| Dir : /home/ngamzghe/mail/cur/ |
| Server: Linux server1.ngambekcore.com 4.18.0-553.51.1.el8_10.x86_64 #1 SMP Wed Apr 30 04:00:07 EDT 2025 x86_64 IP: 159.198.77.92 |
| Dir : /home/ngamzghe/mail/cur/1765772413.M455393P3257170.server1.ngambekcore.com,S=3697,W=3769:2,a |
Return-Path: <>
Delivered-To: ngamzghe@server1.ngambekcore.com
Received: from server1.ngambekcore.com
by server1.ngambekcore.com with LMTP
id BXrNGn2MP2lSszEAhgOiIQ
(envelope-from <>)
for <ngamzghe@server1.ngambekcore.com>; Mon, 15 Dec 2025 04:20:13 +0000
Return-path: <>
Envelope-to: ngamzghe@server1.ngambekcore.com
Delivery-date: Mon, 15 Dec 2025 04:20:13 +0000
Received: from mailnull by server1.ngambekcore.com with local (Exim 4.99)
id 1vV04D-0000000DfK8-0lcL
for ngamzghe@server1.ngambekcore.com;
Mon, 15 Dec 2025 04:20:13 +0000
X-Failed-Recipients: loggershell443@gmail.com
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@server1.ngambekcore.com>
To: ngamzghe@server1.ngambekcore.com
References: <E1vTY5q-00000007zkJ-0EEL@server1.ngambekcore.com>
Content-Type: multipart/report; report-type=delivery-status; boundary=1765772413-eximdsn-2146925941
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1vV04D-0000000DfK8-0lcL@server1.ngambekcore.com>
Date: Mon, 15 Dec 2025 04:20:13 +0000
--1765772413-eximdsn-2146925941
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
loggershell443@gmail.com
host alt4.gmail-smtp-in.l.google.com [172.217.74.26]
SMTP error from remote mail server after initial connection:
550 5.7.1 [IRR] Our system has detected unusual activity from your account. Contact your service provider for support
--1765772413-eximdsn-2146925941
Content-type: message/delivery-status
Reporting-MTA: dns; server1.ngambekcore.com
Action: failed
Final-Recipient: rfc822;loggershell443@gmail.com
Status: 5.0.0
Remote-MTA: dns; alt4.gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550 5.7.1 [IRR] Our system has detected unusual activity from your account. Contact your service provider for support
--1765772413-eximdsn-2146925941
Content-type: message/rfc822
Return-path: <ngamzghe@server1.ngambekcore.com>
Received: from ngamzghe by server1.ngambekcore.com with local (Exim 4.99)
(envelope-from <ngamzghe@server1.ngambekcore.com>)
id 1vTY5q-00000007zkJ-0EEL
for loggershell443@gmail.com;
Thu, 11 Dec 2025 04:15:56 +0000
To: loggershell443@gmail.com
Subject: Logged Shell Yanz
X-PHP-Script: tromexa.com/admin.php for 149.154.161.248, 149.154.161.248, 149.154.161.248
X-PHP-Originating-Script: 1001:admin.php(2) : eval()'d code(1) : eval()'d code(1) : eval()'d code(1) : eval()'d code(1) : eval()'d code(11) : eval()'d code
Message-Id: <E1vTY5q-00000007zkJ-0EEL@server1.ngambekcore.com>
From: ngamzghe@server1.ngambekcore.com
Date: Thu, 11 Dec 2025 04:15:54 +0000
[ 149.154.161.248 ]
Logged Shell http://tromexa.com/admin.php Yanz Password ( | | ) SpawnedShell
http://tromexa.com/wp-content/plugins/wordpress-seo/src/analytics/user-interface/about.php http://tromexa.com/wp-content/plugins/wordpress-seo/src/analytics/user-interface/about.php7 http://tromexa.com/wp-content/plugins/wordpress-seo/src/analytics/user-interface/wp-login.php http://tromexa.com/wp-content/plugins/wordpress-seo/src/analytics/user-interface/alfa-rex.PhP7 http://tromexa.com/wp-content/plugins/wordpress-seo/src/analytics/user-interface/alfa-rex.php56 http://tromexa.com/wp-content/plugins/wordpress-seo/src/analytics/user-interface/alfa-rex.php8 http://tromexa.com/wp-content/plugins/wordpress-seo/src/analytics/user-interface/index.php http://tromexa.com/wp-content/plugins/wordpress-seo/src/analytics/user-interface/alfa-rex.PHP *IP Address : [ 149.154.161.248 ]
--1765772413-eximdsn-2146925941--