Do you have random players that seemly keep trying to join every few minutes from different IPs? You aren’t alone in this weird battle against the bots. This article will contain some information about the bots, their usernames and their IP origins. It will also cover Project Copenheimer, a project by 2B2T’s infamous Fifth Column group. While the exact reason these bots do what they do is unknown, people have guessed that these bots may be owned by Server Lists that look for new servers.
How can I tell if I am being affected?
If you see the following usernames attempting to join your server (You will see something like this in your server console: com.mojang.authlib.GameProfile@X[id=<null>,name=cuute,properties={},legacy=false] (/X.X.X.X:XXXXX) lost connection: Disconnected), your server is affected by this. The usernames are below:
- cuute
- u_cuutemc
- bunger
- ServerSeeker
While they don’t really log into your server and do anything, they can fill your console with spammy log entries, and even slow down your server in the rare event they continuously connect to you.
Blocking these connections
Most Oddblox servers block these connections by default, but if you notice that they are still connecting, please reach out to support so we can block the new IPs. You cannot block these bots by enabling a whitelist, as they will still attempt to connect, filling your logs with even more spam. Even the ban-ip command doesn’t work, as the bots will still continuously change both their ports and IPs. These bots appear to be hosted in both US and German datacenters, which explains the randomly rotating IPs. The known IPs will be listed below.
If you have your own server, you can use your devices firewall to block incoming requests from the known IPs. Please note that you will need to keep up with updating the blocklist, as they may change ISP/VPN providers to get a new set of IPs.
Project Copenheimer
Project Copenheimer is a script that scans the entire internet (all available IPs) for active Minecraft servers. It is able to log information like player lists, the server version, and what mods/plugins are being used by the server. The original purpose of the script was to find servers that are online so the creators could raid and grief servers. The script was remade by community members and is now available via GitHub. The Script is designed to scan the internet every 20 minutes.
IP List
This is a list of all of the currently known IPs being used by these bots.
- 198.54.130.91
- 198.54.135.84
- 198.54.135.116
- 198.54.135.52
- 143.244.47.74
- 45.134.142.228
- 162.33.178.237
- 3.78.225.68
- 193.35.18.142
- 3.120.238.174
- 109.123.240.84
- 18.198.55.43
- 3.72.37.229
- 3.83.255.61
- 18.157.84.241
- 18.196.116.96
- 34.224.66.124
- 45.142.114.232
- 143.244.47.74
- 162.33.178.237
- 191.255.70.123
- 191.255.70.233
- 193.35.18.142
- 198.54.135.52
- 207.244.245.94
Additional Resources
