Monitoring SSH logins to your Linux server is crucial for maintaining the security of your system. One way to stay informed about login activity is by setting up email alerts whenever someone logs in via SSH. In this step-by-step guide, we will show you how to configure your Linux server to send email notifications when an SSH login occurs.<\/p>\n
First, you need to install a mail utility that will allow your server to send emails. We’ll use “mailutils” for this purpose. To install mailutils on your Ubuntu or Debian-based system, run the following command:<\/p>\n
\r\nsudo apt-get update\r\nsudo apt-get install -y mailutils\r\n<\/pre>\nOn CentOS, RHEL, or Fedora-based systems, use the following command:<\/p>\n
\r\nsudo yum install -y mailx\r\n<\/pre>\nStep 2: Configure the email script<\/h2>\n
Next, create a script that will send an email notification with the SSH login details. Create a new file called “ssh_login_notify.sh” in the “\/usr\/local\/bin” directory:<\/p>\n
\r\nsudo nano \/usr\/local\/bin\/ssh_login_notify.sh\r\n<\/pre>\nAdd the following lines to the script:<\/p>\n
\r\n#!\/bin\/bash\r\n\r\n# Change this to your email address\r\nrecipient=\"your-email@example.com\"\r\nsubject=\"SSH Login Alert\"\r\nmessage=\"SSH login detected on $(hostname) at $(date) by user $(whoami) from $(echo $SSH_CONNECTION | awk '{print $1}')\"\r\n\r\necho \"$message\" | mail -s \"$subject\" \"$recipient\"\r\n<\/pre>\nReplace “your-email@example.com” with your email address. Save and exit the editor.<\/p>\n
Make the script executable:<\/p>\n
\r\nsudo chmod +x \/usr\/local\/bin\/ssh_login_notify.sh\r\n<\/pre>\nStep 3: Configure SSH to run the script on login<\/h2>\n
Edit the SSH configuration file “\/etc\/ssh\/sshd_config” to run the email script whenever someone logs in:<\/p>\n
\r\nsudo nano \/etc\/ssh\/sshd_config\r\n<\/pre>\nAdd the following line at the end of the file:<\/p>\n
\r\nForceCommand \/usr\/local\/bin\/ssh_login_notify.sh; $SSH_ORIGINAL_COMMAND\r\n<\/pre>\nSave and exit the editor.<\/p>\n
Restart the SSH service to apply the changes:<\/p>\n
\r\nsudo systemctl restart sshd\r\n<\/pre>\nNow, you will receive an email notification whenever someone logs in to your server via SSH.<\/p>\n
Commands Mentioned:<\/h2>\n
\n
- apt-get update<\/span> – Update package repositories<\/li>\n
- apt-get install<\/span> – Install specified packages and their dependencies<\/li>\n
- yum install<\/span> – Install specified packages and their dependencies (CentOS\/RHEL\/Fedora)<\/li>\n
- nano<\/span> – Open the specified file in the nano text editor<\/li>\n
- chmod<\/span> – Change the permissions of a file<\/li>\n
- systemctl restart<\/span> – Restart a system service<\/li>\n<\/ul>\n
Conclusion<\/h2>\n
In this guide, we’ve shown you how to set up email alerts for SSH logins on your Linux server. By configuring your server to send notifications, you can stay informed about SSH login activity and take appropriate action if you notice any unauthorized access.<\/p>\n
Please note that while this method is useful for monitoring login activity, it’s crucial to maintain the overall security of your server by keeping your system up-to-date, using strong passwords, enabling key-based authentication, and setting up firewalls. Additionally, you can implement other security measures, such as using intrusion detection systems (IDS) and intrusion prevention systems (IPS), configuring two-factor authentication (2FA) for SSH logins, and regularly auditing your server’s security settings.<\/p>\n
By combining these security practices with email alerts for SSH logins, you can proactively monitor and protect your Linux server from unauthorized access and potential security threats.<\/p>\n
We hope this guide has helped you set up email alerts for SSH logins on your Linux server. If you have any questions, comments, or suggestions for improvement, please feel free to share your thoughts in the comments section below. Your feedback is invaluable to us, and it helps us create better and more informative content for our users.<\/p>\n","protected":false},"excerpt":{"rendered":"
Monitoring SSH logins to your Linux server is crucial for maintaining the security of your system. One way to stay informed about login activity is by setting up email alerts…<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"wds_primary_category":0,"footnotes":""},"categories":[996],"tags":[1744],"class_list":["post-14098","post","type-post","status-publish","format-standard","hentry","category-linux","tag-security"],"_links":{"self":[{"href":"https:\/\/webhostinggeeks.com\/howto\/wp-json\/wp\/v2\/posts\/14098","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/webhostinggeeks.com\/howto\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/webhostinggeeks.com\/howto\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/webhostinggeeks.com\/howto\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/webhostinggeeks.com\/howto\/wp-json\/wp\/v2\/comments?post=14098"}],"version-history":[{"count":0,"href":"https:\/\/webhostinggeeks.com\/howto\/wp-json\/wp\/v2\/posts\/14098\/revisions"}],"wp:attachment":[{"href":"https:\/\/webhostinggeeks.com\/howto\/wp-json\/wp\/v2\/media?parent=14098"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/webhostinggeeks.com\/howto\/wp-json\/wp\/v2\/categories?post=14098"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/webhostinggeeks.com\/howto\/wp-json\/wp\/v2\/tags?post=14098"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}