1.需要在/etc/ssh/目錄下面創建一個名為sshrc的文件，執行權限可給可不給，那麽在有人通過ssh遠程登錄這臺服務器的時候，這段腳本就會被執行

#!/bin/bash
###V1-2018-10-24###

CropID=‘xxxxxxxxxx‘
Secret=‘xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx‘
GURL="https://qyapi.weixin.qq.com/cgi-bin/gettoken?corpid=$CropID&corpsecret=$Secret"
#Gtoken=$(/usr/bin/curl  $GURL -H "
 
DNT: 1" -H "Accept-Encoding: gzip, deflate" -H "Accept-Language: zh-CN,zh;q=0.8" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 BIDUBrowser/8.1 Safari/537.36" -H "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8" -H "
 
X-DevTools-Emulate-Network-Conditions-Client-Id: B546FC80-414C-403F-95F0-EB0F70E58EF7" -H "Connection: keep-alive" -H "Cache-Control: max-age=0" --compressed | awk -F \" ‘{print $4}‘)
Gtoken=$(/usr/bin/curl -s -G $GURL | awk -F\" ‘{print $10}‘)
PURL="https://qyapi.weixin.qq.com/cgi-bin/message/send?access_token=$Gtoken
 
"
function body() {
        local int appId=1000002
        #local userId=$1
        local userId="LinYouYi"
        local partyId=2
        local msg=‘有用戶上線請註意:\n主機名：‘`hostname`‘\n主機ip：‘`curl ifconfig.me`‘\n登錄用戶：‘`whoami`‘\n登錄時間：‘`date`
        printf ‘{\n‘
        printf ‘\t"touser":"‘"$userId"\"",\n"
        printf ‘\t"toparty":"‘"$partyId"\"",\n"
        printf ‘\t"msgtype": "text",‘"\n"
        printf ‘\t"agentid":"‘"$appId"\"",\n"
        printf ‘\t"text":{\n‘
        printf ‘\t\t"content":"‘"$msg"\"
        printf ‘\n\t},\n‘
        printf ‘\t"safe":"0"\n‘
        printf ‘}\n‘
}
#/usr/bin/curl --data-ascii "$(body $1)" $PURL
/usr/bin/curl --data-ascii "$(body)" $PURL

使用shell腳本監控用戶登陸服務器並發送提示信息給微信