Protecting Your Server from Griefing

Why Griefing Happens

Game servers run on shared infrastructure with port ranges that are relatively easy to guess. Unlike a private home server behind a router, your server address is discoverable. Anyone who knows your address can attempt to join.

1. Use a Whitelist

The single most effective protection. Only players you approve can join.

1. Open server.properties in the Files tab
2. Set white-list=true
3. Save and restart your server
4. Add players using the console command: whitelist add PlayerName

2. Install Protection Plugins

• CoreProtect — Logs all block changes and allows rollback of griefed areas. This is the most important anti-grief tool for recovery
• WorldGuard + WorldEdit — Define protected regions where only authorized players can build or break blocks
• GriefPrevention — Lets players claim land automatically. Claimed areas cannot be modified by others

3. Keep Online Mode Enabled

Keep online-mode=true in your server.properties. This prevents username spoofing and unauthorized access.

4. Use a Permissions Plugin

• Use LuckPerms to grant specific abilities instead of blanket OP access
• Only OP yourself and people you fully trust

After Being Griefed

• If you have CoreProtect, use /co rollback to undo the damage
• If not, restore from a backup via the Backups tab in your panel
• If you have no backup and no rollback plugin, the damage cannot be undone. Install protections before this happens again

Changing Your Port Will Not Help

Some players request a port change after being griefed. This is not effective — ports on shared servers are within a known range and can be scanned easily. Focus on the protections above instead.