Anti-cheat plugins watch what the client claims it did and compare it against what is physically possible. They flag flight, speed, reach, aim assistance, fast breaking and inventory exploits, then warn, cancel the action or ban depending on how you configure them. Alongside them sit plugins that close duplication bugs, limit TNT and lava damage, restrict redstone abuse and cap entity counts before someone lags the server on purpose.