SSH login alert

popeye

• January 20, 2014 07:24

Hi had a notification for SSH login alert for a user, but when i check the shell access disabled on there account and cant see how they have managed to login via ssh.

• 

  quietFinn

  • January 20, 2014 13:04

  [quote="popeye, post: 1552272">Hi had a notification for SSH login alert for a user, but when i check the shell access disabled on there account and cant see how they have managed to login via ssh.
  They can login using SFTP and you will get that SSH login alert.

  0
• 

  popeye

  • January 20, 2014 13:14

  Hi thanks for the help

  0
• 

  cPanelMichael

  • January 21, 2014 12:29

  Hello :) Note that if you want to see if the server was accessed via SFTP during the same time frame, simply check /var/log/secure for an entry such as: subsystem request for sftp
  Thank you.

  0

Please sign in to leave a comment.