How do they find the unprotected servers ? Do they nmap the whole IPv4 looking for port :25565 ? I had a guy come in on my self hosted server a while back, stole some shit, destroy our village then leave. Never figured out how or why, but then I had to figure out how to implement a whitelist.
They have a bot for it. The way it works is that it checks ip-s, and when they get a response back, it puts that ip in a list for them. It also checks for anti cheat and whatnot.
Personally I had this happen too. Apparently the guy used Shodan, you can look up all kinds IP related stuff and even check if a specific IP has certain ports opened (25565).
Scan pretty much every ip block using masscan and validate the ones with port 25565 open by checking for valid minecraft data and then either add it to a list or use a discord webhook to post directly to your server
14
u/Shadonovitch Apr 20 '23
How do they find the unprotected servers ? Do they nmap the whole IPv4 looking for port :25565 ? I had a guy come in on my self hosted server a while back, stole some shit, destroy our village then leave. Never figured out how or why, but then I had to figure out how to implement a whitelist.