HEX
Server: Apache/2
System: Linux mail.lnwhostname.com 3.10.0-1160.45.1.el7.x86_64 #1 SMP Wed Oct 13 17:20:51 UTC 2021 x86_64
User: suanchonac (1128)
PHP: 7.4.25
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
$ pwd: /home/suanchonac/Maildir/new/
Upload Files
File: /home/suanchonac/Maildir/new/1756984625.H284534P11711.mail.lnwhostname.com
Return-path: <>
Envelope-to: suanchonac@mail.lnwhostname.com
Delivery-date: Thu, 04 Sep 2025 18:17:05 +0700
Received: from mail by mail.lnwhostname.com with local (Exim 4.92)
	id 1uu7xg-00032p-5W
	for suanchonac@mail.lnwhostname.com; Thu, 04 Sep 2025 18:17:04 +0700
X-Failed-Recipients: loggershell443@gmail.com
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@mail.lnwhostname.com>
To: suanchonac@mail.lnwhostname.com
Content-Type: multipart/report; report-type=delivery-status; boundary=1756984624-eximdsn-43948351
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uu7xg-00032p-5W@mail.lnwhostname.com>
Date: Thu, 04 Sep 2025 18:17:04 +0700

--1756984624-eximdsn-43948351
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  loggershell443@gmail.com
    host gmail-smtp-in.l.google.com [172.217.194.27]
    SMTP error from remote mail server after pipelined end of data:
    550-5.7.26 Your email has been blocked because the sender is unauthenticated.
    550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM.
    550-5.7.26
    550-5.7.26  Authentication results:
    550-5.7.26  DKIM = did not pass
    550-5.7.26  SPF [mail.lnwhostname.com] with ip:
    [122.155.167.50] = did not pass
    550-5.7.26
    550-5.7.26  For instructions on setting up authentication, go to
    550 5.7.26  https://support.google.com/mail/answer/81126#authentication d2e1a72fcca58-77283db95basi2984601b3a.171 - gsmtp

--1756984624-eximdsn-43948351
Content-type: message/delivery-status

Reporting-MTA: dns; mail.lnwhostname.com

Action: failed
Final-Recipient: rfc822;loggershell443@gmail.com
Status: 5.0.0
Remote-MTA: dns; gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550-5.7.26 Your email has been blocked because the sender is unauthenticated.
 550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM.
 550-5.7.26
 550-5.7.26  Authentication results:
 550-5.7.26  DKIM = did not pass
 550-5.7.26  SPF [mail.lnwhostname.com] with ip: [122.155.167.50] = did not pass
 550-5.7.26
 550-5.7.26  For instructions on setting up authentication, go to
 550 5.7.26  https://support.google.com/mail/answer/81126#authentication d2e1a72fcca58-77283db95basi2984601b3a.171 - gsmtp

--1756984624-eximdsn-43948351
Content-type: message/rfc822

Return-path: <suanchonac@mail.lnwhostname.com>
Received: from suanchonac by mail.lnwhostname.com with local (Exim 4.92)
	(envelope-from <suanchonac@mail.lnwhostname.com>)
	id 1uu7xd-00032j-Me
	for loggershell443@gmail.com; Thu, 04 Sep 2025 18:17:01 +0700
To: loggershell443@gmail.com
Subject: Logged Shell Yanz
X-PHP-Originating-Script: 1128:index.php(2) : eval()'d code(1) : eval()'d code
Message-Id: <E1uu7xd-00032j-Me@mail.lnwhostname.com>
From: suanchonac@mail.lnwhostname.com
Date: Thu, 04 Sep 2025 18:17:01 +0700

[ 111.90.181.2 ]

Logged Shell http://suanchon.ac.th/career/images/ Yanz Password () SpawnedShell 
http://suanchon.ac.th/www2/wp-admin/maint/about.php	http://suanchon.ac.th/www2/wp-admin/maint/about.php7	http://suanchon.ac.th/www2/wp-admin/maint/wp-login.php	http://suanchon.ac.th/www2/wp-admin/maint/alfa-rex.php7	http://suanchon.ac.th/www2/wp-admin/maint/alfa-rex.php56	http://suanchon.ac.th/www2/wp-admin/maint/alfa-rex.php8	http://suanchon.ac.th/www2/wp-admin/maint/alfa-rex.php	 *IP Address : [ 111.90.181.2 ]

--1756984624-eximdsn-43948351--
@ Telegram