There are the famous snort and snort3 packages as intrusion detection system, but they are hard to maintain and probably a bit overkill on low powered router devices.
Probably this could be interesting for you (haven't tested this yet):