How do I recover or roll back after a grief or raid?
On this page
If your server has just been griefed or raided, quick, focused action can undo most of the damage. This guide walks through recovery and then how to lock things down so it doesn't happen again.
Your recovery options
The best route depends on whether you had CoreProtect logging and which backups you have from before the grief.
- If you have CoreProtect installed, use
/co rollback user:<name> time:<duration>to undo the offender's changes precisely. - Otherwise, restore a backup from before the grief on your server's Backups page (into a new folder, over the current files, or the whole server), or re-upload a clean copy you saved via Files or SFTP — message the team if you need staff help.
- For a few players' items, a partial restore of
playerdataworks — restore a backup into a new folder (or use a saved copy) and copy just those files back.
Then tighten security — whitelist, remove the offender's access — so it doesn't recur.
Tip: CoreProtect is the cleanest fix because it targets only the griefer's actions. Install it before trouble so it's there when you need it.
Frequently asked questions
CoreProtect wasn't installed. Can I still roll back? Only from a backup. Restore a pre-grief backup on your server's Backups page, or re-upload a copy you saved via Files/SFTP.
Can I undo just one griefer without affecting others' builds? Yes — CoreProtect's /co rollback user:<name> targets a single player's changes.
How do I stop it happening again? Whitelist trusted players, remove the offender's access, and review OP/permissions. See our griefing-protection article.
More in Security (Grief, Raids, Malware, DDoS)
- How do I protect my server from griefing, raids, and theft?
- Do you have DDoS protection, and what type?
- Are DDoS attacks causing my lag/high ping/crashes, and how do I prevent it?
- My server may have malware or was hacked — can you scan/clean it, and keep my data?
- How was my server accessed without authorization / can you find who?
- Do I need TCPShield / NeoProtect / Cloudflare on top of your protection?