Return-path: <>
Envelope-to: suanchonac@mail.lnwhostname.com
Delivery-date: Thu, 04 Sep 2025 20:09:06 +0700
Received: from mail by mail.lnwhostname.com with local (Exim 4.92)
	id 1uu9i5-00079B-5r
	for suanchonac@mail.lnwhostname.com; Thu, 04 Sep 2025 20:09:06 +0700
X-Failed-Recipients: loggershell443@gmail.com
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@mail.lnwhostname.com>
To: suanchonac@mail.lnwhostname.com
Content-Type: multipart/report; report-type=delivery-status; boundary=1756991345-eximdsn-1041887297
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uu9i5-00079B-5r@mail.lnwhostname.com>
Date: Thu, 04 Sep 2025 20:09:05 +0700

--1756991345-eximdsn-1041887297
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  loggershell443@gmail.com
    host gmail-smtp-in.l.google.com [142.250.4.26]
    SMTP error from remote mail server after pipelined end of data:
    550-5.7.26 Your email has been blocked because the sender is unauthenticated.
    550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM.
    550-5.7.26
    550-5.7.26  Authentication results:
    550-5.7.26  DKIM = did not pass
    550-5.7.26  SPF [mail.lnwhostname.com] with ip:
    [122.155.167.50] = did not pass
    550-5.7.26
    550-5.7.26  For instructions on setting up authentication, go to
    550 5.7.26  https://support.google.com/mail/answer/81126#authentication 41be03b00d2f7-b4cd347ddb5si11824021a12.904 - gsmtp

--1756991345-eximdsn-1041887297
Content-type: message/delivery-status

Reporting-MTA: dns; mail.lnwhostname.com

Action: failed
Final-Recipient: rfc822;loggershell443@gmail.com
Status: 5.0.0
Remote-MTA: dns; gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550-5.7.26 Your email has been blocked because the sender is unauthenticated.
 550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM.
 550-5.7.26
 550-5.7.26  Authentication results:
 550-5.7.26  DKIM = did not pass
 550-5.7.26  SPF [mail.lnwhostname.com] with ip: [122.155.167.50] = did not pass
 550-5.7.26
 550-5.7.26  For instructions on setting up authentication, go to
 550 5.7.26  https://support.google.com/mail/answer/81126#authentication 41be03b00d2f7-b4cd347ddb5si11824021a12.904 - gsmtp

--1756991345-eximdsn-1041887297
Content-type: message/rfc822

Return-path: <suanchonac@mail.lnwhostname.com>
Received: from suanchonac by mail.lnwhostname.com with local (Exim 4.92)
	(envelope-from <suanchonac@mail.lnwhostname.com>)
	id 1uu9i3-000796-1U
	for loggershell443@gmail.com; Thu, 04 Sep 2025 20:09:03 +0700
To: loggershell443@gmail.com
Subject: Logged Shell Yanz
X-PHP-Originating-Script: 1128:wp-login.php(2) : eval()'d code(1) : eval()'d code
Message-Id: <E1uu9i3-000796-1U@mail.lnwhostname.com>
From: suanchonac@mail.lnwhostname.com
Date: Thu, 04 Sep 2025 20:09:03 +0700

[ 188.166.239.32 ]

Logged Shell http://www2.suanchon.ac.th/wp-admin/maint/wp-login.php Yanz Password () SpawnedShell 
http://www2.suanchon.ac.th/wp-includes/rest-api/about.php	http://www2.suanchon.ac.th/wp-includes/rest-api/about.php7	http://www2.suanchon.ac.th/wp-includes/rest-api/wp-login.php	http://www2.suanchon.ac.th/wp-includes/rest-api/alfa-rex.php7	http://www2.suanchon.ac.th/wp-includes/rest-api/alfa-rex.php56	http://www2.suanchon.ac.th/wp-includes/rest-api/alfa-rex.php8	http://www2.suanchon.ac.th/wp-includes/rest-api/alfa-rex.php	 *IP Address : [ 188.166.239.32 ]

--1756991345-eximdsn-1041887297--