i have a minecraft server in my house and i’m using port forwarding with duck dns and docker. my wifi is saying that there is attacks on the wifi. is this true/ real attacks or just misclassifed?
It’s just trawlers, scripts that ping ip address ranges, and if they get a response, they try to login on port 22 with default passwords, and stuff like that, and run portscans to see what ports you have open, and they send standard requests to standard ports looking for access.
Essentially going around to everybody’s house and knocking on the door, and see if they can be easily let inside. they keep knocking until you stop answering the door. There’s stuff like fail2ban (I think) that blacklists any ip address that tries to login more than X amount of times
Unless somebody knows specifically what service you are running and what port is on, it is unlikely to be anything more sophisticated than that.
Pool some cash together and pay for a hosted server.
Don’t take this the wrong way but any suggestion here is most likely going to go over your head unless you spend the time to learn how to do things properly. If you’re just looking to play minecraft and learn nothing related to IT (which is fine), spend the money on a hosted server. If you want to learn to properly secure things, I would recommend starting with something simple like using Tailscale so your friends can “VPN” into your local network so nothing is exposed to the public.
Here is a great guide:
You probably should learn a bit more about networking and internet before self-hosting anything in the same network as your parent’s devices, at least until you know how to differentiate “wifi” from other network related things…
If you want a little more security, use a firewall to whitelist your other players and block all other connections. It’s another thing to maintain, but ISP IPs don’t usually change very often.
Unless you have Comcast or Mediacom. They have you on a DHCP WAN IP. My IP changed roughly every month for a while. Had to upgrade to fiber and specifically pay for a dedicated WAN IP.
Whoa! My IP has never moved around that much.
Mine has never moved that much, but that’s also where using dns and an agent to update it can help, free tier providers can do that.
Things you host on the public Internet should be kept inside a DMZ on your network. This simply means that you should create a network segment that can’t reach any other machines so that if/when your server is compromised, the attack is limited to access on that server (attackers can’t access other computer on your network). https://www.fortinet.com/resources/cyberglossary/what-is-dmz
Even after you create a DMZ and host your server inside it, you’ll still need to worry about hackers compromising your server and using it to launch attacks against others from your home IP (usually as part of a botnet) or using it to distribute illegal content.
If I had a dollar for every time someone attempted to “attack” one of my pubic facing servers I probly wouldn’t need a job. The moment you have 443 open on your network you get 100s of bots scanning you a day.
If you’re unnecessarily worried about this stuff, you should really not be hosting something that is Internet facing.
Either pay for a hosting service, or at least set up a rev proxy.
Harden the OS where Minecraft is hosted. https://dev.to/samerickson/how-to-create-a-minecraft-server-hardening-the-server-30ko
Welcome to the World Wild Web
who attacks a minecraft server?
Probably trying to exploit the Log4j vulnerability
it’s likely not a targeted attack. they are probably just scanning public IP space to see what they can find that isn’t locked down.
It is not a solution but advice, and I am sorry if I offended you. I think you need to close your server. It is not worth it to protect your server. There’s a possibility that your server is shared with other attackers. More attackers means a high probability that you get compromised. With one wrong setting, your whole network will be compromised. Maybe pay for service instead.
If only the Minecraft server ports are forwarded it shouldnt be that big of a problem.
every firewall/router with a public IP address gets hammered with this garbage. it’s happening constantly.
yeah, OP getting worried for 16 connections, but i get that every minute
Surely you should have the answers before exposing sensitive devices to the outside world?
Not trying to be mean but if you don’t understand what’s happening and why then how can you guard against it?
Everybody gets probed, that is normal. Make it difficult by taking basic precautions and they will move on to easier targets. There’s so many people that don’t do anything and leave themselves wide open. This is what they’re looking for in most cases. Exceptions do include people you might have upset and specifically want access to yours.
Do some homework, secure / segregate your stuff and move on :)
For the love of the it security gods pls start putting your exposed shit into a dmz. At this point you are just asking for it.
Just rent one.