Admincraft•2y ago

Random bots joining and instantly leaving my server

Im not sure why or how, but so far 4 accounts have gotten the IP to my private server, joined, and instantly left. I have no idea why or how this is happening if theres anything like a plugin or something doing it I would just want to know im not getting like exploiters on or something. the plugins i have are Dynmap, Gsit, OnePlayerSleep, SimpleHomes, and StormerTPA very confused

74 Replies

Admincraft Meta•2y ago

Thanks for asking your question!

Make sure to provide as much helpful information as possible such as logs/what you tried and what your exact issue is

Make sure to mark solved when issue is solved!!!

/close !close !solved !answered

Requested by sunar531#0

ProGamingDk•2y ago

be online-mode and add a whitelist and ur fine

sunarOP•2y ago

but like do you know what causes it? or is it just randoms IP guessing

boyproO19•2y ago

probably

ProGamingDk•2y ago

server scanners probs

PleaseSignOut•2y ago

>private server Private servers usually imply you’re on whitelist. IP addresses are public information so by definition if you are not on whitelist, you are a public server

Admincraft Meta•2y ago

Please use a paste service instead!

Paste services are more mobile friendly and easier to read than just posting a log file

data-1689431002990.csv

https://mclo.gs/XdUSIJ0

Requested by enderschesi#0

Rim•2y ago

why is my only question

ProGamingDk•2y ago

she's bored ^^

Zaid•2y ago

make sure your server is whitelisted and uh

Zaid•2y ago

https://github.com/4drian3d/EpicGuard

GitHub

GitHub - 4drian3d/EpicGuard: 🛡 Bot protection system for Minecraft ...

🛡 Bot protection system for Minecraft servers and proxies. - GitHub - 4drian3d/EpicGuard: 🛡 Bot protection system for Minecraft servers and proxies.

Zaid•2y ago

hmm because you wanna annoy server owners by spamming their consoles? isn't that what most do @Rim if ur server is private then maybe only white list the ips you want to be able to join via firewall or somethin

ProGamingDk•2y ago

rim isnt the OP ... original poster

Zaid•2y ago

ProGamingDk•2y ago

not op as in operator

Zaid•2y ago

luckily I have never gotten these spam bots yet I'm using epicgaurd so maybe thats something to do with it or I just set up velocity correctly and exactly what purpose and what benefit do you gain by spamming servers and bypassing shit not you in general sorry i don't word things correctly not something I'm good at data that does what this shit will eventually end it wasnt there for thr past decade now people scan and spam servers and this is how they feel

Zaid•2y ago

https://tenor.com/view/jessicasprings0-mulsup-dog-mask-gif-25564159

Tenor

Zaid•2y ago

most of those scanners don't even use actual accounts maybe if theres a way to completely block any requests from them idk IPTABLES -A INPUT -p tcp -i eth0 -m state --state NEW -m recent --set IPTABLES -A INPUT -p tcp -i eth0 -m state --state NEW -m recent --update --seconds 30 --hitcount 15 -j DROP IPTABLES -A FORWARD -p tcp -i eth0 -m state --state NEW -m recent --set IPTABLES -A FORWARD -p tcp -i eth0 -m state --state NEW -m recent --update --seconds 30 --hitcount 15 -j DROP maybe this or

iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,SYN FIN,SYN -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags SYN,RST SYN,RST -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,RST FIN,RST -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,ACK FIN -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ACK,URG URG -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ACK,FIN FIN -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ACK,PSH PSH -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL ALL -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL NONE -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL SYN,FIN,PSH,URG -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP

iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,SYN FIN,SYN -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags SYN,RST SYN,RST -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,RST FIN,RST -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,ACK FIN -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ACK,URG URG -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ACK,FIN FIN -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ACK,PSH PSH -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL ALL -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL NONE -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL SYN,FIN,PSH,URG -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP

" This will start dropping an IP's packets if he accesses more than 15 ports within thirty seconds.

Rim•2y ago

mine isnt private im making a public i was just curious

Zaid•2y ago

sorry I thought u were the one started this post

Rim•2y ago

it's all good

Zaid•2y ago

https://github.com/4drian3d/EpicGuard

GitHub

GitHub - 4drian3d/EpicGuard: 🛡 Bot protection system for Minecraft ...

🛡 Bot protection system for Minecraft servers and proxies. - GitHub - 4drian3d/EpicGuard: 🛡 Bot protection system for Minecraft servers and proxies.

Zaid•2y ago

but I do recommend this I personally haven't gotten scanned at all maybe it works or I'm just lucky just don't use vpn no reason to use a vpn on a server tbh

ProGamingDk•2y ago

china ours did aswell

Zaid•2y ago

uhhh just exclude minecraft from the thing? or is that not an option

QarthO•2y ago

they use theirs network wide

Zaid•2y ago

QarthO•2y ago

🙂 adds ur ip to the epicguard blacklist haha im playin i dont really care enough

Zaid•2y ago

so u use 1 port and multiple ips? I guess that's where block all their backend, problem solved ? this gives me an idea I gotta ask a certain friend about doesn't matter anyways

Sorairei•2y ago

lol new one:

Sorairei•2y ago

😮 ssss oky :/, EpicGuard works with spigot?

PleaseSignOut•2y ago

Chill out

Zaid•2y ago

ok cool how does this data benefit you in any way ok

PleaseSignOut•2y ago

I also want to know why you are collecting this data. Your whole philosophy is you left your door open so I guess it’s ok if I enter your private home. Oh you didn’t want me to? Shouldn’t have left your door open You implied it especially when you said “just move to fucking whitelist” Yeah but like inexperienced server owners don’t know that You still haven’t mentioned why you collect this data But like why What’s the point

Zaid•2y ago

I personally see no other reasons to intentionally be an annoying cunt

PleaseSignOut•2y ago

It’s also kinda gatekeeping to imply that like if you’re too stupid to not know all the ramifications of having a public ip then I have a right to do whatever I want and collect all your data

ProGamingDk•2y ago

anymore

PleaseSignOut•2y ago

Because new server owners are not going to know that and we should be kind to them and not call them stupid implying this is an ethical practice because big tech companies do it These are all things you’re implying with your attitude And especially your comment just move to fucking whitelist “Sounds like a problem on their end” Just because someone doesn’t know something doesn’t mean they have a problem on their end Again, this is a gatekeeping attitude Nobody said anything was broken on your end They set up their server with default settings And you literally said big tech companies do it As if Facebook isn’t in a massive lawsuit because of it Maybe people don’t want their data farmed? And how are we supposed to know you don’t have malicious intent When you won’t elaborate why you collect the data other than “I want to” Just cause it’s legal doesn’t mean it’s ethical

Zaid•2y ago

https://tenor.com/view/ksganti-dog-mad-gif-24019531

Tenor

Zaid•2y ago

how he feels

PleaseSignOut•2y ago

@Zaid I am in total agreement with you

Zaid•2y ago

I dont care what your gender is

PleaseSignOut•2y ago

@Deleted User I still can’t believe you said “big tech companies do it” to justify farming data lmao “Oh it’s legal so it’s ok” Lots of things are legal that are not ethical The justice system isn’t perfect I personally don’t want my data farmed that’s why I am on whitelist but new server owners wouldn’t know that and aren’t gonna be prepared for a random bot joining and collecting their data so I’m saying maybe quit with the gate keeping attitude and be a little kinder and explain your philosophy more instead of taking 0 accountability to criticism Ok but if you can’t understand why someone wouldn’t agree with this practice then I can’t help you Why should someone have to block a bot especially since you’ve already farmed their data within 1 millisecond of joining the server Why would anti bots be bad Again, what do you have against antibots How

Zaid•2y ago

refuses to elaborate lmao

PleaseSignOut•2y ago

How people protect their server is their prerogative though. If I don’t want you stealing any of my data that is also my prerogative. Especially when bots bypass extra layers of security and, like you said, change their IP I didn’t say that you said you change your ip Nope You said that you can change your IP for 50cents Wasn’t implying that you specifically were changing your ip Besides the point People don’t want their data stolen, they don’t like when people scan their servers, and all you’re saying about why you’re doing it is “because I want to” which isn’t a good explanation and also your attitude when facing criticism is “just move to fucking whitelist” which doesn’t work if you’re using a server for a church, school, etc. and you could inadvertently be farming sensitive data which again, people don’t like I really don’t like when someone has the attitude of ohhh you don’t know something that’s your fault and I can do whatever I want doesn’t address a single point ive made No you didn’t I can read, clearly you can’t Having a whitelist for those types of servers isn’t feasible Or sending someone a discord dm An admin of a fucking church Minecraft server isn’t going to find the owner of a bot and dm them through discord Like what That makes no sense Just don’t farm people’s data against their consent in the first place That is so not feasible for most people who just want to make a fun server for a local community and have limited IT knowledge They shouldn’t have to do that That’s ridiculous

Zaid•2y ago

lmao

PleaseSignOut•2y ago

I read all of your messages You’re the one who redirects and refuses to elaborate

Zaid•2y ago

hella stupid I lost brain cells tbh

PleaseSignOut•2y ago

You just don’t get it

Zaid•2y ago

they never will

PleaseSignOut•2y ago

She’s a narcissist. They all act that way.

Zaid•2y ago

I think I agree tbh

PleaseSignOut•2y ago

Her exact attitude is present in every narcissist

Zaid•2y ago

refuses to elaborate what they need the data literally collects them and feels like this gif

Zaid•2y ago

https://tenor.com/view/ksganti-dog-mad-gif-24019531

Tenor

Zaid•2y ago

the people behind these scanners have no thinking knowledge at all "but data!!!!" it's very stupid blocked the both of us because she knows we're right

PleaseSignOut•2y ago

So true, but anyone who sees this will know she has no argument

Zaid•2y ago

mhm she also used to spam consoles and now suddenly the not spamming consoles type person I'm telling you thsts the only intention they have to be an annoying cunt ngl this post literally got hijacked

PleaseSignOut•2y ago

OP since your question got hijacked by us arguing with a bot creator, aka the people sketching you out by scanning your server, I will give you some advice. It is highly recommended you move to whitelist. If that for whatever reason isn’t feasible to you, try and find the IPs of known bots and block all of them.

Paddyk45•2y ago

how funny it is to see people be mad because people are joining their public servers just activate a whitelist also its max 1x/24h so not even annoying

Zaid•2y ago

bots not people there's a difference

Paddyk45•2y ago

not really in this context except for the join and leave message theyre not annoying

PleaseSignOut•2y ago

Don’t forget she used to spam, collects data from people without their consent, and then refuses to elaborate when asks what her intentions are

Paddyk45•2y ago

used to but not now and i dont really get the other 2 points which data is she collecting and the intention is for a discord bot

PleaseSignOut•2y ago

What is there not to get?

Paddyk45•2y ago

which data is she collecting

PleaseSignOut•2y ago

Scroll up

Paddyk45•2y ago

of cource the slp results but how is that sensitive you can disable server listing in the multiplayer options

PleaseSignOut•2y ago

I’m getting annoyed with people on admincraft instantly defending server scanners and bots that collect data from Minecraft servers. You are contributing nothing to this conversation. She knew she was wrong and blocked both of us

Paddyk45•2y ago

scanners exist on many services ssh, telnet, websites well nevermind whatever bye

Zaid•2y ago

they keep taking L's can't defend themselves at all

Paddyk45•2y ago

yes

Paddyk45•2y ago

as said, if you dont want the bot joining use whitelist or blacklist and if you dont want all information in the server ping use something like https://github.com/adryd325/sneaky

GitHub

GitHub - adryd325/sneaky: Anonymise your server from scanners like ...

Anonymise your server from scanners like Copenheimer and ServerSeeker. With options to disable logging spam logins and rate limit new connections. - GitHub - adryd325/sneaky: Anonymise your server...

Paddyk45•2y ago

thats all you can do about it i think you can also make a plugin that checks an IPs abuseipdb reports on join and block them if they have more than x reports but that requires coding experience

Gaming

Programming

Random bots joining and instantly leaving my server

Did you find this page helpful?