Log SSH connections with /etc/ssh/sshrc


Yannick over at http://blog.uggy.org always comes up with interesting and valuable tips.

Following his latest post regarding sshrc, I made my own sshrc script.

Unlike his example, I didn’t make SSH email me whenever a connection is made. That would be overkill given the number of connections I can make on a single day. Instead I’m just logging dates and IP in a log file of its own, which I plan on keeping forever.

My /etc/ssh/sshrc :

DATE=date “+%d.%m.%Y %Hh%Mm"IP=echo $SSH_CONNECTION | awk ‘{print $1}‘echo "$DATE - $IP" >> /var/log/ssh_connections.log

Thanks for reading this post!

If you found an issue in this article, you can create an issue on Github.

If you have a comment or question, please drop me a line below!