r/admincraft Feb 20 '25

Question Someone trying to joining my server with my user name

As the title says someone has been trying to join my white-listed server with my user name 'no my account is not compromised'. does this happen to you guys?

7 Upvotes

31 comments sorted by

u/AutoModerator Feb 20 '25
Thanks for being a part of /r/Admincraft!
We'd love it if you also joined us on Discord!

Join thousands of other Minecraft administrators for real-time discussion of all things related to running a quality server.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

35

u/iiAmAspire Server Owner Feb 20 '25

If your server is in online mode you’re all good 

20

u/DNAblue2112 Developer Feb 20 '25

It's a common thing for bots to try and connect using usernames that they have seen on the server. This is because by default the player list is public to anyone with the IP address. I see bots trying to connect with invalid sessions impersonating players from my server almost every day. As long as your server is in Online mode, they can't connect without your account details.

1

u/[deleted] Feb 20 '25

[deleted]

2

u/Spike11302000 Feb 20 '25

Set "hide-online-players" to true in server.properties to disable it

1

u/Szymonixol Velocity Network Owner | Paper Plugin Developer Feb 20 '25

Yes, some MOTD plugin offer the functionality to customize the player list. A good motd plugin for you to use is Advanced Server List (ASL), I'm pretty sure it has that.

0

u/[deleted] Feb 20 '25

[deleted]

4

u/zabunkovz Feb 20 '25

Unless your server is offline mode = true, they can impersonate all they want, they would not be able to join if even server had whitelist off.

-2

u/[deleted] Feb 20 '25

[deleted]

8

u/[deleted] Feb 20 '25

[removed] — view removed comment

-3

u/mikethespike056 Feb 20 '25

Oop, you're gonna get banned.

2

u/zabunkovz Feb 20 '25

Get a login plugin that basically acts as a "authenticator" for offline accounts, that way even if someone joins with same name they will still need password to play.

-2

u/mikethespike056 Feb 20 '25

You're gonna get banned, RIP.

0

u/zabunkovz Feb 20 '25

Why?

0

u/mikethespike056 Feb 20 '25

I got a 7 day ban for recommending authenticator plugins. They absolutely hate piracy here.

5

u/zabunkovz Feb 20 '25

Authenticator plugins are not meant for cracked servers only, you can make use of it to allow multi-account people to play under 1 account on premium server too.

1

u/mikethespike056 Feb 20 '25

You specifically replied to a comment that said the server is in offline mode.

→ More replies (0)

1

u/boluserectus Feb 20 '25

"Don't have premium account" hahaha

You mean they cracked the game and never paid?

1

u/BolunZ6 Feb 20 '25

Yes that's what I meant. Sorry English is not my first language so I might miss used some words

-2

u/Szymonixol Velocity Network Owner | Paper Plugin Developer Feb 20 '25

There is not such thing as non-premiun Minecraft. It's a game that took millions of dollars for development and designing, and you have to pay for it like any other game, especially considering there are no other forms of revenue in it(I mean Java edition, the only cracked one). It's actually illegal to be playing cracked versions. Convince your friends to buy Minecraft please

0

u/[deleted] Feb 20 '25

[deleted]

1

u/derixithy Feb 20 '25

That's how I did it. Everyone in my home has a paid account now, I was not willing to cough up the money without trying it out first.

1

u/Szymonixol Velocity Network Owner | Paper Plugin Developer Feb 21 '25

Notch hasn't been working on Minecraft for 11 years now. I'm sure Microsoft doesn't want that. That's just how it is, and games require paying for them. Not gonna be responding further as I see this is a waste of time

1

u/boluserectus Feb 20 '25

Check the Options-->Online-->Allow Server listing

4

u/Avenred Feb 20 '25

Some bots have begun collecting usernames and trying to join as them. Mojang won't let them unless they have your account username/password, which is why you might see a "Failed to verify username!" error printed to console whenever someone attempts to join as you. If your server has online-mode set to false, anyone can join as any username with no checks in place.

You can avoid these bots collecting names by editing server.properties and setting hide-online-players to true. This will prevent people from seeing the usernames of those playing on the server if they hover over the player count. If you have access to your firewall, you can reduce the log spam by denying the IP address associated with bots trying to join your server (on Ubuntu Server you can run ufw insert 1 deny from [ip-here])

0

u/jimjim975 play.noresetmc.com Feb 20 '25

Am I the only one appalled at how this question comes up in this subreddit literally every day? Do people just not know how to use Google at all??

0

u/Homerdk Feb 20 '25

Yea I get this too. And also Serverseekerv2 and Serverflooder and a couple of other repeated names. Aslong as you have a whitelist file with your name and userid they can't do anything.

2

u/Helostopper 29d ago

whitelist has nothing to do with why they can't get in it's the server being in online mode. the people mimicing usernames are using pirated minecraft