gandalf/secubox-openwrt
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
41fb86ce47
secubox-openwrt/package/secubox/secubox-app-crowdsec-custom
History
CyberMind-FR 41fb86ce47 feat(crowdsec): Add Facebook/Meta and Ahrefs to whitelist 
Whitelist trusted crawlers to prevent false positive SSRF alerts:
- Facebook/Meta: 69.171.x, 173.252.x, 31.13.x, 157.240.x, etc.
- Ahrefs SEO: 54.39.210.x, 167.114.139.x, 54.36.x

Changed from ip/cidr format to expression format for CrowdSec
compatibility on OpenWrt.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-12 05:44:48 +01:00
..
files feat(crowdsec): Add Facebook/Meta and Ahrefs to whitelist 2026-02-12 05:44:48 +01:00
Makefile feat(crowdsec+haproxy): Dashboard refactor, custom parsers & scenarios 2026-01-27 11:16:17 +01:00
README.md docs(secubox): Add KISS README for all 46 remaining packages 2026-02-03 07:34:06 +01:00

README.md

CrowdSec Custom Scenarios for SecuBox

Custom CrowdSec configurations for SecuBox web interface and service protection.

Installation

opkg install secubox-app-crowdsec-custom

Included Scenarios

  • HTTP authentication bruteforce detection
  • Path scanning / enumeration detection
  • LuCI / uhttpd auth failure monitoring
  • Nginx reverse proxy monitoring
  • HAProxy backend protection and auth monitoring
  • Gitea web, SSH, and API bruteforce detection
  • Streamlit app flooding and auth protection
  • Webapp generic auth bruteforce protection
  • Whitelist enrichment for trusted networks

What It Ships

  • Parsers under /etc/crowdsec/parsers/
  • Scenarios under /etc/crowdsec/scenarios/
  • Acquisition configs under /etc/crowdsec/acquis.d/
  • Whitelist enrichment profiles

Dependencies

  • crowdsec
  • crowdsec-firewall-bouncer

License

Apache-2.0