Protecting Your Server from Griefing

## Why Griefing Happens

Game servers run on shared infrastructure with port ranges that are relatively easy to guess. Unlike a private home server behind a router, your server's IP and port are inherently discoverable. This means anyone who knows (or guesses) your address can attempt to join.

## Effective Ways to Protect Your Server

## 1. Use a Whitelist

The single most effective protection. Only players you approve can join.

- Open in the Files tab
- Set
- Save and restart your server
- Add players using the console command:

Only whitelisted players can connect. Everyone else is rejected immediately.

## 2. Install Anti-Grief Plugins

If you run a public or semi-public server, use protection plugins (Paper/Spigot only):

- **CoreProtect** — Logs all block changes and lets you roll back griefing. Use to undo damage
- **WorldGuard + WorldEdit** — Define protected regions where only authorized players can build or break blocks
- **GriefPrevention** — Lets players claim land automatically. Claimed areas cannot be modified by others

You can install these directly from the **Downloader** in your game panel.

## 3. Use an Auth Plugin (Offline Mode Servers)

If your server runs in offline mode (), anyone can join using any username — including impersonating your admins or operators.

- Install **AuthMe** or **LibreLogin** to require password authentication
- This prevents username spoofing and unauthorized access

## 4. Don't Give OP Freely

- OP (operator) gives full server control including the ability to destroy everything
- Use a permissions plugin like **LuckPerms** to grant specific abilities instead of blanket OP access
- Only OP yourself and people you fully trust

## 5. Disable Command Blocks (If Not Needed)

In , set unless you specifically need them. Command blocks can be exploited for griefing.

## My Server Was Already Griefed

- If you have **CoreProtect** installed, use (adjust time) to undo recent damage
- If not, restore from a **backup** via the Backups tab in your panel
- If you have no backup and no rollback plugin — unfortunately the damage cannot be undone. Install protections before this happens again

## Changing Your Port Will Not Help

Some players request a port change after being griefed. This is not an effective solution — ports on shared servers are within a known range and can be scanned easily. Focus on the protections above instead.