# incident

plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 14:59:36 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:2502: 535 Incorrect authentication data (set_id=recording)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 14:59:37 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:24314: 535 Incorrect authentication data (set_id=manushi)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 149.88.98.130
country_id: 6251999
description:
[2026-06-18 15:00:12 +0000] info [webmaild] 149.88.98.130 - iway@ccit.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password hash is missing from system (user probably does not exist)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:00:54 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:30598: 535 Incorrect authentication data (set_id=marta)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:15:00:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9855343&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781794854 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:15:00:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6985884&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781794856 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:00:38 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:32848: 535 Incorrect authentication data (set_id=hoho)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:00:25 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:42918: 535 Incorrect authentication data (set_id=badmail)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:00:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:4710: 535 Incorrect authentication data (set_id=nws)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:00:52 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:52878: 535 Incorrect authentication data (set_id=spc)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:00:52 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:14440: 535 Incorrect authentication data (set_id=mailroot)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:01:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:6728: 535 Incorrect authentication data (set_id=ester)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:01:37 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:3458: 535 Incorrect authentication data (set_id=rz)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:01:46 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:17872: 535 Incorrect authentication data (set_id=w11)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:01:37 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:61764: 535 Incorrect authentication data (set_id=servers)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:01:40 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:55110: 535 Incorrect authentication data (set_id=charles)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:01:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:18130: 535 Incorrect authentication data (set_id=charles)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 165.101.222.46
country_id: 1210997
description:
165.101.222.46 - - [18/Jun/2026:15:02:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9869163&pdata=https%253A%252F%252Fcfpj.tg%252Feedo-180091detid.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781794923 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/eedo-180091detid.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:165.101.222.46


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:01:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:59442: 535 Incorrect authentication data (set_id=user001)


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 43.173.180.106
country_id: 1880251
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:request_uri||MV:session-ordinaire-2021-litra-cloture-les-comptes-de-lexercice-2020-et-evalue-les-activites-2021-a-mi-parcours/||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:02:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:5272: 535 Incorrect authentication data (set_id=testing3)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:02:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:58714: 535 Incorrect authentication data (set_id=kathy)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:02:39 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:43460: 535 Incorrect authentication data (set_id=rock)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:02:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:58760: 535 Incorrect authentication data (set_id=communications)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:02:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:20604: 535 Incorrect authentication data (set_id=itservice)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:02:50 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:30186: 535 Incorrect authentication data (set_id=qwerasdfzxcv1234)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:03:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:39282: 535 Incorrect authentication data (set_id=respaldo)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:03:36 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:6430: 535 Incorrect authentication data (set_id=bpm)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:03:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:3774: 535 Incorrect authentication data (set_id=pg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:03:47 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:61224: 535 Incorrect authentication data (set_id=pgsql)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:03:56 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:64220: 535 Incorrect authentication data (set_id=contest)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:04:00 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:11020: 535 Incorrect authentication data (set_id=wozniak)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:04:51 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:13056: 535 Incorrect authentication data (set_id=minside)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:04:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:27956: 535 Incorrect authentication data (set_id=minside)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:04:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:40436: 535 Incorrect authentication data (set_id=aris)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 114.130.70.245
country_id: 1210997
description:
114.130.70.245 - - [18/Jun/2026:15:04:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6579861&pdata=https%253A%252F%252Ftogodailynews.tg%252Fopportunites-commerciales-entre-les-etats-unis-et-lafrique-prosper-africa-et-afreximbank-annoncent-un-nouveau-partenariat&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781795087 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/opportunites-commerciales-entre-les-etats-unis-et-lafrique-prosper-africa-et-afreximbank-annoncent-un-nouveau-partenariat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:114.130.70.245


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.14.78
country_id: 6252001
description:
[2026-06-18 15:05:06 +0000] info [cpaneld] 195.63.14.78 - libertepansel "POST /execute/Fileman/save_file_content?dir=public_html&path=public_html&from_charset=UTF-8&content=%3C%3Fphp+%24s+%3D+%22false%22%3Bif+%28mail%28%24_COOKIE%5B%22email_send_id%22%5D%2C%22Cp+Send+%23%22.%24_COOKIE%5B%22it_id%22%5D%2C%22Cp+Send+Working+..+%23%22.%24_COOKIE%5B%22it_id%22%5D.%22%5CnHash%3A+%22.md5%28time%28%29.uniqid%28%29%29%29%29+%7B%24s+%3D+%22true%22%3B%7Decho+%24s%3B%3F%3E&file=test123Cp.php&file_name=test123Cp.php HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:04:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:43130: 535 Incorrect authentication data (set_id=samsung1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:04:36 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:37378: 535 Incorrect authentication data (set_id=kurokawa)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:04:48 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:51488: 535 Incorrect authentication data (set_id=dfs)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:04:53 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:56464: 535 Incorrect authentication data (set_id=borisov)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.39.149.156
country_id: 3865483
domain: www.certlogisticstogo.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.certlogisticstogo.com/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:05:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:16722: 535 Incorrect authentication data (set_id=member2)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:05:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:64636: 535 Incorrect authentication data (set_id=functions)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:05:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:28598: 535 Incorrect authentication data (set_id=pacific)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.173.112.211
country_id: 6252001
description:
[2026-06-18 15:05:47 +0000] info [webmaild] 107.173.112.211 - contact@dany2.mairie.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: User contact@dany2.mairie.tg has their account suspended. Login blocked.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 78.40.106.19
country_id: 614540
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/exposition-CEATA.webp 800w, http:/togodailynews.tg/wp-content/uploads/2026/06/exposition-CEATA-300x223.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/exposition-CEATA-768x571.webp 768w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 45.140.251.223
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-06.45.140.251.223||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:05:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:39100: 535 Incorrect authentication data (set_id=cost)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 45.140.249.4
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-05.45.140.249.4||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:05:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:7546: 535 Incorrect authentication data (set_id=email3)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:05:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:3812: 535 Incorrect authentication data (set_id=andres)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 45.140.250.193
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-05.45.140.250.193||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.181.28.82
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2020/10/33005-le-gouvernement-tient-son-premier-sminaire.png 600w, http:/togodailynews.tg/wp-content/uploads/2020/10/33005-le-gouvernement-tient-son-premier-sminaire-300x200.png 300w, http:/togodailynews.tg/wp-content/uploads/2020/10/33005-le-gouvernement-tient-son-premier-sminaire-272x182.png 272w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 45.140.248.151
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-06.45.140.248.151||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:06:38 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:40386: 535 Incorrect authentication data (set_id=atp)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:06:41 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:31370: 535 Incorrect authentication data (set_id=kosik)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:06:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:25056: 535 Incorrect authentication data (set_id=tajnica)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:06:48 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:30190: 535 Incorrect authentication data (set_id=izumi)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.180.208.155
country_id: 6252001
description:
[2026-06-18 15:07:15 +0000] info [cpaneld] 5.180.208.155 - richard "GET /execute/Email/list_pops?api.version=1 HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:06:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:57618: 535 Incorrect authentication data (set_id=mkaiser)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:06:29 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:36666: 535 Incorrect authentication data (set_id=wq)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:07:49 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:12846: 535 Incorrect authentication data (set_id=virginie)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:07:50 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:20442: 535 Incorrect authentication data (set_id=web0f1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:07:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:12916: 535 Incorrect authentication data (set_id=auriga)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:07:39 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:60732: 535 Incorrect authentication data (set_id=npd)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:07:56 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:26336: 535 Incorrect authentication data (set_id=teknik)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:07:58 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:22188: 535 Incorrect authentication data (set_id=teknik)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:07:36 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:42652: 535 Incorrect authentication data (set_id=nugget)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 45.140.249.214
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:45.140.249.214||TA:45.140.249.214||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:08:38 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:53754: 535 Incorrect authentication data (set_id=modid)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:08:39 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:62958: 535 Incorrect authentication data (set_id=acc)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:08:44 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:61040: 535 Incorrect authentication data (set_id=oliver)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:08:44 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:51320: 535 Incorrect authentication data (set_id=lillian)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:08:29 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:7998: 535 Incorrect authentication data (set_id=cdn1)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:15:08:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:15:08:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:15:08:31 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:08:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:21854: 535 Incorrect authentication data (set_id=testportal)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:15:08:34 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:09:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:30024: 535 Incorrect authentication data (set_id=aj)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:09:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:43512: 535 Incorrect authentication data (set_id=autofocus)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 139.135.42.49
country_id: 1168579
description:
139.135.42.49 - - [18/Jun/2026:15:09:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13070488&pdata=https%253A%252F%252Ftogodailynews.tg%252Fclimat-des-affaires-un-environnement-favorable-aux-ide&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781795369 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/climat-des-affaires-un-environnement-favorable-aux-ide" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:139.135.42.49


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:09:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:27704: 535 Incorrect authentication data (set_id=hohoho)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:09:40 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:53258: 535 Incorrect authentication data (set_id=banger)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:09:46 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:35474: 535 Incorrect authentication data (set_id=warhol)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.245.152.35
country_id: 6252001
description:
[2026-06-18 15:10:14 +0000] info [cpaneld] 216.245.152.35 - togoinrdceh "GET /execute/Email/list_pops?api.version=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:09:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:9606: 535 Incorrect authentication data (set_id=bernardo)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 46.32.165.130
country_id: 587116
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1203257870 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 131.0.196.101
country_id: 3923057
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/525351 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:10:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:50242: 535 Incorrect authentication data (set_id=origin-user)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:11:16 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:10624: 535 Incorrect authentication data (set_id=opname)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:10:25 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:42042: 535 Incorrect authentication data (set_id=tula)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:10:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:29326: 535 Incorrect authentication data (set_id=cache1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:10:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:58996: 535 Incorrect authentication data (set_id=rmendoza)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:10:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:11528: 535 Incorrect authentication data (set_id=myob)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:10:32 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:64644: 535 Incorrect authentication data (set_id=craig)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.245.152.35
country_id: 6252001
description:
[2026-06-18 15:10:53 +0000] info [cpaneld] 216.245.152.35 - ftchabagna "GET /execute/Email/list_pops?api.version=1 HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:11:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:23506: 535 Incorrect authentication data (set_id=film)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:11:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:41312: 535 Incorrect authentication data (set_id=pg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:11:52 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:29942: 535 Incorrect authentication data (set_id=opname)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:11:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:55052: 535 Incorrect authentication data (set_id=kv)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:11:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:27280: 535 Incorrect authentication data (set_id=bibliomedmanager)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:11:39 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:32848: 535 Incorrect authentication data (set_id=wizard)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:12:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:63888: 535 Incorrect authentication data (set_id=sftptest)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:12:37 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:61738: 535 Incorrect authentication data (set_id=programming)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:12:39 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:5948: 535 Incorrect authentication data (set_id=oso)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:12:46 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:4280: 535 Incorrect authentication data (set_id=root.ns1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:12:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:9196: 535 Incorrect authentication data (set_id=eset)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:12:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:21896: 535 Incorrect authentication data (set_id=flight)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:13:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:3330: 535 Incorrect authentication data (set_id=bfn2)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:13:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:11726: 535 Incorrect authentication data (set_id=banger)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:13:32 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:28216: 535 Incorrect authentication data (set_id=veneto)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.216.116.50
country_id: 6252001
description:
[2026-06-18 15:14:20 +0000] info [cpaneld] 217.216.116.50 - togoinrdceh "GET /execute/Email/list_pops?api.version=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.158.207.147
country_id: 2542007
description:
[2026-06-18 15:14:00 +0000] info [cpaneld] 105.158.207.147 - camaegdtomgo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:14:21 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:30528: 535 Incorrect authentication data (set_id=conchi)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:13:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:45016: 535 Incorrect authentication data (set_id=demo01)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:13:39 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:47406: 535 Incorrect authentication data (set_id=loans)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:13:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:38028: 535 Incorrect authentication data (set_id=jms)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:14:25 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:43852: 535 Incorrect authentication data (set_id=tomo)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:14:41 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:2392: 535 Incorrect authentication data (set_id=rau)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.203.227.31
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:8d24875cea53a3ba267473f00a247f7d6ebca4cf||Title:kfwupwe8g5kxniv||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:14:25 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:21130: 535 Incorrect authentication data (set_id=annmarie)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:14:37 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:60918: 535 Incorrect authentication data (set_id=lada)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.255.215.119
country_id: 732800
description:
Jun 18 15:14:43 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.255.215.119 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:14:48 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:14212: 535 Incorrect authentication data (set_id=matomo)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.53.228.200
country_id: 1527747
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/432929187 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:14:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:10206: 535 Incorrect authentication data (set_id=anagazanders)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-18 15:15:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:31248: 535 Incorrect authentication data (set_id=portail)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:15:16:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9791847&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781795776 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.203.227.31
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:c74ef8793c8caad49347ef53756d9c523f290645||Title:6jak63emhsint1i||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-18 15:15:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:54706: 535 Incorrect authentication data (set_id=esports)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:15:16:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7246701&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781795775 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-18 15:15:40 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:33230: 535 Incorrect authentication data (set_id=gms)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-18 15:15:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:39194: 535 Incorrect authentication data (set_id=bkupexec)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 37.231.158.152
country_id: 285570
description:
37.231.158.152 - - [18/Jun/2026:15:15:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9792152&pdata=https%253A%252F%252Ftogodailynews.tg%252Fprogramme-presidentiel-dexcellence-lancement-de-la-deuxieme-promotion%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781795748 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/programme-presidentiel-dexcellence-lancement-de-la-deuxieme-promotion/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.6967.1594 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.231.158.152


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-18 15:15:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:47280: 535 Incorrect authentication data (set_id=nik)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-18 15:15:50 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:1570: 535 Incorrect authentication data (set_id=bart)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 179.220.89.186
country_id: 3469034
description:
2026-06-18 15:16:58 dovecot_plain authenticator failed for H=([10.5.0.2]) [179.220.89.186]:42396: 535 Incorrect authentication data (set_id=newsletter@togointerim.net)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.203.227.31
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:cefb8af57320d995d19f8d49ba2ff8f87ff743e2||Title:sf0g414zbdrpxuczte||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 95.16.151.75
country_id: 2510769
description:
95.16.151.75 - - [18/Jun/2026:15:18:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7246690&pdata=https%253A%252F%252Ftogodailynews.tg%252Fdeclaration-de-lome-le-togo-et-lafcac-relancent-le-ciel-africain-integre%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781795888 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/declaration-de-lome-le-togo-et-lafcac-relancent-le-ciel-africain-integre/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.8296.1732 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:95.16.151.75


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.203.227.31
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a1f95521fb23f94abd2e1a2d7b40d6b95f235c51||Title:r9fqdj0yaci6qzo||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.203.227.31
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0c66f07111db9899c942657005e7eaace223da80||Title:wppyfssn51no71||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.168
country_id: 1643084
description:
[2026-06-18 15:18:30 +0000] info [whostmgrd] 185.213.83.168 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 65.38.123.37
country_id: 6252001
description:
[2026-06-18 15:19:19 +0000] info [cpaneld] 65.38.123.37 - tout-ti "GET /execute/Email/list_pops?api.version=1 HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 105.188.94.183
country_id: 2542007
description:
105.188.94.183 - - [18/Jun/2026:15:19:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7171483&pdata=https%253A%252F%252Feducplusmedia.tg%252Fcontact%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781795959 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/contact/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.1333.1249 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:105.188.94.183


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.114
country_id: 3469034
description:
Jun 18 15:20:16 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.114 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.168
country_id: 1643084
description:
[2026-06-18 15:20:01 +0000] info [whostmgrd] 185.213.83.168 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 185.213.83.168
country_id: 1643084
description:
[2026-06-18 15:20:05 +0000] info [whostmgrd] 185.213.83.168 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.203.227.31
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:20de2eb84e68d59dfe59940c89d222c54ad19554||Title:ok2r5qcf1xo2j8wx||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.122
country_id: 2635167
description:
[2026-06-18 15:19:52 +0000] info [cpaneld] 5.230.153.122 NEW hgfdcvbnk:Qi_GHrvXgRkmx0zS address=5.230.153.122,app=cpaneld,creator=hgfdcvbnk,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.203.227.31
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ea4c6f10eafc4012f18ae2929d57de07635d5e46||Title:obnuuxbpjktd5aj2||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 212.199.2.45
country_id: 294640
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1559444597 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.202
country_id: 1880251
description:
47.128.96.202 - - [18/Jun/2026:15:21:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12948883&pdata=https%253A%252F%252Fcfpj.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781796080 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.202


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-18 15:22:14 +0000] info [webmaild] 160.242.195.10 - etchonda@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.203.227.31
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b432c92e28abb78c6b121e1ae2e8d301d921b087||Title:y1yabv6z37jvjbiat||RSV:8.18||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 92.112.228.234
country_id: 2661886
domain: www.dagl.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:92.112.228.234||TA:92.112.228.234||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.168.118.95
country_id: 6252001
domain: haplucia-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.168.118.95||TA:104.168.118.95||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 193.42.0.140
country_id: 6252001
description:
[2026-06-18 15:21:36 +0000] info [cpaneld] 193.42.0.140 - rdlizssu "GET /execute/Email/list_pops?api.version=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.203.227.31
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:76d21f68c459f4dac68784e6f229ca9bf62b6189||Title:tboc1rbulh8ny0||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:15:23:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:15:23:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:15:24:00 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.203.227.31
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:4394e37584b9b2cabbbf4c6b88427cc793757d4a||Title:je4s5f9f0lihxiawmq||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>le ciel africain s'ouvre un peu plus vers une int\xc3\xa9gration totale. dans le cadre de la convention et de l'exposition africaines du transport a\xc3\xa9rien, la capitale togolaise a abrit\xc3\xa9 un \xc3\xa9v\xc3\xa9nement majeur pour l'aviation continentale. le mercredi 17 juin 2026, le togo et la commission africaine de l\xe2\x80\x99aviation civile (cafac) ont officiellement scell\xc3\xa9 une convention d\xe2\x80\x99application pour renforcer la mise en \xc5\x93uvre du march\xc3\xa9 unique du transport a\xc3\xa9rien africain (mutaa).</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>un tournant d\xc3\xa9cisif dans l\xe2\x80\x99op\xc3\xa9rationnalisation du mutaa, vient d\xe2\x80\x99\xc3\xaatre marqu\xc3\xa9 avec la signature \xc3\xa0 lom\xc3\xa9 de la convention d\xe2\x80\x99application de cette initiative phare de l'union africaine, entre le togo et la commission africaine de l\xe2\x80\x99aviation civile (cafac).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la signature de cette convention, intervenue au troisi\xc3\xa8me jour des travaux \xc3\xa0 lom\xc3\xa9, a \xc3\xa9t\xc3\xa9 paraph\xc3\xa9e par le ministre togolais en charge des transport, komlan loukou-kadj\xc3\xa9, et le secr\xc3\xa9taire g\xc3\xa9n\xc3\xa9ral de la cafac, adefonke adeyemi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"566px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:566px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>ladite d\xc3\xa9marche vise \xc3\xa0 consolider la <em>d\xc3\xa9claration de lom\xc3\xa9 sur les d\xc3\xa9fis et l\xe2\x80\x99avenir du transport a\xc3\xa9rien africain</em>. l'ambition affich\xc3\xa9e est claire : faire tomber les barri\xc3\xa8res protectionnistes, faciliter les liaisons directes entre les nations s\xc5\x93urs du continent, renforcer la comp\xc3\xa9titivit\xc3\xa9 des compagnies a\xc3\xa9riennes locales et, \xc3\xa0 terme, faire baisser le co\xc3\xbbt des billets d'avion en afrique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que loin d'\xc3\xaatre une simple formalit\xc3\xa9 administrative, cet accord s'accompagne d'outils de gouvernance rigoureux pour garantir son succ\xc3\xa8s. le ministre komla loukou-kadj\xc3\xa9 a annonc\xc3\xa9 la mise en place imm\xc3\xa9diate d'une feuille de route assortie d\xe2\x80\x99un plan d\xe2\x80\x99action concret pour suivre les progr\xc3\xa8s technologiques et r\xc3\xa9glementaires.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab nous voulons que le ciel africain soit ouvert et nous voulons que toutes les compagnies puissent travailler librement d\xe2\x80\x99un pays \xc3\xa0 l\xe2\x80\x99autre \xc2\xbb,</em> a r\xc3\xa9affirm\xc3\xa9 le ministre des transports.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour s'assurer du respect des engagements pris, des r\xc3\xa9unions minist\xc3\xa9rielles p\xc3\xa9riodiques seront organis\xc3\xa9es dans l\xe2\x80\x99optique d'\xc3\xa9valuer le niveau d'ex\xc3\xa9cution du plan et de r\xc3\xa9ajuster les prochaines \xc3\xa9tapes du processus d'int\xc3\xa9gration.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image -->\n<figure class=\"wp-block-image\"><img alt=\"\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>lanc\xc3\xa9 en 2018, le mutaa est un projet de l\xe2\x80\x99agenda 2063 de l\xe2\x80\x99union africaine, dont le togo est l'un des pays champions historiques. ce projet phare de l\xe2\x80\x99ua vise \xc3\xa0 lib\xc3\xa9raliser le ciel africain, promouvoir la connectivit\xc3\xa9 entre les pays et soutenir le d\xc3\xa9veloppement \xc3\xa9conomique par un transport a\xc3\xa9rien plus fluide et comp\xc3\xa9titif.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>jpb</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:15:23:57 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>le ciel africain s'ouvre un peu plus vers une int\xc3\xa9gration totale. dans le cadre de la convention et de l'exposition africaines du transport a\xc3\xa9rien, la capitale togolaise a abrit\xc3\xa9 un \xc3\xa9v\xc3\xa9nement majeur pour l'aviation continentale. le mercredi 17 juin 2026, le togo et la commission africaine de l\xe2\x80\x99aviation civile (cafac) ont officiellement scell\xc3\xa9 une convention d\xe2\x80\x99application pour renforcer la mise en \xc5\x93uvre du march\xc3\xa9 unique du transport a\xc3\xa9rien africain (mutaa).</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>un tournant d\xc3\xa9cisif dans l\xe2\x80\x99op\xc3\xa9rationnalisation du mutaa, vient d\xe2\x80\x99\xc3\xaatre marqu\xc3\xa9 avec la signature \xc3\xa0 lom\xc3\xa9 de la convention d\xe2\x80\x99application de cette initiative phare de l'union africaine, entre le togo et la commission africaine de l\xe2\x80\x99aviation civile (cafac).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la signature de cette convention, intervenue au troisi\xc3\xa8me jour des travaux \xc3\xa0 lom\xc3\xa9, a \xc3\xa9t\xc3\xa9 paraph\xc3\xa9e par le ministre togolais en charge des transport, komlan loukou-kadj\xc3\xa9, et le secr\xc3\xa9taire g\xc3\xa9n\xc3\xa9ral de la cafac, adefonke adeyemi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"566px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:566px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>ladite d\xc3\xa9marche vise \xc3\xa0 consolider la <em>d\xc3\xa9claration de lom\xc3\xa9 sur les d\xc3\xa9fis et l\xe2\x80\x99avenir du transport a\xc3\xa9rien africain</em>. l'ambition affich\xc3\xa9e est claire : faire tomber les barri\xc3\xa8res protectionnistes, faciliter les liaisons directes entre les nations s\xc5\x93urs du continent, renforcer la comp\xc3\xa9titivit\xc3\xa9 des compagnies a\xc3\xa9riennes locales et, \xc3\xa0 terme, faire baisser le co\xc3\xbbt des billets d'avion en afrique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que loin d'\xc3\xaatre une simple formalit\xc3\xa9 administrative, cet accord s'accompagne d'outils de gouvernance rigoureux pour garantir son succ\xc3\xa8s. le ministre komla loukou-kadj\xc3\xa9 a annonc\xc3\xa9 la mise en place imm\xc3\xa9diate d'une feuille de route assortie d\xe2\x80\x99un plan d\xe2\x80\x99action concret pour suivre les progr\xc3\xa8s technologiques et r\xc3\xa9glementaires.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab nous voulons que le ciel africain soit ouvert et nous voulons que toutes les compagnies puissent travailler librement d\xe2\x80\x99un pays \xc3\xa0 l\xe2\x80\x99autre \xc2\xbb,</em> a r\xc3\xa9affirm\xc3\xa9 le ministre des transports.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour s'assurer du respect des engagements pris, des r\xc3\xa9unions minist\xc3\xa9rielles p\xc3\xa9riodiques seront organis\xc3\xa9es dans l\xe2\x80\x99optique d'\xc3\xa9valuer le niveau d'ex\xc3\xa9cution du plan et de r\xc3\xa9ajuster les prochaines \xc3\xa9tapes du processus d'int\xc3\xa9gration.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31156,\"width\":\"582px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/cf280d22-5566-4950-b6b8-986b4a8db8fc-724x1024.jpg\" alt=\"\" class=\"wp-image-31156\" style=\"width:582px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>lanc\xc3\xa9 en 2018, le mutaa est un projet de l\xe2\x80\x99agenda 2063 de l\xe2\x80\x99union africaine, dont le togo est l'un des pays champions historiques. ce projet phare de l\xe2\x80\x99ua vise \xc3\xa0 lib\xc3\xa9raliser le ciel africain, promouvoir la connectivit\xc3\xa9 entre les pays et soutenir le d\xc3\xa9veloppement \xc3\xa9conomique par un transport a\xc3\xa9rien plus fluide et comp\xc3\xa9titif.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>jpb</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.203.227.31
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:6962233f35c6d63fbfae3c74d40ad43f6970fb32||Title:ydctwetr5bgmthgq||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 143.137.166.48
country_id: 6252001
domain: ekeasarl.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/130.0.0.0 Safari/537.36||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.203.227.31
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:85cfa494e4edf7463c0954f97a1a6a3d743c7517||Title:sejcecevw57ivuh||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.168
country_id: 1643084
description:
[2026-06-18 15:25:45 +0000] info [whostmgrd] 185.213.83.168 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 182.9.35.115
country_id: 1643084
description:
182.9.35.115 - - [18/Jun/2026:15:26:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7378330&pdata=https%253A%252F%252Ftogodailynews.tg%252Fdiplomatie-renforcement-de-laxe-lome-tokyo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781796398 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/diplomatie-renforcement-de-laxe-lome-tokyo/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.4452.1204 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:182.9.35.115


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 170.245.249.5
country_id: 3469034
description:
Jun 18 15:26:37 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 170.245.249.5 has been locked due to Imunify RBL


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.64.168
country_id: 3017382
domain: delxia.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/zykoahbv/public_html/.523517365622120.php||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.168
country_id: 1643084
description:
[2026-06-18 15:27:15 +0000] info [whostmgrd] 185.213.83.168 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.134.224.128
country_id: 6252001
description:
[2026-06-18 15:27:21 +0000] info [cpaneld] 45.134.224.128 - testsave "GET /execute/Email/list_pops?api.version=1 HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.168
country_id: 1643084
description:
[2026-06-18 15:28:37 +0000] info [whostmgrd] 185.213.83.168 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 212.87.243.85
country_id: 798544
description:
Jun 18 15:28:59 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 212.87.243.85 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.124
country_id: 1880251
description:
47.128.96.124 - - [18/Jun/2026:15:32:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12962198&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fsenegal%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781796724 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/senegal/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.124


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:15:32:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6986089&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781796750 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:15:32:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10077843&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781796745 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.89.140
country_id: 6252001
description:
[2026-06-18 15:32:28 +0000] info [cpaneld] 173.211.89.140 NEW doufelg:IfdSk7HW8I_zdxAW address=173.211.89.140,app=cpaneld,creator=doufelg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 118.101.206.190
country_id: 1733045
description:
118.101.206.190 - - [18/Jun/2026:15:33:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9791599&pdata=https%253A%252F%252Fcivilemagazine.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781796810 HTTP/2.0" 302 0 civilemagazine.tg "https://civilemagazine.tg/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.1057.1516 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:118.101.206.190


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 206.206.124.253
country_id: 6252001
domain: butodra.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:206.206.124.253||TA:206.206.124.253||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 119.157.76.30
country_id: 1168579
description:
[2026-06-18 15:34:50 +0000] info [cpaneld] 119.157.76.30 NEW dmmkifel:g0PxIAAiuxyosDWY address=119.157.76.30,app=cpaneld,creator=dmmkifel,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.185
country_id: 1880251
description:
47.128.96.185 - - [18/Jun/2026:15:36:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12752231&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fclicks-pharmacy%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781797012 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/clicks-pharmacy/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.185


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:15:38:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:15:38:23 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:15:38:28 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.124.59.10
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/07/B2PhotoA-20-1024x695-1.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2024/07/B2PhotoA-20-1024x695-1-300x204.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2024/07/B2PhotoA-20-1024x695-1-768x521.jpg 768w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:15:38:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.143
country_id: 3017382
description:
[2026-06-18 15:38:53 +0000] info [cpaneld] 5.231.64.143 NEW wwayrzpl:xSBfR4gMhY3K3C3J address=5.231.64.143,app=cpaneld,creator=wwayrzpl,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 191.183.2.35
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2020/11/secretaire.jpg 500w, http:/togodailynews.tg/wp-content/uploads/2020/11/secretaire-300x199.jpg 300w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 202.59.209.93
country_id: 1210997
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/www.sunu-group.com HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 196.170.76.223
country_id: 2363686
description:
[2026-06-18 15:47:53 +0000] info [cpaneld] 196.170.76.223 NEW jvrzfkho:cVjyY8Sy7b_5OYFC address=196.170.76.223,app=cpaneld,creator=jvrzfkho,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 15:48:29 +0000] info [cpaneld] 185.55.240.13 - aogodmm "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:15:48:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6604393&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781797727 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:15:48:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9857225&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781797729 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 190.89.45.54
country_id: 3658394
description:
190.89.45.54 - - [18/Jun/2026:15:49:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10184851&pdata=https%253A%252F%252Ftogodailynews.tg%252F%253Fp%253D21319&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781797750 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/?p=21319" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:190.89.45.54


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.234.111.154
country_id: 1562822
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/une-delegation-americaine-en-immersion-culturelle-au-togo/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77391380
name: IM360 WAF: Possible SQLi in arguments
abuser: 102.211.168.154
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Possible SQLi in arguments||MVN:ARGS:meta.ast-page-background-meta.desktop.background-color||MV:var(--ast-global-color-5)||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.211.168.154
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Possible XSS in arguments||MV:[{\"id\":\"519490ff\",\"eltype\":\"container\",\"settings\":{\"margin\":{\"unit\":\"px\",\"top\":\"0\",\"right\":0,\"bottom\":\"0\",\"left\":0,\"islinked\":false},\"padding\":{\"unit\":\"px\",\"top\":\"100\",\"right\":\"0\",\"bottom\":\"100\",\"left\":\"0\",\"islinked\":false},\"ekit_all_conditions_list\":[{\"_id\":\"675918e\"}],\"ekit_section_parallax_multi_items\":[],\"ekit_cursor_text_label\":\"elementskit cursor\",\"flex_direction\":\"column\",\"flex_align_items\":\"stretch\",\"flex_gap\":{\"size\":10,\"column\":\"10\",\"row\":\"10\",\"unit\":\"px\",\"islinked\":true}},\"elements\":[{\"id\":\"46546c00\",\"eltype\":\"widget\",\"settings\":{\"ekit_heading_title\":\"modern image box\",\"ekit_heading_sub_title\":\"time has changed\",\"ekit_heading_title_align\":\"center\",\"ekit_heading_seperator_width\":{\"unit\":\"px\",\"size\":\"40\",\"sizes\":[]},\"_margin\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"40\",\"left\":\"0\",\"islinked\":\"\"},\"ekit_heading_section_extra_title_show\":\"yes\",\"ekit_heading_extra_title\":\"<p><span style=\\\"font-weight: 400\\\">give your images modern look with elementor modern image box.<\\/span><\\/p>\",\"shadow_text_content\":\"bussiness\",\"ekit_all_conditions_list\":[{\"_id\":\"8aeaf27\"}],\"ekit_heading_seperator_image\":{\"id\":\"\",\"url\":\"https:\\/\\/camilliens.tg\\/wp-content\\/plugins\\/elementor\\/assets\\/images\\/placeholder.png\"},\"ekit_adv_tooltip_content\":\"tooltip content.\",\"ekit_cursor_text_label\":\"elementskit cursor\"},\"elements\":[],\"widgettype\":\"elementskit-heading\"},{\"id\":\"10e2fb04\",\"eltype\":\"container\",\"settings\":{\"structure\":\"30\",\"ekit_all_conditions_list\":[{\"_id\":\"e02bbad\"}],\"ekit_section_parallax_multi_items\":[],\"ekit_cursor_text_label\":\"elementskit cursor\",\"flex_direction\":\"row\",\"flex_align_items\":\"stretch\",\"flex_gap\":{\"size\":10,\"column\":\"10\",\"row\":\"10\",\"unit\":\"px\",\"islinked\":true},\"content_width\":\"full\",\"container_type\":\"grid\",\"presettitle\":\"grid\",\"preseticon\":\"eicon-container-grid\",\"grid_rows_grid\":{\"unit\":\"fr\",\"size\":1,\"sizes\":[]}},\"elements\":[{\"id\":\"2c3d08f6\",\"eltype\":\"widget\",\"settings\":{\"ekit_image_box_image\":{\"id\":274,\"url\":\"https:\\/\\/camilliens.tg\\/wp-content\\/uploads\\/2026\\/06\\/image-accordion-10.jpg\"},\"ekit_image_box_title_text\":\"this is the heading\",\"ekit_image_box_description_text\":\"trying to add add image box to your wordpress sites? no worries! \",\"ekit_image_box_btn_text\":\"\",\"ekit_image_box_icon\":\"icon icon-right-arrow2\",\"ekit_image_box_text_padding\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"islinked\":\"1\"},\"ekit_image_box_btn_icon_font_size\":{\"unit\":\"px\",\"size\":\"18\"},\"ekit_image_box_button_text_color\":\"#2575fc\",\"ekit_image_box_btn_background_group_background\":\"classic\",\"ekit_image_box_btn_background_group_color\":\"rgba(0,0,0,0)\",\"ekit_image_box_btn_border_radius\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"islinked\":\"1\"},\"ekit_imagebox_container_border_group_border\":\"solid\",\"ekit_imagebox_container_border_group_width\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"1\",\"bottom\":\"1\",\"left\":\"1\",\"islinked\":\"\"},\"ekit_imagebox_container_border_group_color\":\"#f5f5f5\",\"ekit_image_box_heading_color\":\"#000000\",\"ekit_image_box_thumbnail_custom_dimension\":{\"width\":\"20\",\"height\":\"20\"},\"ekit_image_box_style_simple\":\"style-modern\",\"ekit_image_box_enable_btn\":\"\",\"ekit_image_box_image_classic_curves_width\":{\"unit\":\"%\",\"size\":\"90\"},\"ekit_all_conditions_list\":[{\"_id\":\"dde750a\"}],\"ekit_adv_tooltip_content\":\"tooltip content.\",\"ekit_cursor_text_label\":\"elementskit cursor\"},\"elements\":[],\"widgettype\":\"elementskit-image-box\"},{\"id\":\"39276810\",\"eltype\":\"widget\",\"settings\":{\"ekit_image_box_image\":{\"id\":275,\"url\":\"https:\\/\\/camilliens.tg\\/wp-content\\/uploads\\/2026\\/06\\/image-accordion-4.jpg\"},\"ekit_image_box_title_text\":\"this is the heading\",\"ekit_image_box_description_text\":\"want to customize elementor image box height? here we have the solution!\",\"ekit_image_box_btn_text\":\"\",\"ekit_image_box_icon\":\"icon icon-right-arrow2\",\"ekit_image_box_text_padding\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"islinked\":\"1\"},\"ekit_image_box_btn_icon_font_size\":{\"unit\":\"px\",\"size\":\"18\"},\"ekit_image_box_button_text_color\":\"#2575fc\",\"ekit_image_box_btn_background_group_background\":\"classic\",\"ekit_image_box_btn_background_group_color\":\"rgba(0,0,0,0)\",\"ekit_image_box_btn_border_radius\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"islinked\":\"1\"},\"ekit_imagebox_container_border_group_border\":\"solid\",\"ekit_imagebox_container_border_group_width\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"1\",\"bottom\":\"1\",\"left\":\"1\",\"islinked\":\"\"},\"ekit_imagebox_container_border_group_color\":\"#f5f5f5\",\"ekit_image_box_heading_color\":\"#000000\",\"ekit_image_box_thumbnail_custom_dimension\":{\"width\":\"20\",\"height\":\"20\"},\"ekit_image_box_style_simple\":\"style-modern\",\"ekit_image_box_enable_btn\":\"\",\"ekit_image_box_image_classic_curves_width\":{\"unit\":\"%\",\"size\":\"90\"},\"ekit_all_conditions_list\":[{\"_id\":\"bba77af\"}],\"ekit_adv_tooltip_content\":\"tooltip content.\",\"ekit_cursor_text_label\":\"elementskit cursor\"},\"elements\":[],\"widgettype\":\"elementskit-image-box\"},{\"id\":\"7df0bb60\",\"eltype\":\"widget\",\"settings\":{\"ekit_image_box_image\":{\"id\":276,\"url\":\"https:\\/\\/camilliens.tg\\/wp-content\\/uploads\\/2026\\/06\\/image-accordion-13.jpg\"},\"ekit_image_box_title_text\":\"this is the heading\",\"ekit_image_box_description_text\":\"do you know how to add elementor image box with button? \",\"ekit_image_box_btn_text\":\"\",\"ekit_image_box_icon\":\"icon icon-right-arrow2\",\"ekit_image_box_text_padding\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"islinked\":\"1\"},\"ekit_image_box_btn_icon_font_size\":{\"unit\":\"px\",\"size\":\"18\"},\"ekit_image_box_button_text_color\":\"#2575fc\",\"ekit_image_box_btn_background_group_background\":\"classic\",\"ekit_image_box_btn_background_group_color\":\"rgba(0,0,0,0)\",\"ekit_image_box_btn_border_radius\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"islinked\":\"1\"},\"ekit_imagebox_container_border_group_border\":\"solid\",\"ekit_imagebox_container_border_group_width\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"1\",\"bottom\":\"1\",\"left\":\"1\",\"islinked\":\"\"},\"ekit_imagebox_container_border_group_color\":\"#f5f5f5\",\"ekit_image_box_heading_color\":\"#000000\",\"ekit_image_box_thumbnail_custom_dimension\":{\"width\":\"20\",\"height\":\"20\"},\"ekit_image_box_style_simple\":\"style-modern\",\"ekit_image_box_enable_btn\":\"\",\"ekit_image_box_image_classic_curves_width\":{\"unit\":\"%\",\"size\":\"90\"},\"ekit_all_conditions_list\":[{\"_id\":\"df555a2\"}],\"ekit_adv_tooltip_content\":\"tooltip content.\",\"ekit_cursor_text_label\":\"elementskit cursor\"},\"elements\":[],\"widgettype\":\"elementskit-image-box\"}],\"isinner\":true}],\"isinner\":false}]||RSV:8.18||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 45.140.251.113
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:45.140.251.113||TA:45.140.251.113||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 191.101.188.218
country_id: 6252001
domain: www.togosem.com
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:191.101.188.218||TA:191.101.188.218||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:15:51:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051721&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781797865 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 115.133.214.192
country_id: 1733045
description:
115.133.214.192 - - [18/Jun/2026:15:52:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7103642&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fenseignants-regionaux-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781797954 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/enseignants-regionaux-togo/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.5233.1902 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:115.133.214.192


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:15:54:11 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:15:54:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:15:54:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:15:54:13 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 15:54:58 +0000] info [cpaneld] 185.55.240.13 - lxsenjdd_farms "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lxsenjdd_farms (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.158.107.36
country_id: 2400553
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/actualite/detail/assemblee-generale-ordinaire-et-budgetaire-du-cat-04-mars-2025 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6070
name: Attempt to upload malware through cPanel file manager
description:
Jun 18 15:58:22 ns5.netmaster.tg cpanel_fileman_hook[3042583]: 0 BAILOUT malware detected when save 'test123Cp.php' in public_html for user qfaclpeg


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 15:58:41 +0000] info [cpaneld] 185.55.240.13 - heroes "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user heroes (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.9.38
country_id: 3175395
description:
Jun 18 16:00:23 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.9.38 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 171.231.231.245
country_id: 1562822
description:
171.231.231.245 - - [18/Jun/2026:15:59:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6645650&pdata=https%253A%252F%252F24heureinfo.tg%252Fsante%252Fchr-dapaong-renforcement-continu-du-service-de-la-radiologie-en-equipements&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781798370 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/sante/chr-dapaong-renforcement-continu-du-service-de-la-radiologie-en-equipements" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:171.231.231.245


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.58.39.203
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1640703960 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.9.38
country_id: 3175395
description:
Jun 18 16:00:29 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.9.38 has been locked due to Imunify RBL


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 43.173.180.34
country_id: 1880251
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:page_title||MV:Opportunit\xc3\xa9s d\xe2\x80\x99investissement\xc2\xa0: Lom\xc3\xa9 accueille l\xe2\x80\x99Africa executing meeting 2023||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 62.201.243.41
country_id: 99237
description:
62.201.243.41 - - [18/Jun/2026:16:03:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6800227&pdata=https%253A%252F%252Ftogodailynews.tg%252Ffinance-islamique-le-togo-annonce-le-remboursement-partiel-du-sukuk-etat-du-togo-650-2016-2026%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781798582 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/finance-islamique-le-togo-annonce-le-remboursement-partiel-du-sukuk-etat-du-togo-650-2016-2026/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.6804.1927 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:62.201.243.41


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 181.140.113.75
country_id: 3686110
description:
181.140.113.75 - - [18/Jun/2026:16:03:52 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000328&pdata=https%253A%252F%252Ftogodailynews.tg%252Fcategory%252Factualites%252Fpage%252F5%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781798630 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/category/actualites/page/5/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.7841.1801 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:181.140.113.75


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:16:03:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9726566&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781798619 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:16:03:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6604230&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781798618 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:16:05:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9802647&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781798756 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 91.73.137.218
country_id: 290557
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/11/images-2.jpg 275w, http:/togodailynews.tg/wp-content/uploads/2024/11/images-2-272x182.jpg 272w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:16:07:36 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:16:07:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:16:07:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:16:07:40 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.76.138.143
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2020/11/Etsri.jpg 770w, http:/togodailynews.tg/wp-content/uploads/2020/11/Etsri-300x169.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2020/11/Etsri-768x432.jpg 768w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 16:08:55 +0000] info [cpaneld] 185.55.240.13 - tqttxcvn "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tqttxcvn (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.162
country_id: 1880251
description:
47.128.96.162 - - [18/Jun/2026:16:11:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9989987&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Frobotique%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781799101 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/robotique/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.162


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 213.230.87.89
country_id: 1512440
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/11/WhatsApp-Image-2024-11-26-at-18.03.30-1-1024x461.jpeg 1024w, http:/togodailynews.tg/wp-content/uploads/2024/11/WhatsApp-Image-2024-11-26-at-18.03.30-1-300x135.jpeg 300w, http:/togodailynews.tg/wp-content/uploads/2024/11/WhatsApp-Image-2024-11-26-at-18.03.30-1-768x346.jpeg 768w, http:/togodailynews.tg/wp-content/uploads/2024/11/WhatsApp-Image-2024-11-26-at-18.03.30-1.jpeg 1040w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.12
country_id: 1880251
description:
47.128.96.12 - - [18/Jun/2026:16:12:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9857684&pdata=https%253A%252F%252Ftdn.tg%252Frepartition-centres-ecrit-ministere-economie-finances%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781799173 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/repartition-centres-ecrit-ministere-economie-finances/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.12


plugin: modsec
rule: 77350169
name: IM360 WAF: Improper access check in webservice endpoints in Joomla! (CVE-2023-23752)
abuser: 47.237.214.102
country_id: 1880251
domain: batika.free.netmaster.tg
description:
IM360 WAF: Improper access check in webservice endpoints in Joomla! (CVE-2023-23752)||MV:true||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.171.43
country_id: 3175395
description:
Jun 18 16:16:31 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.171.43 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 114.130.174.138
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/05/1er-mai-2024.jpg 800w, http:/togodailynews.tg/wp-content/uploads/2024/05/1er-mai-2024-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2024/05/1er-mai-2024-768x512.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2024/05/1er-mai-2024-272x182.jpg 272w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:16:17:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7314800&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781799472 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:16:17:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6788712&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781799473 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:16:19:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12937322&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781799583 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 152.243.99.180
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2022/11/Page-4-A.jpg 787w, http:/togodailynews.tg/wp-content/uploads/2022/11/Page-4-A-300x156.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2022/11/Page-4-A-768x400.jpg 768w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:16:22:05 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:16:22:01 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:16:22:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:16:22:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 16:25:01 +0000] info [cpaneld] 185.55.240.13 - enadamso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user enadamso (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.38.16.60
country_id: 6252001
description:
[2026-06-18 16:25:07 +0000] info [whostmgrd] 45.38.16.60 - anadebfreenetmas "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 16:26:23 +0000] info [cpaneld] 185.55.240.13 - benoit21112@gmail.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 202.51.92.1
country_id: 1282988
description:
202.51.92.1 - - [18/Jun/2026:16:25:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10011751&pdata=https%253A%252F%252Ftogodailynews.tg%252Fprojet-passco-la-phase-3-officiellement-lance-a-pesside-dans-la-keran%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781799924 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/projet-passco-la-phase-3-officiellement-lance-a-pesside-dans-la-keran/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.1362.1814 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:202.51.92.1


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.71.21.70
country_id: 1562822
description:
2026-06-18 16:26:10 dovecot_login authenticator failed for H=(mx-ll-183.89.250-247.dynamic.3bb.in.th) [27.71.21.70]:12565: 535 Incorrect authentication data (set_id=dbabima@otr.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.38.16.60
country_id: 6252001
description:
[2026-06-18 16:26:26 +0000] info [whostmgrd] 45.38.16.60 - netmast "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.38.16.60
country_id: 6252001
description:
[2026-06-18 16:28:11 +0000] info [whostmgrd] 45.38.16.60 - c1565738c "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.100
country_id: 3469034
description:
2026-06-18 16:30:25 dovecot_plain authenticator failed for H=([192.168.15.9]) [104.28.152.100]:48308: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.38.16.60
country_id: 6252001
description:
[2026-06-18 16:31:03 +0000] info [whostmgrd] 45.38.16.60 - masfloy "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 188.113.217.168
country_id: 1512440
description:
2026-06-18 16:31:15 H=([188.113.217.168]) [188.113.217.168]:26746 F=<John@4452.com> rejected RCPT <jean@zephyr.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.100
country_id: 3469034
description:
2026-06-18 16:30:31 dovecot_login authenticator failed for H=([192.168.15.9]) [104.28.152.100]:48308: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 200.50.233.173
country_id: 3658394
description:
200.50.233.173 - - [18/Jun/2026:16:32:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6907492&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D10279&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781800326 HTTP/2.0" 302 0 mediatopnews.tg "https://mediatopnews.tg/?p=10279" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.4238.1608 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:200.50.233.173


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:16:34:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13199212&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781800453 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:16:34:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6986604&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781800454 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:16:34:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10012569&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781800497 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:16:36:32 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:16:36:36 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 16:36:41 +0000] info [cpaneld] 102.54.238.57 - wgqhqbem "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:16:36:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.38.16.60
country_id: 6252001
description:
[2026-06-18 16:36:34 +0000] info [cpaneld] 45.38.16.60 - czqxxxnu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User czqxxxnu has their account suspended. Login blocked.


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:16:36:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.119.142
country_id: 1880251
description:
47.128.119.142 - - [18/Jun/2026:16:36:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7050188&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D11040&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781800602 HTTP/2.0" 302 0 mediatopnews.tg "https://mediatopnews.tg/?p=11040" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.119.142


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.49.115.208
country_id: 1210997
description:
103.49.115.208 - - [18/Jun/2026:16:37:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10186392&pdata=https%253A%252F%252F24heureinfo.tg%252F%253Fp%253D25950&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781800673 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/?p=25950" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.49.115.208


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-18 16:42:43 +0000] info [webmaild] 160.242.195.10 - tbassowa@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.64
country_id: 2635167
description:
[2026-06-18 16:44:10 +0000] info [cpaneld] 5.230.133.64 NEW vejjghdd:bGzb3RjGrXAQkD51 address=5.230.133.64,app=cpaneld,creator=vejjghdd,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [18/Jun/2026:16:44:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7261292&pdata=https%253A%252F%252Fvitrinenews.tg%252Fweb%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781801079 HTTP/2.0" 302 0 vitrinenews.tg "https://vitrinenews.tg/web/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.51
country_id: 6252001
description:
205.169.39.51 - - [18/Jun/2026:16:45:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7235229&pdata=https%253A%252F%252Fvitrinenews.tg%252Fweb%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781801129 HTTP/2.0" 302 0 vitrinenews.tg "https://vitrinenews.tg/web/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.51


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [18/Jun/2026:16:45:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13015450&pdata=https%253A%252F%252Fvitrinenews.tg%252Fweb%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781801134 HTTP/2.0" 302 0 vitrinenews.tg "https://vitrinenews.tg/web/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-18 16:47:21 +0000] info [webmaild] 196.171.46.177 - kekeli.alemawo@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.29.172.4
country_id: 192950
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/12/IMG-20200728-WA0102.jpg 486w, http:/togodailynews.tg/wp-content/uploads/2021/12/IMG-20200728-WA0102-300x230.jpg 300w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.170.114.210
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2022/12/WhatsApp-Image-2022-12-27-at-07.23.08-1-1024x767.jpeg 1024w, http:/togodailynews.tg/wp-content/uploads/2022/12/WhatsApp-Image-2022-12-27-at-07.23.08-1-300x225.jpeg 300w, http:/togodailynews.tg/wp-content/uploads/2022/12/WhatsApp-Image-2022-12-27-at-07.23.08-1-768x575.jpeg 768w, http:/togodailynews.tg/wp-content/uploads/2022/12/WhatsApp-Image-2022-12-27-at-07.23.08-1.jpeg 1280w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 209.164.227.12
country_id: 6252001
domain: www.arse.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.arse.tg/wp-content/uploads/2014/11/Communiqu\xc3\xa9-CEET.pdf HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:16:49:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13081239&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781801396 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:16:49:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7169946&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781801397 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:16:50:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9619048&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781801453 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 87.201.76.147
country_id: 290557
description:
87.201.76.147 - - [18/Jun/2026:16:50:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10209434&pdata=https%253A%252F%252F24heureinfo.tg%252Fenvironnement%252Fpage%252F2&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781801454 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/environnement/page/2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:87.201.76.147


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [18/Jun/2026:16:50:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10471836&pdata=https%253A%252F%252Fvitrinenews.tg%252Fweb%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781801440 HTTP/2.0" 302 0 vitrinenews.tg "https://vitrinenews.tg/web/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:16:51:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:16:51:51 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: modsec
rule: 77350586
name: IM360 WAF: Suspicious access to wp-includes library directory
abuser: 152.32.145.156
country_id: 1861060
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Suspicious access to wp-includes library directory||SC:/home/ygpdcalt/public_html/wp-includes/SimplePie/about.php||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:16:51:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:16:51:57 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 110.137.74.2
country_id: 1643084
description:
110.137.74.2 - - [18/Jun/2026:16:52:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6854809&pdata=https%253A%252F%252F24heureinfo.tg%252Fsante%252Fsante-dr-gilbert-tsolenyanu-elu-a-la-tete-du-synphot%252Ffeed&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781801575 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/sante/sante-dr-gilbert-tsolenyanu-elu-a-la-tete-du-synphot/feed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:110.137.74.2


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 207.97.164.70
country_id: 6252001
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/images/other/image-school-begin.jpg HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 109.204.62.18
country_id: 298795
description:
[2026-06-18 16:55:17 +0000] info [cpaneld] 109.204.62.18 NEW dmmkifel:gE526T1J9QQmYUaV address=109.204.62.18,app=cpaneld,creator=dmmkifel,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 138.199.60.176
country_id: 1880251
description:
[2026-06-18 16:56:53 +0000] info [cpaneld] 138.199.60.176 NEW dmmkifel:Z9kXCY5vC9xEX5Gh address=138.199.60.176,app=cpaneld,creator=dmmkifel,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.114.145.111
country_id: 587116
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/prubeneficial.tg HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 138.199.60.176
country_id: 1880251
description:
[2026-06-18 16:56:43 +0000] info [cpaneld] 138.199.60.176 - dmmkifel "GET /cpsess0310670397/frontend/jupiter/filemanager/index.html HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [109.204.62.18] != Current IP Address [138.199.60.176]


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 92.124.154.154
country_id: 2017370
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:16-58.92.124.154.154||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 168.228.21.215
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/12/CONIIA2-3-1024x768.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2025/12/CONIIA2-3-300x225.webp 300w, http:/togodailynews.tg/wp-content/uploads/2025/12/CONIIA2-3-768x576.webp 768w, http:/togodailynews.tg/wp-content/uploads/2025/12/CONIIA2-3.webp 1040w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 207.97.150.68
country_id: 6252001
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/423.png HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 16:59:09 +0000] info [cpaneld] 185.55.240.13 - folifafa@fafagraphisme.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 172.171.120.149
country_id: 6252001
domain: www.cameg-togo.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350374
name: IM360 WAF: Scan attempt by bytespider crawler
abuser: 47.128.21.21
country_id: 1880251
domain: www.matwtogo.org
description:
IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 40.69.221.28
country_id: 2963597
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/index.php/wp-json/wp/v2/users/me?context=edit&_locale=user||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:17:04:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935559&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781802245 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:17:04:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10132889&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781802251 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 165.99.60.221
country_id: 1282988
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/presentation HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 14.181.210.227
country_id: 1562822
domain: ca-togo.org
description:
IM360 WAF: Bad file extension||RSV:8.19||T:APACHE||MVN:REQUEST_FILENAME||MV:/www.nsiassurancestogo.com||User:egjvuiox||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.181.210.227
country_id: 1562822
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/www.nsiassurancestogo.com HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 123.21.18.89
country_id: 1562822
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/donnee/5 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [18/Jun/2026:17:05:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7117158&pdata=https%253A%252F%252Fvitrinenews.tg%252Fweb%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781802317 HTTP/2.0" 302 0 vitrinenews.tg "https://vitrinenews.tg/web/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:17:04:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6723482&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781802292 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:17:06:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:17:06:09 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:17:06:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.120.248.166
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2020/07/IMG_20200706_085739-1024x768.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2020/07/IMG_20200706_085739-300x225.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2020/07/IMG_20200706_085739-768x576.jpg 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:17:06:06 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.38.16.60
country_id: 6252001
description:
[2026-06-18 17:06:59 +0000] info [cpaneld] 45.38.16.60 - einguval "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user einguval (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.169.23.213
country_id: 2363686
description:
[2026-06-18 17:07:01 +0000] info [webmaild] 196.169.23.213 - raouf.damtare@togointerim.net "GET /cpsess4996778301/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1%2Cpgpmime%3D0&_uid=54&_mbox=INBOX&_action=show HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 204.157.177.98
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/a38f81 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 213.230.86.222
country_id: 1512440
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1579969462 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 109.83.86.80
country_id: 102358
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2020/07/IMG_20200706_084752-1024x768.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2020/07/IMG_20200706_084752-300x225.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2020/07/IMG_20200706_084752-768x576.jpg 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.130.30.230
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/9f9188 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.38.16.60
country_id: 6252001
description:
[2026-06-18 17:07:55 +0000] info [cpaneld] 45.38.16.60 - whmcsadmin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user whmcsadmin (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.125
country_id: 1880251
description:
47.128.121.125 - - [18/Jun/2026:17:08:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13407126&pdata=https%253A%252F%252Fdirect7.tg%252Ftag%252Fcouffeurs%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781802494 HTTP/2.0" 302 0 direct7.tg "https://direct7.tg/tag/couffeurs/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.125


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.143.224.246
country_id: 2635167
domain: www.cinema.free.netmaster.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:104.143.224.246||TA:104.143.224.246||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.90.102.87
country_id: 192950
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2022/12/WhatsApp-Image-2022-12-27-at-07.23.07.jpeg 1280w, http:/togodailynews.tg/wp-content/uploads/2022/12/WhatsApp-Image-2022-12-27-at-07.23.07-300x169.jpeg 300w, http:/togodailynews.tg/wp-content/uploads/2022/12/WhatsApp-Image-2022-12-27-at-07.23.07-768x432.jpeg 768w, http:/togodailynews.tg/wp-content/uploads/2022/12/WhatsApp-Image-2022-12-27-at-07.23.07-1024x576.jpeg 1024w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.70.53.134
country_id: 192950
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/355964237 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 33375
name: IM360 WAF: XMLRPC fault response
abuser: 152.59.155.90
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XMLRPC fault response||MV:<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<methodResponse>\n  <fault>\n    <value>\n      <struct>\n        <member>\n          <name>faultCode</name>\n          <value><int>403</int></value>\n        </member>\n        <member>\n          <name>faultString</name>\n          <value><string>Identifiant ou mot de passe incorrect.</string></value>\n        </member>\n      </struct>\n    </value>\n  </fault>\n</methodResponse>\n||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 152.59.155.90
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ac4d8c1cf2bfbf5ca8f30e430d2cf5393769745d||Title:y04iex9l7w8ka7vlr||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.80.12.69
country_id: 3508796
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/b8ae9d HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 152.59.155.90
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:9ce8074622efb240c1ea28b316a6569b54c2ffb2||Title:gw7i53otf3djx52||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 65.111.30.185
country_id: 3017382
domain: togosem.com
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/wp-json/wp/v2/users||


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 43.173.176.88
country_id: 1880251
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:request_uri||MV:les-performances-de-ladministration-fiscale-de-lotr-en-evaluation/||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 152.59.155.90
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:456fbf4b6fd13584cf006ed551de47e4cfb46b4e||Title:dhx3zs2ivwygbxhs6||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 17:14:01 +0000] info [cpaneld] 185.55.240.13 - contactmairieaneho "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user contactmairieaneho (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 152.59.155.90
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1c3ff4c376d079718dc697e7bedd93bb9c37e70a||Title:cqia1q1apqiszf9ly||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.85.107.191
country_id: 3469034
description:
Jun 18 17:14:54 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.85.107.191 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 188.233.4.80
country_id: 2017370
description:
2026-06-18 17:14:40 H=([188.233.4.80]) [188.233.4.80]:5350 F=<John@4452.com> rejected RCPT <pibno@zephyr.tg>: Sender verify failed


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 152.59.155.90
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:04cdeb173dffddfca949f418a6d7a7190340cb55||Title:8626fhtoloegi3n090||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 109.229.27.206
country_id: 690791
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/781126194 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.179.244.10
country_id: 1210997
description:
103.179.244.10 - - [18/Jun/2026:17:17:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10065519&pdata=https%253A%252F%252Ftogodailynews.tg%252Ftinga-cizo-et-les-centrales-solaires-luttent-contre-lobscurite-au-togo&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781803029 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/tinga-cizo-et-les-centrales-solaires-luttent-contre-lobscurite-au-togo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.179.244.10


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:17:19:44 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:17:19:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 198.163.195.12
country_id: 1512440
description:
2026-06-18 17:20:05 H=([0.0.0.0]) [198.163.195.12]:24881 F=<John@4452.com> rejected RCPT <j.delbegue@tps.tg>: Sender verify failed


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:17:19:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:17:19:48 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:17:20:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7497579&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781803222 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:17:21:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6710675&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781803277 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:17:20:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10459751&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781803224 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 65.20.152.43
country_id: 99237
description:
Jun 18 17:20:26 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 65.20.152.43 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.38.16.60
country_id: 6252001
description:
[2026-06-18 17:22:12 +0000] info [cpaneld] 45.38.16.60 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 152.59.155.90
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ef07ebba9296a9887da754ccafff87d1c9245571||Title:frgxcz8xaytr415||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 152.59.155.90
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:2088acbd24f3c5648231f18b5ee45e38b1fb2201||Title:g7ew85lt376o47||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.168.203.131
country_id: 2363686
description:
[2026-06-18 17:25:20 +0000] info [webmaild] 196.168.203.131 - bminko@caissede retraites.tg "POST /login/ HTTP/1.1" FAILED LOGIN webmaild: invalid user name specified


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - e.senahounvo@davakconsulting.com [06/18/2026:17:25:55 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: e.senahounvo@davakconsulting.com


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.168.203.131
country_id: 2363686
description:
[2026-06-18 17:25:57 +0000] info [webmaild] 196.168.203.131 - bminko@caissede retraites.tg "POST /login/ HTTP/1.1" FAILED LOGIN webmaild: invalid user name specified


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 152.59.155.90
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:e0946f8eefabf5efd5d64c765fc05b0b36aef0f5||Title:ingh3mgci41a9grp||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 152.59.155.90
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d6b3618f25954760b6637b52a4a3bb3d0b6c1b07||Title:qpw1af1a0obfa2e||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.117.162.137
country_id: 2542007
description:
2026-06-18 17:28:17 dovecot_plain authenticator failed for H=(MacBook-Pro-de-Mac-2.local) [196.117.162.137]:56668: 535 Incorrect authentication data (set_id=delegues)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 152.59.155.90
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:09fb3daf5d553afc61ab994dbdcbb111b26d4006||Title:fg938e1vieimkr||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 196.117.162.137
country_id: 2542007
description:
Jun 18 17:28:15 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 196.117.162.137 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.47.125
country_id: 2300660
description:
Jun 18 17:29:24 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.47.125 has been locked due to Imunify RBL


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 102.211.168.154
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:data[0][message]||MV:Failed to execute 'querySelector' on 'Document': '#' is not a valid selector.||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 17:31:02 +0000] info [cpaneld] 185.55.240.13 - netflix "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user netflix (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:17:33:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:17:33:47 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:17:33:50 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:17:33:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.245.49.5
country_id: 1880251
description:
[2026-06-18 17:34:06 +0000] info [whostmgrd] 157.245.49.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.42.182.215
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/6e6658 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:17:35:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6788247&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781804102 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:17:35:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10012612&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781804100 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 16.61.62.181
country_id: 2635167
description:
2026-06-18 17:35:41 dovecot_plain authenticator failed for H=ec2-16-61-62-181.eu-west-2.compute.amazonaws.com (msjoo5v61znay0gu2tvcz11h9) [16.61.62.181]:53594: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:17:36:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9749608&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781804190 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-18 17:38:18 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:43246: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.13.69.103
country_id: 3175395
description:
Jun 18 17:37:31 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.13.69.103 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 5.62.151.78
country_id: 99237
description:
5.62.151.78 - - [18/Jun/2026:17:38:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10013080&pdata=https%253A%252F%252Fwebmail.appflutter.free.netmaster.tg%252F%253Flocale%253Den&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781804314 HTTP/2.0" 302 0 webmail.appflutter.free.netmaster.tg "https://webmail.appflutter.free.netmaster.tg/?locale=en" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:5.62.151.78


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.158.193.36
country_id: 2400553
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/261059473 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 46.151.182.158
country_id: 2750405
description:
2026-06-18 17:44:10 H=([46.151.182.158]) [46.151.182.158]:60131 F=<d.burgher@sbcglobal.net> rejected RCPT <contact@sthandling-aero.tg>: The mail server could not deliver mail to contact@sthandling-aero.tg.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-18 17:43:58 +0000] info [webmaild] 160.242.195.10 - kabou@caissederetraites.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.221.131.221
country_id: 690791
description:
Jun 18 17:47:20 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.221.131.221 has been locked due to Imunify RBL


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.170.114.148
country_id: 2363686
domain: vitrinenews.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/wp-json/wp/v2/users/2?context=view&_fields=id%2Cname&_locale=user||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.221.131.221
country_id: 690791
description:
Jun 18 17:47:27 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.221.131.221 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.159.122.42
country_id: 3865483
description:
Jun 18 17:47:35 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.159.122.42 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 116.101.10.166
country_id: 1562822
description:
2026-06-18 17:48:51 dovecot_plain authenticator failed for H=(zeevcv3dnrms2jb99ek) [116.101.10.166]:47933: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.17.124.19
country_id: 690791
description:
Jun 18 17:48:56 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.17.124.19 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 17:48:58 +0000] info [cpaneld] 185.55.240.13 - sbnjjkvc "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sbnjjkvc (has_cpuser_file failed)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:17:49:51 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:17:49:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:17:49:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:17:49:51 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.254.11.38
country_id: 2921044
description:
[2026-06-18 17:51:16 +0000] info [whostmgrd] 178.254.11.38 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 178.254.11.38
country_id: 2921044
description:
[2026-06-18 17:51:17 +0000] info [whostmgrd] 178.254.11.38 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:17:51:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6855277&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781805097 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:17:51:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10120089&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781805097 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.164.246.242
country_id: 1269750
description:
Jun 18 17:51:51 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.164.246.242 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:17:53:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6725323&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781805195 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 202.36.122.24
country_id: 1210997
description:
202.36.122.24 - - [18/Jun/2026:17:53:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7247253&pdata=https%253A%252F%252F24heureinfo.tg%252Fdeveloppement%252Ftogo-lancement-du-reseau-africain-pour-la-promotion-de-lentrepreneuriat-agricole&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781805218 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/developpement/togo-lancement-du-reseau-africain-pour-la-promotion-de-lentrepreneuriat-agricole" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:202.36.122.24


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.246.222.114
country_id: 732800
description:
Jun 18 17:54:34 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.246.222.114 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.246.222.114
country_id: 732800
description:
2026-06-18 17:54:36 dovecot_plain authenticator failed for H=(cb44aqmvldt8cfig2iyh7) [185.246.222.114]:36014: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.219.101.34
country_id: 798544
description:
Jun 18 17:55:49 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.219.101.34 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 192.186.185.231
country_id: 6252001
domain: www.cfmi.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:192.186.185.231||TA:192.186.185.231||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.90.36.244
country_id: 192950
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/08/OANDO-Picture-Cropped-768x392-1.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2024/08/OANDO-Picture-Cropped-768x392-1-300x153.jpg 300w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 17:59:12 +0000] info [cpaneld] 185.55.240.13 - concours "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user concours (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 182.95.61.114
country_id: 1269750
description:
Jun 18 18:00:15 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 182.95.61.114 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.61.114
country_id: 1269750
description:
2026-06-18 18:00:17 dovecot_login authenticator failed for H=(host-91-202-230-214.static.oc3.zagan.visnet.pl) [182.95.61.114]:41982: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 106.0.59.2
country_id: 1269750
description:
106.0.59.2 - - [18/Jun/2026:18:00:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6853785&pdata=https%253A%252F%252Fcpanel.kifchange.free.netmaster.tg%252F%253Flocale%253Del&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781805636 HTTP/2.0" 302 0 cpanel.kifchange.free.netmaster.tg "https://cpanel.kifchange.free.netmaster.tg/?locale=el" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:106.0.59.2


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.184.250.161
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/c7b4a4 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 41.207.164.214
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160604||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.88.8
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160510||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.8.245
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160307||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.168.200.98
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160607||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.92.122
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160602||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350257
name: IM360 WAF: Subscriber and Arbitrary Shortcode Execution in WordPress < 6.3.2
abuser: 102.64.170.217
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Subscriber and Arbitrary Shortcode Execution in WordPress < 6.3.2||MVN:ARGS:shortcode||MV:[embed]https://youtu.be/cX4vgaRpYJ0[/embed]||WPU:direct7tv||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:18:06:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6580124&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781805972 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.20.102
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160603||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:18:06:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10315167&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781805971 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.45.117
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160605||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:18:06:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:18:06:41 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:18:06:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:18:06:36 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.130.9
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160500||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316736
name: IM360 WAF: Request body parsing error
abuser: 146.247.137.94
country_id: 3144096
domain: togodailynews.tg
description:
IM360 WAF: Request body parsing error||err_msg:JSON parsing error: More than 1000 JSON keys||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 18:07:53 +0000] info [cpaneld] 102.54.238.57 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:18:08:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7105175&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781806120 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.208.106.186
country_id: 3175395
description:
Jun 18 18:09:01 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.208.106.186 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.39.81.17
country_id: 1168579
domain: www.brmn.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.brmn.tghttp/www.brmn.tg/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.39.81.17
country_id: 1168579
domain: www.brmn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.brmn.tg/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 38.25.22.3
country_id: 3932488
description:
38.25.22.3 - - [18/Jun/2026:18:09:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12873107&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Feffondrement-dun-immeuble-au-nigeria%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781806165 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/effondrement-dun-immeuble-au-nigeria/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.9986.1812 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:38.25.22.3


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.155
country_id: 1880251
description:
47.128.96.155 - - [18/Jun/2026:18:10:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10316650&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Feffondrement-dun-immeuble-au-nigeria%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781806233 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/effondrement-dun-immeuble-au-nigeria/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.155


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 118.99.91.0
country_id: 1643084
description:
[2026-06-18 18:12:16 +0000] info [cpaneld] 118.99.91.0 NEW dmmkifel:p5ohSvYQMQN9xwoQ address=118.99.91.0,app=cpaneld,creator=dmmkifel,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.56.194.51
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/07/b62846fd1ec54801f7a8228fe7b3cc52_L.webp 600w, http:/togodailynews.tg/wp-content/uploads/2025/07/b62846fd1ec54801f7a8228fe7b3cc52_L-300x180.webp 300w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 118.99.91.0
country_id: 1643084
description:
[2026-06-18 18:12:11 +0000] info [cpaneld] 118.99.91.0 - dmmkifel  "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 46.150.86.142
country_id: 690791
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/07/IMG-20240614-WA0154-1024x681-1.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2024/07/IMG-20240614-WA0154-1024x681-1-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2024/07/IMG-20240614-WA0154-1024x681-1-768x511.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2024/07/IMG-20240614-WA0154-1024x681-1-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 160.178.74.215
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/09/GXjVFj0WoAATMUG-763x1024.jpg 763w, http:/togodailynews.tg/wp-content/uploads/2024/09/GXjVFj0WoAATMUG-224x300.jpg 224w, http:/togodailynews.tg/wp-content/uploads/2024/09/GXjVFj0WoAATMUG-768x1031.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2024/09/GXjVFj0WoAATMUG-1145x1536.jpg 1145w, http:/togodailynews.tg/wp-content/uploads/2024/09/GXjVFj0WoAATMUG.jpg 1199w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.161.142.39
country_id: 3996063
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/07/WhatsApp-Image-2025-07-15-at-05.21.56.webp 1000w, http:/togodailynews.tg/wp-content/uploads/2025/07/WhatsApp-Image-2025-07-15-at-05.21.56-300x140.webp 300w, http:/togodailynews.tg/wp-content/uploads/2025/07/WhatsApp-Image-2025-07-15-at-05.21.56-768x359.webp 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 186.238.178.6
country_id: 3469034
description:
2026-06-18 18:14:22 dovecot_login authenticator failed for H=(187-8-89-114.customer.tdatabrasil.net.br) [186.238.178.6]:52000: 535 Incorrect authentication data (set_id=hr@cameg-togo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 18:14:54 +0000] info [cpaneld] 102.54.238.57 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.43.40.120
country_id: 3895114
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/07/WhatsApp-Image-2025-07-13-at-12.57.08.webp 874w, http:/togodailynews.tg/wp-content/uploads/2025/07/WhatsApp-Image-2025-07-13-at-12.57.08-300x188.webp 300w, http:/togodailynews.tg/wp-content/uploads/2025/07/WhatsApp-Image-2025-07-13-at-12.57.08-768x482.webp 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 18:16:52 +0000] info [cpaneld] 185.55.240.13 - esso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user esso (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.51.26.89
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/07/51fd4e073a5c230f82bf528d466f6b2c_L.jpg 600w, http:/togodailynews.tg/wp-content/uploads/2024/07/51fd4e073a5c230f82bf528d466f6b2c_L-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2024/07/51fd4e073a5c230f82bf528d466f6b2c_L-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.155.245.75
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/education-et-nutrition-le-gouvernement-etend-les-cantines-scolaires-a-161-630-enfants_i1200.webp 1200w, http:/togodailynews.tg/wp-content/uploads/2026/06/education-et-nutrition-le-gouvernement-etend-les-cantines-scolaires-a-161-630-enfants_i1200-300x169.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/education-et-nutrition-le-gouvernement-etend-les-cantines-scolaires-a-161-630-enfants_i1200-1024x576.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/06/education-et-nutrition-le-gouvernement-etend-les-cantines-scolaires-a-161-630-enfants_i1200-768x432.webp 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 41.207.181.74
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160205||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.10.188.104
country_id: 6252001
description:
[2026-06-18 18:19:15 +0000] info [cpaneld] 68.10.188.104 - mairie "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mairie (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:18:20:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:18:20:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6711710&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781806843 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:18:20:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6842724&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781806843 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:18:20:36 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:18:20:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:18:20:41 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.171.122.34
country_id: 2363686
description:
[2026-06-18 18:21:14 +0000] info [webmaild] 196.171.122.34 - e.senahounvo@davakconsulting.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.171.122.34
country_id: 2363686
description:
[2026-06-18 18:21:28 +0000] info [webmaild] 196.171.122.34 - e.senahounvo@davakconsulting.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-18 18:22:08 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:49341: 535 Incorrect authentication data (set_id=test@corpsdiplomaticnews.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.171.122.34
country_id: 2363686
description:
[2026-06-18 18:22:48 +0000] info [webmaild] 196.171.122.34 - e.senahounvo@davakconsulting.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:18:23:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10053744&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781806988 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.171.122.34
country_id: 2363686
description:
[2026-06-18 18:23:39 +0000] info [webmaild] 196.171.122.34 - e.senahounvo@davakconsulting.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 174.138.73.204
country_id: 6252001
domain: kpmg.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/149.0.0.0 Safari/537.36||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 91.242.75.6
country_id: 2635167
domain: sia-togo.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:POST http:/sia-togo.tg/wp-login.php HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 190.60.52.150
country_id: 3686110
description:
190.60.52.150 - - [18/Jun/2026:18:24:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6711496&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fjeune-femme-leader-2024%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781807051 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/jeune-femme-leader-2024/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.3846.1251 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:190.60.52.150


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.61.125.132
country_id: 587116
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/12/694b31b58bafb_CONIIA2-2.webp 600w, http:/togodailynews.tg/wp-content/uploads/2025/12/694b31b58bafb_CONIIA2-2-300x225.webp 300w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.171.122.34
country_id: 2363686
description:
[2026-06-18 18:24:39 +0000] info [webmaild] 196.171.122.34 - e.senahounvo@davakconsulting.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.135.190.58
country_id: 357994
description:
[2026-06-18 18:24:51 +0000] info [cpaneld] 197.135.190.58 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.184
country_id: 1880251
description:
47.128.96.184 - - [18/Jun/2026:18:26:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9803625&pdata=https%253A%252F%252Ftdn.tg%252Frepartition-centres-ecrit-ministere-economie-finances%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781807173 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/repartition-centres-ecrit-ministere-economie-finances/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.184


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 181.41.245.12
country_id: 3865483
description:
Jun 18 18:25:45 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 181.41.245.12 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 165.101.254.212
country_id: 1694008
domain: anamek.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:22177.anamek.tg||ServerName:anamek.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:32e0bda0a668dc6a9eb68ad6abf09598c5dcff79||Title:0x9c93eb41||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 74.244.119.249
country_id: 2300660
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160601||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.4.45.70
country_id: 3469034
description:
45.4.45.70 - - [18/Jun/2026:18:26:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9871261&pdata=https%253A%252F%252Fwebmail.florian.free.netmaster.tg%252F%253Flocale%253Dnb&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781807214 HTTP/2.0" 302 0 webmail.florian.free.netmaster.tg "https://webmail.florian.free.netmaster.tg/?locale=nb" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.4.45.70


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.120.208.170
country_id: 3508796
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/latf-nouvel-outil-de-securisation-des-frontieres-au-togo/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.132.70
country_id: 2363686
description:
[2026-06-18 18:27:36 +0000] info [webmaild] 196.168.132.70 - e.senahounvo@davakconsulting.com "POST /cpsess0180016638/3rdparty/roundcube/?_task=mail&_unlock=loading1781807253689&_framed=1 HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.171.122.34] != Current IP Address [196.168.132.70]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.254.11.38
country_id: 2921044
description:
[2026-06-18 18:27:47 +0000] info [webmaild] 178.254.11.38 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: root login is not permitted to webmaild


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 178.254.11.38
country_id: 2921044
description:
[2026-06-18 18:27:50 +0000] info [whostmgrd] 178.254.11.38 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.164
country_id: 1880251
description:
47.128.96.164 - - [18/Jun/2026:18:27:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9921388&pdata=https%253A%252F%252Ftdn.tg%252Fbraquage-au-tribunal-de-bouake-un-detenu-sevade-avec-la-voiture-du-juge-dinstruction%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781807274 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/braquage-au-tribunal-de-bouake-un-detenu-sevade-avec-la-voiture-du-juge-dinstruction/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.164


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 125.230.205.201
country_id: 1668284
description:
Jun 18 18:28:56 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 125.230.205.201 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.230.205.201
country_id: 1668284
description:
2026-06-18 18:28:58 dovecot_plain authenticator failed for H=125-230-205-201.dynamic-ip.hinet.net (mlcaheibhp9uelmmobhl) [125.230.205.201]:55036: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: modsec
rule: 77316736
name: IM360 WAF: Request body parsing error
abuser: 146.247.137.103
country_id: 3144096
domain: togodailynews.tg
description:
IM360 WAF: Request body parsing error||err_msg:JSON parsing error: lexical error: invalid char in json text.\n||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.211.206.207
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/pourquoi-la-rupture-entre-afreximbank-et-fitch-revele-un-fosse-plus-profond/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.211.206.207
country_id: 3469034
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/pourquoi-la-rupture-entre-afreximbank-et-fitch-revele-un-fosse-plus-profond/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 18:32:44 +0000] info [cpaneld] 102.54.238.57 - a.mathey "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.mathey (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.130.173.217
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/9d9189 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:18:34:03 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:18:34:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:18:34:06 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:18:34:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.212.93.61
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160508||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:18:35:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6723996&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781807747 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.77.220.146
country_id: 6252001
description:
47.77.220.146 - - [18/Jun/2026:18:35:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6722671&pdata=http%253A%252F%252F154.70.82.249&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781807752 HTTP/1.1" 302 0 154.70.82.249 "http://154.70.82.249/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.77.220.146


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:18:35:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6711407&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781807746 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.170.45.140
country_id: 2363686
description:
[2026-06-18 18:35:55 +0000] info [cpaneld] 196.170.45.140 - aopsacai "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:18:36:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10196631&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781807794 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.170.45.140
country_id: 2363686
description:
[2026-06-18 18:36:41 +0000] info [cpaneld] 196.170.45.140 - aopsacai "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 212.237.122.255
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/264445634 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 18:39:00 +0000] info [cpaneld] 185.55.240.13 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.183.114.27
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/335639039 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 202.29.18.30
country_id: 1605651
domain: dany2.mairie.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:esso.dany2.mairie.tg||Method:blogger.getUsersBlogs


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.170.45.140
country_id: 2363686
description:
[2026-06-18 18:42:01 +0000] info [cpaneld] 196.170.45.140 - opsacai "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user opsacai (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.171.50
country_id: 3175395
description:
Jun 18 18:42:28 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.171.50 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.170.45.140
country_id: 2363686
description:
[2026-06-18 18:42:36 +0000] info [webmaild] 196.170.45.140 - aopsacai "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.58
country_id: 6252001
description:
205.169.39.58 - - [18/Jun/2026:18:43:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7106152&pdata=http%253A%252F%252Fcfpj.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781808222 HTTP/1.1" 302 0 cfpj.tg "http://cfpj.tg/" "Mozilla/5.0 (Linux; Android 7.0; SM-G930V Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.58


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [18/Jun/2026:18:43:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7038320&pdata=https%253A%252F%252Fcfpj.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781808225 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.190.95.55
country_id: 337996
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2022/09/Screenshot_20220924-154951.jpg 685w, http:/togodailynews.tg/wp-content/uploads/2022/09/Screenshot_20220924-154951-150x150.jpg 150w, http:/togodailynews.tg/wp-content/uploads/2022/09/Screenshot_20220924-154951-300x298.jpg 300w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [18/Jun/2026:18:44:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7117509&pdata=https%253A%252F%252Fcfpj.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781808275 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 41.207.189.253
country_id: 2363686
description:
[2026-06-18 18:46:47 +0000] info [webmaild] 41.207.189.253 - kakue@togointerim.net "POST /cpsess6660189394/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.118.10] != Current IP Address [41.207.189.253]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 88.201.123.77
country_id: 290291
description:
88.201.123.77 - - [18/Jun/2026:18:46:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13014378&pdata=https%253A%252F%252Ftdn.tg%252Ftogo-voici-comment-reconnaitre-un-gendarme-dun-policier%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781808386 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/togo-voici-comment-reconnaitre-un-gendarme-dun-policier/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.4666.1834 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:88.201.123.77


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 122.114.158.24
country_id: 1814991
description:
2026-06-18 18:47:33 H=(localhost.localdomain) [122.114.158.24]:32970 F=<info@dhl.com> rejected RCPT <info@wellcity.tg>: The mail server could not deliver mail to info@wellcity.tg.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.189.96.88
country_id: 3895114
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2022/12/IMG-20221220-WA0109.jpg 960w, http:/togodailynews.tg/wp-content/uploads/2022/12/IMG-20221220-WA0109-300x135.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2022/12/IMG-20221220-WA0109-768x346.jpg 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:18:49:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9869932&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781808547 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:18:49:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9933674&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781808549 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:18:49:52 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:18:49:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:18:49:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:18:49:52 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.242.160.128
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1570124030 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:18:51:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7301530&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781808687 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 168.232.221.37
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-04-at-16.53.50.webp 1600w, http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-04-at-16.53.50-300x300.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-04-at-16.53.50-1024x1024.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-04-at-16.53.50-150x150.webp 150w, http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-04-at-16.53.50-768x768.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-04-at-16.53.50-1536x1536.webp 1536w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 18:53:48 +0000] info [cpaneld] 185.55.240.13 - test "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user test (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.190.117.195
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/10/WhatsApp-Image-2024-10-11-at-10.08.32-PM-1024x592-1.jpeg 1024w, http:/togodailynews.tg/wp-content/uploads/2024/10/WhatsApp-Image-2024-10-11-at-10.08.32-PM-1024x592-1-300x173.jpeg 300w, http:/togodailynews.tg/wp-content/uploads/2024/10/WhatsApp-Image-2024-10-11-at-10.08.32-PM-1024x592-1-768x444.jpeg 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.223.23.84
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/05/EPP-KADJALE-1024x819.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2024/05/EPP-KADJALE-300x240.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2024/05/EPP-KADJALE-768x614.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2024/05/EPP-KADJALE-1536x1229.jpg 1536w, http:/togodailynews.tg/wp-content/uploads/2024/05/EPP-KADJALE-2048x1638.jpg 2048w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 18:55:45 +0000] info [cpaneld] 185.55.240.13 - iyfttuec "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user iyfttuec (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.243.237.38
country_id: 2077456
domain: www.sthandling-aero.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.sthandling-aero.tg:80/img-sys/server_moved.png HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.243.237.38
country_id: 2077456
domain: www.sthandling-aero.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.sthandling-aero.tg:80/img-sys/powered_by_cpanel.svg HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.240.232.210
country_id: 3017382
domain: www.sthandling-aero.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.sthandling-aero.tg:80/img-sys/server_misconfigured.png HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.132.206.217
country_id: 2017370
description:
45.132.206.217 - - [18/Jun/2026:19:00:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9803679&pdata=https%253A%252F%252Fcfpj.tg%252Feedo-244018witems%252Feti.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781809255 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/eedo-244018witems/eti.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.132.206.217


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 19:03:47 +0000] info [cpaneld] 102.54.238.57 - a.kesso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.kesso (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:19:04:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131100&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781809471 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.20.6
country_id: 2921044
description:
[2026-06-18 19:04:39 +0000] info [whostmgrd] 195.63.20.6 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.236.172.199
country_id: 99237
domain: www.mediatopnews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.mediatopnews.tghttp/www.mediatopnews.tg/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:19:04:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6787480&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781809469 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 19:05:29 +0000] info [cpaneld] 102.54.238.57 - e.sanvee "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.sanvee (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 31.57.40.219
country_id: 290557
domain: www.sthandling-aero.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.sthandling-aero.tg:80/img-sys/IP_changed.png HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.120.77.227
country_id: 3469034
description:
Jun 18 19:06:00 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.120.77.227 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:19:06:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:19:06:07 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:19:06:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:19:06:15 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.120.141
country_id: 3865483
description:
Jun 18 19:06:25 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.120.141 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:19:07:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051108&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781809667 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.177
country_id: 1880251
description:
47.128.96.177 - - [18/Jun/2026:19:08:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12806852&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Feffondrement-dun-immeuble-au-nigeria%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781809693 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/effondrement-dun-immeuble-au-nigeria/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.177


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 191.98.201.233
country_id: 3895114
description:
191.98.201.233 - - [18/Jun/2026:19:10:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7182440&pdata=https%253A%252F%252Fcfpj.tg%252F%253Fs&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781809834 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/?s" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2595.1128 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:191.98.201.233


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.249.86.14
country_id: 3469034
description:
Jun 18 19:11:59 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.249.86.14 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 19:13:12 +0000] info [cpaneld] 185.55.240.13 - esso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user esso (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.233.52.9
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/9f9291 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.29.239.193
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1481766949 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.177.144.208
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/725803952_1346336050758625_8537351566847766639_n-300x183.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/725803952_1346336050758625_8537351566847766639_n-1024x626.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/06/725803952_1346336050758625_8537351566847766639_n-768x469.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/06/725803952_1346336050758625_8537351566847766639_n.webp 1178w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 19:14:58 +0000] info [cpaneld] 185.55.240.13 - nwjvzxzr "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nwjvzxzr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 19:15:40 +0000] info [cpaneld] 185.55.240.13 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 186.169.17.9
country_id: 3686110
description:
186.169.17.9 - - [18/Jun/2026:19:16:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6788760&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Faccident%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781810200 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/accident/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.8790.1408 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:186.169.17.9


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:19:18:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10329547&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781810311 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:19:18:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7105432&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781810308 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:19:20:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:19:20:56 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:19:21:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:19:21:04 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:19:21:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13199306&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781810492 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 19:22:55 +0000] info [cpaneld] 185.55.240.13 - stephaneogou@gmail.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 130.12.182.188
country_id: 3190538
description:
Jun 18 19:23:18 ns5 pure-ftpd[3180464]: (?@130.12.182.188) [INFO] New connection from 130.12.182.188


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 19:23:52 +0000] info [cpaneld] 185.55.240.13 - a.mathey "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.mathey (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.135.190.58
country_id: 357994
description:
[2026-06-18 19:25:05 +0000] info [cpaneld] 197.135.190.58 - .SAPHYRTOUR "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.67.1.3
country_id: 2328926
description:
[2026-06-18 19:26:01 +0000] info [cpaneld] 102.67.1.3 - mairie "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mairie (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.198.128.204
country_id: 1835841
description:
Jun 18 19:28:05 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.198.128.204 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 19:28:13 +0000] info [cpaneld] 185.55.240.13 - togoinrdceh "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.61.8
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-les-eleves-arrivent-ils-a-achever-le-cours-primaire/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.30.46.91
country_id: 3175395
description:
Jun 18 19:29:10 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.30.46.91 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:19:32:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7116135&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781811159 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.115.172.157
country_id: 3923057
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/02/WhatsApp-Image-2025-02-19-at-12.25.15.jpeg 1080w, http:/togodailynews.tg/wp-content/uploads/2025/02/WhatsApp-Image-2025-02-19-at-12.25.15-300x218.jpeg 300w, http:/togodailynews.tg/wp-content/uploads/2025/02/WhatsApp-Image-2025-02-19-at-12.25.15-1024x742.jpeg 1024w, http:/togodailynews.tg/wp-content/uploads/2025/02/WhatsApp-Image-2025-02-19-at-12.25.15-768x557.jpeg 768w, http:/togodailynews.tg/wp-content/uploads/2025/02/WhatsApp-Image-2025-02-19-at-12.25.15-510x369.jpeg 510w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:19:32:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6644630&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781811157 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 19:33:42 +0000] info [cpaneld] 185.55.240.13 - mouss "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mouss (has_cpuser_file failed)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.170.8.245
country_id: 2363686
domain: sp-eau.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/wp-json/wp/v2/users/6?context=view&_fields=id%2Cname&_locale=user||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:19:36:39 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:19:36:39 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.10.251.14
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1722855863 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:19:36:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:19:36:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.170.8.245
country_id: 2363686
domain: sp-eau.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/wp-json/wp/v2/users/me?_locale=user||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 140.150.235.234
country_id: 1562822
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/410.jpg HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.166.200
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160306||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:19:37:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7052140&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781811454 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 136.0.202.201
country_id: 2635167
domain: togomedia24.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-38.136.0.202.201||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 5.251.160.115
country_id: 1522867
description:
2026-06-18 19:39:58 H=([5.251.160.115]) [5.251.160.115]:56767 F=<John@4452.com> rejected RCPT <info@sigm.tg>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.238.106.183
country_id: 3865483
description:
Jun 18 19:40:29 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.238.106.183 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 19:42:17 +0000] info [cpaneld] 102.54.238.57 - sbnjjkvc "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sbnjjkvc (has_cpuser_file failed)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.8.245
country_id: 2363686
domain: sp-eau.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p>dans le cadre du renforcement de la pr\xc3\xa9paration nationale aux situations d'urgence et de catastrophe, l'agence nationale de la protection civile (anpc), a organis\xc3\xa9 du 15 au 18 juin 2026 \xc3\xa0 agom\xc3\xa9-glouzou dans la pr\xc3\xa9fecture de bas-mono, l'exercice national de simulation grandeur nature <a>\xc2\xab mia dzrado 2026\xc2\xbb.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>cet exercice \xc3\xa0 tester les m\xc3\xa9canismes nationaux de r\xc3\xa9ponse face \xc3\xa0 plusieurs sc\xc3\xa9narios de crise, notamment les inondations, les \xc3\xa9pid\xc3\xa9mies, les incendies ainsi que les risques nucl\xc3\xa9aires, radiologiques, biologiques et chimiques (nrbc). l\xe2\x80\x99exercice repose sur un sc\xc3\xa9nario d\xe2\x80\x99inondation majeure provoqu\xc3\xa9e par une crue soudaine du fleuve mono. le bilan simul\xc3\xa9 fait \xc3\xa9tat d\xe2\x80\x99environs 1000 sinistr\xc3\xa9s avec une trentaine de cas de diarrh\xc3\xa9e.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a \xc3\xa9galement contribu\xc3\xa9 au renforcement des capacit\xc3\xa9s op\xc3\xa9rationnelles des diff\xc3\xa9rents acteurs impliqu\xc3\xa9s dans la gestion des catastrophes et des urgences humanitaires.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la c\xc3\xa9r\xc3\xa9monie de cl\xc3\xb4ture, pr\xc3\xa9sid\xc3\xa9e par le ministre de la s\xc3\xa9curit\xc3\xa9 et de la protection civile, a r\xc3\xa9uni plusieurs membres du gouvernement, les partenaires techniques, notamment les organisations du syst\xc3\xa8mes des nations unies, financiers et humanitaires ainsi que les diff\xc3\xa9rentes structures engag\xc3\xa9es.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la soci\xc3\xa9t\xc3\xa9 de patrimoine eau et assainissement en milieux urbain et semi-urbain (sp-eau) y \xc3\xa9tait repr\xc3\xa9sent\xc3\xa9e par son directeur g\xc3\xa9n\xc3\xa9ral, dr huguette massan avumadi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une contribution op\xc3\xa9rationnelle au service des communaut\xc3\xa9s</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>d\xc3\xa9ploy\xc3\xa9e aux c\xc3\xb4t\xc3\xa9s des clusters sant\xc3\xa9 et s\xc3\xa9curit\xc3\xa9 alimentaire et protection (sap), la sp-eau a apport\xc3\xa9 son expertise dans le domaine de l\xe2\x80\x99eau, de l\xe2\x80\x99assainissement et de l\xe2\x80\x99hygi\xc3\xa8ne (wash) \xc3\xa0 travers : la distribution d\xe2\x80\x99eau potable aux populations affect\xc3\xa9es (agb\xc3\xa9tiko, d\xe2\x80\x99agom\xc3\xa9-glouzou, togbodji), la mise \xc3\xa0 disposition de toilettes mobiles, la distribution de kits d\xe2\x80\x99hygi\xc3\xa8ne et de comprim\xc3\xa9s de chlore pour le traitement de l\xe2\x80\x99eau, le pr\xc3\xa9positionnement d\xe2\x80\x99\xc3\xa9quipements wash, ainsi que l\xe2\x80\x99appui \xc3\xa0 la gestion des d\xc3\xa9chets dans les zones d\xe2\x80\x99intervention.</a> <a>ces actions ont permis de reproduire, dans des conditions proches du r\xc3\xa9el, les r\xc3\xa9ponses qui seraient d\xc3\xa9ploy\xc3\xa9es en cas d\xe2\x80\x99urgence sanitaire ou humanitaire.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1538,\"width\":\"747px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full is-resized\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.39-2-edited.jpeg\" alt=\"\" class=\"wp-image-1538\" style=\"width:747px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>l\xe2\x80\x99eau, une priorit\xc3\xa9 vitale en situation d\xe2\x80\x99urgence</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en situation de catastrophe, l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable figure parmi les premi\xc3\xa8res priorit\xc3\xa9s humanitaires. la participation de la sp-eau \xc3\xa0 \xc2\xab mia dzrado 2026 \xc2\xbb a ainsi permis de tester les dispositifs d\xe2\x80\x99intervention du secteur de l\xe2\x80\x99eau et de l\xe2\x80\x99assainissement dans un contexte de crise majeure.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>garantir l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable et \xc3\xa0 des services d\xe2\x80\x99assainissement ad\xc3\xa9quats contribue non seulement \xc3\xa0 prot\xc3\xa9ger les populations, mais \xc3\xa9galement \xc3\xa0 pr\xc3\xa9venir les risques sanitaires et \xc3\xa0 assurer la continuit\xc3\xa9 des services essentiels.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une action en coh\xc3\xa9rence avec la vision nationale</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette participation s\xe2\x80\x99inscrit dans la vision de s.e.m faure essozimna gnassingb\xc3\x89, pr\xc3\xa9sident du conseil, qui place la protection des populations, la coh\xc3\xa9sion sociale et le renforcement de la r\xc3\xa9silience communautaire au c\xc5\x93ur de l\xe2\x80\x99action publique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>une continuit\xc3\xa9 des actions d\xc3\xa9j\xc3\xa0 men\xc3\xa9es par la sp-eau dans le cadre du projet precos, notamment en mati\xc3\xa8re de communication de crise, de pr\xc3\xa9positionnement des stocks d'urgence et de renforcement des capacit\xc3\xa9s communautaires dans la r\xc3\xa9gion des savanes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 5.251.160.115
country_id: 1522867
description:
2026-06-18 19:42:41 H=([5.251.160.115]) [5.251.160.115]:59226 F=<John@4452.com> rejected RCPT <info@sigm.tg>: Sender verify failed


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 64.44.59.151
country_id: 6252001
domain: sahamtg.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/sahamtg/public_html/.126591520695824.php||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.8.245
country_id: 2363686
domain: sp-eau.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p>dans le cadre du renforcement de la pr\xc3\xa9paration nationale aux situations d'urgence et de catastrophe, l'agence nationale de la protection civile (anpc), a organis\xc3\xa9 du 15 au 18 juin 2026 \xc3\xa0 agom\xc3\xa9-glouzou dans la pr\xc3\xa9fecture de bas-mono, l'exercice national de simulation grandeur nature <a>\xc2\xab mia dzrado 2026\xc2\xbb.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>cet exercice \xc3\xa0 tester les m\xc3\xa9canismes nationaux de r\xc3\xa9ponse face \xc3\xa0 plusieurs sc\xc3\xa9narios de crise, notamment les inondations, les \xc3\xa9pid\xc3\xa9mies, les incendies ainsi que les risques nucl\xc3\xa9aires, radiologiques, biologiques et chimiques (nrbc). l\xe2\x80\x99exercice repose sur un sc\xc3\xa9nario d\xe2\x80\x99inondation majeure provoqu\xc3\xa9e par une crue soudaine du fleuve mono. le bilan simul\xc3\xa9 fait \xc3\xa9tat d\xe2\x80\x99environs 1000 sinistr\xc3\xa9s avec une trentaine de cas de diarrh\xc3\xa9e.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a \xc3\xa9galement contribu\xc3\xa9 au renforcement des capacit\xc3\xa9s op\xc3\xa9rationnelles des diff\xc3\xa9rents acteurs impliqu\xc3\xa9s dans la gestion des catastrophes et des urgences humanitaires.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la c\xc3\xa9r\xc3\xa9monie de cl\xc3\xb4ture, pr\xc3\xa9sid\xc3\xa9e par le ministre de la s\xc3\xa9curit\xc3\xa9 et de la protection civile, a r\xc3\xa9uni plusieurs membres du gouvernement, les partenaires techniques, notamment les organisations du syst\xc3\xa8mes des nations unies, financiers et humanitaires ainsi que les diff\xc3\xa9rentes structures engag\xc3\xa9es.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la soci\xc3\xa9t\xc3\xa9 de patrimoine eau et assainissement en milieux urbain et semi-urbain (sp-eau) y \xc3\xa9tait repr\xc3\xa9sent\xc3\xa9e par son directeur g\xc3\xa9n\xc3\xa9ral, dr huguette massan avumadi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une contribution op\xc3\xa9rationnelle au service des communaut\xc3\xa9s</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>d\xc3\xa9ploy\xc3\xa9e aux c\xc3\xb4t\xc3\xa9s des clusters sant\xc3\xa9 et s\xc3\xa9curit\xc3\xa9 alimentaire et protection (sap), la sp-eau a apport\xc3\xa9 son expertise dans le domaine de l\xe2\x80\x99eau, de l\xe2\x80\x99assainissement et de l\xe2\x80\x99hygi\xc3\xa8ne (wash) \xc3\xa0 travers : la distribution d\xe2\x80\x99eau potable aux populations affect\xc3\xa9es (agb\xc3\xa9tiko, d\xe2\x80\x99agom\xc3\xa9-glouzou, togbodji), la mise \xc3\xa0 disposition de toilettes mobiles, la distribution de kits d\xe2\x80\x99hygi\xc3\xa8ne et de comprim\xc3\xa9s de chlore pour le traitement de l\xe2\x80\x99eau, le pr\xc3\xa9positionnement d\xe2\x80\x99\xc3\xa9quipements wash, ainsi que l\xe2\x80\x99appui \xc3\xa0 la gestion des d\xc3\xa9chets dans les zones d\xe2\x80\x99intervention.</a> <a>ces actions ont permis de reproduire, dans des conditions proches du r\xc3\xa9el, les r\xc3\xa9ponses qui seraient d\xc3\xa9ploy\xc3\xa9es en cas d\xe2\x80\x99urgence sanitaire ou humanitaire.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1538,\"width\":\"747px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full is-resized\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.39-2-edited.jpeg\" alt=\"\" class=\"wp-image-1538\" style=\"width:747px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>l\xe2\x80\x99eau, une priorit\xc3\xa9 vitale en situation d\xe2\x80\x99urgence</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en situation de catastrophe, l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable figure parmi les premi\xc3\xa8res priorit\xc3\xa9s humanitaires. la participation de la sp-eau \xc3\xa0 \xc2\xab mia dzrado 2026 \xc2\xbb a ainsi permis de tester les dispositifs d\xe2\x80\x99intervention du secteur de l\xe2\x80\x99eau et de l\xe2\x80\x99assainissement dans un contexte de crise majeure. garantir l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable et \xc3\xa0 des services d\xe2\x80\x99assainissement ad\xc3\xa9quats contribue non seulement \xc3\xa0 prot\xc3\xa9ger les populations, mais \xc3\xa9galement \xc3\xa0 pr\xc3\xa9venir les risques sanitaires et \xc3\xa0 assurer la continuit\xc3\xa9 des services essentiels.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une action en coh\xc3\xa9rence avec la vision nationale</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette participation s\xe2\x80\x99inscrit dans la vision de s.e.m faure essozimna gnassingb\xc3\x89, pr\xc3\xa9sident du conseil, qui place la protection des populations, la coh\xc3\xa9sion sociale et le renforcement de la r\xc3\xa9silience communautaire au c\xc5\x93ur de l\xe2\x80\x99action publique. une continuit\xc3\xa9 des actions d\xc3\xa9j\xc3\xa0 men\xc3\xa9es par la sp-eau dans le cadre du projet precos, notamment en mati\xc3\xa8re de communication de crise, de pr\xc3\xa9positionnement des stocks d'urgence et de renforcement des capacit\xc3\xa9s communautaires dans la r\xc3\xa9gion des savanes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.190
country_id: 3017382
description:
[2026-06-18 19:42:48 +0000] info [cpaneld] 5.231.255.190 NEW sahamtg:xcW9FXdvTSWsedy4 address=5.231.255.190,app=cpaneld,creator=sahamtg,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.8.245
country_id: 2363686
domain: sp-eau.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p>dans le cadre du renforcement de la pr\xc3\xa9paration nationale aux situations d'urgence et de catastrophe, l'agence nationale de la protection civile (anpc), a organis\xc3\xa9 du 15 au 18 juin 2026 \xc3\xa0 agom\xc3\xa9-glouzou dans la pr\xc3\xa9fecture de bas-mono, l'exercice national de simulation grandeur nature <a>\xc2\xab mia dzrado 2026\xc2\xbb.</a> <a>cet exercice \xc3\xa0 tester les m\xc3\xa9canismes nationaux de r\xc3\xa9ponse face \xc3\xa0 plusieurs sc\xc3\xa9narios de crise, notamment les inondations, les \xc3\xa9pid\xc3\xa9mies, les incendies ainsi que les risques nucl\xc3\xa9aires, radiologiques, biologiques et chimiques (nrbc). l\xe2\x80\x99exercice repose sur un sc\xc3\xa9nario d\xe2\x80\x99inondation majeure provoqu\xc3\xa9e par une crue soudaine du fleuve mono. le bilan simul\xc3\xa9 fait \xc3\xa9tat d\xe2\x80\x99environs 1000 sinistr\xc3\xa9s avec une trentaine de cas de diarrh\xc3\xa9e.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a \xc3\xa9galement contribu\xc3\xa9 au renforcement des capacit\xc3\xa9s op\xc3\xa9rationnelles des diff\xc3\xa9rents acteurs impliqu\xc3\xa9s dans la gestion des catastrophes et des urgences humanitaires. la c\xc3\xa9r\xc3\xa9monie de cl\xc3\xb4ture, pr\xc3\xa9sid\xc3\xa9e par le ministre de la s\xc3\xa9curit\xc3\xa9 et de la protection civile, a r\xc3\xa9uni plusieurs membres du gouvernement, les partenaires techniques, notamment les organisations du syst\xc3\xa8mes des nations unies, financiers et humanitaires ainsi que les diff\xc3\xa9rentes structures engag\xc3\xa9es.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la soci\xc3\xa9t\xc3\xa9 de patrimoine eau et assainissement en milieux urbain et semi-urbain (sp-eau) y \xc3\xa9tait repr\xc3\xa9sent\xc3\xa9e par son directeur g\xc3\xa9n\xc3\xa9ral, dr huguette massan avumadi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une contribution op\xc3\xa9rationnelle au service des communaut\xc3\xa9s</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>d\xc3\xa9ploy\xc3\xa9e aux c\xc3\xb4t\xc3\xa9s des clusters sant\xc3\xa9 et s\xc3\xa9curit\xc3\xa9 alimentaire et protection (sap), la sp-eau a apport\xc3\xa9 son expertise dans le domaine de l\xe2\x80\x99eau, de l\xe2\x80\x99assainissement et de l\xe2\x80\x99hygi\xc3\xa8ne (wash) \xc3\xa0 travers : la distribution d\xe2\x80\x99eau potable aux populations affect\xc3\xa9es (agb\xc3\xa9tiko, d\xe2\x80\x99agom\xc3\xa9-glouzou, togbodji), la mise \xc3\xa0 disposition de toilettes mobiles, la distribution de kits d\xe2\x80\x99hygi\xc3\xa8ne et de comprim\xc3\xa9s de chlore pour le traitement de l\xe2\x80\x99eau, le pr\xc3\xa9positionnement d\xe2\x80\x99\xc3\xa9quipements wash, ainsi que l\xe2\x80\x99appui \xc3\xa0 la gestion des d\xc3\xa9chets dans les zones d\xe2\x80\x99intervention.</a> <a>ces actions ont permis de reproduire, dans des conditions proches du r\xc3\xa9el, les r\xc3\xa9ponses qui seraient d\xc3\xa9ploy\xc3\xa9es en cas d\xe2\x80\x99urgence sanitaire ou humanitaire.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1538,\"width\":\"747px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full is-resized\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.39-2-edited.jpeg\" alt=\"\" class=\"wp-image-1538\" style=\"width:747px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>l\xe2\x80\x99eau, une priorit\xc3\xa9 vitale en situation d\xe2\x80\x99urgence</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en situation de catastrophe, l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable figure parmi les premi\xc3\xa8res priorit\xc3\xa9s humanitaires. la participation de la sp-eau \xc3\xa0 \xc2\xab mia dzrado 2026 \xc2\xbb a ainsi permis de tester les dispositifs d\xe2\x80\x99intervention du secteur de l\xe2\x80\x99eau et de l\xe2\x80\x99assainissement dans un contexte de crise majeure. garantir l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable et \xc3\xa0 des services d\xe2\x80\x99assainissement ad\xc3\xa9quats contribue non seulement \xc3\xa0 prot\xc3\xa9ger les populations, mais \xc3\xa9galement \xc3\xa0 pr\xc3\xa9venir les risques sanitaires et \xc3\xa0 assurer la continuit\xc3\xa9 des services essentiels.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une action en coh\xc3\xa9rence avec la vision nationale</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette participation s\xe2\x80\x99inscrit dans la vision de s.e.m faure essozimna gnassingb\xc3\x89, pr\xc3\xa9sident du conseil, qui place la protection des populations, la coh\xc3\xa9sion sociale et le renforcement de la r\xc3\xa9silience communautaire au c\xc5\x93ur de l\xe2\x80\x99action publique. une continuit\xc3\xa9 des actions d\xc3\xa9j\xc3\xa0 men\xc3\xa9es par la sp-eau dans le cadre du projet precos, notamment en mati\xc3\xa8re de communication de crise, de pr\xc3\xa9positionnement des stocks d'urgence et de renforcement des capacit\xc3\xa9s communautaires dans la r\xc3\xa9gion des savanes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 111.119.35.9
country_id: 1282988
description:
111.119.35.9 - - [18/Jun/2026:19:44:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9921226&pdata=https%253A%252F%252F24heureinfo.tg%252Fcedeao%252Fissoufou-mahamadou-remplace-muhammadu-buhari-a-la-tete-de-la-cedeao%252Ffeed&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781811857 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/cedeao/issoufou-mahamadou-remplace-muhammadu-buhari-a-la-tete-de-la-cedeao/feed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:111.119.35.9


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 19:44:10 +0000] info [cpaneld] 102.54.238.57 - togoinrdceh "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.8.245
country_id: 2363686
domain: sp-eau.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p>dans le cadre du renforcement de la pr\xc3\xa9paration nationale aux situations d'urgence et de catastrophe, l'agence nationale de la protection civile (anpc), a organis\xc3\xa9 du 15 au 18 juin 2026 \xc3\xa0 agom\xc3\xa9-glouzou dans la pr\xc3\xa9fecture de bas-mono, l'exercice national de simulation grandeur nature <a>\xc2\xab mia dzrado 2026\xc2\xbb.</a> <a>cet exercice \xc3\xa0 tester les m\xc3\xa9canismes nationaux de r\xc3\xa9ponse face \xc3\xa0 plusieurs sc\xc3\xa9narios de crise, notamment les inondations, les \xc3\xa9pid\xc3\xa9mies, les incendies ainsi que les risques nucl\xc3\xa9aires, radiologiques, biologiques et chimiques (nrbc). l\xe2\x80\x99exercice repose sur un sc\xc3\xa9nario d\xe2\x80\x99inondation majeure provoqu\xc3\xa9e par une crue soudaine du fleuve mono. le bilan simul\xc3\xa9 fait \xc3\xa9tat d\xe2\x80\x99environs 1000 sinistr\xc3\xa9s avec une trentaine de cas de diarrh\xc3\xa9e.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a \xc3\xa9galement contribu\xc3\xa9 au renforcement des capacit\xc3\xa9s op\xc3\xa9rationnelles des diff\xc3\xa9rents acteurs impliqu\xc3\xa9s dans la gestion des catastrophes et des urgences humanitaires. la c\xc3\xa9r\xc3\xa9monie de cl\xc3\xb4ture, pr\xc3\xa9sid\xc3\xa9e par le ministre de la s\xc3\xa9curit\xc3\xa9 et de la protection civile, a r\xc3\xa9uni plusieurs membres du gouvernement, les partenaires techniques, notamment les organisations du syst\xc3\xa8mes des nations unies, financiers et humanitaires ainsi que les diff\xc3\xa9rentes structures engag\xc3\xa9es. la soci\xc3\xa9t\xc3\xa9 de patrimoine eau et assainissement en milieux urbain et semi-urbain (sp-eau) y \xc3\xa9tait repr\xc3\xa9sent\xc3\xa9e par son directeur g\xc3\xa9n\xc3\xa9ral, dr huguette massan avumadi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image -->\n<figure class=\"wp-block-image\"><img alt=\"\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>une contribution op\xc3\xa9rationnelle au service des communaut\xc3\xa9s</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>d\xc3\xa9ploy\xc3\xa9e aux c\xc3\xb4t\xc3\xa9s des clusters sant\xc3\xa9 et s\xc3\xa9curit\xc3\xa9 alimentaire et protection (sap), la sp-eau a apport\xc3\xa9 son expertise dans le domaine de l\xe2\x80\x99eau, de l\xe2\x80\x99assainissement et de l\xe2\x80\x99hygi\xc3\xa8ne (wash) \xc3\xa0 travers : la distribution d\xe2\x80\x99eau potable aux populations affect\xc3\xa9es (agb\xc3\xa9tiko, d\xe2\x80\x99agom\xc3\xa9-glouzou, togbodji), la mise \xc3\xa0 disposition de toilettes mobiles, la distribution de kits d\xe2\x80\x99hygi\xc3\xa8ne et de comprim\xc3\xa9s de chlore pour le traitement de l\xe2\x80\x99eau, le pr\xc3\xa9positionnement d\xe2\x80\x99\xc3\xa9quipements wash, ainsi que l\xe2\x80\x99appui \xc3\xa0 la gestion des d\xc3\xa9chets dans les zones d\xe2\x80\x99intervention.</a> <a>ces actions ont permis de reproduire, dans des conditions proches du r\xc3\xa9el, les r\xc3\xa9ponses qui seraient d\xc3\xa9ploy\xc3\xa9es en cas d\xe2\x80\x99urgence sanitaire ou humanitaire.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1538,\"width\":\"747px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full is-resized\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.39-2-edited.jpeg\" alt=\"\" class=\"wp-image-1538\" style=\"width:747px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>l\xe2\x80\x99eau, une priorit\xc3\xa9 vitale en situation d\xe2\x80\x99urgence</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en situation de catastrophe, l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable figure parmi les premi\xc3\xa8res priorit\xc3\xa9s humanitaires. la participation de la sp-eau \xc3\xa0 \xc2\xab mia dzrado 2026 \xc2\xbb a ainsi permis de tester les dispositifs d\xe2\x80\x99intervention du secteur de l\xe2\x80\x99eau et de l\xe2\x80\x99assainissement dans un contexte de crise majeure. garantir l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable et \xc3\xa0 des services d\xe2\x80\x99assainissement ad\xc3\xa9quats contribue non seulement \xc3\xa0 prot\xc3\xa9ger les populations, mais \xc3\xa9galement \xc3\xa0 pr\xc3\xa9venir les risques sanitaires et \xc3\xa0 assurer la continuit\xc3\xa9 des services essentiels.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une action en coh\xc3\xa9rence avec la vision nationale</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette participation s\xe2\x80\x99inscrit dans la vision de s.e.m faure essozimna gnassingb\xc3\x89, pr\xc3\xa9sident du conseil, qui place la protection des populations, la coh\xc3\xa9sion sociale et le renforcement de la r\xc3\xa9silience communautaire au c\xc5\x93ur de l\xe2\x80\x99action publique. une continuit\xc3\xa9 des actions d\xc3\xa9j\xc3\xa0 men\xc3\xa9es par la sp-eau dans le cadre du projet precos, notamment en mati\xc3\xa8re de communication de crise, de pr\xc3\xa9positionnement des stocks d'urgence et de renforcement des capacit\xc3\xa9s communautaires dans la r\xc3\xa9gion des savanes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 19:44:50 +0000] info [cpaneld] 102.54.238.57 - primuscourtiertg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user primuscourtiertg (has_cpuser_file failed)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.8.245
country_id: 2363686
domain: sp-eau.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p>dans le cadre du renforcement de la pr\xc3\xa9paration nationale aux situations d'urgence et de catastrophe, l'agence nationale de la protection civile (anpc), a organis\xc3\xa9 du 15 au 18 juin 2026 \xc3\xa0 agom\xc3\xa9-glouzou dans la pr\xc3\xa9fecture de bas-mono, l'exercice national de simulation grandeur nature <a>\xc2\xab mia dzrado 2026\xc2\xbb.</a> <a>cet exercice \xc3\xa0 tester les m\xc3\xa9canismes nationaux de r\xc3\xa9ponse face \xc3\xa0 plusieurs sc\xc3\xa9narios de crise, notamment les inondations, les \xc3\xa9pid\xc3\xa9mies, les incendies ainsi que les risques nucl\xc3\xa9aires, radiologiques, biologiques et chimiques (nrbc). l\xe2\x80\x99exercice repose sur un sc\xc3\xa9nario d\xe2\x80\x99inondation majeure provoqu\xc3\xa9e par une crue soudaine du fleuve mono. le bilan simul\xc3\xa9 fait \xc3\xa9tat d\xe2\x80\x99environs 1000 sinistr\xc3\xa9s avec une trentaine de cas de diarrh\xc3\xa9e.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a \xc3\xa9galement contribu\xc3\xa9 au renforcement des capacit\xc3\xa9s op\xc3\xa9rationnelles des diff\xc3\xa9rents acteurs impliqu\xc3\xa9s dans la gestion des catastrophes et des urgences humanitaires. la c\xc3\xa9r\xc3\xa9monie de cl\xc3\xb4ture, pr\xc3\xa9sid\xc3\xa9e par le ministre de la s\xc3\xa9curit\xc3\xa9 et de la protection civile, a r\xc3\xa9uni plusieurs membres du gouvernement, les partenaires techniques, notamment les organisations du syst\xc3\xa8mes des nations unies, financiers et humanitaires ainsi que les diff\xc3\xa9rentes structures engag\xc3\xa9es. la soci\xc3\xa9t\xc3\xa9 de patrimoine eau et assainissement en milieux urbain et semi-urbain (sp-eau) y \xc3\xa9tait repr\xc3\xa9sent\xc3\xa9e par son directeur g\xc3\xa9n\xc3\xa9ral, dr huguette massan avumadi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1528,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.36-1-1024x768.jpeg\" alt=\"\" class=\"wp-image-1528\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>une contribution op\xc3\xa9rationnelle au service des communaut\xc3\xa9s</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>d\xc3\xa9ploy\xc3\xa9e aux c\xc3\xb4t\xc3\xa9s des clusters sant\xc3\xa9 et s\xc3\xa9curit\xc3\xa9 alimentaire et protection (sap), la sp-eau a apport\xc3\xa9 son expertise dans le domaine de l\xe2\x80\x99eau, de l\xe2\x80\x99assainissement et de l\xe2\x80\x99hygi\xc3\xa8ne (wash) \xc3\xa0 travers : la distribution d\xe2\x80\x99eau potable aux populations affect\xc3\xa9es (agb\xc3\xa9tiko, d\xe2\x80\x99agom\xc3\xa9-glouzou, togbodji), la mise \xc3\xa0 disposition de toilettes mobiles, la distribution de kits d\xe2\x80\x99hygi\xc3\xa8ne et de comprim\xc3\xa9s de chlore pour le traitement de l\xe2\x80\x99eau, le pr\xc3\xa9positionnement d\xe2\x80\x99\xc3\xa9quipements wash, ainsi que l\xe2\x80\x99appui \xc3\xa0 la gestion des d\xc3\xa9chets dans les zones d\xe2\x80\x99intervention.</a> <a>ces actions ont permis de reproduire, dans des conditions proches du r\xc3\xa9el, les r\xc3\xa9ponses qui seraient d\xc3\xa9ploy\xc3\xa9es en cas d\xe2\x80\x99urgence sanitaire ou humanitaire.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1538,\"width\":\"747px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full is-resized\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.39-2-edited.jpeg\" alt=\"\" class=\"wp-image-1538\" style=\"width:747px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>l\xe2\x80\x99eau, une priorit\xc3\xa9 vitale en situation d\xe2\x80\x99urgence</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en situation de catastrophe, l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable figure parmi les premi\xc3\xa8res priorit\xc3\xa9s humanitaires. la participation de la sp-eau \xc3\xa0 \xc2\xab mia dzrado 2026 \xc2\xbb a ainsi permis de tester les dispositifs d\xe2\x80\x99intervention du secteur de l\xe2\x80\x99eau et de l\xe2\x80\x99assainissement dans un contexte de crise majeure. garantir l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable et \xc3\xa0 des services d\xe2\x80\x99assainissement ad\xc3\xa9quats contribue non seulement \xc3\xa0 prot\xc3\xa9ger les populations, mais \xc3\xa9galement \xc3\xa0 pr\xc3\xa9venir les risques sanitaires et \xc3\xa0 assurer la continuit\xc3\xa9 des services essentiels.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une action en coh\xc3\xa9rence avec la vision nationale</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette participation s\xe2\x80\x99inscrit dans la vision de s.e.m faure essozimna gnassingb\xc3\x89, pr\xc3\xa9sident du conseil, qui place la protection des populations, la coh\xc3\xa9sion sociale et le renforcement de la r\xc3\xa9silience communautaire au c\xc5\x93ur de l\xe2\x80\x99action publique. une continuit\xc3\xa9 des actions d\xc3\xa9j\xc3\xa0 men\xc3\xa9es par la sp-eau dans le cadre du projet precos, notamment en mati\xc3\xa8re de communication de crise, de pr\xc3\xa9positionnement des stocks d'urgence et de renforcement des capacit\xc3\xa9s communautaires dans la r\xc3\xa9gion des savanes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.8.245
country_id: 2363686
domain: sp-eau.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p>dans le cadre du renforcement de la pr\xc3\xa9paration nationale aux situations d'urgence et de catastrophe, l'agence nationale de la protection civile (anpc), a organis\xc3\xa9 du 15 au 18 juin 2026 \xc3\xa0 agom\xc3\xa9-glouzou dans la pr\xc3\xa9fecture de bas-mono, l'exercice national de simulation grandeur nature <a>\xc2\xab mia dzrado 2026\xc2\xbb.</a> <a>cet exercice \xc3\xa0 tester les m\xc3\xa9canismes nationaux de r\xc3\xa9ponse face \xc3\xa0 plusieurs sc\xc3\xa9narios de crise, notamment les inondations, les \xc3\xa9pid\xc3\xa9mies, les incendies ainsi que les risques nucl\xc3\xa9aires, radiologiques, biologiques et chimiques (nrbc). l\xe2\x80\x99exercice repose sur un sc\xc3\xa9nario d\xe2\x80\x99inondation majeure provoqu\xc3\xa9e par une crue soudaine du fleuve mono. le bilan simul\xc3\xa9 fait \xc3\xa9tat d\xe2\x80\x99environs 1000 sinistr\xc3\xa9s avec une trentaine de cas de diarrh\xc3\xa9e.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a \xc3\xa9galement contribu\xc3\xa9 au renforcement des capacit\xc3\xa9s op\xc3\xa9rationnelles des diff\xc3\xa9rents acteurs impliqu\xc3\xa9s dans la gestion des catastrophes et des urgences humanitaires. la c\xc3\xa9r\xc3\xa9monie de cl\xc3\xb4ture, pr\xc3\xa9sid\xc3\xa9e par le ministre de la s\xc3\xa9curit\xc3\xa9 et de la protection civile, a r\xc3\xa9uni plusieurs membres du gouvernement, les partenaires techniques, notamment les organisations du syst\xc3\xa8mes des nations unies, financiers et humanitaires ainsi que les diff\xc3\xa9rentes structures engag\xc3\xa9es. la soci\xc3\xa9t\xc3\xa9 de patrimoine eau et assainissement en milieux urbain et semi-urbain (sp-eau) y \xc3\xa9tait repr\xc3\xa9sent\xc3\xa9e par son directeur g\xc3\xa9n\xc3\xa9ral, dr huguette massan avumadi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1539,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.36-1-edited.jpeg\" alt=\"\" class=\"wp-image-1539\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>une contribution op\xc3\xa9rationnelle au service des communaut\xc3\xa9s</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>d\xc3\xa9ploy\xc3\xa9e aux c\xc3\xb4t\xc3\xa9s des clusters sant\xc3\xa9 et s\xc3\xa9curit\xc3\xa9 alimentaire et protection (sap), la sp-eau a apport\xc3\xa9 son expertise dans le domaine de l\xe2\x80\x99eau, de l\xe2\x80\x99assainissement et de l\xe2\x80\x99hygi\xc3\xa8ne (wash) \xc3\xa0 travers : la distribution d\xe2\x80\x99eau potable aux populations affect\xc3\xa9es (agb\xc3\xa9tiko, d\xe2\x80\x99agom\xc3\xa9-glouzou, togbodji), la mise \xc3\xa0 disposition de toilettes mobiles, la distribution de kits d\xe2\x80\x99hygi\xc3\xa8ne et de comprim\xc3\xa9s de chlore pour le traitement de l\xe2\x80\x99eau, le pr\xc3\xa9positionnement d\xe2\x80\x99\xc3\xa9quipements wash, ainsi que l\xe2\x80\x99appui \xc3\xa0 la gestion des d\xc3\xa9chets dans les zones d\xe2\x80\x99intervention.</a> <a>ces actions ont permis de reproduire, dans des conditions proches du r\xc3\xa9el, les r\xc3\xa9ponses qui seraient d\xc3\xa9ploy\xc3\xa9es en cas d\xe2\x80\x99urgence sanitaire ou humanitaire.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1538,\"width\":\"747px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full is-resized\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.39-2-edited.jpeg\" alt=\"\" class=\"wp-image-1538\" style=\"width:747px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>l\xe2\x80\x99eau, une priorit\xc3\xa9 vitale en situation d\xe2\x80\x99urgence</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en situation de catastrophe, l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable figure parmi les premi\xc3\xa8res priorit\xc3\xa9s humanitaires. la participation de la sp-eau \xc3\xa0 \xc2\xab mia dzrado 2026 \xc2\xbb a ainsi permis de tester les dispositifs d\xe2\x80\x99intervention du secteur de l\xe2\x80\x99eau et de l\xe2\x80\x99assainissement dans un contexte de crise majeure. garantir l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable et \xc3\xa0 des services d\xe2\x80\x99assainissement ad\xc3\xa9quats contribue non seulement \xc3\xa0 prot\xc3\xa9ger les populations, mais \xc3\xa9galement \xc3\xa0 pr\xc3\xa9venir les risques sanitaires et \xc3\xa0 assurer la continuit\xc3\xa9 des services essentiels.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une action en coh\xc3\xa9rence avec la vision nationale</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette participation s\xe2\x80\x99inscrit dans la vision de s.e.m faure essozimna gnassingb\xc3\x89, pr\xc3\xa9sident du conseil, qui place la protection des populations, la coh\xc3\xa9sion sociale et le renforcement de la r\xc3\xa9silience communautaire au c\xc5\x93ur de l\xe2\x80\x99action publique. une continuit\xc3\xa9 des actions d\xc3\xa9j\xc3\xa0 men\xc3\xa9es par la sp-eau dans le cadre du projet precos, notamment en mati\xc3\xa8re de communication de crise, de pr\xc3\xa9positionnement des stocks d'urgence et de renforcement des capacit\xc3\xa9s communautaires dans la r\xc3\xa9gion des savanes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:19:46:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13354183&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781811990 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:19:46:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000786&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781811991 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 19:48:03 +0000] info [cpaneld] 102.54.238.57 - myxlsnta "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.8.245
country_id: 2363686
domain: sp-eau.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p>dans le cadre du renforcement de la pr\xc3\xa9paration nationale aux situations d'urgence et de catastrophe, l'agence nationale de la protection civile (anpc), a organis\xc3\xa9 du 15 au 18 juin 2026 \xc3\xa0 agom\xc3\xa9-glouzou dans la pr\xc3\xa9fecture de bas-mono, l'exercice national de simulation grandeur nature <a>\xc2\xab mia dzrado 2026\xc2\xbb.</a> <a>cet exercice \xc3\xa0 tester les m\xc3\xa9canismes nationaux de r\xc3\xa9ponse face \xc3\xa0 plusieurs sc\xc3\xa9narios de crise, notamment les inondations, les \xc3\xa9pid\xc3\xa9mies, les incendies ainsi que les risques nucl\xc3\xa9aires, radiologiques, biologiques et chimiques (nrbc). l\xe2\x80\x99exercice repose sur un sc\xc3\xa9nario d\xe2\x80\x99inondation majeure provoqu\xc3\xa9e par une crue soudaine du fleuve mono. le bilan simul\xc3\xa9 fait \xc3\xa9tat d\xe2\x80\x99environs 1000 sinistr\xc3\xa9s avec une trentaine de cas de diarrh\xc3\xa9e.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image -->\n<figure class=\"wp-block-image\"><img alt=\"\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>il a \xc3\xa9galement contribu\xc3\xa9 au renforcement des capacit\xc3\xa9s op\xc3\xa9rationnelles des diff\xc3\xa9rents acteurs impliqu\xc3\xa9s dans la gestion des catastrophes et des urgences humanitaires. la c\xc3\xa9r\xc3\xa9monie de cl\xc3\xb4ture, pr\xc3\xa9sid\xc3\xa9e par le ministre de la s\xc3\xa9curit\xc3\xa9 et de la protection civile, a r\xc3\xa9uni plusieurs membres du gouvernement, les partenaires techniques, notamment les organisations du syst\xc3\xa8mes des nations unies, financiers et humanitaires ainsi que les diff\xc3\xa9rentes structures engag\xc3\xa9es. la soci\xc3\xa9t\xc3\xa9 de patrimoine eau et assainissement en milieux urbain et semi-urbain (sp-eau) y \xc3\xa9tait repr\xc3\xa9sent\xc3\xa9e par son directeur g\xc3\xa9n\xc3\xa9ral, dr huguette massan avumadi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1539,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.36-1-edited.jpeg\" alt=\"\" class=\"wp-image-1539\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>une contribution op\xc3\xa9rationnelle au service des communaut\xc3\xa9s</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>d\xc3\xa9ploy\xc3\xa9e aux c\xc3\xb4t\xc3\xa9s des clusters sant\xc3\xa9 et s\xc3\xa9curit\xc3\xa9 alimentaire et protection (sap), la sp-eau a apport\xc3\xa9 son expertise dans le domaine de l\xe2\x80\x99eau, de l\xe2\x80\x99assainissement et de l\xe2\x80\x99hygi\xc3\xa8ne (wash) \xc3\xa0 travers : la distribution d\xe2\x80\x99eau potable aux populations affect\xc3\xa9es (agb\xc3\xa9tiko, d\xe2\x80\x99agom\xc3\xa9-glouzou, togbodji), la mise \xc3\xa0 disposition de toilettes mobiles, la distribution de kits d\xe2\x80\x99hygi\xc3\xa8ne et de comprim\xc3\xa9s de chlore pour le traitement de l\xe2\x80\x99eau, le pr\xc3\xa9positionnement d\xe2\x80\x99\xc3\xa9quipements wash, ainsi que l\xe2\x80\x99appui \xc3\xa0 la gestion des d\xc3\xa9chets dans les zones d\xe2\x80\x99intervention.</a> <a>ces actions ont permis de reproduire, dans des conditions proches du r\xc3\xa9el, les r\xc3\xa9ponses qui seraient d\xc3\xa9ploy\xc3\xa9es en cas d\xe2\x80\x99urgence sanitaire ou humanitaire.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1538,\"width\":\"747px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full is-resized\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.39-2-edited.jpeg\" alt=\"\" class=\"wp-image-1538\" style=\"width:747px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>l\xe2\x80\x99eau, une priorit\xc3\xa9 vitale en situation d\xe2\x80\x99urgence</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en situation de catastrophe, l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable figure parmi les premi\xc3\xa8res priorit\xc3\xa9s humanitaires. la participation de la sp-eau \xc3\xa0 \xc2\xab mia dzrado 2026 \xc2\xbb a ainsi permis de tester les dispositifs d\xe2\x80\x99intervention du secteur de l\xe2\x80\x99eau et de l\xe2\x80\x99assainissement dans un contexte de crise majeure. garantir l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable et \xc3\xa0 des services d\xe2\x80\x99assainissement ad\xc3\xa9quats contribue non seulement \xc3\xa0 prot\xc3\xa9ger les populations, mais \xc3\xa9galement \xc3\xa0 pr\xc3\xa9venir les risques sanitaires et \xc3\xa0 assurer la continuit\xc3\xa9 des services essentiels.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une action en coh\xc3\xa9rence avec la vision nationale</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette participation s\xe2\x80\x99inscrit dans la vision de s.e.m faure essozimna gnassingb\xc3\x89, pr\xc3\xa9sident du conseil, qui place la protection des populations, la coh\xc3\xa9sion sociale et le renforcement de la r\xc3\xa9silience communautaire au c\xc5\x93ur de l\xe2\x80\x99action publique. une continuit\xc3\xa9 des actions d\xc3\xa9j\xc3\xa0 men\xc3\xa9es par la sp-eau dans le cadre du projet precos, notamment en mati\xc3\xa8re de communication de crise, de pr\xc3\xa9positionnement des stocks d'urgence et de renforcement des capacit\xc3\xa9s communautaires dans la r\xc3\xa9gion des savanes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 168.121.36.117
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/725803952_1346336050758625_8537351566847766639_n.webp 1178w, http:/togodailynews.tg/wp-content/uploads/2026/06/725803952_1346336050758625_8537351566847766639_n-300x183.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/725803952_1346336050758625_8537351566847766639_n-1024x626.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/06/725803952_1346336050758625_8537351566847766639_n-768x469.webp 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.8.245
country_id: 2363686
domain: sp-eau.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p>dans le cadre du renforcement de la pr\xc3\xa9paration nationale aux situations d'urgence et de catastrophe, l'agence nationale de la protection civile (anpc), a organis\xc3\xa9 du 15 au 18 juin 2026 \xc3\xa0 agom\xc3\xa9-glouzou dans la pr\xc3\xa9fecture de bas-mono, l'exercice national de simulation grandeur nature <a>\xc2\xab mia dzrado 2026\xc2\xbb.</a> <a>cet exercice \xc3\xa0 tester les m\xc3\xa9canismes nationaux de r\xc3\xa9ponse face \xc3\xa0 plusieurs sc\xc3\xa9narios de crise, notamment les inondations, les \xc3\xa9pid\xc3\xa9mies, les incendies ainsi que les risques nucl\xc3\xa9aires, radiologiques, biologiques et chimiques (nrbc). l\xe2\x80\x99exercice repose sur un sc\xc3\xa9nario d\xe2\x80\x99inondation majeure provoqu\xc3\xa9e par une crue soudaine du fleuve mono. le bilan simul\xc3\xa9 fait \xc3\xa9tat d\xe2\x80\x99environs 1000 sinistr\xc3\xa9s avec une trentaine de cas de diarrh\xc3\xa9e.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a \xc3\xa9galement contribu\xc3\xa9 au renforcement des capacit\xc3\xa9s op\xc3\xa9rationnelles des diff\xc3\xa9rents acteurs impliqu\xc3\xa9s dans la gestion des catastrophes et des urgences humanitaires. la c\xc3\xa9r\xc3\xa9monie de cl\xc3\xb4ture, pr\xc3\xa9sid\xc3\xa9e par le ministre de la s\xc3\xa9curit\xc3\xa9 et de la protection civile, a r\xc3\xa9uni plusieurs membres du gouvernement, les partenaires techniques, notamment les organisations du syst\xc3\xa8mes des nations unies, financiers et humanitaires ainsi que les diff\xc3\xa9rentes structures engag\xc3\xa9es. la soci\xc3\xa9t\xc3\xa9 de patrimoine eau et assainissement en milieux urbain et semi-urbain (sp-eau) y \xc3\xa9tait repr\xc3\xa9sent\xc3\xa9e par son directeur g\xc3\xa9n\xc3\xa9ral, dr huguette massan avumadi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1539,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.36-1-edited.jpeg\" alt=\"\" class=\"wp-image-1539\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>une contribution op\xc3\xa9rationnelle au service des communaut\xc3\xa9s</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>d\xc3\xa9ploy\xc3\xa9e aux c\xc3\xb4t\xc3\xa9s des clusters sant\xc3\xa9 et s\xc3\xa9curit\xc3\xa9 alimentaire et protection (sap), la sp-eau a apport\xc3\xa9 son expertise dans le domaine de l\xe2\x80\x99eau, de l\xe2\x80\x99assainissement et de l\xe2\x80\x99hygi\xc3\xa8ne (wash) \xc3\xa0 travers : la distribution d\xe2\x80\x99eau potable aux populations affect\xc3\xa9es (agb\xc3\xa9tiko, d\xe2\x80\x99agom\xc3\xa9-glouzou, togbodji), la mise \xc3\xa0 disposition de toilettes mobiles, la distribution de kits d\xe2\x80\x99hygi\xc3\xa8ne et de comprim\xc3\xa9s de chlore pour le traitement de l\xe2\x80\x99eau, le pr\xc3\xa9positionnement d\xe2\x80\x99\xc3\xa9quipements wash, ainsi que l\xe2\x80\x99appui \xc3\xa0 la gestion des d\xc3\xa9chets dans les zones d\xe2\x80\x99intervention.</a> <a>ces actions ont permis de reproduire, dans des conditions proches du r\xc3\xa9el, les r\xc3\xa9ponses qui seraient d\xc3\xa9ploy\xc3\xa9es en cas d\xe2\x80\x99urgence sanitaire ou humanitaire.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1538,\"width\":\"747px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full is-resized\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.39-2-edited.jpeg\" alt=\"\" class=\"wp-image-1538\" style=\"width:747px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>l\xe2\x80\x99eau, une priorit\xc3\xa9 vitale en situation d\xe2\x80\x99urgence</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en situation de catastrophe, l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable figure parmi les premi\xc3\xa8res priorit\xc3\xa9s humanitaires. la participation de la sp-eau \xc3\xa0 \xc2\xab mia dzrado 2026 \xc2\xbb a ainsi permis de tester les dispositifs d\xe2\x80\x99intervention du secteur de l\xe2\x80\x99eau et de l\xe2\x80\x99assainissement dans un contexte de crise majeure. garantir l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable et \xc3\xa0 des services d\xe2\x80\x99assainissement ad\xc3\xa9quats contribue non seulement \xc3\xa0 prot\xc3\xa9ger les populations, mais \xc3\xa9galement \xc3\xa0 pr\xc3\xa9venir les risques sanitaires et \xc3\xa0 assurer la continuit\xc3\xa9 des services essentiels.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une action en coh\xc3\xa9rence avec la vision nationale</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image -->\n<figure class=\"wp-block-image\"><img alt=\"\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>cette participation s\xe2\x80\x99inscrit dans la vision de s.e.m faure essozimna gnassingb\xc3\x89, pr\xc3\xa9sident du conseil, qui place la protection des populations, la coh\xc3\xa9sion sociale et le renforcement de la r\xc3\xa9silience communautaire au c\xc5\x93ur de l\xe2\x80\x99action publique. une continuit\xc3\xa9 des actions d\xc3\xa9j\xc3\xa0 men\xc3\xa9es par la sp-eau dans le cadre du projet precos, notamment en mati\xc3\xa8re de communication de crise, de pr\xc3\xa9positionnement des stocks d'urgence et de renforcement des capacit\xc3\xa9s communautaires dans la r\xc3\xa9gion des savanes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:19:51:46 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:19:51:49 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:19:51:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.8.245
country_id: 2363686
domain: sp-eau.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p>dans le cadre du renforcement de la pr\xc3\xa9paration nationale aux situations d'urgence et de catastrophe, l'agence nationale de la protection civile (anpc), a organis\xc3\xa9 du 15 au 18 juin 2026 \xc3\xa0 agom\xc3\xa9-glouzou dans la pr\xc3\xa9fecture de bas-mono, l'exercice national de simulation grandeur nature <a>\xc2\xab mia dzrado 2026\xc2\xbb.</a> <a>cet exercice \xc3\xa0 tester les m\xc3\xa9canismes nationaux de r\xc3\xa9ponse face \xc3\xa0 plusieurs sc\xc3\xa9narios de crise, notamment les inondations, les \xc3\xa9pid\xc3\xa9mies, les incendies ainsi que les risques nucl\xc3\xa9aires, radiologiques, biologiques et chimiques (nrbc). l\xe2\x80\x99exercice repose sur un sc\xc3\xa9nario d\xe2\x80\x99inondation majeure provoqu\xc3\xa9e par une crue soudaine du fleuve mono. le bilan simul\xc3\xa9 fait \xc3\xa9tat d\xe2\x80\x99environs 1000 sinistr\xc3\xa9s avec une trentaine de cas de diarrh\xc3\xa9e.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a \xc3\xa9galement contribu\xc3\xa9 au renforcement des capacit\xc3\xa9s op\xc3\xa9rationnelles des diff\xc3\xa9rents acteurs impliqu\xc3\xa9s dans la gestion des catastrophes et des urgences humanitaires. la c\xc3\xa9r\xc3\xa9monie de cl\xc3\xb4ture, pr\xc3\xa9sid\xc3\xa9e par le ministre de la s\xc3\xa9curit\xc3\xa9 et de la protection civile, a r\xc3\xa9uni plusieurs membres du gouvernement, les partenaires techniques, notamment les organisations du syst\xc3\xa8mes des nations unies, financiers et humanitaires ainsi que les diff\xc3\xa9rentes structures engag\xc3\xa9es. la soci\xc3\xa9t\xc3\xa9 de patrimoine eau et assainissement en milieux urbain et semi-urbain (sp-eau) y \xc3\xa9tait repr\xc3\xa9sent\xc3\xa9e par son directeur g\xc3\xa9n\xc3\xa9ral, dr huguette massan avumadi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1539,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.36-1-edited.jpeg\" alt=\"\" class=\"wp-image-1539\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>une contribution op\xc3\xa9rationnelle au service des communaut\xc3\xa9s</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>d\xc3\xa9ploy\xc3\xa9e aux c\xc3\xb4t\xc3\xa9s des clusters sant\xc3\xa9 et s\xc3\xa9curit\xc3\xa9 alimentaire et protection (sap), la sp-eau a apport\xc3\xa9 son expertise dans le domaine de l\xe2\x80\x99eau, de l\xe2\x80\x99assainissement et de l\xe2\x80\x99hygi\xc3\xa8ne (wash) \xc3\xa0 travers : la distribution d\xe2\x80\x99eau potable aux populations affect\xc3\xa9es (agb\xc3\xa9tiko, d\xe2\x80\x99agom\xc3\xa9-glouzou, togbodji), la mise \xc3\xa0 disposition de toilettes mobiles, la distribution de kits d\xe2\x80\x99hygi\xc3\xa8ne et de comprim\xc3\xa9s de chlore pour le traitement de l\xe2\x80\x99eau, le pr\xc3\xa9positionnement d\xe2\x80\x99\xc3\xa9quipements wash, ainsi que l\xe2\x80\x99appui \xc3\xa0 la gestion des d\xc3\xa9chets dans les zones d\xe2\x80\x99intervention.</a> <a>ces actions ont permis de reproduire, dans des conditions proches du r\xc3\xa9el, les r\xc3\xa9ponses qui seraient d\xc3\xa9ploy\xc3\xa9es en cas d\xe2\x80\x99urgence sanitaire ou humanitaire.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1538,\"width\":\"747px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full is-resized\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.39-2-edited.jpeg\" alt=\"\" class=\"wp-image-1538\" style=\"width:747px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>l\xe2\x80\x99eau, une priorit\xc3\xa9 vitale en situation d\xe2\x80\x99urgence</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en situation de catastrophe, l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable figure parmi les premi\xc3\xa8res priorit\xc3\xa9s humanitaires. la participation de la sp-eau \xc3\xa0 \xc2\xab mia dzrado 2026 \xc2\xbb a ainsi permis de tester les dispositifs d\xe2\x80\x99intervention du secteur de l\xe2\x80\x99eau et de l\xe2\x80\x99assainissement dans un contexte de crise majeure. garantir l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau potable et \xc3\xa0 des services d\xe2\x80\x99assainissement ad\xc3\xa9quats contribue non seulement \xc3\xa0 prot\xc3\xa9ger les populations, mais \xc3\xa9galement \xc3\xa0 pr\xc3\xa9venir les risques sanitaires et \xc3\xa0 assurer la continuit\xc3\xa9 des services essentiels.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une action en coh\xc3\xa9rence avec la vision nationale</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":1540,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://sp-eau.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-18-at-16.28.40-edited.jpeg\" alt=\"\" class=\"wp-image-1540\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>cette participation s\xe2\x80\x99inscrit dans la vision de s.e.m faure essozimna gnassingb\xc3\x89, pr\xc3\xa9sident du conseil, qui place la protection des populations, la coh\xc3\xa9sion sociale et le renforcement de la r\xc3\xa9silience communautaire au c\xc5\x93ur de l\xe2\x80\x99action publique. une continuit\xc3\xa9 des actions d\xc3\xa9j\xc3\xa0 men\xc3\xa9es par la sp-eau dans le cadre du projet precos, notamment en mati\xc3\xa8re de communication de crise, de pr\xc3\xa9positionnement des stocks d'urgence et de renforcement des capacit\xc3\xa9s communautaires dans la r\xc3\xa9gion des savanes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:19:51:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 19:53:11 +0000] info [cpaneld] 102.54.238.57 - kpmg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:19:53:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12883351&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781812380 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 177.174.125.183
country_id: 3469034
description:
2026-06-18 19:54:21 dovecot_login authenticator failed for H=([187.92.239.160]) [177.174.125.183]:52264: 535 Incorrect authentication data (set_id=info@togosem.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.174.125.183
country_id: 3469034
description:
Jun 18 19:54:19 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.174.125.183 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.174.125.183
country_id: 3469034
description:
Jun 18 19:56:09 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.174.125.183 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 177.174.125.183
country_id: 3469034
description:
2026-06-18 19:56:11 dovecot_login authenticator failed for H=([177.174.125.183]) [177.174.125.183]:50478: 535 Incorrect authentication data (set_id=info)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 61.72.59.106
country_id: 1835841
description:
Jun 18 19:55:39 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 61.72.59.106 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 61.72.59.106
country_id: 1835841
description:
2026-06-18 19:55:41 dovecot_login authenticator failed for H=([121.128.76.109]) [61.72.59.106]:42664: 535 Incorrect authentication data (set_id=info@dany2.mairie.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 169.150.196.72
country_id: 2750405
description:
169.150.196.72 - - [18/Jun/2026:19:58:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6841194&pdata=https%253A%252F%252Flibertetogo.tg%252Findex.php%252Fla-preservation-du-patrimoine-ca-nous-regarde-sauvegardons-les-fresques-de-paul-ahyi-a-goyi-score%252Fsociete%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781812702 HTTP/2.0" 302 0 libertetogo.tg "https://libertetogo.tg/index.php/la-preservation-du-patrimoine-ca-nous-regarde-sauvegardons-les-fresques-de-paul-ahyi-a-goyi-score/societe/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:169.150.196.72


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.217.232.67
country_id: 241170
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/246.png HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 128.127.94.152
country_id: 798544
description:
Jun 18 19:59:03 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 128.127.94.152 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 102.216.237.238
country_id: 2328926
description:
2026-06-18 20:00:35 H=([102.216.237.238]) [102.216.237.238]:58900 F=<John@4452.com> rejected RCPT <home@white-ways.com>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 20:01:14 +0000] info [cpaneld] 102.54.238.57 - kidsedunetmaster "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kidsedunetmaster (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.179.127.29
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1643594022 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:20:01:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10327654&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781812899 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:20:01:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13408409&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781812902 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 205.210.31.208
country_id: 6252001
description:
Jun 18 20:01:59 ns5 pure-ftpd[3205580]: (?@205.210.31.208) [INFO] New connection from 205.210.31.208


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 20:02:51 +0000] info [cpaneld] 102.54.238.57 - aogodmm "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.38
country_id: 2635167
description:
[2026-06-18 20:05:08 +0000] info [cpaneld] 5.230.153.38 NEW newistm:hwfU3GNW59eOpeej address=5.230.153.38,app=cpaneld,creator=newistm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 20:04:42 +0000] info [cpaneld] 102.54.238.57 - tiyasuxe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tiyasuxe (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.181.148.51
country_id: 2635167
domain: www.togosem.com
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:107.181.148.51||TA:107.181.148.51||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 62.197.45.211
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:20-07.62.197.45.211||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 196.243.240.121
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:20-06.196.243.240.121||RSV:8.19||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 148.135.188.94
country_id: 2750405
domain: www.togosem.com
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:148.135.188.94||TA:148.135.188.94||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 193.187.115.154
country_id: 597427
domain: www.togosem.com
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:193.187.115.154||TA:193.187.115.154||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:20:07:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:20:07:39 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 43.172.196.17
country_id: 1880251
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:request_uri||MV:bien-etre-des-communautes-togolaises-une-lettre-de-mission-executee-a-974/||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:20:07:35 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 20:08:09 +0000] info [cpaneld] 102.54.238.57 - stephane "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user stephane (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 88.171.139.58
country_id: 3017382
description:
88.171.139.58 - - [18/Jun/2026:20:07:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6843846&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fsenegal%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781813249 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/senegal/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.3417.1889 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:88.171.139.58


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 20:08:23 +0000] info [cpaneld] 185.55.240.13 - web_tv "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user web_tv (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:20:07:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.3.189.15
country_id: 3923057
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2020/08/PPAAO...-634x381.jpg 634w, http:/togodailynews.tg/wp-content/uploads/2020/08/PPAAO...-634x381-300x180.jpg 300w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 20:09:35 +0000] info [cpaneld] 185.55.240.13 - k.eklou "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user k.eklou (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 68.183.22.192
country_id: 6252001
description:
2026-06-18 20:12:03 dovecot_plain authenticator failed for H=(jfjgo3k3wh7i7r1hg29wfz2kh) [68.183.22.192]:34864: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 102.216.237.238
country_id: 2328926
description:
2026-06-18 20:12:08 H=([102.216.237.238]) [102.216.237.238]:3163 F=<John@4452.com> rejected RCPT <home@white-ways.com>: Sender verify failed


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 13.42.205.55
country_id: 2635167
description:
13.42.205.55 - - [18/Jun/2026:20:11:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131356&pdata=https%253A%252F%252Fucao-uut.tg.&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781813497 HTTP/2.0" 302 0 ucao-uut.tg "https://ucao-uut.tg." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:13.42.205.55


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 20:12:33 +0000] info [cpaneld] 102.54.238.57 - yxhnfwxr "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 43.173.176.17
country_id: 1880251
domain: togodailynews.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/wp-json/wp/v2/users/1||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.18.166.90
country_id: 1269750
description:
Jun 18 20:13:56 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.18.166.90 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.141.120.21
country_id: 3703430
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/10/SNT1.webp 931w, http:/togodailynews.tg/wp-content/uploads/2025/10/SNT1-300x186.webp 300w, http:/togodailynews.tg/wp-content/uploads/2025/10/SNT1-768x477.webp 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.240.36.132
country_id: 3469034
description:
Jun 18 20:14:57 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.240.36.132 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 156.231.89.129
country_id: 1861060
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/images/other/SansSucreJaune.png HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.109.174.168
country_id: 3469034
description:
Jun 18 20:15:35 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.109.174.168 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.0.119
country_id: 2300660
description:
Jun 18 20:15:55 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.0.119 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 20:15:28 +0000] info [cpaneld] 185.55.240.13 - pyllprbc "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user pyllprbc (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 60.223.254.202
country_id: 1814991
description:
Jun 18 20:16:56 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 60.223.254.202 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 60.223.254.202
country_id: 1814991
description:
2026-06-18 20:16:58 dovecot_login authenticator failed for H=(202.254.223.60.adsl-pool.sx.cn) [60.223.254.202]:33145: 535 Incorrect authentication data (set_id=office@white-ways.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.16.123
country_id: 2300660
description:
Jun 18 20:17:12 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.16.123 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.187.227.198
country_id: 1269750
description:
2026-06-18 20:17:07 dovecot_login authenticator failed for H=([122.187.227.198]) [122.187.227.198]:33009: 535 Incorrect authentication data (set_id=office@armp.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:20:17:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6909591&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781813832 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:20:17:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000278&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781813835 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 20:16:36 +0000] info [cpaneld] 102.54.238.57 - bighostingsnbd "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.16.123
country_id: 2300660
description:
Jun 18 20:17:26 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.16.123 has been locked due to Imunify RBL


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 43.172.197.254
country_id: 1880251
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:page_title||MV:Valentine A. Sama prend les r\xc3\xaanes du R\xc3\xa9seau Togolais de l\xe2\x80\x99Evaluation||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.116.27.239
country_id: 6251999
domain: dev.pnls.tg
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.19||T:APACHE||MV:/wp-content/uploads/index.php||SC:/home/pnls/public_html/dev/wp-content/uploads/index.php||


plugin: modsec
rule: 77350295
name: IM360 WAF: Interaction with fake plugin
abuser: 20.116.27.239
country_id: 6251999
domain: dev.pnls.tg
description:
IM360 WAF: Interaction with fake plugin||MV:/wp-content/plugins/WordPressCore/||WPU:||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 185.117.225.237
country_id: 6252001
domain: snb-togo.snb.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/123.0.6312.86 Safari/537.36||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:20:22:38 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.19.183
country_id: 2300660
description:
Jun 18 20:23:23 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.19.183 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:20:22:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:20:22:33 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:20:22:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.19.183
country_id: 2300660
description:
Jun 18 20:23:31 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.19.183 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.94.247
country_id: 2635167
description:
[2026-06-18 20:25:13 +0000] info [cpaneld] 217.181.94.247 - admin@mesyscom.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.22.159
country_id: 2921044
description:
[2026-06-18 20:25:15 +0000] info [cpaneld] 195.63.22.159 - mesyscomcom "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.120.176.132
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/Transport-aerien-africain-les-orientations-du-President-Faure-Gnassingbe-pour-une-integration-du-continent-par-un-ciel-unique.webp 800w, http:/togodailynews.tg/wp-content/uploads/2026/06/Transport-aerien-africain-les-orientations-du-President-Faure-Gnassingbe-pour-une-integration-du-continent-par-un-ciel-unique-263x300.webp 263w, http:/togodailynews.tg/wp-content/uploads/2026/06/Transport-aerien-africain-les-orientations-du-President-Faure-Gnassingbe-pour-une-integration-du-continent-par-un-ciel-unique-768x876.webp 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 195.19.49.206
country_id: 2017370
description:
2026-06-18 20:25:01 dovecot_plain authenticator failed for H=(pwchcuzis5s0l35zoygv5lq8lz0sjmli) [195.19.49.206]:57175: 535 Incorrect authentication data (set_id=contacts@ucao-uut.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:20:25:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10208626&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781814299 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.16.85
country_id: 6251999
description:
[2026-06-18 20:25:14 +0000] info [cpaneld] 195.63.16.85 - mesyscom "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 195.19.49.206
country_id: 2017370
description:
Jun 18 20:24:59 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 195.19.49.206 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 197.211.63.91
country_id: 2328926
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/Paix-et-stabilite-en-Afrique-le-President-du-Conseil-echange-avec-une-delegation-des-Nations-unies.webp 800w, http:/togodailynews.tg/wp-content/uploads/2026/06/Paix-et-stabilite-en-Afrique-le-President-du-Conseil-echange-avec-une-delegation-des-Nations-unies-300x240.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/Paix-et-stabilite-en-Afrique-le-President-du-Conseil-echange-avec-une-delegation-des-Nations-unies-768x614.webp 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.208.2.104
country_id: 192950
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/Diplomatie-Faure-Essozimna-Gnassingbe-recoit-Romuald-Wadagni-en-visite-officielle-au-Tog.webp 800w, http:/togodailynews.tg/wp-content/uploads/2026/06/Diplomatie-Faure-Essozimna-Gnassingbe-recoit-Romuald-Wadagni-en-visite-officielle-au-Tog-300x240.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/Diplomatie-Faure-Essozimna-Gnassingbe-recoit-Romuald-Wadagni-en-visite-officielle-au-Tog-768x614.webp 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 20:25:57 +0000] info [cpaneld] 185.55.240.13 - abttogo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.237.5.51
country_id: 3932488
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/Integration-regionale-le-President-du-Conseil-recoit-un-emissaire-du-President-senegalais-3.webp 800w, http:/togodailynews.tg/wp-content/uploads/2026/06/Integration-regionale-le-President-du-Conseil-recoit-un-emissaire-du-President-senegalais-3-300x231.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/Integration-regionale-le-President-du-Conseil-recoit-un-emissaire-du-President-senegalais-3-768x592.webp 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.77.118.78
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/7c746c HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 111.61.97.108
country_id: 1814991
description:
Jun 18 20:28:29 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 111.61.97.108 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.189.201.224
country_id: 3469034
description:
Jun 18 20:28:55 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.189.201.224 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.198.128.204
country_id: 1835841
description:
Jun 18 20:29:20 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.198.128.204 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 191.95.145.30
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/848b77 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.244.98.17
country_id: 2233387
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160300||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.59.132.230
country_id: 1269750
description:
Jun 18 20:32:02 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.59.132.230 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 20:32:20 +0000] info [cpaneld] 102.54.238.57 - a.kesso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.kesso (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.178.198.31
country_id: 3017382
description:
Jun 18 20:31:31 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.178.198.31 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.178.198.31
country_id: 3017382
description:
2026-06-18 20:31:33 dovecot_plain authenticator failed for H=(2o1pbnhwiy5eavrww9a1whnsdkgkd1) [158.178.198.31]:45321: 535 Incorrect authentication data (set_id=supports@mesyscom.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.240.36.132
country_id: 3469034
description:
Jun 18 20:32:55 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.240.36.132 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:20:33:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7115882&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781814781 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:20:33:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051930&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781814782 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.107.71.187
country_id: 3895114
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2022/12/GridArt_20221229_204857554.jpg HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.92.241.106
country_id: 2750405
description:
Jun 18 20:35:32 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.92.241.106 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-06-18 20:35:34 dovecot_login authenticator failed for H=server.fusionmail.shop (E6AnhIj) [91.92.241.106]:64610: 535 Incorrect authentication data (set_id=tjrenaldo)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 111.63.42.76
country_id: 1814991
description:
Jun 18 20:35:38 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 111.63.42.76 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.63.42.76
country_id: 1814991
description:
2026-06-18 20:35:40 dovecot_login authenticator failed for H=([111.63.42.76]) [111.63.42.76]:62706: 535 Incorrect authentication data (set_id=office@dany2.mairie.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.92.241.106
country_id: 2750405
description:
Jun 18 20:36:32 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.92.241.106 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-06-18 20:36:34 dovecot_login authenticator failed for H=server.fusionmail.shop (EWegKthCnG) [91.92.241.106]:49919: 535 Incorrect authentication data (set_id=tjrenaldo)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:20:38:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7041427&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781815100 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-06-18 20:37:27 dovecot_login authenticator failed for H=server.fusionmail.shop (7KwgWdy) [91.92.241.106]:52207: 535 Incorrect authentication data (set_id=tjrenaldo)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.92.241.106
country_id: 2750405
description:
Jun 18 20:37:49 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.92.241.106 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-06-18 20:38:39 dovecot_login authenticator failed for H=server.fusionmail.shop (s0nOntiNe) [91.92.241.106]:54338: 535 Incorrect authentication data (set_id=tjrenaldo)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:20:38:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:20:38:40 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:20:38:41 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 111.61.175.117
country_id: 1814991
description:
Jun 18 20:38:49 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 111.61.175.117 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 222.186.68.154
country_id: 1814991
description:
Jun 18 20:38:27 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 222.186.68.154 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.196.245
country_id: 2363686
description:
[2026-06-18 20:38:27 +0000] info [webmaild] 196.168.196.245 - wiyao.g@inger.tg "POST /cpsess6054090833/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.151.32] != Current IP Address [196.168.196.245]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.92.241.106
country_id: 2750405
description:
Jun 18 20:38:37 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.92.241.106 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:20:38:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.92.241.106
country_id: 2750405
description:
Jun 18 20:39:28 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.92.241.106 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-06-18 20:39:30 dovecot_login authenticator failed for H=server.fusionmail.shop (anOqpP1bMv) [91.92.241.106]:64828: 535 Incorrect authentication data (set_id=tjrenaldo)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 80.248.72.20
country_id: 2363686
description:
[2026-06-18 20:40:17 +0000] info [webmaild] 80.248.72.20 - support@cloud-et-racks.tg "POST /cpsess8980547858/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [80.248.64.198] != Current IP Address [80.248.72.20]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-06-18 20:40:43 dovecot_login authenticator failed for H=server.fusionmail.shop (48OaMZg4GB) [91.92.241.106]:57978: 535 Incorrect authentication data (set_id=tjrenaldo)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.92.241.106
country_id: 2750405
description:
Jun 18 20:40:41 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.92.241.106 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.232.241.100
country_id: 357994
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/627c8e HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.92.241.106
country_id: 2750405
description:
Jun 18 20:41:33 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.92.241.106 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-06-18 20:41:35 dovecot_login authenticator failed for H=server.fusionmail.shop (VQIePRCh) [91.92.241.106]:51254: 535 Incorrect authentication data (set_id=tjrenaldo)


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.12.193.183
country_id: 6252001
domain: mail.golfe3.mairie.tg
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.19||T:APACHE||MV:/wp-content/uploads/index.php||SC:/home/qnlprotv/public_html/wp-content||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.92.241.106
country_id: 2750405
description:
Jun 18 20:42:25 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.92.241.106 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 38.250.132.111
country_id: 3932488
description:
38.250.132.111 - - [18/Jun/2026:20:42:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001815&pdata=https%253A%252F%252Ftogodailynews.tg%252Ftogo-le-taux-daccessibilite-geographique-aux-soins-de-sante-en-progression-de-19&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781815349 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/togo-le-taux-daccessibilite-geographique-aux-soins-de-sante-en-progression-de-19" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:38.250.132.111


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.115.172.252
country_id: 3923057
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/a49e9a HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-06-18 20:42:27 dovecot_login authenticator failed for H=server.fusionmail.shop (44htUWwHUo) [91.92.241.106]:50758: 535 Incorrect authentication data (set_id=tjrenaldo)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 20:43:24 +0000] info [cpaneld] 185.55.240.13 - admin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.92.241.106
country_id: 2750405
description:
Jun 18 20:43:54 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.92.241.106 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-06-18 20:43:56 dovecot_login authenticator failed for H=server.fusionmail.shop (AenNew) [91.92.241.106]:63927: 535 Incorrect authentication data (set_id=tjrenaldo)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 193.187.114.64
country_id: 597427
domain: lepoint-actu.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:193.187.114.64||TA:193.187.114.64||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.92.241.106
country_id: 2750405
description:
Jun 18 20:44:42 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.92.241.106 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-06-18 20:44:44 dovecot_login authenticator failed for H=server.fusionmail.shop (LZbkaqC) [91.92.241.106]:61543: 535 Incorrect authentication data (set_id=tjrenaldo)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.92.241.106
country_id: 2750405
description:
Jun 18 20:45:31 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.92.241.106 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-06-18 20:45:33 dovecot_login authenticator failed for H=server.fusionmail.shop (DhKgcxXR9M) [91.92.241.106]:64322: 535 Incorrect authentication data (set_id=tjrenaldo)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.92.241.106
country_id: 2750405
description:
Jun 18 20:46:48 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.92.241.106 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-06-18 20:46:50 dovecot_login authenticator failed for H=server.fusionmail.shop (XI4kBdOz) [91.92.241.106]:54247: 535 Incorrect authentication data (set_id=tjrenaldo)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.92.241.106
country_id: 2750405
description:
Jun 18 20:47:36 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.92.241.106 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-06-18 20:47:38 dovecot_login authenticator failed for H=server.fusionmail.shop (mOcHlBKloQ) [91.92.241.106]:63321: 535 Incorrect authentication data (set_id=tjrenaldo)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:20:47:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6986349&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781815658 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:20:47:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10341231&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781815658 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 31.222.12.239
country_id: 798544
description:
Jun 18 20:48:34 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 31.222.12.239 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.68.196.179
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/03/WhatsApp-Image-2026-03-17-at-22.21.49.webp 770w, http:/togodailynews.tg/wp-content/uploads/2026/03/WhatsApp-Image-2026-03-17-at-22.21.49-300x200.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/03/WhatsApp-Image-2026-03-17-at-22.21.49-768x512.webp 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.8.13.110
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/a69085 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 45.148.235.181
country_id: 294640
domain: soena.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:t$25U3jHlP1GonbZ9)h(bVJR.soena.tg||Method:wp.getUsersBlogs


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [18/Jun/2026:20:52:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6669666&pdata=http%253A%252F%252Fcloud-et-racks.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781815947 HTTP/1.1" 302 0 cloud-et-racks.tg "http://cloud-et-racks.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 143.208.36.134
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/03/WhatsApp-Image-2026-03-17-at-22.34.41.webp 1600w, http:/togodailynews.tg/wp-content/uploads/2026/03/WhatsApp-Image-2026-03-17-at-22.34.41-300x169.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/03/WhatsApp-Image-2026-03-17-at-22.34.41-1024x576.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/03/WhatsApp-Image-2026-03-17-at-22.34.41-768x432.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/03/WhatsApp-Image-2026-03-17-at-22.34.41-1536x864.webp 1536w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:20:54:05 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:20:54:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:20:53:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7247974&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781816017 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:20:54:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:20:54:08 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 121.18.148.10
country_id: 1814991
description:
Jun 18 20:53:47 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 121.18.148.10 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.18.148.10
country_id: 1814991
description:
2026-06-18 20:53:49 dovecot_login authenticator failed for H=([121.18.148.10]) [121.18.148.10]:43132: 535 Incorrect authentication data (set_id=promo@soena.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.21.59.169
country_id: 630336
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/587692 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.87.5
country_id: 3865483
description:
Jun 18 20:56:15 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.87.5 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.87.5
country_id: 3865483
description:
Jun 18 20:56:29 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.87.5 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.63.148.251
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/4d795a HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.94.227.88
country_id: 3437598
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/7b8185 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:21:00:52 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6593644&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781816451 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:21:00:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13354134&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781816456 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 112.202.238.167
country_id: 1694008
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1212582449 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 5740
name: ssh connection reset by peer
description:
Jun 18 21:02:16 ns5 sshd[3242091]: error: kex_exchange_identification: read: Connection reset by peer


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 81.88.144.135
country_id: 1522867
description:
2026-06-18 21:02:31 H=([81.88.144.135]) [81.88.144.135]:50771 F=<John@4452.com> rejected RCPT <home@white-ways.com>: Sender verify failed


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.189.76.167
country_id: 3895114
domain: belali.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/belali.tg/inscription-2020-2021/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 46.203.202.156
country_id: 798544
domain: cfpj.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:46.203.202.156||TA:46.203.202.156||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.189.76.167
country_id: 3895114
domain: belali.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/belali.tghttp/belali.tg/inscription-2020-2021/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-18 21:04:20 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:32868: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.170.43.53
country_id: 2363686
domain: leadelles.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/index.php/wp-json/wp/v2/users/3?context=view&_fields=id%2Cname&_locale=user||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 52.34.76.65
country_id: 6252001
description:
52.34.76.65 - - [18/Jun/2026:21:05:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6777451&pdata=http%253A%252F%252Fwww.arse.tg%252Fwp-content%252Fuploads%252F2015%252F01%252FRapport-annuel-2013.pdf&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781816703 HTTP/1.1" 302 0 www.arse.tg "http://www.arse.tg/wp-content/uploads/2015/01/Rapport-annuel-2013.pdf" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:52.34.76.65


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 181.177.120.209
country_id: 6252001
domain: dany2.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:181.177.120.209||TA:181.177.120.209||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 54.70.53.60
country_id: 6252001
description:
54.70.53.60 - - [18/Jun/2026:21:05:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7117211&pdata=http%253A%252F%252Fwww.arse.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781816754 HTTP/1.1" 302 0 www.arse.tg "http://www.arse.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:54.70.53.60


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [18/Jun/2026:21:06:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6856089&pdata=http%253A%252F%252Fmisstogo.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781816778 HTTP/1.1" 302 0 misstogo.tg "http://misstogo.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.25.118
country_id: 2635167
description:
[2026-06-18 21:07:20 +0000] info [cpaneld] 195.63.25.118 - elmkvzcm "POST /execute/Fileman/save_file_content?dir=public_html&path=public_html&from_charset=UTF-8&content=%3C%3Fphp+%24s+%3D+%22false%22%3Bif+%28mail%28%24_COOKIE%5B%22email_send_id%22%5D%2C%22Cp+Send+%23%22.%24_COOKIE%5B%22it_id%22%5D%2C%22Cp+Send+Working+..+%23%22.%24_COOKIE%5B%22it_id%22%5D.%22%5CnHash%3A+%22.md5%28time%28%29.uniqid%28%29%29%29%29+%7B%24s+%3D+%22true%22%3B%7Decho+%24s%3B%3F%3E&file=test123Cp.php&file_name=test123Cp.php HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.214.76.168
country_id: 2245662
domain: derou.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/derou.tg/fr/nos-projets/Projet_Ingenieure HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.134.26.168
country_id: 1210997
description:
2026-06-18 21:09:47 dovecot_login authenticator failed for H=mail.impressivegrp.com [103.134.26.168]:46612: 535 Incorrect authentication data (set_id=stephane.o@cafe.tg)


plugin: modsec
rule: 77350586
name: IM360 WAF: Suspicious access to wp-includes library directory
abuser: 193.238.154.13
country_id: 2510769
domain: educplusmedia.tg
description:
IM360 WAF: Suspicious access to wp-includes library directory||SC:/home/ylhgcaui/public_html/wp-includes/SimplePie/about.php||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:21:10:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6462107&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781817008 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:21:09:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:21:09:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:21:09:30 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.134.26.168
country_id: 1210997
description:
Jun 18 21:09:45 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.134.26.168 has been locked due to Imunify RBL


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:21:09:27 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 21:10:34 +0000] info [cpaneld] 185.55.240.13 - a.kesso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.kesso (has_cpuser_file failed)


plugin: modsec
rule: 77142124
name: IM360 WAF: Track WordPress registration flood
abuser: 159.26.120.5
country_id: 690791
domain: belali.tg
description:
IM360 WAF: Track WordPress registration flood||WPU:||RSV:8.19||T:APACHE||MVN:ARGS:action||MV:register||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 123.28.121.11
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/01/e06b9bc4468420ca40eb1862af558e23_XL.jpg 770w, http:/togodailynews.tg/wp-content/uploads/2024/01/e06b9bc4468420ca40eb1862af558e23_XL-300x169.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2024/01/e06b9bc4468420ca40eb1862af558e23_XL-768x432.jpg 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 159.26.120.5
country_id: 690791
domain: belali.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:cortneyu78||Email:gseotier2@xmc.pl||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 21:11:27 +0000] info [cpaneld] 102.54.238.57 - afdim "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.253
country_id: 2635167
description:
[2026-06-18 21:12:01 +0000] info [cpaneld] 5.230.133.253 NEW zykoahbv:t8Ek908qgGam1fv3 address=5.230.133.253,app=cpaneld,creator=zykoahbv,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 134.195.82.52
country_id: 6252001
domain: delxia.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/zykoahbv/public_html/.356564104643474.php||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 34.27.42.6
country_id: 6252001
description:
[2026-06-18 21:13:54 +0000] info [cpaneld] 34.27.42.6 - mesyscomcom "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 81.88.144.135
country_id: 1522867
description:
2026-06-18 21:14:28 H=([81.88.144.135]) [81.88.144.135]:60358 F=<John@4452.com> rejected RCPT <home@white-ways.com>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 121.18.148.10
country_id: 1814991
description:
Jun 18 21:15:40 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 121.18.148.10 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.18.148.10
country_id: 1814991
description:
2026-06-18 21:15:42 dovecot_login authenticator failed for H=([121.18.148.10]) [121.18.148.10]:65406: 535 Incorrect authentication data (set_id=promo@togosem.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-18 21:15:46 +0000] info [cpaneld] 102.54.238.57 - masfloy "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:21:16:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6844310&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781817398 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:21:16:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9607317&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781817399 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 110.175.41.178
country_id: 2077456
description:
Jun 18 21:16:49 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 110.175.41.178 has been locked due to Imunify RBL


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 98.159.37.246
country_id: 6252001
domain: cfpj.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/site/wp-json/wp/v2/users||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.59.135.178
country_id: 1269750
description:
Jun 18 21:23:00 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.59.135.178 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 123.253.108.115
country_id: 1861060
description:
Jun 18 21:22:53 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 123.253.108.115 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.253.108.115
country_id: 1861060
description:
2026-06-18 21:22:55 dovecot_login authenticator failed for H=(orjfpzpdu.com) [123.253.108.115]:64353: 535 Incorrect authentication data (set_id=infos@mesyscom.com)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [18/Jun/2026:21:24:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9793438&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781817838 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 170.83.116.23
country_id: 3608932
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/7a868c HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.166.100.183
country_id: 1282988
description:
103.166.100.183 - - [18/Jun/2026:21:25:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6777752&pdata=https%253A%252F%252F24heureinfo.tg%252Fflash-info%252Ffmi-communique-de-la-trente-huitieme-reunion-du-cmfi&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781817895 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/flash-info/fmi-communique-de-la-trente-huitieme-reunion-du-cmfi" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.166.100.183


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 141.98.142.170
country_id: 783754
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/309862140 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:21:25:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.232.209.114
country_id: 6252001
domain: vitrinenews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:104.232.209.114||TA:104.232.209.114||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 137.255.61.167
country_id: 2395170
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/03/WhatsApp-Image-2026-03-17-at-22.21.49-1.webp 475w, http:/togodailynews.tg/wp-content/uploads/2026/03/WhatsApp-Image-2026-03-17-at-22.21.49-1-300x169.webp 300w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:21:25:44 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:21:25:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 203.132.68.28
country_id: 2077456
description:
203.132.68.28 - - [18/Jun/2026:21:25:47 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.132.68.28


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 147.78.160.134
country_id: 831053
domain: www.cafe.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.cafe.tg/?page_id=6 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 147.78.160.134
country_id: 831053
domain: www.cafe.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.cafe.tghttp/www.cafe.tg/?page_id=6 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-18 21:28:05 +0000] info [cpaneld] 185.55.240.13 - wgqhqbem "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77350374
name: IM360 WAF: Scan attempt by bytespider crawler
abuser: 111.225.148.113
country_id: 1814991
domain: www.boutique.cafe.tg
description:
IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.156.108.18
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/01/215b0c0ff1b5b021419054da81670a19_L.jpg 600w, http:/togodailynews.tg/wp-content/uploads/2025/01/215b0c0ff1b5b021419054da81670a19_L-300x170.jpg 300w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 180.191.147.209
country_id: 1694008
description:
180.191.147.209 - - [18/Jun/2026:21:30:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6985837&pdata=https%253A%252F%252F24heureinfo.tg%252Ftag%252Fcollectif%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781818247 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/tag/collectif/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:180.191.147.209


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.77.204.249
country_id: 2542007
domain: cloud-et-racks.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/cloud-et-racks.tg/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.229.234.188
country_id: 3996063
domain: cloud-et-racks.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/cloud-et-racks.tghttp/cloud-et-racks.tg/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.92.9.65
country_id: 3686110
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.241.250.27
country_id: 3686110
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/cache/autoptimize/css/autoptimize_single_b8f1656fe74917c0889f45e66ede5492.css?ver=1.0.0 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.93.52.176
country_id: 690791
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-includes/js/heartbeat.min.js?ver=6.9.4 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.241.238.18
country_id: 630336
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/cache/autoptimize/js/autoptimize_single_6aae38c1be74eaaae90e18c257493330.js?ver=1.0.0 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.247.72.231
country_id: 290557
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-includes/css/dashicons.min.css?ver=6.9.4 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.240.239.82
country_id: 2635167
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-includes/css/admin-bar.min.css?ver=6.9.4 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.245.232.221
country_id: 290557
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/cache/autoptimize/js/autoptimize_single_99ccce287ae5c8a10f58ecae9e5f5747.js?ver=6.9.4 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.244.68.128
country_id: 3190538
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/cache/autoptimize/css/autoptimize_single_fa757170427f0ca61fdafc865cbd50f1.css?ver=1.0.0 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.247.69.161
country_id: 290557
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/cache/autoptimize/css/autoptimize_single_474f2da06b2a20a3d78b023b42995487.css?ver=1.2 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.245.232.221
country_id: 290557
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/uploads/2026/06/725803952_1346336050758625_8537351566847766639_n-300x183.webp HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.244.70.225
country_id: 3057568
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/uploads/2026/06/Dr-Elombi-300x183.webp HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.244.103.60
country_id: 6252001
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/uploads/2026/04/cropped-cropped-cropped-Logo-TDN-768x339.webp HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.49
country_id: 3077311
description:
212.102.39.49 - - [18/Jun/2026:21:33:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9738096&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781818382 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.49


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.241.251.173
country_id: 3624060
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/uploads/2026/06/telechargement-1.webp HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.212.250
country_id: 2077456
description:
103.1.212.250 - - [18/Jun/2026:21:33:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6788804&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781818384 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.212.250


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 181.177.103.130
country_id: 6252001
domain: dany2.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:181.177.103.130||TA:181.177.103.130||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.11.251.69
country_id: 3469034
description:
Jun 18 21:35:42 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.11.251.69 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 46.62.234.38
country_id: 660013
description:
46.62.234.38 - - [18/Jun/2026:21:36:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:46.62.234.38


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.203.49.102
country_id: 2963597
description:
Jun 18 21:36:20 ns5 auth[2902507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.203.49.102 has been locked due to Imunify RBL


