Honeypot attack session (period 2024), commands issued:
ifconfig 
uname -a
cat /proc/cpuinfo
grep [Mm]iner
ps 
ps -ef
ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
cat -n
echo Hi
/ip cloud print
ifconfig
ps | grep '[Mm]iner'
ps -ef | grep '[Mm]iner'
echo Hi | cat -n

MITRE ATT&CK techniques observed:
T1016 System Network Configuration Discovery
T1087 Account Discovery
T1083 File and Directory Discovery
T1057 Process Discovery
T1083 File and Directory Discovery
T1059 Command and Scripting Interpreter
T1016 System Network Configuration Discovery
T1424 Process Discovery
T1059 Command and Scripting Interpreter