modrinth and 6,500 on SpigotMC, where it is listed as "Anti VPN | Bring Safety to Your Stories". The free Starter plan gives 5,000 requests a month for one server; paid plans start at $3.99 a month for 250,000 requests (Spigot and BungeeCord; Velocity from the $6.99 Pro plan). It has a panel that shows who was blocked and who was let in, a whitelist, sub-accounts (beta), analytics from Pro and webhooks on the Business plan. Shield Mode switches on during a flood of joins and then lets in only players from countries that made up a large share of last month's joins. Its documentation lists country blocking as coming soon. antivpn.io, Anti VPN on SpigotMC
v4Guard
A hosted service for proxies (BungeeCord, Waterfall, Velocity) used by several large networks. It has a dashboard with custom rules, detection of residential proxies and mobile carriers, an account protection feature and an API. Prices are not public: you see the plans after you sign up. v4Guard, v4Guard on SpigotMC Kordon compared with v4Guard
Jarvis AntiVPN
A young hosted service, first published in June 2026 and updated every two or three weeks (version 0.5.28 came out on 3 November 2026). There are builds for Velocity, BungeeCord and Paper or Folia 1.18+, and the plugin links to a free account at jarvisguard.com. During early access it is free with no limits, and its terms say paid plans may come later. If the service does not answer in time, the player gets in. Its web panel has country rules and protection against bot waves. Jarvis AntiVPN on Modrinth
Side by side
| Type | Platforms | Own API keys | Price | Extras | |
|---|---|---|---|---|---|
| Kordon (ours) | Service | BungeeCord, Waterfall, Velocity | Server key | Free 1,000/day per server, paid per server | Attack mode, country, nickname and version rules |
| Connection Guard | Plugin | Paper, Spigot, Folia, BungeeCord, Waterfall, Velocity | Not needed | Free | Country lists, observe mode |
| FoxGate | Plugin | Spigot, Paper, Folia, BungeeCord, Velocity, Bedrock servers and proxies, Hytale | Optional | Free, Plus $8.99 | Network filter, accounts per IP, country filter in FoxGate+ |
| AdvancedAntiVPN | Plugin | Spigot, BungeeCord, Velocity | Mostly needed | £7.99 | Country rules, MySQL sync |
| KauriVPN | Plugin | Spigot, BungeeCord, Velocity | Not needed | Free 20,000/month, licence for more | Country lists, Geyser prefix rule |
| ProxyShield | Plugin | Paper, Spigot, Folia, Sponge (1.21+), BungeeCord, Velocity | Optional | Free | Country filter, dry run |
| VPNGuard | Plugin | Bukkit family, Folia, BungeeCord, Velocity | Optional | Free | Request queue |
| Gatekeeper | Plugin | Paper, Spigot, Folia, Sponge, BungeeCord, Velocity | Optional | Free | Network and country filter, accounts per IP |
| antivpn.io | Service | Spigot, Paper, BungeeCord, Velocity | Account token | Free 5,000/month, from $3.99 (Velocity from $6.99) | Panel, analytics |
| v4Guard | Service | BungeeCord, Waterfall, Velocity | Account key | Not public | Custom rules, carriers |
| Jarvis AntiVPN | Service | Velocity, BungeeCord, Paper, Folia | Account licence | Free during early access | Panel |
Features compared
What the main tools offer besides the VPN check, according to their own pages. "No" means the tool's documentation says it lacks the feature, "Not listed" that we did not find it there on 6 November 2026.
| Bot attacks | Country rules | Nickname rules | Observe mode | Web panel | Residential proxies | |
|---|---|---|---|---|---|---|
| Kordon (ours) | Yes, attack mode on every plan | Yes, from Basic | Yes, from Basic | Yes | Yes | Yes |
| Connection Guard | Partly, optional login limits | Yes | No | Yes | Yes, optional | No |
| FoxGate | Partly, connections per IP | FoxGate+ only | Not listed | Partly, alerts without kicks | Not listed | Paid add-on |
| AdvancedAntiVPN | Partly, manual lockdown | Yes | Not listed | Partly, alerts without kicks | Not listed | Not listed |
| KauriVPN | Not listed | Yes | Not listed | Partly, alerts without kicks | Not listed | Not listed |
| ProxyShield | Partly, join rate scoring | Yes | Not listed | Yes, dry run | Not listed | Not listed |
| antivpn.io | Yes, Shield Mode | Coming soon | Not listed | Not listed | Yes | Not listed |
| v4Guard | Not listed | Not listed | Partly, one name pattern | Not listed | Yes | Yes |
| Jarvis AntiVPN | Yes | Yes | Not listed | Not listed | Yes | Not listed |
Plugins that are no longer updated
Anti-VPN by egg82 still shows up in search results and has over 67,000 downloads on SpigotMC, but its last update was on 22 January 2021. Reviews report problems on newer Java versions, and a SpigotMC forum thread describes it failing to start because a library it downloads at startup is no longer available. LNDNR's Anti-VPN & Geo-Blocking, which also ranks high, was last updated in July 2024; Connection Guard replaced it. UltimateAntiBot and EpicGuard, which some lists recommend for VPN blocking, are no longer maintained either: EpicGuard's repository is archived.
Common questions
Does prevent-proxy-connections block VPNs?
Almost never. This server.properties setting (prevent_proxy_connections in BungeeCord's config.yml, prevent-client-proxy-connections in velocity.toml) only kicks a player when the network your server sees differs from the one Mojang saw when the game confirmed the session as it joined. The game makes both connections itself, so when a VPN covers the game, both go through it and the player gets in.
Which server should the plugin run on?
On a network, put it on the proxy (BungeeCord or Velocity): every player passes through it and it sees their real addresses. On a backend without IP forwarding, the plugin only sees the proxy's address.
What about Bedrock players on Geyser?
Make sure the plugin sees their real addresses. If Geyser runs as a separate proxy in front of your server and does not pass the address on (Floodgate or PROXY protocol does that), every Bedrock player arrives from the Geyser machine's address. If that is a hosting address, the plugin can block them all; a local address like 127.0.0.1 is often not checked at all. ProxyShield lets Floodgate players through by default, and KauriVPN can skip them by name prefix.
What if I use TCPShield or another DDoS protection proxy?
Then players reach you from that service's addresses. Turn on PROXY protocol or install the service's plugin, otherwise the AntiVPN plugin sees the protection service's address for every player. More in DDoS protection for Minecraft.
What happens when the free checks run out?
Plugins that check addresses through an online service often have monthly or daily limits: KauriVPN gives 20,000 lookups a month, antivpn.io 5,000 a month on its free plan, Kordon 1,000 checks a day per server. Find out in advance what a plugin does once it hits its limit. On Kordon's free plan, logins over the daily limit get in without a check, except during an attack.
Can a player who needs a VPN still join?
Yes, if you add their nickname to the whitelist. Many servers block VPNs for everyone and make exceptions for regular players who ask.
Which one to choose
For a single Paper server that rarely sees VPN abuse, a free plugin such as Connection Guard or FoxGate is the simplest start.
For a network on BungeeCord or Velocity that deals with ban evasion and bot waves, a hosted service saves you from managing keys and lists on every proxy, and data from other servers helps against new VPN ranges. If you want to try Kordon, start it in observe mode and look at who it would block before you turn protection on. See how to set it up.
Whatever you pick, add your staff to the whitelist first and check the log for regular players who got caught.