[TUT] Get emails when someone logins into SSH

[.:Raymond:.]

Hey,

This is quick tut that basically show you how to make it so that when someone logs in ssh you get a detailed email with their ip, host, ect.

Lets get started

Step 1 :

cd /root

Step 2 :

pico .bashrc

Step 3 :
Scroll to the end of the file and add this.

echo 'ALERT - Root Shell Access (YourserverName) on:' `date` `who` | mail -s "Alert: Root Access from `who | cut -d"(" -f2 | cut -d")" -f1`" you@yourdomain.com

Replace YourserverName with the name of your actual server
Replace you@yourdomain.com with your actual email address.

Step 4 :

Crtl + X  then Y

And their you go. All done . To test log out of ssh and re-log back in. You should receive an email.

 

[Dom]

Email Example ::

[SLIDE]http://lulzimg.com/i22/c71026.png[/SLIDE]

 

[Cory]

pico isn't used anymore.

pico .bashrc

Use:

nano .bashrc

Lastly, If you're on cPanel and use CSF (ConfigServer Firewall) this does it for you and therefore no need to do this.

 

[.:Raymond:.]

@Cory

Hm didnt even notice i put pico. Also this tut is for general linux. Not all people have csf installed

 

[mhuang2286]

Very useful, thanks!

 

[onel0ve]

you can do it using csf alert option