U
/u/Lonely_stranger_
Guest
I remember seeing a post similar to this a while back but can’t seem to find it, so I figured I’d ask again.
I’m currently working on a Minecraft server that has been online the entire time, but it’s still unfinished. I took a short break from actively setting things up to avoid burnout and was waiting on my hub to be built so I could see the server from a player’s perspective.
After about a week of not checking my console closely, I logged back in and noticed a large number of console entries showing players attempting to connect through my proxy to backend servers. Most of these attempts resulted in immediate disconnects, likely due to the whitelist being enabled or authentication failing.
What stood out to me is that there were actual player IGN attempts, not just anonymous connection attempts. For example:
In addition, there were repeated initial connection attempts from IP ranges with no associated IGN:
Most of these attempts failed with messages such as:
One legitimate player was able to reach the server through the proxy but was disconnected shortly after due to using an outdated client version.
My main question is whether this kind of activity is normal background traffic once a server is online and reachable, or if it’s something I should be actively monitoring or mitigating.
Also, are the named player attempts something worth keeping an eye on, or does this just look like random players discovering an unfinished server?
submitted by /u/Lonely_stranger_
[link] [comments]
Continue reading...
I’m currently working on a Minecraft server that has been online the entire time, but it’s still unfinished. I took a short break from actively setting things up to avoid burnout and was waiting on my hub to be built so I could see the server from a player’s perspective.
After about a week of not checking my console closely, I logged back in and noticed a large number of console entries showing players attempting to connect through my proxy to backend servers. Most of these attempts resulted in immediate disconnects, likely due to the whitelist being enabled or authentication failing.
What stood out to me is that there were actual player IGN attempts, not just anonymous connection attempts. For example:
- KittyScan01
- Yass_s
In addition, there were repeated initial connection attempts from IP ranges with no associated IGN:
- 51.81.208.xxx (multiple attempts across different ports)
- 51.159.149.xxx (repeated read timeouts)
- 51.159.110.xxx (read timeouts)
- 146.70.132.xxx
- 146.70.134.xxx
Most of these attempts failed with messages such as:
- “You are not logged into your Minecraft account”
- “read timed out”
One legitimate player was able to reach the server through the proxy but was disconnected shortly after due to using an outdated client version.
My main question is whether this kind of activity is normal background traffic once a server is online and reachable, or if it’s something I should be actively monitoring or mitigating.
Also, are the named player attempts something worth keeping an eye on, or does this just look like random players discovering an unfinished server?
submitted by /u/Lonely_stranger_
[link] [comments]
Continue reading...