forked from Nikotecnology/ServerAccessLogging
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathnotify.py
More file actions
17 lines (15 loc) · 861 Bytes
/
Copy pathnotify.py
File metadata and controls
17 lines (15 loc) · 861 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
#pylint: disable=subprocess-run-check
import subprocess
def main():
hostname = subprocess.run("hostname")
login_ip = subprocess.run("echo $SSH_CONNECTION | cut -d " " -f 1")
login_date = subprocess.run('date')
login_name = subprocess.run("whoami")
session_id = subprocess.run('echo "$(tty | sed -e ''s:/dev/::'')"')
if ('cat /var/log/auth.log | egrep ''^.*?\bpublickey\b.*?\b'" + login_ip + '"'\b.*?$'''):
method = "Public Key Authentication"
else:
method="Password(or generic) Authentication"
subprocess.run('telegram-send "📲 New Server Login (' + hostname + ') \n Logged User: ' + login_name +'\n IP-Address: '+ login_ip +'\nDate: ' + login_date + '\nSession: ' + session_id + ' \nMethod: ' + method +' \n\nUse: "pkill -9 -t ' + session_id + '" to kill that session"')
if __name__ == '__main__':
main()