Security
Antiraid
Detect mass-join raids, spam waves and coordinated attacks automatically.
Overview
The antiraid command group watches message and join activity for patterns that look like a raid, spam wave or bot flood, and automatically punishes the accounts responsible once a module's threshold is crossed.
Antiraid must be turned on globally with
antiraid state true before any module can act. Individual modules are then enabled on top of that.Modules
Each module is a subcommand: antiraid <module> <true/false> [threshold]. Every module has a sensible default threshold if you don't specify one.
| Module | Default Threshold | Detects |
|---|---|---|
| spam | 5 | A user sending repeated messages quickly. |
| flood | 6 | A burst of messages across the server in a short window. |
| repeat | 3 | The same message content repeated. |
| massjoin | 5 | Many accounts joining in a short window. |
| massmention | 4 | Messages mentioning an unusually high number of users or roles. |
| age | 24 | New accounts joining under a minimum age (in hours). |
| avatar | 1 | Accounts joining with no avatar set. |
| coordination | 4 | Multiple new accounts behaving in a synchronized way. |
| username | 1 | Usernames matching known raid/spam patterns. |
Setup
Turn antiraid on
Run
antiraid state true to enable the module globally for the server.Run the quick setup
antiraid setup enables avatar (threshold 1, kick) and massmention (threshold 4, jail) as a starting baseline.Set a log channel
antiraid log <channel> sends a record of every antiraid action to that channel.Tune individual modules
Enable more modules as needed, e.g.
antiraid massjoin true 8 to only react once 8 or more members join in the detection window.Admins & Whitelist
| Command | Description |
|---|---|
antiraid admin add/remove <user> | Grant or remove access to configure antiraid. |
antiraid whitelist add/remove <user> | Exempt a user from every antiraid module. |
antiraid pardon ban <user> | Unban a user who was banned by antiraid, in case of a false positive. |
Monitoring
| Command | Description |
|---|---|
| antiraid status / config | Show the current global state and every module's configuration. |
| antiraid modules | List every module with its enabled state, punishment and threshold. |
| antiraid incidents recent | Show the 10 most recent antiraid actions taken. |
| antiraid reset | Clear every antiraid setting, whitelist and admin entry for the server. |