Same thing happened to me, installed the script on my server, and it survived a full 3 hours before somebody emptied my wallet live and learn.

It all went here:

1Sy6mQZyMsUkjA1c2acvNQyGeRGe1QgmU

IP:   46.40.2.132
Decimal:   774374020
Hostname:   132-2-40-46.cpe.sattrakt.net
ASN:   41897
ISP:   Sat-Trakt D.O.O.
Organization:   Sat-Trakt D.O.O.
Services:   None detected
Type:    Broadband
Assignment:   Static IP
Blacklist:   
Continent:   Europe
Country:   Serbia
State/Region:   North Banat
City:   Martonos
Latitude:   46.1167  (46° 7′ 0.12″ N)
Longitude:   20.05  (20° 3′ 0.00″ E)