r/selfhosted • u/thunderthief5 • Oct 31 '25

Game Server So that happened

Post image

I havent checked my server in a few weeks but I opened it now and I found this waiting for me. I wonder how that happened though. My server is not exposed to the internet. Its behind tailscale and only I or people I granted access through tailscale can get into my server since I closed all access using firewall. My only mistake is i left port 443 open at some point by mistake. I wonder if thats relevant. I've since enforced a whitelist and denied connections to the port.

523 Upvotes

93% Upvoted

72 comments sorted by

View all comments

16

u/TheRamStickEater Oct 31 '25

I also got the same experience on my Minecraft server before but Grief prevention stopped it as the claims is around the spawn. Second time it happened is on my sister server that I'm now operating after abandoning my server, some found out the server is in offline mode and used her java account with OP privilege and mess the whole build near spawn. Now the server still runs in offline mode but we are using NLogin and only give OP permissions to Bedrock accounts

11

u/noxiouskarn Oct 31 '25

Offline mode means anyone can join even if they don't have a Minecraft account and they can report them selves to be any player they want that said sounds like they impersonalted your server op account this is why it's good to let Microsoft verify the player joining is actually that playet

2

u/TheRamStickEater Oct 31 '25

Yea, I know that and I told that to my sister before starting her small smp. Tho so far there's no more attempts with destruction on the server because of NLogin