Sneaky Server
⚠️ Attention: versions 1.0.11 through 1.0.13 contain an error that allows players not on the whitelist or banned to see the MOTD and player list. This issue only affects servers with whitelist enabled. The error occurred due to premature addition of players to the allowed list during the login process. The likelihood of widespread abuse of this vulnerability is low since successful authentication through Mojang was required (on Online-Mode servers). Version 1.0.14.1 is available for all affected Minecraft versions.
Sneaky Server provides anonymity for your server from scanners like Copenheimer, Shodan, or ServerSeeker by showing server information only to players who have previously connected.
The mod offers additional protection features, including disabling logs for unauthorized players and limiting the rate of new connection creation.
Configuration Settings
Configuration file is located at config/sneakyserver/config.properties
hide-server-ping-data: (Default: true) Sends server ping data only to known players
hide-player-list: (Default: false) Sends server ping data to unknown players but does not transmit user list. Only works when "hide-server-ping-data" is false.
dont-log-unauthed-client-disconnects: (Default: false) Prevents logging of failed login attempts by players in offline mode. Protects against log spam when the client closes the connection.
dont-log-unauthed-server-disconnects: (Default: false) Prevents logging of failed login attempts by players in offline mode. Protects against log spam when the server closes the connection
rate-limit-new-connections: (Default: true) Enables rate limiting for clients creating new connections
new-connection-rate-limit: (Default: 7) Connection limit over 15 seconds. When the limit is exceeded, new connections will be closed
disable-query-until-login: (Default: false) Shows the server as offline until the first player login
disable-legacy-query: (Default: true) Disables legacy ping used by clients older than Minecraft 1.6
disable-connections-from-banned-ips: (Default: false) Closes connections from banned IP addresses before reaching login logic. May be incompatible with BungeeCord or Velocity
Ping Data Hiding
Sneaky hides server information by maintaining a list of IP addresses of known players and their last login dates. Only known players receive real server information, while server scanners and players who have never connected see an unconfigured server without player activity. This feature represents a no-compromise alternative to vanilla's built-in hide-online-players function, allowing server members to see relevant information without leaking this data to scanners or players not on the whitelist (in the case of a whitelisted server)
Before First Connection
Before first login, players and server scanners see a standard, unconfigured server without player activity
After Connection
After first login, players will see the real MOTD, server icon, and online players list
