The Minecraft Java error Connection refused: no further information means the address and port you entered did not accept a server connection. Usually, the server is not listening, the address or port is wrong, a host firewall is blocking Java, or a router is not forwarding the port. It does not, by itself, prove that Minecraft is damaged.
Playing with friends? Godlike.Host runs hosted Minecraft Java servers from 10 data-center locations, with free DDoS protection.
Work through the checks below in order. Start with the server and address, then test the host firewall, router forwarding, and finally Java, loader, and mod compatibility.
As an Amazon Associate I earn from qualifying purchases.
Recommended Free Tools
What the error actually means
Minecraft Java reports this message when its network socket cannot establish a connection to the supplied host and port. The underlying java.net.ConnectException is documented by Oracle as a situation in which “typically, the connection was refused remotely (e.g., no process is listening on the remote address/port).” In practical terms, the client reached an address but no usable Minecraft service accepted the connection there, or a firewall or network device rejected it.
The message is different from a successful connection followed by a kick. Authentication failures, whitelist denials, incompatible mods, and many version errors normally appear after the server has accepted a connection and started negotiating with the client. That distinction tells you where to spend time.
#1 Best Overall
This guide concerns Minecraft Java Edition. Bedrock Edition uses different server software and connection methods, so Java addresses, ports, and mod-loader checks do not automatically apply to a Bedrock world.
Identify the failure before changing settings
| What you observe | Most likely area | First check |
|---|---|---|
Everyone is refused, including the host connecting to localhost |
Server process, Java runtime, or server configuration | Read the server console and confirm it reaches its “done”/ready state. |
| A LAN world appears, but joining it is refused | Host firewall, wrong private IP, wrong LAN port, or blocked Java executable | Recheck the host’s current LAN IPv4 address and the port shown when the world was opened to LAN. |
| Players outside the home can’t connect, while LAN players can | Router/NAT forwarding, public address, or ISP restrictions | Verify the local listener first, then test the forwarded port from a genuinely external network. |
| Only one friend fails while others join | That player’s address, edition, version, VPN, or local firewall | Compare the exact address, port, Minecraft version, loader, and network path used by the working players. |
| The server logs a connection and then disconnects | Authentication, whitelist, version, mods, or server-side logs | Stop treating it as a refused socket and inspect the disconnect reason in the server console. |
Fixes in the correct order
1. Make sure the server or LAN world is running
There must be a listening process before anyone can join. For a dedicated Java server, start the server with its normal launcher or script and wait for the console to finish loading. If it stops because of a missing Java runtime, a license prompt, a corrupted world, or another startup exception, clients will receive a refusal because nothing is listening.
Free tools Windows power users keep installed
One-click scans. No signup required.
For a single-player LAN game, the host must open the world and choose Open to LAN before the other player connects. Keep the host’s game running; closing the world closes the temporary LAN server. The game displays a port after the world is published to LAN. That port is part of the address the other player must use.
If the host cannot join its own dedicated server through localhost (or the host’s local address), do not change router settings yet. Fix the server startup, Java installation, or server.properties first.
2. Use an address appropriate to the connection
Choose the address by where the player is located:
- Same home network: use the host computer’s private LAN IPv4 address, such as the address shown by
ipconfig, plus the Minecraft port. Do not give a LAN player the public internet address unless you know the router supports hairpin/NAT-loopback connections. - Outside the home: use the host network’s public address and the forwarded server port. A private address such as
192.168.x.xis not routable from the internet. - Host testing: use
localhostor127.0.0.1for a server running on that same computer, then test the LAN address separately.
Addresses can change. A laptop that had one private IPv4 address yesterday may receive another from the router today, making an old saved server entry fail even though the server itself is healthy.
3. Confirm the exact port
A Minecraft Java server commonly uses port 25565; Mojang’s official server guidance gives that as the Java example while warning that network and firewall configuration may be required. Your installation may use another value.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsFor a dedicated server, open server.properties and read server-port. The client, router forwarding rule, and any narrowly scoped firewall rule must all use that same number. If you changed the property, restart the server and update every saved server entry. For a LAN world, use the port displayed by Minecraft when the host selected Open to LAN; do not substitute the dedicated-server default unless the game actually displayed it.
Enter a non-default port in the usual Java format address:port, for example 203.0.113.25:25570. The address and port must be entered together; testing the right address with the wrong port produces the same refusal.
4. Allow the correct Java process through the host firewall
Windows Defender Firewall can block inbound Java traffic even when the server is running. Microsoft documents two approaches: allow a recognized application, or create an inbound rule. Allowing the application is generally safer than leaving a broad port open indefinitely.
- On the host, open Windows Security.
- Choose Firewall & network protection, then Allow an app through firewall.
- Select Change settings and allow the Java executable used by the launcher or server. If more than one Java entry appears, identify the runtime actually shown in the launcher’s installation settings or the command that starts the server.
- For a trusted home network, enable the Private profile. Do not broadly enable the rule on Public networks.
- Retry the connection while the server is running.
If no suitable application entry exists, create a narrowly scoped rule with wf.msc: open Inbound Rules, select New Rule, choose Port, select TCP, enter the server port, allow the connection only on the required profile, and give the rule a clear name. Remove the temporary rule after testing if you no longer need it.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Never treat disabling Windows Firewall as the permanent fix. Opening a port or disabling filtering increases exposure; use the smallest app, port, profile, and address scope that solves the problem.
5. Set the correct Windows network profile
Windows applies different trust assumptions to Private and Public network profiles. A home LAN normally needs the host connection marked Private so a rule limited to trusted local devices can work. Public Wi-Fi should remain Public; do not open Minecraft inbound access broadly on an airport, hotel, school, or café network.
Open Settings > Network & internet, select the connected Wi-Fi or Ethernet network, and check Network profile type. Then review the firewall rule’s profile in its properties. Microsoft notes that firewall rules can be restricted by application, port, address, and profile, so a rule can appear correct while being inactive for the profile currently in use.
6. Forward the port for internet play
Port forwarding is needed when a player outside the home must reach a self-hosted server behind a router. Mojang identifies forwarding as an additional setup step for outside players.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Rank #3
- The classic UNO card game builds fun on game night with a Minecraft theme.
- UNO Minecraft features a deck and storage tin decorated with graphics from the popular video game.
- Players match colors and numbers to the card on top of the discard pile as in the classic game.
- The Creeper card unique to this deck forces other players to draw 3 cards.
- Makes a great gift for kid, teen, adult and family game nights with 2 to 10 players ages 7 years and older, especially Minecraft and video game fans.
- Confirm the server is listening locally and note its exact TCP port.
- Find the host computer’s current private IPv4 address with
ipconfig. - In the router’s administration page, create a port-forward rule for that TCP port to the host’s private IPv4 address.
- Save the rule and ensure it targets the correct device, not an old DHCP lease or another computer.
- Share the public address and port with outside players. Never share the private
192.168.x.x,10.x.x.x, or172.16.x.x–172.31.x.xaddress for an internet connection. - Test from a genuinely external network, such as a friend’s connection or a phone hotspot. Testing your public address from inside the same router can fail when the router lacks NAT loopback, even if outside access is configured correctly.
If the router’s internet-facing address is itself private or belongs to carrier-grade NAT, ordinary port forwarding may not be possible. In that case, ask the internet provider whether inbound connections are available, use a network arrangement that provides a reachable address, or choose managed hosting rather than exposing the home network.
7. Verify Java, Minecraft, loader, and mod compatibility
Mojang requires a compatible Java runtime for a Java server. A server that launches with one Java major version while the client or mod loader expects another can fail during startup or later connection negotiation. Confirm the Java version selected by the launcher or server script and compare it with the requirement of your Minecraft release and loader.
For a modded server, perform a controlled test:
- Back up the world and server configuration.
- Stop the server cleanly.
- Temporarily run a matching vanilla server, or a minimal installation with the same Minecraft version and loader on both sides.
- Connect locally first, then from the LAN, and only then test internet access.
- If the minimal setup works, add the normal mods back in small groups until the incompatible component is identified.
The client and server should match the Minecraft version, Forge or Fabric version where applicable, Java major version, and required mod list. A Forge support case records the same connection-refused error while investigating Java version and firewall allowance, so those checks are worthwhile before replacing files or reinstalling the game.
8. Separate a refused socket from a later disconnect
Watch the server console while attempting a connection. If no connection attempt appears, investigate the address, port, firewall, forwarding, and routing path. If the console records a connection followed by a disconnect, move to authentication, whitelist entries, version mismatch, mod errors, or the server’s own logs. Changing router settings cannot repair a whitelist denial that occurs after the socket was accepted.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →LAN worlds: a focused checklist
LAN discovery and LAN joining are separate stages. Minecraft may display a world discovered on the network while the actual TCP connection is blocked or aimed at the wrong endpoint.
- On the host, open the world and choose Open to LAN. Record the port Minecraft displays.
- Keep the host world open. If the host returns to the title screen, the temporary LAN server no longer exists.
- On the host, run
ipconfigand identify the IPv4 address of the active Wi-Fi or Ethernet adapter. Ignore disconnected virtual adapters and old VPN addresses. - On the joining computer, use the host’s private IPv4 address and displayed LAN port in direct connect format
address:port. - Check that both computers are on the same home network and that the host network profile is Private.
- Allow the Java executable through the host firewall on the Private profile, then retry.
If the world is visible but every join attempt is refused, the host’s inbound firewall rule, wrong private address, wrong displayed port, or blocked Java executable is more likely than a Minecraft installation failure. If only one joining computer fails, compare its VPN, local firewall, edition, and version with a computer that can join.
Internet servers: verify each layer
Use this sequence so you do not troubleshoot the router while the server is stopped:
Rank #4
- Now Minecraft lovers can play a special version of UNO!
- Same as Basic UNO but features Minecraft characters and includes special Creeper rule card. Draw this card and the other players have to draw three more cards from the pile!
- The goal is to get rid of all the cards in your hand.
- First player or team to 500 wins.
- When you're down to one card, don't forget to yell "UNO"!
- Server layer: the console is running without a fatal startup error and listens on the configured port.
- Host layer: the Java process is allowed through the firewall on the intended profile.
- Address layer: the player uses the current public address and the configured port.
- NAT layer: the router forwards that TCP port to the host’s current private address.
- Client layer: the player uses Java Edition with the matching Minecraft, loader, Java, and mod setup.
Do not rely on a port-check website run from the same home connection as proof of internet reachability. A genuine outside test avoids false negatives caused by missing NAT loopback.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Useful local tests
Confirm the host is listening
On Windows, open Command Prompt on the server computer and run:
netstat -ano | findstr :25565Replace 25565 with the actual server-port or LAN port. A listening entry confirms that some process has opened the port locally; it does not prove that the firewall or router permits remote access. If there is no listening entry while the server should be running, return to startup logs, Java, and configuration.
Test reachability from a client
In PowerShell on a joining computer, run:
Test-NetConnection 192.168.1.25 -Port 25565Substitute the host’s private address and real port. TcpTestSucceeded : True indicates that the TCP path reached the host; it does not validate Minecraft version or mods. A false result on the LAN points to the address, host firewall, profile, or local routing. A false result from outside points to the public address, forwarding, ISP reachability, or an upstream firewall.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Check the active address
Run ipconfig on the host and use the IPv4 address belonging to the connected adapter. If the address changes repeatedly, reserve a DHCP lease for the host in the router or update the forwarding target whenever the lease changes.
Common mistakes and recovery
Using the public address on the same LAN
Some routers cannot route an internal client back through the public address. Use the host’s private address for LAN play. Test the public address only from outside, or confirm that the router supports NAT loopback.
Forwarding the right port to the wrong computer
A forwarding rule can remain pointed at an old private address after the host reconnects or receives a new DHCP lease. Compare the router’s destination with the current ipconfig output and correct the rule.
Allowing the launcher but not the server runtime
The launcher and the Java process that hosts the server may be different executables. The firewall exception must cover the runtime actually accepting connections. Check the server start command and update the rule accordingly.
Opening a port on the wrong profile
A rule enabled only for Public will not help when the adapter is Private, and vice versa. Match the rule to the intended profile while keeping untrusted networks closed.
Changing router settings before proving local operation
If localhost fails on the host, port forwarding cannot help. Restore the server to a working local state first, then test LAN access, then internet access.
Assuming a refused connection is a mod mismatch
Mod and version mismatches commonly produce a disconnect after the server accepts the connection. A refusal with no server-side attempt is earlier in the path; check listening state, address, port, firewall, and forwarding first.
Security while troubleshooting
Microsoft warns that opening a port creates security exposure and recommends allowing only a recognized application or restricting an inbound rule to the needed port and profile. Keep the server software, Java runtime, operating system, and mods updated from trusted sources. Use a strong operator password, avoid granting administrative privileges unnecessarily, and remove temporary firewall or forwarding rules when the server is no longer needed.
Do not host from an untrusted public network simply to bypass a LAN problem. Public Wi-Fi may isolate clients or block inbound traffic, and changing the profile to Private there can expose other services. If you cannot safely configure the router or your provider does not offer a reachable address, a managed Minecraft host can avoid home port forwarding, but it is an alternative deployment method rather than a fix for a local server that is not starting.
When to stop troubleshooting this specific error
Once the server console records a successful connection, the original socket refusal has been resolved. Follow the new, more specific message instead: verify the whitelist, authentication mode, account sign-in, Minecraft version, loader, required mods, and server logs. Conversely, if every client is refused and there is no listening process, reinstalling Minecraft on each client is unlikely to help; repair the server runtime and host configuration first.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
