Shell login notifications

ScottIsMyName

• June 06, 2019 11:39

I see there are options for notifications when someone logs in via cPanel, but what is the best way to setup notifications for ssh/sftp access?

• 

  Tyson Vane

  • June 06, 2019 17:18

  To enable SSH login Email Alert 1 : Login to the server as "root" user. #vi /root/.bashrc Step 2 : Add the following line at the bottom of file after replacing the "ServerName" and "your@yourdomain.com" with actual values. echo "ALERT " Root Shell Access (ServerName) on:" `date` `who` | mail -s "Alert: Root Access from `who | cut -d'(" -f2 | cut -d")" -f1`" your@yourdomain.com

  0
• 

  ScottIsMyName

  • June 06, 2019 17:39

  Thanks, I did see this, but I want it for all users, not just root logins (which I have disabled anyway)

  0
• 

  cPanelMichael

  • June 06, 2019 20:01

  Hello @ScottIsMyName, You could use a third-party application such as CSF: ConfigServer Security & Firewall (csf) It includes an option named LF_SSH_EMAIL_ALERT to enable alerts upon all SSH logins. You can read about how to use and configure this option at:

  0
• 

  ScottIsMyName

  • June 07, 2019 15:56

  Thank you, this is working nicely! Is there a way to also receive pushbullet notifications for certain actions? I tried a bit of googling but don't see any support for pushbullet notifications with CSF/LFD

  0
• 

  cPanelMichael

  • June 10, 2019 16:34

  Thank you, this is working nicely! Is there a way to also receive pushbullet notifications for certain actions? I tried a bit of googling but don't see any support for pushbullet notifications with CSF/LFD

  
  Not that I'm aware of, but you can always post on their forums to see if any other users have implemented third-party solutions for PushBullet CSF notifications: ConfigServer Community Forum - Index page Thank you.

  0

Please sign in to leave a comment.