Live data from Hacker News

A Census of Minecraft Servers

blog.bithole.dev

41–50 of 76 posts

Re: A Census of Minecraft Servers

#41

Earlier quoted context omitted.

Yup, my family minecraft server fell victim to that. Thankfully it was a new map with only a couple days' work into it, but annoying nonetheless. Whitelist your private servers!

Requiring a VPN is how I handled that - not so much for preventing people from joining the game but because I don’t like open ports. I’m surprised that VPN usage isn’t more common for minecraft players.

It's not more common because it doesn't really make sense.

Re: A Census of Minecraft Servers

#42
post #21
post #16

I’m kind of amazed that you can still do massive scans like this and not face some bad consequences like getting blocked somewhere, or having your hosting provider get very annoyed at you.

Your host isn't likely to care unless it causes them grief. There are so many scans happening at any given moment I doubt any of the targets will notice yours. I do vaguely remember one of these, "I scanned the whole internet! It's easy!" stories from years ago where the author wound up receiving an email from someone at Electric Boat who told them, "Please don't portscan us. We're required to call the FBI when it ha…

Portscan them more so they fix their process.

Re: A Census of Minecraft Servers

#43

Our Minecraft server is spun up only when we play, with a simple bespoke front-end that allows any Cognito-authenticated user to start or stop the AWS instance. The dashboard also shows an auto-updated leaderboard with some in-game stats (death count, miles traveled, last login and so on), stored in DynamoDB and periodically updated by a cron job on the server. I also planned to add a map of the spawn, but not sure i…

I'd love to read a blog post or a link to a repo to see how this is done. Sounds very fun and interesting!

I've got a similar setup myself, check out https://lobste.rs/s/yppnts/tailscale_on_nixos_new_minecraft_... where I describe how I did it. It's quite custom but all open source. https://github.com/infinisil/on-demand-minecraft is the main part

Re: A Census of Minecraft Servers

#44
post #16

I’m kind of amazed that you can still do massive scans like this and not face some bad consequences like getting blocked somewhere, or having your hosting provider get very annoyed at you.

I don't know if the tool is called Massscan (I thought there is a tool called something with rabbit) but I followed a security blog a few years back and since then I had the impression that scanning all ipv4s is basically a solved issue.

Re: A Census of Minecraft Servers

#45

Earlier quoted context omitted.

I'd love to read a blog post or a link to a repo to see how this is done. Sounds very fun and interesting!

I've got a similar setup myself, check out https://lobste.rs/s/yppnts/tailscale_on_nixos_new_minecraft_... where I describe how I did it. It's quite custom but all open source. https://github.com/infinisil/on-demand-minecraft is the main part

Fancy! At first look it’s a no-brainer to go with, so either our setup existed before yours was public or I did a shoddy job at researching options.

Part of my idea was an actual web home for the server (leaderboard, map, etc.) so if we play MC again I will see if that is possible with your project.

Re: A Census of Minecraft Servers

#46

I... kinda can't believe that one of my libraries (Forgelin) is the second most common mod on all Minecraft servers. It doesn't support the five most recent versions of the game and I haven't touched it in years. I guess there are a lot of other mods (or a few really popular ones) for somewhat older versions that use Kotlin.

All online games have factions that think their game has been downhill since one version or another and stay there with private servers. Minecraft has a few such factions, so your plugin probably serves one of them.

Re: A Census of Minecraft Servers

#47

One thing the author may have missed here because I didn’t see it mentioned: this also misses any servers not hosted on the default port of 25565. I don’t know how common this really is, but Minecraft has SRV record support, and for those of us running more than one Minecraft server on a single box it’s likely at least one will be on a different port.

So a proper census would do a reverse dns lookup on every IP looking for a "minecraft" SRV record and connecting to that.

Re: A Census of Minecraft Servers

#48
post #19
post #16

I’m kind of amazed that you can still do massive scans like this and not face some bad consequences like getting blocked somewhere, or having your hosting provider get very annoyed at you.

1 packet going out to 4 billion hosts probably doesn't even matter next to a few 4K video streams. I expect if author had launched it through CGNAT, someone wouldn't have been pleased. (Correct me if I'm wrong)

Presumably CGNAT implementations have some safeguards to prevent one client from exhausting state tables.

Re: A Census of Minecraft Servers

#49

One thing the author may have missed here because I didn’t see it mentioned: this also misses any servers not hosted on the default port of 25565. I don’t know how common this really is, but Minecraft has SRV record support, and for those of us running more than one Minecraft server on a single box it’s likely at least one will be on a different port.

So a proper census would do a reverse dns lookup on every IP looking for a "minecraft" SRV record and connecting to that.

That won’t get them all either, and likewise will only find one server per IP. The only really reliable way would be to scan every port to see if there’s a Minecraft server there, but that blows up the search space by quite a bit.

Re: A Census of Minecraft Servers

#50

I... kinda can't believe that one of my libraries (Forgelin) is the second most common mod on all Minecraft servers. It doesn't support the five most recent versions of the game and I haven't touched it in years. I guess there are a lot of other mods (or a few really popular ones) for somewhat older versions that use Kotlin.

It's super common to run older server versions due to mod support. Unless there's some new mechanic in an update that people want to use, not using the latest version isn't really a big deal. Easiest to grab the mods you like and just freeze it.
Post reply on HN