#!/bin/sh########################################################################## File Name: Login-alert.sh# Author: Jason# Email: master#deamwork.com# Created Time: Tue Jul 21 2015 21:23:16 PM CST ##########################################################################require jq#wget http://stedolan.github.io/jq/download/linux64/jq -O /usr/local/bin/jq#chmod +x /usr/local/bin/jq#if error, please # following one#PATH=/usr/local/nginx/sbin:/usr/local/php/bin:/usr/local/mysql/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin#Geo2IP by Legion(http://www.dwhd.org/)eval `curl -s "http://ip.taobao.com/service/getIpInfo.php?ip=${SSH_CLIENT%% *}" | jq . | awk -F':|[ ]+|"' '{if($3~/^(country|area|region|city|isp)$/){print $3"="$7}}'`#html mail contentcat >> mail-no-base64.html <<EOF#請自行準備郵件模板，以下為可能用到的變量#輸出主機名 `hostname`#輸出登錄端口 ${SSH_CLIENT##* }#輸出登錄來源IP ${SSH_CLIENT%% *}#輸出IP地址歸屬地 {country}_${area}_${region}_${city}_${isp}#輸出登錄時間 `date`EOF#Base64 Encodingbase64 mail-no-base64.html > mail-base64.html#使用Sendmail#sendmail -t >/dev/null 2>&1 <<EOF#to:example@example.com#from:Example<example@example.com>#subject:[`hostname`]服務器登錄告警#`cat mail-no-base64.html`#EOF#使用postfix#cat >> mail.php <<EOF#<?php#/$to = "example@example.com";#/$subject = "[`hostname`]服務器登錄告警";#/$message = "`cat mail-base64.html`";#/$headers = "MIME-Version: 1.0" . "/r/n";#/$headers .= "Content-Type: text/html; charset=/"utf-8/"" . "/r/n";#/$headers .= "Content-Transfer-Encoding: base64" . "/r/n";#/$headers .= 'From: Example<example@example.com>' . "/r/n";#/$send = mail(/$to,/$subject,/$message,/$headers);#if(/$send){echo 'Mail Send Successful.';}else{echo 'Failed.';}#?>#EOF#使用 SMTP (require smtp-class.php)cat >> mail.php <<EOF<?phprequire("smtp-class.php"); /$smtpserver = "smtp.example.com";/$smtpserverport = 25;/$smtpusermail = "example@example.com";/$smtpemailto = "example@example.com";/$smtpuser = "example";/$smtppass = "password";/$mailsubject = "[`hostname`]服務器登錄告警";/$mailbody = "`cat mail-base64.html`";/$mailtype = "HTML";/$smtp = new smtp(/$smtpserver,/$smtpserverport,true,/$smtpuser,/$smtppass);/$smtp->debug = TRUE;/$smtp->sendmail(/$smtpemailto, /$smtpusermail, /$mailsubject, /$mailbody, /$mailtype); ?>EOFphp mail.phpyes y | rm mail-no-base64.html mail-base64.html mail.php

<?phpclass smtp{  /* Public Variables */  var $smtp_port;  var $time_out;  var $host_name;  var $log_file;  var $relay_host;  var $debug;  var $auth;  var $user;  var $pass;  /* Private Variables */   var $sock;  /* Constractor */  function smtp($relay_host = "", $smtp_port = 25,$auth = false,$user,$pass)  {    $this->debug = FALSE;    $this->smtp_port = $smtp_port;    $this->relay_host = $relay_host;    $this->time_out = 30; //is used in fsockopen()     $this->auth = $auth;//auth    $this->user = $user;    $this->pass = $pass;    $this->host_name = "localhost"; //is used in HELO command     $this->log_file = "";    $this->sock = FALSE;}  /* Main Function */  function sendmail($to, $from, $subject = "", $body = "", $mailtype, $cc = "", $bcc = "", $additional_headers = "")  {    $mail_from = $this->get_address($this->strip_comment($from));    $body = ereg_replace("(^|(/r/n))(/.)", "/1./3", $body);    $header .= "MIME-Version:1.0/r/n";    if($mailtype=="HTML")    {      $header .= "Content-Type: text/html; charset=/"utf-8/"" . "/r/n";      $header .= "Content-Transfer-Encoding: base64" . "/r/n";    }    $header .= "To: ".$to."/r/n";    if ($cc != "")     {      $header .= "Cc: ".$cc."/r/n";    }    $header .= "From: $from<".$from.">/r/n";    $header .= "Subject: ".$subject."/r/n";    $header .= $additional_headers;    $header .= "Date: ".date("r")."/r/n";    $header .= "X-Mailer:By TianhaiTech (PHP/".phpversion().")/r/n";    list($msec, $sec) = explode(" ", microtime());    $header .= "Message-ID: <".date("YmdHis", $sec).".".($msec*1000000).".".$mail_from.">/r/n";    $TO = explode(",", $this->strip_comment($to));    if ($cc != "")     {      $TO = array_merge($TO, explode(",", $this->strip_comment($cc)));      }    if ($bcc != "")     {      $TO = array_merge($TO, explode(",", $this->strip_comment($bcc)));    }    $sent = TRUE;    foreach ($TO as $rcpt_to)     {      $rcpt_to = $this->get_address($rcpt_to);      if (!$this->smtp_sockopen($rcpt_to))       {        $this->log_write("Error: Cannot send email to ".$rcpt_to."/n");        $sent = FALSE;        continue;      }      if ($this->smtp_send($this->host_name, $mail_from, $rcpt_to, $header, $body))       {        $this->log_write("E-mail has been sent to <".$rcpt_to.">/n");      }       else       {        $this->log_write("Error: Cannot send email to <".$rcpt_to.">/n");        $sent = FALSE;      }      fclose($this->sock);      $this->log_write("Disconnected from remote host/n");    }    return $sent;  }  /* Private Functions */  function smtp_send($helo, $from, $to, $header, $body = "")  {    if (!$this->smtp_putcmd("HELO", $helo))     {      return $this->smtp_error("sending HELO command");    }    #auth    if($this->auth)    {      if (!$this->smtp_putcmd("AUTH LOGIN", base64_encode($this->user)))       {        return $this->smtp_error("sending HELO command");      }      if (!$this->smtp_putcmd("", base64_encode($this->pass)))       {        return $this->smtp_error("sending HELO command");      }    }    if (!$this->smtp_putcmd("MAIL", "FROM:<".$from.">"))     {      return $this->smtp_error("sending MAIL FROM command");    }    if (!$this->smtp_putcmd("RCPT", "TO:<".$to.">"))     {      return $this->smtp_error("sending RCPT TO command");    }    if (!$this->smtp_putcmd("DATA"))    {      return $this->smtp_error("sending DATA command");    }    if (!$this->smtp_message($header, $body))     {      return $this->smtp_error("sending message");    }    if (!$this->smtp_eom())    {      return $this->smtp_error("sending <CR><LF>.<CR><LF> [EOM]");    }    if (!$this->smtp_putcmd("QUIT"))     {      return $this->smtp_error("sending QUIT command");    }    return TRUE;  }  function smtp_sockopen($address)  {    if ($this->relay_host == "")     {      return $this->smtp_sockopen_mx($address);    }     else    {      return $this->smtp_sockopen_relay();    }  }  function smtp_sockopen_relay()  {    $this->log_write("Trying to ".$this->relay_host.":".$this->smtp_port."/n");    $this->sock = @fsockopen($this->relay_host, $this->smtp_port, $errno, $errstr, $this->time_out);    if (!($this->sock && $this->smtp_ok()))     {      $this->log_write("Error: Cannot connenct to relay host ".$this->relay_host."/n");      $this->log_write("Error: ".$errstr." (".$errno.")/n");      return FALSE;    }    $this->log_write("Connected to relay host ".$this->relay_host."/n");    return TRUE;;  }  function smtp_sockopen_mx($address)  {    $domain = ereg_replace("^.+@([^@]+)$", "/1", $address);    if (!@getmxrr($domain, $MXHOSTS))     {      $this->log_write("Error: Cannot resolve MX /"".$domain."/"/n");      return FALSE;    }    foreach ($MXHOSTS as $host)     {      $this->log_write("Trying to ".$host.":".$this->smtp_port."/n");      $this->sock = @fsockopen($host, $this->smtp_port, $errno, $errstr, $this->time_out);      if (!($this->sock && $this->smtp_ok()))       {        $this->log_write("Warning: Cannot connect to mx host ".$host."/n");        $this->log_write("Error: ".$errstr." (".$errno.")/n");        continue;      }      $this->log_write("Connected to mx host ".$host."/n");      return TRUE;    }    $this->log_write("Error: Cannot connect to any mx hosts (".implode(", ", $MXHOSTS).")/n");    return FALSE;  }  function smtp_message($header, $body)  {    fputs($this->sock, $header."/r/n".$body);    $this->smtp_debug("> ".str_replace("/r/n", "/n"."> ", $header."/n> ".$body."/n> "));    return TRUE;  }  function smtp_eom()  {    fputs($this->sock, "/r/n./r/n");    $this->smtp_debug(". [EOM]/n");    return $this->smtp_ok();  }  function smtp_ok()  {    $response = str_replace("/r/n", "", fgets($this->sock, 512));    $this->smtp_debug($response."/n");    if (!ereg("^[23]", $response))     {      fputs($this->sock, "QUIT/r/n");      fgets($this->sock, 512);      $this->log_write("Error: Remote host returned /"".$response."/"/n");      return FALSE;    }    return TRUE;  }  function smtp_putcmd($cmd, $arg = "")  {    if ($arg != "")     {      if($cmd=="")       {        $cmd = $arg;      }      else      {        $cmd = $cmd." ".$arg;      }    }    fputs($this->sock, $cmd."/r/n");    $this->smtp_debug("> ".$cmd."/n");    return $this->smtp_ok();  }  function smtp_error($string)  {    $this->log_write("Error: Error occurred while ".$string."./n");    return FALSE;  }  function log_write($message)  {    $this->smtp_debug($message);    if ($this->log_file == "")    {      return TRUE;    }    $message = date("M d H:i:s ").get_current_user()."[".getmypid()."]: ".$message;    if (!@file_exists($this->log_file) || !($fp = @fopen($this->log_file, "a")))     {      $this->smtp_debug("Warning: Cannot open log file /"".$this->log_file."/"/n");      return FALSE;;    }    flock($fp, LOCK_EX);    fputs($fp, $message);    fclose($fp);    return TRUE;  }  function strip_comment($address)  {    $comment = "/([^()]*/)";    while (ereg($comment, $address))     {      $address = ereg_replace($comment, "", $address);    }    return $address;  }  function get_address($address)  {    $address = ereg_replace("([ /t/r/n])+", "", $address);    $address = ereg_replace("^.*<(.+)>.*$", "/1", $address);    return $address;  }  function smtp_debug($message)  {    if ($this->debug)     {      echo $message;    }  }}