Protection
How the attack score works
In short
The attack score adds up different kinds of damage from one person. Each action is worth points, and 100 points within ten minutes sets off Anti-Nuke, even when no single limit was reached. It's on whenever Anti-Nuke is on.
What it does
Anti-Nuke limits count one kind of action each. Deleting channels has a limit. Deleting roles has another. A careful attacker stays under all of them by doing a little of everything.
The attack score closes that gap. Think of a tab at a bar. Every damaging thing a person does goes on their tab. When the tab reaches 100, Bastion stops them.
Turn it on
There's nothing to switch on. The score runs whenever Anti-Nuke is on, and it's free.
Open Anti-Nuke in the dashboard
Only the server owner and trusted people can change this page.
Open Advanced settings
Find the group called Mixed attacks.
Change the points if you want
Each action has a number from 0 to 100. Most servers never need to touch them.
The points
These are the defaults. They're the same on every security level.
| Setting | What it counts | Points |
|---|---|---|
| Deleting a channel | Each channel one person deletes. | 25 |
| Deleting a role | Each role one person deletes. | 25 |
| Banning a member | Each ban, by hand or with /ban. | 20 |
| Kicking a member | Each kick, by hand or with /kick. A /quarantine add counts as a kick. | 20 |
| Creating a webhook | Each webhook one person creates. | 15 |
| Creating a channel | Each channel one person creates. | 12 |
| Creating a role | Each role one person creates. | 10 |
| Deleting a webhook | Each webhook one person deletes. | 10 |
| Deleting an emoji | Each emoji one person deletes. | 10 |
Points last ten minutes. After that the action drops off the tab. Each person has their own tab.
Worked example: a mixed attack
On Balanced, the limit for deleting channels is 3 a minute and the limit for deleting roles is 3 a minute. Alex's account is hacked. The attacker deletes two of each, so neither limit is reached.
| Action | Points added | Score |
|---|---|---|
| Deletes a channel | 25 | 25 |
| Deletes a second channel | 25 | 50 |
| Deletes a role | 25 | 75 |
| Deletes a second role | 25 | 100, Anti-Nuke steps in |
Four actions and the account is in quarantine. Without the score, the attacker could have carried on for the rest of the hour.
Worked example: a normal evening
Sam is setting up for an event. Sam creates 3 channels and 2 roles.
- 3 channels add 36.
- 2 roles add 20.
- Sam's score is 56 out of 100.
- Ten minutes later it's back to 0.
Sam never gets close. Building things scores low on purpose. Destroying things scores high.
What happens at 100
- The person gets your Anti-Nuke punishment. That's quarantine by default.
- A report goes to your log channel. It lists what they did, such as deleted 2 channels and deleted 2 roles within ten minutes, and says no single limit was reached.
- Your alert roles are pinged, if you chose any on the Logs page.
- With panic mode on, the panic starts. If the score included deleted channels or roles, the missing ones are recreated from your newest backup.
If a limit and the score are reached by the same action, the report names the limit.
Bastion's commands count too
A /ban, /kick or /quarantine add adds points to the moderator who ran it, on the same tab as anything they did by hand. If a command would take them to 100, Bastion refuses it, tells them it has been reported and applies the punishment. Timeouts and warnings add nothing.
Changing the points
- Lower a number to be more forgiving about that action.
- Raise a number to be stricter.
- Set it to 0 to leave that action out of the score. Its own limit still works.
- Switching a limit off on the Limits list also stops that action scoring.
The 100 point trigger and the ten minute window are fixed.
CarefulDon't set an action to 100. One channel delete would then be treated as an attack, and your own admins would be quarantined for tidying up.
Who's never scored
The server owner, trusted people and Bastion itself. The same people skip every Anti-Nuke limit.
How is this different from a limit?
A limit counts one kind of action, by the minute and by the hour. The score adds every kind together over ten minutes. Either one can set off Anti-Nuke.
Is it like heat?
It's the same idea for a different problem. Heat adds up messages to catch spam. The attack score adds up damage to catch a nuke. Heat cools every second. Attack points stay for ten minutes, then drop off.
The log says no single limit was reached. Why was my admin quarantined?
Their actions added up to 100 points within ten minutes. The report lists what they did. If it was honest work, run /quarantine remove, and ask the owner to do big clean-ups in future.
Can I see someone's score?
No. You see it when it reaches 100, in the report.
Can I switch the score off?
Set every action to 0. The limits carry on working.
Does my security level change the points?
No. Relaxed and Strict change the limits. The points stay the same until you change them.
Last updated