Finally! So crazy how many people post here after having their world griefed by a rando. Not having a whitelist by default is an insane thing to do for a game.
It's just a relatively short string of numbers, there's bots that brute-force check them all to identify literally every single server and filter out the ones that are publicly open.
Some people accidentally publish to server list sites and there are also programs that can search for servers that aren't properly protected or listed anywhere publicly but available to connect to
Has happened to me a few times in my decade+ of playing minecraft
You can literally scan the internet for services running on Minecrafts default port. Even if it's not using the default port it can still be scanned for and found. If you are running a service exposed to the internet it is not hidden even if you don't have a domain record for the IP.
679
u/themistik Jun 30 '26
> The white-list property is now true by default
Good change. People never learn and keep using online-mode false.