shell监控Linux服务器登录

监控外网58.215.50.37内网10.176.164.112这台服务器,如果不是221.226.93.118这个ip登录,就记录登陆日期和用户

#/bin/sh
log="/job/jk/log.txt"
host=MySQLMaster-o-58.215.50.37-i-10.176.164.112
a=0

while :;
do
usessh=$(/usr/bin/who|grep -v '221.226.93.118'|wc -l)

if [ ${usessh} -ne $a ]; then
   a=${usessh}
   echo "`date +"%y-%m-%d %H:%M:%S"`" >> ${log}
   echo "`who`" >> ${log}
   echo "-----" >> ${log}
   msg="there%20is%20${usessh}%20person%20ssh%20$host"
  
  /usr/bin/wget --spider -T 5 -t 1 http://xxx.xxx.xxx.xxx:80/sms/api.php?t=2\&msg="$msg"
fi
sleep 10
done