Someone is brute-forcing a customer account right now. Would you know?
Pterodactyl writes an excellent activity log - that nobody reads. Audit Feed watches it for you and posts what matters to a private Discord channel, once per minute, in a single clean embed.
Three categories, your choice
Built to not spam you
Zero footprint
No new database tables - it reads the panel's own activity log past a stored cursor. Needs only the standard Pterodactyl cron (
Installation
Requires the free Blueprint extension framework (blueprintframe.work).
Pterodactyl writes an excellent activity log - that nobody reads. Audit Feed watches it for you and posts what matters to a private Discord channel, once per minute, in a single clean embed.
Three categories, your choice
- Security events - failed logins, blocked IPs, SFTP auth failures, password resets, 2FA checkpoints
- Account events - email/password changes, 2FA enabled or disabled, API keys and SSH keys created or deleted
- Critical server operations - reinstalls, backup deletions and restores, database deletions, subuser changes, denied SFTP access
Built to not spam you
- All matches from the last minute are batched into one embed (max 20 lines, "+N more" beyond that) - your channel stays readable during an incident, which is exactly when you need it to be
- Each line: time, event, actor email, IP address
- First activation baselines the cursor - historical events are never flooded into the channel
- A test button verifies your webhook in one click
Zero footprint
No new database tables - it reads the panel's own activity log past a stored cursor. Needs only the standard Pterodactyl cron (
schedule:run).Installation
Code:
blueprint -install auditfeed
