Honeypot attack session (period 2024), commands issued:
chmod +x ./.1381260750281823750/sshd;nohup ./.1381260750281823750/sshd 159.65.20.186 80.85.242.193 60.13.37.55 185.240.151.108 38.47.189.70 114.236.138.231 152.32.172.190 18.60.159.165 51.83.129.53 101.89.177.169 64.225.76.134 125.220.195.10 79.120.74.12 154.12.187.10 140.249.204.169 54.151.57.172 183.252.11.28 182.151.25.46 23.145.168.126 183.131.22.164 185.240.151.102 18.144.177.143 154.16.171.33 208.65.84.175 140.246.77.210 208.65.84.165 117.250.10.204 202.5.16.82 61.220.20.118 185.8.174.96 13.42.129.207 85.133.151.219 121.140.85.73 211.154.194.21 193.169.244.205 183.131.22.188 106.116.209.107 175.47.180.25 5.180.24.99 134.209.0.27 183.36.36.195 154.126.176.254 161.97.104.115 111.180.193.157 210.209.186.117 112.16.228.85 124.118.249.114 45.251.115.48 110.42.98.219 13.57.35.178 23.94.136.106 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter