Get Notified When Linux Authentication Happened

Recently I initialised a new Linode CentOS without doing any hardening yet, I want to be informed if any unauthorised login, here is how I doing it:

vi /etc/profile.d/
curl "http:///notifier?message=LinodeUserLogIn" &
chmod +x /etc/profile.d/

Exit from ssh, and relogin, the above URL will be called and my iPhone will receive Push Notification.

And just the next day I detected unsuspicous login then… immediately shutdown the Linode.

Author: fyhao

Jebsen & Jessen Comms Singapore INTI University College Bsc (Hon) of Computer Science, Coventry University

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.