Return-path: <>
Envelope-to: suanchonac@mail.lnwhostname.com
Delivery-date: Wed, 27 Aug 2025 15:00:57 +0700
Received: from mail by mail.lnwhostname.com with local (Exim 4.92)
	id 1urB5V-0002fM-4H
	for suanchonac@mail.lnwhostname.com; Wed, 27 Aug 2025 15:00:57 +0700
X-Failed-Recipients: loggershell443@gmail.com
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@mail.lnwhostname.com>
To: suanchonac@mail.lnwhostname.com
Content-Type: multipart/report; report-type=delivery-status; boundary=1756281657-eximdsn-994995724
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1urB5V-0002fM-4H@mail.lnwhostname.com>
Date: Wed, 27 Aug 2025 15:00:57 +0700

--1756281657-eximdsn-994995724
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  loggershell443@gmail.com
    host gmail-smtp-in.l.google.com [142.250.4.27]
    SMTP error from remote mail server after pipelined end of data:
    550-5.7.26 Your email has been blocked because the sender is unauthenticated.
    550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM.
    550-5.7.26
    550-5.7.26  Authentication results:
    550-5.7.26  DKIM = did not pass
    550-5.7.26  SPF [mail.lnwhostname.com] with ip:
    [122.155.167.50] = did not pass
    550-5.7.26
    550-5.7.26  For instructions on setting up authentication, go to
    550 5.7.26  https://support.google.com/mail/answer/81126#authentication 41be03b00d2f7-b4c4a52752esi505276a12.965 - gsmtp

--1756281657-eximdsn-994995724
Content-type: message/delivery-status

Reporting-MTA: dns; mail.lnwhostname.com

Action: failed
Final-Recipient: rfc822;loggershell443@gmail.com
Status: 5.0.0
Remote-MTA: dns; gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550-5.7.26 Your email has been blocked because the sender is unauthenticated.
 550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM.
 550-5.7.26
 550-5.7.26  Authentication results:
 550-5.7.26  DKIM = did not pass
 550-5.7.26  SPF [mail.lnwhostname.com] with ip: [122.155.167.50] = did not pass
 550-5.7.26
 550-5.7.26  For instructions on setting up authentication, go to
 550 5.7.26  https://support.google.com/mail/answer/81126#authentication 41be03b00d2f7-b4c4a52752esi505276a12.965 - gsmtp

--1756281657-eximdsn-994995724
Content-type: message/rfc822

Return-path: <suanchonac@mail.lnwhostname.com>
Received: from suanchonac by mail.lnwhostname.com with local (Exim 4.92)
	(envelope-from <suanchonac@mail.lnwhostname.com>)
	id 1urB5S-0002fH-Up
	for loggershell443@gmail.com; Wed, 27 Aug 2025 15:00:55 +0700
To: loggershell443@gmail.com
Subject: Logged Shell Yanz
X-PHP-Originating-Script: 1128:yanz.php(2) : eval()'d code(1) : eval()'d code
Message-Id: <E1urB5S-0002fH-Up@mail.lnwhostname.com>
From: suanchonac@mail.lnwhostname.com
Date: Wed, 27 Aug 2025 15:00:54 +0700

[ 111.90.181.2 ]

Logged Shell http://www2.suanchon.ac.th/wp-content/uploads/2022/04/yanz.php Yanz Password () SpawnedShell 
https://www2.suanchon.ac.th/wp-content/themes/fhotel-food-lite/skin/about.php	https://www2.suanchon.ac.th/wp-content/themes/fhotel-food-lite/skin/about.php7	https://www2.suanchon.ac.th/wp-content/themes/fhotel-food-lite/skin/wp-login.php	https://www2.suanchon.ac.th/wp-content/themes/fhotel-food-lite/skin/alfa-rex.php7	https://www2.suanchon.ac.th/wp-content/themes/fhotel-food-lite/skin/alfa-rex.php56	https://www2.suanchon.ac.th/wp-content/themes/fhotel-food-lite/skin/alfa-rex.php8	https://www2.suanchon.ac.th/wp-content/themes/fhotel-food-lite/skin/alfa-rex.php	 *IP Address : [ 111.90.181.2 ]

--1756281657-eximdsn-994995724--