Anti-Raid

Anti-Raid detects coordinated join attacks (raids) by monitoring join velocity. When the number of new members joining within a time window exceeds your threshold, raid mode activates and configured mitigation actions apply to all subsequent joiners until the raid subsides.

How It Works

InfiniTea maintains a rolling join window for your server. It counts how many members join within a configurable time period. When that count hits your detection threshold, raid mode activates:

1. All members who triggered the threshold receive the configured action (timeout or ban).
2. Subsequent joins during the active raid window also receive the action.
3. An optional notification is sent to your staff channel.
4. Welcome/Goodbye messages can be suppressed during the raid to reduce noise.

Configuration

Detection Threshold

• Users Joining: Number of members that must join to trigger raid detection.
• Time Window (seconds): The rolling time period for counting joins.

For example: "5 users joining within 10 seconds" triggers raid mode.

Potential Raider Filter

Optionally narrow detection to only count new accounts:

• Use Account Age Threshold: When enabled, only accounts younger than the threshold count toward the join burst.
• Account Age Threshold (weeks): Accounts older than this are excluded from the burst counter. This reduces false positives from organic growth waves.

Action

• Action Type:
  • Detect Only (No Action): Log the raid but don't take automated action. Useful for monitoring before committing to enforcement.
  • Mute: Timeout all raiders for a configured duration.
  • Ban: Temporarily ban all raiders.
• Duration (hours): How long the mute or ban lasts. Leave at 0 or set indefinite for permanent action.

Mitigation and Notifications

• Disable Welcome/Goodbye During Raids: Suppress welcome and goodbye messages while raid mode is active. Prevents the raid from flooding your greeting channel.
• Notification Channel: Where raid detection alerts are posted for staff awareness.

Important Notes

• Anti-Raid works alongside Global Watchlist. Both evaluate on member join, but Anti-Raid focuses on velocity (burst detection) while Global Watchlist focuses on individual report history.
• Set conservative thresholds initially (higher user count, shorter time window) to avoid false positives from legitimate community events or marketing pushes.
• The account age filter is highly recommended for established servers where most legitimate new members have older accounts.

Tips

• A good starting point for medium servers: 8 users within 15 seconds.
• Enable Detect Only mode first to observe join patterns before enabling enforcement.
• Always configure a notification channel so staff are aware when raids are detected.
• If you run public invite links, expect higher join velocity and adjust thresholds accordingly.