Configuration with Minecraft - Had this happen: kittyScan (/156.253.227.141:36028) lost connection: Disconnected

Technical Support
,
1

System Information

Field Value
Operating System Linux - Ubuntu 24.04.2 on x86_64
Product AMP ‘Phobos’ v2.6.0.12 (Mainline)
Virtualization None
Application Minecraft
Module MinecraftModule
Running in Container No
Current State Ready

Problem Description
Minecraft IP Crawlers

Issue
Username kittyScan tried to connect to Minecraft server
Pretty sure this username is a honeypot username and prob needs to be added to the ban list. Username: kittyScan
Link is reddit info:
https://www.reddit.com/r/admincraft/comments/1j7ynur/player_named_kittyscan_disconnected_without/

Reproduction Steps

  • Current Honeypot usernames: apache debian ftp mysql oracle pi postgres root sshd test ubuntu user.
  • Added external measures for port scanners
  • Maybe there is something else I can enable to prevent these ip scanners on amp?
2

AMP’s honeypot doesn’t cover in-game names or connections. Nothing you can really do to stop this sort of thing other than to enable the whitelist. (there are hundreds of these bots)

3

Sorry for late reply, but I figured so. I just added tcp shield to my server for now. Changed the default port as well.

4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.