Warden - Crypto-Miner & Abuse Detection

Someone is mining on your node right now, or they will be. Warden watches every server for sustained CPU abuse, scans recent console output for miner indicators, and flags what it finds — so you find out from a dashboard instead of from the customers on the same node.

It is built to be reviewed, not trusted blindly. Every flag lands in a table with the server, the signal that raised it and the reason, and you decide what happens. Automatic action is available when you want it, and off by default.

THE DASHBOARD

• Total servers, active flags, how many need review, when the last scan ran
• Each flag with its server, signal, reason and time
• Acknowledge or clear individually, scan every server on demand, or clear everything at once

THE SIGNALS

• Sustained CPU: above your threshold, for your number of minutes. Sustained, not spikes — a server compiling for a minute is not an abuser
• Console indicators: recent console output matched against an indicator list you can edit. The defaults cover the common miners; add your own as you see them

WHAT YOU CONTROL

• Each signal on or off independently
• CPU threshold and the sustain window
• The indicator list, and how much console to scan per server
• Response action: review only, stop the server, or suspend it
• An ignore list for servers that should never be flagged
• An optional webhook that receives each new flag

HOW IT RUNS

A scheduled scan runs every five minutes across every server. You can also scan on demand from the dashboard.

NOTES

Warden is admin-only. Nothing appears in the client panel and nothing tells a customer they are being watched. Console scanning is plain substring matching, never a regular expression — an indicator you type cannot hang your panel.

Start with review only and no automatic action for the first days, then tune the threshold to the games you host. Stopping a paying customer’s server on a false positive costs more than a missed miner does.

**SUPPORT: https://t.me/whoisfazil

• Fully supported. Missing something, or have an idea for it? Tell me — feature requests are welcome. Run into a problem? Message me on Telegram and I will get you a fix.

• Rate the product however you see fit, but if something is broken please tell me about it directly too — a review alone does not tell me what went wrong on your setup, and I cannot fix what I do not know about.**

Requires Pterodactyl with Blueprint, and the panel scheduler running.