Question

Ubuntu 20.04 Set Up Alert Email for SSH Access

I was wondering whether any answers in the following link would be most beneficial for setting up alerts to email me when a user logs in via SSH to my Ubuntu 20.04 server.

https://askubuntu.com/questions/179889/how-do-i-set-up-an-email-alert-when-a-ssh-login-is-successful

Subscribe
Share

Submit an answer
You can type!ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Accepted Answer

Hi there,

One of the most straightforward ways would be to put the following in /etc/profile:

if [ -n "$SSH_CLIENT" ]; then 
    TEXT="$(date): ssh login to ${USER}@$(hostname -f)" 
    TEXT="$TEXT from $(echo $SSH_CLIENT|awk '{print $1}')" 
    echo $TEXT|mail -s "ssh login" you@your.domain 
fi

In case that you are not receiving the emails, you can follow the steps here on how to setup ssmtp with SMTP authentication:

https://www.digitalocean.com/community/questions/how-to-send-emails-from-a-bash-script-using-ssmtp

However this is not a bulletproof solution, what I would recommend is to follow the steps here on how to harden your OpenSSH service here:

https://www.digitalocean.com/community/tutorials/how-to-harden-openssh-on-ubuntu-18-04

Hope that this helps!

Best,

Bobby