My server is under attack: what to do?
The Anti-DDoS protection blocks attacks automatically, without you doing anything. Here is what to check and which settings to tighten depending on the situation.
1. Check what is happening
Section titled “1. Check what is happening”- Open Anti-DDoS → Monitoring and select your server’s IP
- Look at the latest attack card: Mitigated status = it is blocked
- Look at Mbps clean: if it stays stable, your players are not affected
See Understand the Anti-DDoS dashboard.
2. My players still get disconnected
Section titled “2. My players still get disconnected”Depending on what you see:
| Situation | What to do |
|---|---|
| A single address sends huge traffic (Top attackers) | Block it |
| The attack comes from countries where you have no players (Attack sources) | Enable country filtering |
| The attack targets a port you don’t use (Attacked ports) | Close that port |
| txAdmin is slow or unreachable | Restrict txAdmin to your IPs and check txAdmin protection |
| A legitimate player can’t connect anymore | Check whether they are in the automatic bans |
3. Prevent the next attacks
Section titled “3. Prevent the next attacks”- Get an alert for every attack: Discord alerts
- Close txAdmin, SSH and MySQL to the public: restricted access
- Never share the direct IP of a server protected by the Reverse Proxy
4. Contact support
Section titled “4. Contact support”If clean traffic drops and the settings above don’t help, open a ticket with High or Critical priority, including:
- the target IP
- when the attack started
- what you have already tried
- a screenshot of the Monitoring tab
