Sneaky
⚠️ Versions 1.0.11 to 1.0.13 have an oversight allowing unwhitelisted or banned players to still see MOTD and player list. This only affects servers with whitelist on. I made a mistake in adding players to the allowed list too early in the signin process. It's unlikely that this was abused on a wide scale as it still required successful authentication with Mojang (on Online-Mode servers). 1.0.14.1 is available for all affected Minecraft versions
Sneaky anonymises your server from server scanners like Copenheimer, Shodan or ServerSeeker by only showing server info to players who have previously joined.
Sneaky has other options to protect your server including disabling logs for unauthorised players, and ratelimiting the creation of new connections.
Configuration
The configuration is stored in config/sneakyserver/config.properties
hide-server-ping-data: (Default: true) Only sends server ping data to known players
hide-player-list: (Default: false) Sends server ping data to unknown players, but doesn't send a user list. Only works when "hide-server-ping-data" is false.
dont-log-unauthed-client-disconnects: (Default: false) Prevents the server from logging failed offline-mode player logins. Prevents logs when the client closes the connection. Example of a server being spammed with offline mode logins: https://www.reddit.com/r/Minecraft/comments/12ip3gd/who_is_shepan/
dont-log-unauthed-server-disconnects: (Default: false) Prevents the server from logging failed offline-mode player logins. Prevents logs when the server closes the connection
rate-limit-new-connections: (Default: true) Enables a rate limit for clients creating new connections.
new-connection-rate-limit: (Default: 7) Connection limit over 15 seconds. If a client exceeds this limit new connections will be closed.
disable-query-until-login: (Default: false) shows the server as offline before the first time a player joins
disable-legacy-query: (Default: true) disables legacy ping used by clients older than Minecraft 1.6
disable-connections-from-banned-ips: (Default: false) closes connections from banned IPs before reaching login logic. May be incompatible with BungeeCord or Velocity
Hiding ping data
Sneaky hides server info by keeping a list of IP addresses of known players and their last join date, only allowing known players to receive the real server info, and appearing as an unconfigured server with no player activity to server scanners and players who have never joined. this feature is meant to be a no compromise alternative to vanilla's hide-online-players feature, allowing members of a server to see relevant information without leaking that information to scanners or un-whitelisted players (in the case of a whitelisted server)
Before joining
Before first joining, players and server scanners see a generic, unconfigured server with no player activity
After joining
After their first join, players will see the real MOTD, server icon, and online players list
