Sshrc - Revision history

Admin at 23:32, 20 January 2023

2023-01-20T23:32:33Z

← Older revision		Revision as of 23:32, 20 January 2023
Line 1:		Line 1:
	E-Mail Alert on SSH Login Event		E-Mail or Telegram Alert on SSH Login Event
	*/etc/ssh/sshrc		*/etc/ssh/sshrc

Admin: /* Telegram */

2023-01-20T23:32:11Z

← Older revision		Revision as of 23:32, 20 January 2023
Line 3:		Line 3:

	=Telegram=		=Telegram=
	#!/bin/sh		#!/bin/sh
	#Send a Telegram message on boot		#Send a Telegram message on boot
	TELEGRAM_CHAT_ID="xxx"		TELEGRAM_CHAT_ID="xxx"
	TELEGRAM_BOT_TOKEN="xxx"		TELEGRAM_BOT_TOKEN="xxx"
	ipaddr=`echo $SSH_CONNECTION \| cut -d " " -f 1`		ipaddr=`echo $SSH_CONNECTION \| cut -d " " -f 1`
	Hostname=`hostname`		Hostname=`hostname`
	NOW=$( date '+%F_%H%M%S' )		NOW=$( date '+%F_%H%M%S' )
	export LANG=C		export LANG=C
	MESSAGE="$(echo "<strong>SSH Login</strong>		MESSAGE="$(echo "<strong>SSH Login</strong>
	From IP: $ipaddr		From IP: $ipaddr
	To Host: $Hostname		To Host: $Hostname
	Date: $NOW ")"		Date: $NOW ")"
	logger "Debug Reboot Message"		logger "Debug Reboot Message"
	logger $MESSAGE		logger $MESSAGE
	/usr/bin/curl --connect-timeout 5 --max-time 10 --silent --output /dev/null \		/usr/bin/curl --connect-timeout 5 --max-time 10 --silent --output /dev/null \
	--data-urlencode "chat_id=${TELEGRAM_CHAT_ID}" \		--data-urlencode "chat_id=${TELEGRAM_CHAT_ID}" \
	--data-urlencode "text=${MESSAGE}" \		--data-urlencode "text=${MESSAGE}" \

Admin: /* =Telegram */

2023-01-20T23:31:45Z

=Telegram

← Older revision		Revision as of 23:31, 20 January 2023
Line 2:		Line 2:
	*/etc/ssh/sshrc		*/etc/ssh/sshrc

	==Telegram=		=Telegram=
	#!/bin/sh		#!/bin/sh
	#Send a Telegram message on boot		#Send a Telegram message on boot

Admin at 23:31, 20 January 2023

2023-01-20T23:31:34Z

@@ Line 2: / Line 2: @@
 */etc/ssh/sshrc
   #!/bin/bash
   #email on ssh login

Admin at 18:34, 28 October 2021

2021-10-28T18:34:37Z

← Older revision		Revision as of 18:34, 28 October 2021
Line 15:		Line 15:
	Target Hostname: $Hostname		Target Hostname: $Hostname
	User: $USER		User: $USER
	" \| mail -s "SSH Login Alert From: $ip" ~~mail.server~~.com		" \| mail -s "SSH Login Alert From: $ip" user@domain.com

Admin at 18:31, 28 October 2021

2021-10-28T18:31:16Z

← Older revision		Revision as of 18:31, 28 October 2021
Line 8:		Line 8:
	NOW=$( date '+%F_%H:%M:%S' )		NOW=$( date '+%F_%H:%M:%S' )
	Country=`curl -s https://ipapi.co/$ip/country/` > /dev/null		Country=`curl -s https://ipapi.co/$ip/country/` > /dev/null

	echo "		echo "
	UTC Date/Time: $NOW		UTC Date/Time: $NOW

Admin: Created page with "E-Mail Alert on SSH Login Event */etc/ssh/sshrc #!/bin/bash #email on ssh login ip=`echo $SSH_CONNECTION | cut -d " " -f 1` Hostname=`hostname` NOW=$( date '+%F_%H:%M:%S..."

2021-10-28T18:30:00Z

Created page with "E-Mail Alert on SSH Login Event */etc/ssh/sshrc #!/bin/bash #email on ssh login ip=`echo $SSH_CONNECTION | cut -d " " -f 1` Hostname=`hostname` NOW=$( date '+%F_%H:%M:%S..."

New page

E-Mail Alert on SSH Login Event
*/etc/ssh/sshrc

#!/bin/bash
#email on ssh login
ip=`echo $SSH_CONNECTION | cut -d " " -f 1`
Hostname=`hostname`
NOW=$( date '+%F_%H:%M:%S' )
Country=`curl -s https://ipapi.co/$ip/country/` > /dev/null
echo "
UTC Date/Time: $NOW
IP Address: $ip
Country: $Country
Target Hostname: $Hostname
User: $USER
" | mail -s "SSH Login Alert From: $ip" mail.server.com