Webhook Spam

Detect and neutralise abusive webhooks used for spam or nuke attacks.

How Webhook Abuse Works

Attackers who gain access to a channel webhook token can send unlimited messages impersonating any user. This is commonly used in nuke attacks to flood channels with spam, slurs, or phishing links.

Protection Features

Webhook Rate Limiting

Automatically rate-limits webhook messages. If a webhook exceeds the threshold, it is paused.

Webhook Creation Monitoring

Alerts when new webhooks are created and logs the creator.

Auto-Delete Abuse

Detects spam patterns from webhooks and deletes offending messages instantly.

Webhook Quarantine

Suspicious webhooks are disabled and require manual re-approval from a server admin.

If you detect an ongoing webhook attack, navigate to Discord Server Settings → Integrations and delete the compromised webhook. Exorion will also attempt to do this automatically.