SSH Email Alerts - Revision history

Bigfoot65 at 00:47, 3 November 2014

2014-11-03T00:47:25Z

Bigfoot65: /* Method 2 */

2014-11-03T00:46:56Z

Method 2

Bigfoot65 at 00:46, 3 November 2014

2014-11-03T00:46:02Z

Bigfoot65 at 23:01, 2 November 2014

2014-11-02T23:01:40Z

Bigfoot65 at 15:02, 3 August 2014

2014-08-03T15:02:44Z

Bigfoot65 at 15:02, 3 August 2014

2014-08-03T15:02:36Z

Bigfoot65 at 14:54, 3 August 2014

2014-08-03T14:54:15Z

Bigfoot65 at 14:52, 3 August 2014

2014-08-03T14:52:55Z

Bigfoot65: Created page with "This guide shows a simple way to know when someone logged in as root or normal user. It will send an email alert notification to the specified email address along with the IP..."

2014-08-03T14:50:55Z

Created page with "This guide shows a simple way to know when someone logged in as root or normal user. It will send an email alert notification to the specified email address along with the IP..."

New page

This guide shows a simple way to know when someone logged in as root or normal user. It will send an email alert notification to the specified email address along with the IP address of last login.

* [[Open_Terminal|As root user]] create ''ssh_email_alert.sh'' with the following text:
<pre>#!/bin/bash

tmptxt="/tmp/ssh_alert_email.txt"

ip="`who -m | cut -d'(' -f2 | cut -d')' -f1`"

echo "ALERT - SSH Shell Access" > $tmptxt

echo "" >> $tmptxt
echo "SSH Login:" >> $tmptxt
echo "`who -m`" >> $tmptxt

echo "" >> $tmptxt
echo "IP:" >> $tmptxt
echo "$ip" >> $tmptxt

echo "" >> $tmptxt
echo "Access time:" >> $tmptxt
echo "`date`" >> $tmptxt

echo "" >> $tmptxt
echo "Current sudo:" >> $tmptxt
echo "`whoami`" >> $tmptxt

echo "" >> $tmptxt
echo "Home path:" >> $tmptxt
echo "`pwd`" >> $tmptxt

#cat $tmptxt
cat $tmptxt | mail -s "Alert: SSH Access from $ip" name@domain.com

rm -fr $tmptxt</pre>

:'''NOTE:''' Ensure you replace name@domain.com with your email address.

* Set execute permissions:
chmod 755 /usr/bin/ssh_email_alert.sh

* Edit ''/etc/profile'' and add this to the bottom of the file:
ssh_email_alert.sh

You should not get an email anytime a user logs into your HDA via Secure Shell.

Reference: [http://linux.alanstudio.hk/ssh_emailalert.htm Email Alert for SSH login]

@@ Line 1: / Line 1: @@
 This guide shows a simple way to know when someone logged in as root or normal user using [[Key-Based SSH Logins|Secure Shell (SSH)]].  It will send an email alert notification to the specified email address along with the IP address of last login.
-'''NOTE:'''  You must have configured your HDA to send emails.  One way to do so is by following the [[Outgoing_mail_via_gmail|Outgoing mail via Gmail]] guidance.
+'''PREREQUISITE:'''  You must have configured your HDA to send emails.  One way to do so is by following the [[Outgoing_mail_via_gmail|Outgoing mail via Gmail]] guidance.
 == Method 1 ==

@@ Line 55: / Line 55: @@
    echo $TEXT|mail -s "SSH Login" name@domain.com
 fi</pre>
 You should not get an email anytime a user logs into your HDA via [[Key-Based SSH Logins|Secure Shell (SSH)]].

@@ Line 3: / Line 3: @@
 '''NOTE:'''  You must have configured your HDA to send emails.  One way to do so is by following the [[Outgoing_mail_via_gmail|Outgoing mail via Gmail]] guidance.
-* [[Open_Terminal|As root user]] create ''ssh_email_alert.sh'' with the following text:
+* [[Open_Terminal|As root user]] create ''/usr/bin/ssh_email_alert.sh'' with the following text:
 <pre>#!/bin/bash

← Older revision		Revision as of 15:02, 3 August 2014
Line 1:		Line 1:
	This guide shows a simple way to know when someone logged in as root or normal user using [[Key-Based SSH Logins\|Secure Shell (SSH)]]. It will send an email alert notification to the specified email address along with the IP address of last login.		This guide shows a simple way to know when someone logged in as root or normal user using [[Key-Based SSH Logins\|Secure Shell (SSH)]]. It will send an email alert notification to the specified email address along with the IP address of last login.
−

	'''NOTE:''' You must have configured your HDA to send emails. One way to do so is by following the [[Outgoing_mail_via_gmail\|Outgoing mail via Gmail]] guidance.		'''NOTE:''' You must have configured your HDA to send emails. One way to do so is by following the [[Outgoing_mail_via_gmail\|Outgoing mail via Gmail]] guidance.

← Older revision		Revision as of 15:02, 3 August 2014
Line 1:		Line 1:
	This guide shows a simple way to know when someone logged in as root or normal user using [[Key-Based SSH Logins\|Secure Shell (SSH)]]. It will send an email alert notification to the specified email address along with the IP address of last login.		This guide shows a simple way to know when someone logged in as root or normal user using [[Key-Based SSH Logins\|Secure Shell (SSH)]]. It will send an email alert notification to the specified email address along with the IP address of last login.
		+
		+
		+	'''NOTE:''' You must have configured your HDA to send emails. One way to do so is by following the [[Outgoing_mail_via_gmail\|Outgoing mail via Gmail]] guidance.

	* [[Open_Terminal\|As root user]] create ''ssh_email_alert.sh'' with the following text:		* [[Open_Terminal\|As root user]] create ''ssh_email_alert.sh'' with the following text:

@@ Line 3: / Line 3: @@
 '''NOTE:'''  You must have configured your HDA to send emails.  One way to do so is by following the [[Outgoing_mail_via_gmail|Outgoing mail via Gmail]] guidance.
-* [[Open_Terminal|As root user]] create ''/usr/bin/ssh_email_alert.sh'' with the following text:
+== Method 1 ==
 <pre>#!/bin/bash
@@ Line 15: / Line 16: @@
 echo "SSH Login:" >> $tmptxt
 echo "`who -m`" >> $tmptxt
 echo "" >> $tmptxt
@@ Line 28: / Line 28: @@
 echo "Current sudo:" >> $tmptxt
 echo "`whoami`" >> $tmptxt
 echo "" >> $tmptxt
@@ Line 42: / Line 41: @@
 * Set execute permissions:
-  chmod 755 /usr/bin/ssh_email_alert.sh
+  chmod 755 /usr/bin/ssh_email_alert
 * Edit ''/etc/profile'' and add this to the bottom of the file:
-  ssh_email_alert.sh
+  ssh_email_alert
-You should not get an email anytime a user logs into your HDA via [[Key-Based SSH Logins|Secure Shell (SSH)]].
+Reference:  [http://linux.alanstudio.hk/ssh_emailalert.htm Email Alert for SSH login]
-Reference:  [http://linux.alanstudio.hk/ssh_emailalert.htm Email Alert for SSH login]
+You should not get an email anytime a user logs into your HDA via [[Key-Based SSH Logins|Secure Shell (SSH)]].

← Older revision		Revision as of 14:52, 3 August 2014
Line 1:		Line 1:
−	This guide shows a simple way to know when someone logged in as root or normal user. It will send an email alert notification to the specified email address along with the IP address of last login.	+	This guide shows a simple way to know when someone logged in as root or normal user using [[SSH]]. It will send an email alert notification to the specified email address along with the IP address of last login.

	* [[Open_Terminal\|As root user]] create ''ssh_email_alert.sh'' with the following text:		* [[Open_Terminal\|As root user]] create ''ssh_email_alert.sh'' with the following text: