What Happens When Your Palworld Server Is Attacked

If your Palworld server is hit by a DDoS attack, VibeSHIELD takes care of it. VibeSHIELD is the anycast protection network that VibeGAMES runs for every server it hosts, at no extra cost and with nothing to switch on. This article explains what gets filtered for Palworld, what players may notice, and where you can see the details afterwards.

1What VibeSHIELD Does for Your Palworld Server

• A UDP game filter protects the game port UDP 8211. It knows what real Palworld traffic looks like and drops packets that do not match.
• An A2S query cache sits on the Steam query port 27015. Server-list queries are answered at the edge, so query floods never reach your server.
• Filtering happens at the VibeSHIELD point of presence nearest to the source of the traffic. Only clean traffic continues to your server.
• Mitigation is automatic. You do not have to report anything or enable anything.

2What Players Notice

• In most attacks nothing. Pals keep working and players stay in the world.
• Very large attacks can cause a few seconds of higher ping or packet loss while the filtering ramps up.
• If the server becomes unreachable, the attack is usually not the reason. Open the console in the game panel first. Running out of memory, a crash or a wrong port are more common.

3Where to See the Attack

• Open the website dashboard and click your Palworld server.
• Choose the DDoS protection tab. It is in the website dashboard at vibegames.com, not in the game panel at game.vibegames.com where the console and files are.
• Status reads Active. Attack status reads Not under attack or Under attack.
• The Attack history table shows the attacks of the last 30 days with an ID, the peak size in Mbps or Gbps, and the start and stop time.
• Expand a row for a traffic chart over time, the source countries, source networks (ASN), source ports, destination ports, protocol, TTL and packet sizes.

4The Email You Receive

• When an attack targets your server's port, the email address on your account receives a message with the subject DDoS attack detected on your server <ip>.
• The message says VibeSHIELD is filtering the traffic and that no action is needed.
• The IP address is shared between several servers on the node, each on its own port. The attack is attributed to your server by that port.

5What to Do

• Nothing is required for the attack itself.
• Do not share your server IP in response to threats, and never pay anyone who claims they can stop an attack.
• Do not change the game port. It does not help and is not needed.
• Do not move to another location for protection. All locations are behind VibeSHIELD.
• If players report problems during an attack, open a ticket and include the attack ID from the history table.

Good to Know

• The server list keeps working. Because A2S queries are answered at the edge, your server stays visible in the Palworld server list during a query flood.
• The size column shows the peak. Each attack is listed with its peak in Mbps or Gbps, not an average.
• Read more. The article on how VibeSHIELD protects your game server covers the network in detail.