Admincraft•10mo ago

What's a good way to block connections from scanners if you can't make changes to the firewall

asking on behalf of someone else, idk why they can't use firewall :Waiting:

Solution

Honestly the best way is running a ddos protection/reverse proxy service on top and have it firewalled

Jump to solution

EmilyOP•3/10/25, 9:09 PM

wow what a cool bot

EEmily asking on behalf of someone else, idk why they can't use firewall :Waiting:

Upioti•3/10/25, 11:08 PM

U cant

Upioti•3/10/25, 11:08 PM

Scanners run on resi networks or use resi proxies

Upioti•3/10/25, 11:08 PM

If you block a scanner you will also block legit connections

Upioti•3/10/25, 11:09 PM

The best thing is probably that plugin that doesn't let you see the motd until u join once

Cooleg•3/10/25, 11:54 PM

./whitelist is also cool

Cooleg•3/10/25, 11:55 PM

if a private server

Cooleg•3/10/25, 11:55 PM

if its a public server you should probably have it secured and have backups and the such anyways

UUpioti The best thing is probably that plugin that doesn't let you see the motd until u...

Cooleg•3/11/25, 12:02 AM

but even this could be flagged as behaving oddly by a smart scanner if they are scanning a common mc port where they can assume any response is a server, since netty doesn't let you completely drop an incoming connection with no acknowledgement

CCooleg if its a public server you should probably have it secured and have backups and ...

Cooleg•3/11/25, 12:02 AM

in the end, it just makes more sense to use proper security measures for whatever type of server you intend to create

Solution

CCooleg in the end, it just makes more sense to use proper security measures for whateve...

Upioti•3/11/25, 3:56 AM

Honestly the best way is running a ddos protection/reverse proxy service on top and have it firewalled

Upioti•3/11/25, 3:56 AM

U can't scan reverse proxied servers as they are setup by domains

CCooleg ./whitelist is also cool

EmilyOP•3/11/25, 4:32 AM

I suggested that but they said that it's the console logs that's bothering them.

UUpioti Honestly the best way is running a ddos protection/reverse proxy service on top ...

EmilyOP•3/11/25, 4:36 AM

I'll mark this as the answer it's probably the only real way to avoid them