Honeypot attack session (period 2024), commands issued:
chmod +x ./.1311806012604972093/sshd;nohup ./.1311806012604972093/sshd 125.124.179.148 154.195.67.129 175.43.70.76 106.225.229.4 125.122.23.150 27.222.11.184 222.186.42.113 15.206.79.116 105.96.26.26 36.249.107.46 180.163.61.238 154.126.176.254 102.223.72.166 219.154.235.51 103.145.145.82 170.84.39.236 79.120.74.12 167.114.114.148 157.245.137.163 109.120.135.182 124.118.249.114 183.131.22.164 183.131.186.36 143.198.142.84 183.221.214.95 192.3.153.202 192.227.148.214 202.129.205.122 120.71.147.193 183.252.11.28 59.38.100.77 111.225.216.99 125.124.199.57 185.175.44.159 36.103.178.190 38.7.199.161 103.244.80.196 163.5.194.20 221.181.168.32 152.89.170.200 173.212.202.192 186.233.119.15 144.126.132.126 77.91.84.247 172.245.79.216 47.236.106.83 51.159.17.182 185.22.65.186 14.116.213.236 180.100.197.151 211.37.174.239 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter