# incident

plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 20.212.169.175
country_id: 1880251
description:
[2026-06-30 21:14:46 +0000] info [cpaneld] 20.212.169.175 - web_tv "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user web_tv (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 39.100.91.113
country_id: 1814991
description:
Jun 30 21:14:23 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 39.100.91.113 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 31.134.99.130
country_id: 3057568
description:
Jun 30 21:17:38 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 31.134.99.130 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:18:10 ns5 kernel: php-fpm[2027351]: segfault at 7fff7bf4dfa8 ip 000000000072ad55 sp 00007fff7bf4dfa8 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - contact@daula.tg [06/30/2026:21:18:37 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: contact@daula.tg


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 102.64.152.216
country_id: 2363686
description:
[2026-06-30 21:18:06 +0000] info [cpaneld] 102.64.152.216 NEW uljcqiuy:44M9hhu5dwec415T address=102.64.152.216,app=cpaneld,creator=root,method=handle_form_login,path=loadsession:uljcqiuy:3n94MbVrwzvIxFWo:create_user_session,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-30 21:18:49 +0000] info [cpaneld] 167.99.236.81 - ayhhhyhk "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayhhhyhk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-30 21:19:51 +0000] info [cpaneld] 167.99.236.81 - iyfttuec "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user iyfttuec (has_cpuser_file failed)


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:21:30 ns5 kernel: php-fpm[2027711]: segfault at 7fff7bf4dfa8 ip 000000000072ad55 sp 00007fff7bf4dfa8 error 6 in php-fpm[400000+4ad000]


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 104.28.243.188
country_id: 3017382
description:
Denial of Service (DoS) attack was discovered from 104.28.243.188: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 38.65.137.106
country_id: 3996063
description:
Jun 30 21:21:54 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 38.65.137.106 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:22:03 ns5 kernel: php-fpm[2027712]: segfault at 7fff7bf4dfa8 ip 000000000072ad55 sp 00007fff7bf4dfa8 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 38.65.137.106
country_id: 3996063
description:
Jun 30 21:22:01 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 38.65.137.106 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:24:45 ns5 kernel: php-fpm[2028430]: segfault at 7fff7bf4dfa8 ip 000000000072ad55 sp 00007fff7bf4dfa8 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.111.92.123
country_id: 6252001
description:
[2026-06-30 21:24:45 +0000] info [cpaneld] 64.111.92.123 - k.eklou "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user k.eklou (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 31.134.11.230
country_id: 241170
domain: lasnb.com
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77141095r77142192||MV:21-25.31.134.11.230||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.172.196.4
country_id: 1880251
description:
43.172.196.4 - - [30/Jun/2026:21:25:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6777547&pdata=https%253A%252F%252Fmacite.tg%252F%253Fp%253D31344&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782854722 HTTP/1.1" 404 561 macite.tg "https://macite.tg/?p=31344" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.172.196.4


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 31.134.9.102
country_id: 241170
domain: lasnb.com
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77141095r77142192||MV:21-25.31.134.9.102||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 45.136.27.218
country_id: 6252001
domain: lasnb.com
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77141095r77142192||MV:21-25.45.136.27.218||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 31.134.1.115
country_id: 241170
domain: lasnb.com
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77141095r77142192||MV:21-25.31.134.1.115||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 203.147.140.203
country_id: 1831722
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:203.147.140.203||TA:203.147.140.203||


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:29:18 ns5 kernel: php-fpm[2031119]: segfault at 7ffd8d9a0f20 ip 0000000000729c3b sp 00007ffd8d9a0f10 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 52.200.114.158
country_id: 6252001
description:
[2026-06-30 21:30:32 +0000] info [cpaneld] 52.200.114.158 - whmcsadmin "POST //login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user whmcsadmin (has_cpuser_file failed)


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:31:03 ns5 kernel: php-fpm[2031421]: segfault at 7ffd8d9a0f20 ip 0000000000729c3b sp 00007ffd8d9a0f10 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.144.35.224
country_id: 1880251
description:
[2026-06-30 21:31:11 +0000] info [cpaneld] 168.144.35.224 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 20.212.169.175
country_id: 1880251
description:
[2026-06-30 21:32:00 +0000] info [cpaneld] 20.212.169.175 - netmast "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user netmast (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 162.244.146.177
country_id: 6252001
domain: www.letabloid.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:21-33.162.244.146.177||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 162.244.146.177
country_id: 6252001
domain: www.letabloid.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:mckinleycuningha||Email:lesterma1996@gmx.com||RSV:8.21||T:APACHE||


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:34:05 ns5 kernel: php-fpm[2032671]: segfault at 7ffd8d9a0f20 ip 0000000000729c3b sp 00007ffd8d9a0f10 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:35:49 ns5 kernel: php-fpm[2033595]: segfault at 7ffd8d9a0f20 ip 0000000000729c3b sp 00007ffd8d9a0f10 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:36:09 ns5 kernel: php-fpm[2033709]: segfault at 7ffd8d9a0f20 ip 0000000000729c3b sp 00007ffd8d9a0f10 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 51.83.5.75
country_id: 3017382
description:
[2026-06-30 21:35:59 +0000] info [cpaneld] 51.83.5.75 NEW wcnyaruu:MH3ZH0JtSdVw3mnN address=51.83.5.75,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:37:03 ns5 kernel: php-fpm[2033851]: segfault at 7ffd8d9a0f20 ip 0000000000729c3b sp 00007ffd8d9a0f10 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-30 21:37:53 +0000] info [cpaneld] 167.99.236.81 - pyllprbc "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user pyllprbc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.144.35.224
country_id: 1880251
description:
[2026-06-30 21:37:58 +0000] info [cpaneld] 168.144.35.224 - a.kesso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.kesso (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 138.197.93.235
country_id: 6252001
description:
Jun 30 21:37:14 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 138.197.93.235 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.203.50.35
country_id: 2963597
description:
Jun 30 21:37:24 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.203.50.35 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:38:57 ns5 kernel: php-fpm[2035074]: segfault at 7ffd8d9a0f20 ip 0000000000729c3b sp 00007ffd8d9a0f10 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-30 21:38:34 +0000] info [cpaneld] 167.99.236.81 - rsgwljmi "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rsgwljmi (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.124.94.148
country_id: 3469034
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/regards-croises-sur-la-diaspora-renforcer-la-prise-de-conscience-du-role-des-diasporas-dans-le-developpement-des-pays-dorigine/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.124.94.148
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/regards-croises-sur-la-diaspora-renforcer-la-prise-de-conscience-du-role-des-diasporas-dans-le-developpement-des-pays-dorigine/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:40:58 ns5 kernel: php-fpm[2037329]: segfault at 7ffd8d9a0f20 ip 0000000000729c3b sp 00007ffd8d9a0f10 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 172.236.239.60
country_id: 6252001
description:
[2026-06-30 21:40:47 +0000] info [cpaneld] 172.236.239.60 NEW wcnyaruu:g_NEj1orjFm66Arz address=172.236.239.60,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 20.212.169.175
country_id: 1880251
description:
[2026-06-30 21:40:55 +0000] info [cpaneld] 20.212.169.175 - a.mathey "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.mathey (has_cpuser_file failed)


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:41:57 ns5 kernel: php-fpm[2037562]: segfault at 7ffd8d9a0f20 ip 0000000000729c3b sp 00007ffd8d9a0f10 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.79.150.207
country_id: 6252001
description:
[2026-06-30 21:41:57 +0000] info [whostmgrd] 45.79.150.207 - wcnyaruu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: login attempt to whm by a non-reseller/root


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 45.79.150.207
country_id: 6252001
description:
[2026-06-30 21:41:04 +0000] info [cpaneld] 45.79.150.207 NEW wcnyaruu:7gEKS6VUxfVZWwXD address=45.79.150.207,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:42:02 ns5 kernel: php-fpm[2037845]: segfault at 7ffd8d9a0f20 ip 0000000000729c3b sp 00007ffd8d9a0f10 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:44:13 ns5 kernel: php-fpm[2038866]: segfault at 7ffd8d9a0f20 ip 0000000000729c3b sp 00007ffd8d9a0f10 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.174
country_id: 1880251
description:
47.128.121.174 - - [30/Jun/2026:21:45:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10195654&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252Famadou-bah-oury-premier-ministre-de-la-guinee%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782855923 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/tag/amadou-bah-oury-premier-ministre-de-la-guinee/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.174


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.181.80
country_id: 1880251
description:
43.173.181.80 - - [30/Jun/2026:21:47:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9802140&pdata=https%253A%252F%252Fmacite.tg%252F%253Fp%253D24730&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782856058 HTTP/1.1" 404 561 macite.tg "https://macite.tg/?p=24730" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.181.80


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:47:47 ns5 kernel: php-fpm[2041923]: segfault at 7ffdee91def8 ip 000000000072ad55 sp 00007ffdee91def8 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.122.110
country_id: 1880251
description:
47.128.122.110 - - [30/Jun/2026:21:47:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9869975&pdata=https%253A%252F%252Ftogodailynews.tg%252Fcategory%252Factualites%252Fpage%252F73%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782856078 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/category/actualites/page/73/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.122.110


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 165.73.138.152
country_id: 953987
description:
Jun 30 21:49:12 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 165.73.138.152 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.122.110
country_id: 1880251
description:
47.128.122.110 - - [30/Jun/2026:21:50:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9921945&pdata=http%253A%252F%252Ftogodailynews.tg%252Fcategory%252Factualites%252Fpage%252F76%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782856243 HTTP/1.1" 302 0 togodailynews.tg "http://togodailynews.tg/category/actualites/page/76/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.122.110


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 20.212.169.175
country_id: 1880251
description:
[2026-06-30 21:50:45 +0000] info [cpaneld] 20.212.169.175 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 52.200.114.158
country_id: 6252001
description:
[2026-06-30 21:49:58 +0000] info [cpaneld] 52.200.114.158 - waywcbyw "POST //login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:51:11 ns5 kernel: php-fpm[2042133]: segfault at 7ffdee91def8 ip 000000000072ad55 sp 00007ffdee91def8 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 20.212.169.175
country_id: 1880251
description:
[2026-06-30 21:51:38 +0000] info [cpaneld] 20.212.169.175 - e.sanvee "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.sanvee (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 39.100.91.113
country_id: 1814991
description:
Jun 30 21:51:06 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 39.100.91.113 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:53:15 ns5 kernel: php-fpm[2042862]: segfault at 7ffdee91def8 ip 000000000072ad55 sp 00007ffdee91def8 error 6 in php-fpm[400000+4ad000]


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>face aux intemp\xc3\xa9ries exceptionnelles qui frappent actuellement plusieurs pays du golfe de guin\xc3\xa9e, l\xe2\x80\x99ex\xc3\xa9cutif togolais a officiellement activ\xc3\xa9 le plan orsec (organisation de la r\xc3\xa9ponse de s\xc3\xa9curit\xc3\xa9 civile). ce m\xc3\xa9canisme d\xe2\x80\x99urgence nationale vise \xc3\xa0 coordonner l'ensemble des forces de secours pour faire face aux inondations et d\xc3\xa9g\xc3\xa2ts mat\xc3\xa9riels caus\xc3\xa9s par les fortes pluies de ces derniers jours.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le district autonome du grand lom\xc3\xa9 (dagl) ainsi que plusieurs localit\xc3\xa9s de l'int\xc3\xa9rieur du pays enregistrent d'importantes perturbations apr\xc3\xa8s les intemp\xc3\xa9ries qui ont eu cours le lundi 29 juin dernier : mont\xc3\xa9es des eaux, difficult\xc3\xa9s de circulation, chutes d'arbres et infrastructures endommag\xc3\xa9es.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31751,\"width\":\"514px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/abc.jpg\" alt=\"\" class=\"wp-image-31751\" style=\"width:514px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>mobilisation g\xc3\xa9n\xc3\xa9rale de la protection civile (anpc)</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>fort heureusement, aucune perte en vie humaine n'est \xc3\xa0 d\xc3\xa9plorer \xc3\xa0 ce stade. les acteurs de la plateforme nationale de r\xc3\xa9duction des risques de catastrophes (pnrrc) sont d'ores et d\xc3\xa9j\xc3\xa0 d\xc3\xa9ploy\xc3\xa9s sur le terrain.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les op\xc3\xa9rations de secours et d'assistance aux populations sinistr\xc3\xa9es sont plac\xc3\xa9es sous la coordination op\xc3\xa9rationnelle de l'agence nationale de la protection civile (anpc).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31645,\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-78.png\" alt=\"\" class=\"wp-image-31645\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab les services comp\xc3\xa9tents assurent une veille permanente de l'\xc3\xa9volution de la situation m\xc3\xa9t\xc3\xa9orologique et poursuivent les interventions sur l'ensemble du territoire afin d'apporter une r\xc3\xa9ponse rapide \xc3\xa0 toute situation d'urgence \xc2\xbb</em>, a rassur\xc3\xa9 le ministre de la s\xc3\xa9curit\xc3\xa9, calixte madjoulba.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>les consignes de s\xc3\xa9curit\xc3\xa9 \xc3\xa0 respecter imp\xc3\xa9rativement</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le minist\xc3\xa8re de la s\xc3\xa9curit\xc3\xa9 exhorte les citoyens \xc3\xa0 faire preuve de la plus grande prudence et \xc3\xa0 adopter des comportements responsables pour \xc3\xa9viter tout drame. il s\xe2\x80\x99agit&nbsp;:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- sur la route, d\xe2\x80\x99\xc3\xa9viter rigoureusement de traverser les zones inond\xc3\xa9es, les cours d'eau en crue ou les ponts et ouvrages fragilis\xc3\xa9s par les eaux&nbsp;;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- pour ce qui est de vos d\xc3\xa9placement, il faut limiter au strict minimum vos trajets non indispensables pendant les \xc3\xa9pisodes d'averses intenses.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- face au vent et aux orages, ne stationnez pas sous les arbres, \xc3\xa0 proximit\xc3\xa9 des grands panneaux publicitaires ou sous des infrastructures mena\xc3\xa7ant de c\xc3\xa9der.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31459,\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_payez-la-tvm-simple-et-pratique.jpg\" alt=\"\" class=\"wp-image-31459\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>num\xc3\xa9ros verts d'urgence (appels gratuits)</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>si vous \xc3\xaates t\xc3\xa9moin d'un incident, d'une inondation majeure ou si vous vous trouvez en situation de d\xc3\xa9tresse, contactez imm\xc3\xa9diatement les secours via les num\xc3\xa9ros officiels suivants :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>170&nbsp;: agence nationale de la protection civile (anpc)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>118&nbsp;: sapeurs-pompiers</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1014&nbsp;: centre national de commandement unifi\xc3\xa9 (cncu)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>117 et 1244&nbsp;: police nationale</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>172 : gendarmerie nationale</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>la r\xc3\xa9daction</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/</em></strong><strong><em>79872224 </em></strong><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.111.92.123
country_id: 6252001
description:
[2026-06-30 21:54:49 +0000] info [cpaneld] 64.111.92.123 - LWS-531391 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user LWS-531391 (has_cpuser_file failed)


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:56:15 ns5 kernel: php-fpm[2044136]: segfault at 7ffdee91df48 ip 000000000072ad55 sp 00007ffdee91df48 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.111.92.123
country_id: 6252001
description:
[2026-06-30 21:56:18 +0000] info [cpaneld] 64.111.92.123 - e.sanvee "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.sanvee (has_cpuser_file failed)


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:57:07 ns5 kernel: php-fpm[2044258]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 21:58:23 ns5 kernel: php-fpm[2044925]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 45.147.232.223
country_id: 6252001
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:45.147.232.223||TA:45.147.232.223||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.172.196.237
country_id: 1880251
description:
43.172.196.237 - - [30/Jun/2026:21:58:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13003157&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Ftag%253Dindependance&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782856682 HTTP/1.1" 404 561 mediatopnews.tg "https://mediatopnews.tg/?tag=independance" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.172.196.237


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.144.35.224
country_id: 1880251
description:
[2026-06-30 22:00:15 +0000] info [cpaneld] 168.144.35.224 - a.mathey "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.mathey (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.111.92.123
country_id: 6252001
description:
[2026-06-30 22:00:25 +0000] info [cpaneld] 64.111.92.123 - stephane "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user stephane (has_cpuser_file failed)


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:01:18 ns5 kernel: php-fpm[2045940]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 138.197.93.235
country_id: 6252001
description:
Jun 30 22:02:47 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 138.197.93.235 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:03:33 ns5 kernel: php-fpm[2046741]: segfault at 7ffdee91df48 ip 000000000072ad55 sp 00007ffdee91df48 error 6 in php-fpm[400000+4ad000]


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 130.254.112.74
country_id: 6252001
domain: butodra.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:130.254.112.74||TA:130.254.112.74||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.144.35.224
country_id: 1880251
description:
[2026-06-30 22:03:21 +0000] info [cpaneld] 168.144.35.224 - k.eklou "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user k.eklou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.111.92.123
country_id: 6252001
description:
[2026-06-30 22:05:16 +0000] info [cpaneld] 64.111.92.123 - LWS-240344 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user LWS-240344 (has_cpuser_file failed)


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:06:34 ns5 kernel: php-fpm[2047822]: segfault at 7ffdee91def8 ip 000000000072ad55 sp 00007ffdee91def8 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.111.92.123
country_id: 6252001
description:
[2026-06-30 22:06:10 +0000] info [cpaneld] 64.111.92.123 - kwbcfbmo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kwbcfbmo (has_cpuser_file failed)


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:07:02 ns5 kernel: php-fpm[2047886]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.203.41.234
country_id: 2287781
domain: lasnb.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/lasnb.com/product/show/djama-lager HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.227.133.14
country_id: 3469034
domain: lasnb.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/lasnb.com/product/show/warsteiner HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:09:04 ns5 kernel: php-fpm[2048658]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.181.123
country_id: 1880251
description:
43.173.181.123 - - [30/Jun/2026:22:11:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10380953&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D10548&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782857467 HTTP/1.1" 404 561 mediatopnews.tg "https://mediatopnews.tg/?p=10548" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.181.123


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:12:01 ns5 kernel: php-fpm[2049913]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:13:02 ns5 kernel: php-fpm[2050056]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.111.92.123
country_id: 6252001
description:
[2026-06-30 22:13:24 +0000] info [cpaneld] 64.111.92.123 - esso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user esso (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.206.66.153
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/le-lieutenant-colonel-atafai-tchangani-prend-le-commandement-du-corps-des-agents-des-eaux-et-forets/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.206.66.153
country_id: 3469034
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/le-lieutenant-colonel-atafai-tchangani-prend-le-commandement-du-corps-des-agents-des-eaux-et-forets/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:14:15 ns5 kernel: php-fpm[2050939]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.25.23.236
country_id: 3865483
domain: lasnb.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/lasnb.com/mission HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.172.197.179
country_id: 1880251
description:
43.172.197.179 - - [30/Jun/2026:22:15:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9934484&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D13384&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782857716 HTTP/1.1" 404 561 mediatopnews.tg "https://mediatopnews.tg/?p=13384" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.172.197.179


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.180.128
country_id: 1880251
description:
43.173.180.128 - - [30/Jun/2026:22:16:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10262680&pdata=http%253A%252F%252Fwww.arse.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782857775 HTTP/1.1" 404 561 www.arse.tg "http://www.arse.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.180.128


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 221.211.225.203
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2023/11/1bbaad13db4af2c2ee70cb76148e9d8a_XL.jpg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 187.184.8.197
country_id: 3996063
description:
187.184.8.197 - - [30/Jun/2026:22:17:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6790512&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fvoiture-neuve-pour-maman-tamea%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782857862 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/voiture-neuve-pour-maman-tamea/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.4398.1859 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:187.184.8.197


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:17:46 ns5 kernel: php-fpm[2051890]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.90.77
country_id: 3865483
description:
Jun 30 22:17:55 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.90.77 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:18:04 ns5 kernel: php-fpm[2051981]: segfault at 7ffdee91df48 ip 000000000072ad55 sp 00007ffdee91df48 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.90.77
country_id: 3865483
description:
Jun 30 22:18:03 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.90.77 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:19:56 ns5 kernel: php-fpm[2052775]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.150.77.204
country_id: 690791
description:
Jun 30 22:21:33 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.150.77.204 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:23:32 ns5 kernel: php-fpm[2053950]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.181.186
country_id: 1880251
description:
43.173.181.186 - - [30/Jun/2026:22:23:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9790404&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D7481&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782858219 HTTP/1.1" 404 561 mediatopnews.tg "https://mediatopnews.tg/?p=7481" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.181.186


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.129.214.54
country_id: 1210997
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/www.gtaassurances.net HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:24:02 ns5 kernel: php-fpm[2054093]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:25:28 ns5 kernel: php-fpm[2054604]: segfault at 7ffdee91df48 ip 000000000072ad55 sp 00007ffdee91df48 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 39.100.91.113
country_id: 1814991
description:
Jun 30 22:27:50 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 39.100.91.113 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.111.92.123
country_id: 6252001
description:
[2026-06-30 22:27:06 +0000] info [cpaneld] 64.111.92.123 - esso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user esso (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.176.105
country_id: 1880251
description:
43.173.176.105 - - [30/Jun/2026:22:28:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13145753&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D7267&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782858533 HTTP/1.1" 404 561 mediatopnews.tg "https://mediatopnews.tg/?p=7267" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.176.105


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:29:15 ns5 kernel: php-fpm[2056042]: segfault at 7ffdee91def8 ip 000000000072ad55 sp 00007ffdee91def8 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.111.92.123
country_id: 6252001
description:
[2026-06-30 22:29:18 +0000] info [cpaneld] 64.111.92.123 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 138.197.93.235
country_id: 6252001
description:
Jun 30 22:28:59 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 138.197.93.235 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:30:01 ns5 kernel: php-fpm[2056066]: segfault at 7ffdee91def8 ip 000000000072ad55 sp 00007ffdee91def8 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:31:05 ns5 kernel: php-fpm[2056683]: segfault at 7ffdee91def8 ip 000000000072ad55 sp 00007ffdee91def8 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.216.26.147
country_id: 798544
description:
Jun 30 22:32:53 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.216.26.147 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.218.161.101
country_id: 2510769
description:
Jun 30 22:33:11 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.218.161.101 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.216.26.147
country_id: 798544
description:
Jun 30 22:33:00 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.216.26.147 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 122.6.239.185
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/sports/page/1209899021 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:34:01 ns5 kernel: php-fpm[2058236]: segfault at 7ffdee91def8 ip 000000000072ad55 sp 00007ffdee91def8 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.173.164
country_id: 1880251
description:
43.173.173.164 - - [30/Jun/2026:22:34:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9855895&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D5779&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782858887 HTTP/1.1" 404 561 mediatopnews.tg "https://mediatopnews.tg/?p=5779" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.173.164


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:35:27 ns5 kernel: php-fpm[2059530]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.24.105
country_id: 6252001
description:
47.251.24.105 - - [30/Jun/2026:22:35:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10054300&pdata=https%253A%252F%252Fcafe.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782858948 HTTP/2.0" 302 0 cafe.tg "https://cafe.tg/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.24.105


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 5.157.52.74
country_id: 453733
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:22-35.5.157.52.74||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.188.82
country_id: 6252001
description:
47.251.188.82 - - [30/Jun/2026:22:36:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10249620&pdata=https%253A%252F%252Fmacite.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782858988 HTTP/2.0" 302 0 macite.tg "https://macite.tg/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.188.82


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.88.18.245
country_id: 6252001
description:
47.88.18.245 - - [30/Jun/2026:22:36:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6407367&pdata=https%253A%252F%252Fcafe.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782858969 HTTP/2.0" 302 0 cafe.tg "https://cafe.tg/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.88.18.245


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.88.94.125
country_id: 6252001
description:
47.88.94.125 - - [30/Jun/2026:22:36:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212009&pdata=https%253A%252F%252Fcfpj.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782859010 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.88.94.125


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.118.89
country_id: 6252001
description:
47.251.118.89 - - [30/Jun/2026:22:36:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12961481&pdata=https%253A%252F%252Fns5mail.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782858958 HTTP/2.0" 302 0 ns5mail.netmaster.tg "https://ns5mail.netmaster.tg/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.118.89


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.89.134
country_id: 6252001
description:
47.251.89.134 - - [30/Jun/2026:22:36:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10250651&pdata=https%253A%252F%252Fcfpj.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782858959 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.89.134


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:37:47 ns5 kernel: php-fpm[2061072]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:39:46 ns5 kernel: php-fpm[2061070]: segfault at 7ffdee91da08 ip 000000000072ad55 sp 00007ffdee91da08 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:40:31 ns5 kernel: php-fpm[2061197]: segfault at 7ffdee91df48 ip 000000000072ad55 sp 00007ffdee91df48 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 193.183.125.138
country_id: 2661886
description:
Jun 30 22:41:19 ns5 pure-ftpd[2063515]: (?@193.183.125.138) [INFO] New connection from 193.183.125.138


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 65.111.15.216
country_id: 6252001
domain: mail.chatmerce.free.netmaster.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/mail.chatmerce.free.netmaster.tg/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:42:48 ns5 kernel: php-fpm[2063757]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.175.99
country_id: 1880251
description:
43.173.175.99 - - [30/Jun/2026:22:43:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9858414&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Ffeed%253Drss2%2526p%253D3274&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782859377 HTTP/1.1" 404 561 mediatopnews.tg "https://mediatopnews.tg/?feed=rss2&p=3274" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.175.99


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 194.180.233.71
country_id: 6252001
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:194.180.233.71||TA:194.180.233.71||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.111.92.123
country_id: 6252001
description:
[2026-06-30 22:44:04 +0000] info [cpaneld] 64.111.92.123 - stephanetg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user stephanetg (has_cpuser_file failed)


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:45:10 ns5 kernel: php-fpm[2063991]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:47:13 ns5 kernel: php-fpm[2064232]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:48:16 ns5 kernel: php-fpm[2064448]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.182.177
country_id: 1880251
description:
43.173.182.177 - - [30/Jun/2026:22:48:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13201047&pdata=https%253A%252F%252Flacs1.mairie.tg%252Fvisite-du-president-du-departement-des-yvelines-le-partenariat-lacs1-yvelines-accouche-dune-maison-de-tourisme&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782859732 HTTP/1.1" 404 561 lacs1.mairie.tg "https://lacs1.mairie.tg/visite-du-president-du-departement-des-yvelines-le-partenariat-lacs1-yvelines-accouche-dune-maison-de-tourisme" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.182.177


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:49:08 ns5 kernel: php-fpm[2064650]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 129.227.45.153
country_id: 1643084
description:
129.227.45.153 - - [30/Jun/2026:22:49:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9792616&pdata=https%253A%252F%252Fbutodra.tg%252Fwp-login.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782859752 HTTP/2.0" 302 0 butodra.tg "https://butodra.tg/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:129.227.45.153


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.179.197
country_id: 1880251
description:
43.173.179.197 - - [30/Jun/2026:22:49:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9858502&pdata=https%253A%252F%252Fmacite.tg%252F%253Fp%253D30031&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782859794 HTTP/1.1" 404 561 macite.tg "https://macite.tg/?p=30031" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.179.197


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:51:10 ns5 kernel: php-fpm[2065237]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:52:57 ns5 kernel: php-fpm[2065955]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:53:37 ns5 kernel: php-fpm[2066416]: segfault at 7ffc38f24f80 ip 0000000000729c3b sp 00007ffc38f24f70 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.178.177
country_id: 1880251
description:
43.173.178.177 - - [30/Jun/2026:22:53:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13278100&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D1107&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782859985 HTTP/1.1" 404 561 mediatopnews.tg "https://mediatopnews.tg/?p=1107" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.178.177


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-30 22:53:41 +0000] info [cpaneld] 167.99.236.81 - iyfttuec "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user iyfttuec (has_cpuser_file failed)


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:54:11 ns5 kernel: php-fpm[2066446]: segfault at 7ffc38f24f80 ip 0000000000729c3b sp 00007ffc38f24f70 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.144.35.224
country_id: 1880251
description:
[2026-06-30 22:54:27 +0000] info [cpaneld] 168.144.35.224 - pduusmyf "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:56:41 ns5 kernel: php-fpm[2067343]: segfault at 7ffc38f24f80 ip 0000000000729c3b sp 00007ffc38f24f70 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 52.200.114.158
country_id: 6252001
description:
[2026-06-30 22:56:56 +0000] info [cpaneld] 52.200.114.158 - ingertgsarl "POST //login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 138.197.93.235
country_id: 6252001
description:
Jun 30 22:56:24 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 138.197.93.235 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:57:58 ns5 kernel: php-fpm[2067903]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.181.43
country_id: 1880251
description:
43.173.181.43 - - [30/Jun/2026:22:57:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6593386&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D1993&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782860224 HTTP/1.1" 404 561 mediatopnews.tg "https://mediatopnews.tg/?p=1993" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.181.43


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.144.35.224
country_id: 1880251
description:
[2026-06-30 22:57:47 +0000] info [cpaneld] 168.144.35.224 - pduusmyf "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 138.219.123.201
country_id: 3608932
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:138.219.123.201||TA:138.219.123.201||


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 22:59:14 ns5 kernel: php-fpm[2068152]: segfault at 7ffc38f24f48 ip 000000000072ad55 sp 00007ffc38f24f48 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 23:00:09 ns5 kernel: php-fpm[2068451]: segfault at 7ffc38f24f48 ip 000000000072ad55 sp 00007ffc38f24f48 error 6 in php-fpm[400000+4ad000]


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 185.217.0.59
country_id: 2661886
description:
Denial of Service (DoS) attack was discovered from 185.217.0.59: 80 connections per 30 seconds to 80 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 52.200.114.158
country_id: 6252001
description:
[2026-06-30 23:00:09 +0000] info [cpaneld] 52.200.114.158 - AWADI "POST //login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user AWADI (has_cpuser_file failed)


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 23:02:34 ns5 kernel: php-fpm[2069062]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 123.6.49.50
country_id: 1814991
description:
123.6.49.50 - - [30/Jun/2026:23:02:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6986602&pdata=https%253A%252F%252Fekeasarl.com%252Fa-propos%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782860557 HTTP/2.0" 302 0 ekeasarl.com "https://ekeasarl.com/a-propos/" "Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.50


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 123.6.49.44
country_id: 1814991
description:
123.6.49.44 - - [30/Jun/2026:23:02:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6736495&pdata=https%253A%252F%252Fekeasarl.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782860558 HTTP/2.0" 302 0 ekeasarl.com "https://ekeasarl.com/" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.44


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 23:03:48 ns5 kernel: php-fpm[2069530]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 27.115.124.70
country_id: 1814991
description:
27.115.124.70 - - [30/Jun/2026:23:03:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6972015&pdata=https%253A%252F%252Fhaplucia-togo.tg%252Fhalplucia%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782860585 HTTP/2.0" 302 0 haplucia-togo.tg "https://haplucia-togo.tg/halplucia/" "Mozilla/5.0 (Linux; Android 11; V2055A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.70


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 123.6.49.18
country_id: 1814991
description:
123.6.49.18 - - [30/Jun/2026:23:03:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119270&pdata=https%253A%252F%252Fhaplucia-togo.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782860586 HTTP/2.0" 302 0 haplucia-togo.tg "https://haplucia-togo.tg/" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.18


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 27.115.124.38
country_id: 1814991
description:
27.115.124.38 - - [30/Jun/2026:23:03:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7038110&pdata=https%253A%252F%252Fhaplucia-togo.tg%252Fstatistiques%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782860588 HTTP/2.0" 302 0 haplucia-togo.tg "https://haplucia-togo.tg/statistiques/" "Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.38


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.28.166.123
country_id: 953987
description:
104.28.166.123 - - [30/Jun/2026:23:04:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6724453&pdata=https%253A%252F%252Fucao-uut.tg%252Fformation-recherche%252Fdiplomes%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782860689 HTTP/2.0" 302 0 ucao-uut.tg "https://ucao-uut.tg/formation-recherche/diplomes/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.28.166.123


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 39.100.91.113
country_id: 1814991
description:
Jun 30 23:04:31 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 39.100.91.113 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 23:05:24 ns5 kernel: php-fpm[2069954]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.179.194
country_id: 1880251
description:
43.173.179.194 - - [30/Jun/2026:23:05:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13290646&pdata=https%253A%252F%252Fmacite.tg%252F%253Fp%253D27564&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782860711 HTTP/1.1" 404 561 macite.tg "https://macite.tg/?p=27564" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.179.194


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 23:06:03 ns5 kernel: php-fpm[2070359]: segfault at 7ffc38f24f80 ip 0000000000729c3b sp 00007ffc38f24f70 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.111.92.123
country_id: 6252001
description:
[2026-06-30 23:06:07 +0000] info [cpaneld] 64.111.92.123 - AMEDEKA "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user AMEDEKA (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 52.200.114.158
country_id: 6252001
description:
[2026-06-30 23:06:42 +0000] info [cpaneld] 52.200.114.158 - kavznjyb "POST //login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kavznjyb (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.83.255.44
country_id: 6252001
description:
[2026-06-30 23:07:55 +0000] info [cpaneld] 172.83.255.44 - AMEDEKA "POST /login/?login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user AMEDEKA (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 44.192.176.252
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 44.192.176.252: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 23:08:33 ns5 kernel: php-fpm[2071093]: segfault at 7ffc38f24f80 ip 0000000000729c3b sp 00007ffc38f24f70 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 23:09:54 ns5 kernel: php-fpm[2071594]: segfault at 7ffc38f24f80 ip 0000000000729c3b sp 00007ffc38f24f70 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 23:10:57 ns5 kernel: php-fpm[2072159]: segfault at 7ffc38f24f48 ip 000000000072ad55 sp 00007ffc38f24f48 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 23:11:58 ns5 kernel: php-fpm[2072244]: segfault at 7ffc38f24f48 ip 000000000072ad55 sp 00007ffc38f24f48 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.111.92.123
country_id: 6252001
description:
[2026-06-30 23:10:59 +0000] info [cpaneld] 64.111.92.123 - admin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 143.255.53.211
country_id: 3469034
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/product/show/bitter-lemon-canette HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.160.208.171
country_id: 2017370
description:
2026-06-30 23:13:49 dovecot_plain authenticator failed for H=(yw6vx0x513jval60w) [158.160.208.171]:49800: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 23:14:45 ns5 kernel: php-fpm[2073237]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 145.249.187.244
country_id: 1522867
description:
2026-06-30 23:14:49 dovecot_login authenticator failed for H=([5.140.212.184]) [145.249.187.244]:57295: 535 Incorrect authentication data (set_id=office@sigm.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.105.213.23
country_id: 3865483
description:
Jun 30 23:14:55 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.105.213.23 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 23:15:32 ns5 kernel: php-fpm[2072347]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-30 23:15:16 +0000] info [cpaneld] 167.99.236.81 - iyfttuec "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user iyfttuec (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.105.213.23
country_id: 3865483
description:
Jun 30 23:15:03 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.105.213.23 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.111.92.123
country_id: 6252001
description:
[2026-06-30 23:15:16 +0000] info [cpaneld] 64.111.92.123 - solarplusafrique.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user solarplusafrique.com (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.71.69
country_id: 3469034
description:
Jun 30 23:15:22 ns5 auth[1963421]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.71.69 has been locked due to Imunify RBL


plugin: ossec
rule: 1010
name: Process segfaulted.
description:
Jun 30 23:16:30 ns5 kernel: php-fpm[2074034]: segfault at 7ffc38f24f30 ip 0000000000729c3b sp 00007ffc38f24f20 error 6 in php-fpm[400000+4ad000]


