Access monitoring (login events, suspicious activity detection)

[OrezBodajoy]

I want to monitor access to my cloudron instance: login events and things like that.
I also want to sometimes clean up all the currently valid credentials and check that there are no unexpected logons after that.

I know that the event log has some lines in the ui related to logons but that's not practical enough for this use case.

Any suggestions?

[OrezBodajoy]

Any ideas?

[girish]

@orezbodajoy Login events are in the Event log and I guess you can check those using the API for automation.

As for "suspicious activity detection", I guess we have to implement such features in Cloudron. What is defined as a suspicious activity? Difference device or IP?

[robi]

Most of it can be mitigated by implementing the already available blacklist and whitelist.