Honeypot attack session (period 2024), commands issued:
sh
shell
enable
system
ping; sh
nan
/bin/busybox cat /proc/self/exe || cat /proc/self/exe
./oinasf; dd if=/proc/self/exe bs=22 count=1 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;

MITRE ATT&CK techniques observed:
T1059 Command and Scripting Interpreter
T1016 System Network Configuration Discovery
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery