!/bin/bash
data=( `ps aux | grep -i dropbe3ar | awk '{print $2}'`);
echo "#########################";
echo "#Checking Dropbear login#";
echo "#########################";
for PID in "${data[@]}"
do
#echo "check $PID";
NUM=`cat /var/log/secure | grep -i dropbear | grep -i "Password auth succeeded" | grep "dropbear\[$PID\]" | wc -l`;
IP=`cat /var/log/secure | grep -i dropbear | grep -i "Password auth succeeded" | grep "dropbear\[$PID\]" | awk '{print $12}'`;
USER=`cat /var/log/secure | grep -i dropbear | grep -i "Password auth succeeded" | grep "dropbear\[$PID\]" | awk '{print $10}'`;
if [ $NUM -eq 1 ]; then
echo "$PID - $USER - $IP";
fi
done
echo "=========================";
echo "#####SILENT NETWORK|#####";
echo "=========================";
