secubox-openwrt/package/secubox/secubox-app-auth-logger
CyberMind-FR 62f2f6a7a8 docs(secubox): Add KISS README for all 46 remaining packages
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-03 07:34:06 +01:00
..
files
Makefile fix(deps): Remove libubox/libubus/libuci from all SecuBox package dependencies 2026-01-30 19:46:27 +01:00
README.md docs(secubox): Add KISS README for all 46 remaining packages 2026-02-03 07:34:06 +01:00

SecuBox Authentication Failure Logger for CrowdSec

Logs authentication failures from LuCI/rpcd and Dropbear SSH for CrowdSec detection.

Installation

opkg install secubox-app-auth-logger

Usage

# Enable and start the service
/etc/init.d/secubox-app-auth-logger enable
/etc/init.d/secubox-app-auth-logger start

The auth monitor runs as a background daemon watching for login failures.

What It Ships

  • SSH failure monitoring (OpenSSH/Dropbear)
  • LuCI web interface auth failure logging via CGI hook
  • CrowdSec parser and bruteforce scenario
  • CrowdSec acquisition configuration

Files

  • /etc/init.d/secubox-app-auth-logger -- init script
  • /usr/lib/secubox/auth-monitor.sh -- auth failure monitor daemon

Dependencies

  • rpcd
  • uhttpd

License

Apache-2.0