My server is under a DDoS attack: what should I do?

How to tell it is an attack

A DDoS attack does not look like an ordinary server problem. Typical signs:

• all players drop at once or get huge ping at the same moment;
• the server looks running, the game process is up, but nobody can connect;
• your website or panel is slow or will not open;
• it happens at "convenient" times: during a match, at an event, right after you banned someone.

If the server has trouble with only one player or only on a certain map, it is not DDoS but a settings or plugin problem.

What to do in the first minutes

1. Do not restart the server ten times. A restart does not stop an attack. The traffic comes from outside, and your restarted server gets the same traffic.

2. Check whether it is just you or everyone. Ask on Discord whether others have problems. If it is only you, it may be your own connection.

3. Tell your players. A short Discord message ("We are under attack, working on it, back soon") calms them and keeps them around. Silence sends them to other servers.

4. Contact your host. They see the incoming traffic and can tell right away whether it is an attack and what kind. Tell them when it started and what players are experiencing.

5. Note what happened before. A ban, an argument, an important match. Attacks almost always have a reason, and knowing it helps you prepare next time.

What NOT to do

• Do not answer provocations on Discord or in game. Attackers want reactions.
• Do not publish a backup server's IP during the attack.
• Do not pay for "protection" to someone who promises to stop the attacks if you pay them. Most of the time, it is the attacker.

How to protect yourself in future

DDoS protection built for games. It is the only real fix. An unprotected server can be taken down by a small attack anyone can buy cheaply. Protection filters traffic before it reaches the server and has to understand game traffic so it does not kick real players.

Do not expose your IP needlessly. Use a domain for your server instead of the bare IP. Do not put your game server's IP on the same machine as your website or Discord bot.

Fair admin rules. Many attacks come from players banned unfairly or who feel wronged. Clear, explained bans reduce conflicts.

Backups. Attacks do not delete your data, but they sometimes come together with other access attempts. A recent backup keeps you calm.

Protection at Wiptor

At Wiptor, DDoS protection is included on every server, always on and automatic: filtering starts by itself when an attack begins, without you asking and at no extra cost. On top of that, the Wiptor panel shows you the blocked attacks and lets you tune the protection, and Wiptor Layer 7 stops attacks on websites and web applications.

If your server is currently with another host and gets attacked often, message us on live chat: we will honestly tell you whether moving would help.

See how Wiptor protection works