The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Check for SSH usage?

Discussion in 'General Discussion' started by kcdworks, May 15, 2003.

  1. kcdworks

    kcdworks Well-Known Member

    Joined:
    Jul 28, 2002
    Messages:
    186
    Likes Received:
    0
    Trophy Points:
    16
    We recently purchased and took over a server from another company.

    Every one of their users had SSH enabled, but we make it a request-only service. Is there any way to check which of their customers are using SSH so that we can remove access to those that have never used it?
     
  2. dgbaker

    dgbaker Well-Known Member
    PartnerNOC

    Joined:
    Sep 20, 2002
    Messages:
    2,578
    Likes Received:
    3
    Trophy Points:
    38
    Location:
    Toronto, Ontario Canada
    cPanel Access Level:
    DataCenter Provider
    Look for /home/{username}/.bash_history

    If that exists then they have used ssh. This is one way of telling.
     
  3. kcdworks

    kcdworks Well-Known Member

    Joined:
    Jul 28, 2002
    Messages:
    186
    Likes Received:
    0
    Trophy Points:
    16
    Thanks very much!
     
  4. roman

    roman Well-Known Member
    PartnerNOC

    Joined:
    Feb 13, 2002
    Messages:
    56
    Likes Received:
    0
    Trophy Points:
    6
    bash history can be removed by the user and or altered, the best way is to use the "last" command to review who has logged in via shell. You can also point the last command with the -f flag to any archived wtmp files you may have... The wtmp files keeps track of all ftp/telnet/ssh sessions..
     
Loading...

Share This Page