I was wondering whether any answers in the following link would be most beneficial for setting up alerts to email me when a user logs in via SSH to my Ubuntu 20.04 server.
https://askubuntu.com/questions/179889/how-do-i-set-up-an-email-alert-when-a-ssh-login-is-successful
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
Hi there,
One of the most straightforward ways would be to put the following in /etc/profile
:
if [ -n "$SSH_CLIENT" ]; then
TEXT="$(date): ssh login to ${USER}@$(hostname -f)"
TEXT="$TEXT from $(echo $SSH_CLIENT|awk '{print $1}')"
echo $TEXT|mail -s "ssh login" you@your.domain
fi
In case that you are not receiving the emails, you can follow the steps here on how to setup ssmtp
with SMTP authentication:
https://www.digitalocean.com/community/questions/how-to-send-emails-from-a-bash-script-using-ssmtp
However this is not a bulletproof solution, what I would recommend is to follow the steps here on how to harden your OpenSSH service here:
https://www.digitalocean.com/community/tutorials/how-to-harden-openssh-on-ubuntu-18-04
Hope that this helps!
Best,
Bobby
Join our DigitalOcean community of over a million developers for free! Get help and share knowledge in Q&A, subscribe to topics of interest, and get courses and tools that will help you grow as a developer and scale your project or business.