# incident

plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.207.184.180
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET /index.php?rest_route=/wp/v2/block-renderer/wpforms/form-selector&context=edit&attributes[clientId]=49a70d90-be22-44de-a59a-60d741b6240c&attributes[formId]=578&attributes[displayTitle]=false&attributes[displayDesc]=false&attributes[theme]=default&attributes[themeName]=Default&attributes[labelSize]=medium&attributes[labelColor]=rgba( 0, 0, 0, 0.85 )&attributes[labelSublabelColor]=rgba( 0, 0, 0, 0.55 )&attributes[labelErrorColor]=#d63637&attributes[pageBreakColor]=#066aab&attributes[customCss]=&attributes[copyPasteJsonValue]={\"displayTitle\":false,\"displayDesc\":false,\"theme\":\"default\",\"themeName\":\"\",\"fieldSize\":\"medium\",\"backgroundImage\":\"none\",\"backgroundPosition\":\"center center\",\"backgroundRepeat\":\"no-repeat\",\"backgroundSizeMode\":\"cover\",\"backgroundSize\":\"cover\",\"backgroundWidth\":\"100px\",\"backgroundHeight\":\"100px\",\"backgroundUrl\":\"url()\",\"backgroundColor\":\"rgba( 0, 0, 0, 0 )\",\"fieldBorderRadius\":\"3px\",\"fieldBorderStyle\":\"solid\",\"fieldBorderSize\":\"1px\",\"fieldBackgroundColor\":\"#ffffff\",\"fieldBorderColor\":\"rgba( 0, 0, 0, 0.25 )\",\"fieldTextColor\":\"rgba( 0, 0, 0, 0.7 )\",\"fieldMenuColor\":\"#ffffff\",\"labelSize\":\"medium\",\"labelColor\":\"rgba( 0, 0, 0, 0.85 )\",\"labelSublabelColor\":\"rgba( 0, 0, 0, 0.55 )\",\"labelErrorColor\":\"#d63637\",\"buttonSize\":\"medium\",\"buttonBorderStyle\":\"none\",\"buttonBorderSize\":\"1px\",\"buttonBorderRadius\":\"3px\",\"buttonBackgroundColor\":\"#066aab\",\"buttonTextColor\":\"#ffffff\",\"buttonBorderColor\":\"#066aab\",\"pageBreakColor\":\"#066aab\",\"containerPadding\":\"0px\",\"containerBorderStyle\":\"none\",\"containerBorderWidth\":\"1px\",\"containerBorderColor\":\"#000000\",\"containerBorderRadius\":\"3px\",\"containerShadowSize\":\"none\",\"customCss\":\"\"}&attributes[fieldSize]=medium&attributes[fieldBorderStyle]=solid&attributes[fieldBorderSize]=1px&attributes[fieldBorderRadius]=3px&attributes[fieldBackgroundColor]=#ffffff&attributes[fieldBorderColor]=rgba( 0, 0, 0, 0.25 )&attributes[fieldTextColor]=rgba( 0, 0, 0, 0.7 )&attributes[fieldMenuColor]=#ffffff&attributes[containerPadding]=0px&attributes[containerBorderStyle]=none&attributes[containerBorderWidth]=1px&attributes[containerBorderColor]=#000000&attributes[containerBorderRadius]=3px&attributes[containerShadowSize]=none&attributes[backgroundImage]=none&attributes[backgroundPosition]=center center&attributes[backgroundRepeat]=no-repeat&attributes[backgroundSizeMode]=cover&attributes[backgroundSize]=cover&attributes[backgroundWidth]=100px&attributes[backgroundHeight]=100px&attributes[backgroundColor]=rgba( 0, 0, 0, 0 )&attributes[backgroundUrl]=url()&attributes[buttonSize]=medium&attributes[buttonBorderStyle]=none&attributes[buttonBorderSize]=1px&attributes[buttonBorderRadius]=3px&attributes[buttonBackgroundColor]=#066aab&attributes[buttonTextColor]=#ffffff&attributes[buttonBorderColor]=#066aab&_locale=user HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-25 15:18:59 +0000] info [webmaild] 160.242.195.10 - sadedjouma@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 206.206.127.227
country_id: 6252001
description:
[2026-06-25 15:19:57 +0000] info [cpaneld] 206.206.127.227 - root "GET / HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-25 15:19:36 +0000] info [webmaild] 160.242.195.10 - sadedjouma@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.48.138.235
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 34.48.138.235: 80 connections per 30 seconds to 2083 port.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.207.184.180
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET /index.php?rest_route=/wp/v2/block-renderer/wpforms/form-selector&context=edit&attributes[clientId]=8ab22ad4-3e9d-48e2-89ed-1416895dc4bc&attributes[formId]=578&attributes[displayTitle]=false&attributes[displayDesc]=false&attributes[theme]=default&attributes[themeName]=Default&attributes[labelSize]=medium&attributes[labelColor]=rgba( 0, 0, 0, 0.85 )&attributes[labelSublabelColor]=rgba( 0, 0, 0, 0.55 )&attributes[labelErrorColor]=#d63637&attributes[pageBreakColor]=#066aab&attributes[customCss]=&attributes[copyPasteJsonValue]={\"displayTitle\":false,\"displayDesc\":false,\"theme\":\"default\",\"themeName\":\"\",\"fieldSize\":\"medium\",\"backgroundImage\":\"none\",\"backgroundPosition\":\"center center\",\"backgroundRepeat\":\"no-repeat\",\"backgroundSizeMode\":\"cover\",\"backgroundSize\":\"cover\",\"backgroundWidth\":\"100px\",\"backgroundHeight\":\"100px\",\"backgroundUrl\":\"url()\",\"backgroundColor\":\"rgba( 0, 0, 0, 0 )\",\"fieldBorderRadius\":\"3px\",\"fieldBorderStyle\":\"solid\",\"fieldBorderSize\":\"1px\",\"fieldBackgroundColor\":\"#ffffff\",\"fieldBorderColor\":\"rgba( 0, 0, 0, 0.25 )\",\"fieldTextColor\":\"rgba( 0, 0, 0, 0.7 )\",\"fieldMenuColor\":\"#ffffff\",\"labelSize\":\"medium\",\"labelColor\":\"rgba( 0, 0, 0, 0.85 )\",\"labelSublabelColor\":\"rgba( 0, 0, 0, 0.55 )\",\"labelErrorColor\":\"#d63637\",\"buttonSize\":\"medium\",\"buttonBorderStyle\":\"none\",\"buttonBorderSize\":\"1px\",\"buttonBorderRadius\":\"3px\",\"buttonBackgroundColor\":\"#066aab\",\"buttonTextColor\":\"#ffffff\",\"buttonBorderColor\":\"#066aab\",\"pageBreakColor\":\"#066aab\",\"containerPadding\":\"0px\",\"containerBorderStyle\":\"none\",\"containerBorderWidth\":\"1px\",\"containerBorderColor\":\"#000000\",\"containerBorderRadius\":\"3px\",\"containerShadowSize\":\"none\",\"customCss\":\"\"}&attributes[fieldSize]=medium&attributes[fieldBorderStyle]=solid&attributes[fieldBorderSize]=1px&attributes[fieldBorderRadius]=3px&attributes[fieldBackgroundColor]=#ffffff&attributes[fieldBorderColor]=rgba( 0, 0, 0, 0.25 )&attributes[fieldTextColor]=rgba( 0, 0, 0, 0.7 )&attributes[fieldMenuColor]=#ffffff&attributes[containerPadding]=0px&attributes[containerBorderStyle]=none&attributes[containerBorderWidth]=1px&attributes[containerBorderColor]=#000000&attributes[containerBorderRadius]=3px&attributes[containerShadowSize]=none&attributes[backgroundImage]=none&attributes[backgroundPosition]=center center&attributes[backgroundRepeat]=no-repeat&attributes[backgroundSizeMode]=cover&attributes[backgroundSize]=cover&attributes[backgroundWidth]=100px&attributes[backgroundHeight]=100px&attributes[backgroundColor]=rgba( 0, 0, 0, 0 )&attributes[backgroundUrl]=url()&attributes[buttonSize]=medium&attributes[buttonBorderStyle]=none&attributes[buttonBorderSize]=1px&attributes[buttonBorderRadius]=3px&attributes[buttonBackgroundColor]=#066aab&attributes[buttonTextColor]=#ffffff&attributes[buttonBorderColor]=#066aab&_locale=user HTTP/1.1||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 49.37.233.134
country_id: 1269750
domain: tdn.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-20.49.37.233.134||RSV:8.20||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 88.222.244.181
country_id: 1269750
description:
Jun 25 15:22:56 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 88.222.244.181 has been locked due to Imunify RBL


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 134.122.27.233
country_id: 6252001
description:
Jun 25 15:23:05 ns5 pure-ftpd[606878]: (?@134.122.27.233) [WARNING] Authentication failed for user [mail.dany2.mairie.tg]


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 134.122.27.233
country_id: 6252001
description:
Jun 25 15:25:02 ns5 pure-ftpd[607711]: (?@134.122.27.233) [WARNING] Authentication failed for user [contact@dany2.mairie.tg]


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 41.207.184.180
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:group {\"classname\":\"footer-outer-box\",\"style\":{\"spacing\":{\"padding\":{\"top\":\"var:preset|spacing|70\",\"bottom\":\"var:preset|spacing|70\",\"left\":\"0\",\"right\":\"0\"},\"blockgap\":\"0\",\"margin\":{\"top\":\"0\",\"bottom\":\"0\"}}},\"textcolor\":\"foreground\",\"gradient\":\"vertical-secondary-to-background\",\"layout\":{\"type\":\"constrained\",\"contentsize\":\"80%\"}} -->\n<div class=\"wp-block-group footer-outer-box has-foreground-color has-vertical-secondary-to-background-gradient-background has-text-color has-background\" style=\"margin-top:0;margin-bottom:0;padding-top:var(--wp--preset--spacing--70);padding-right:0;padding-bottom:var(--wp--preset--spacing--70);padding-left:0\"><!-- wp:columns {\"style\":{\"spacing\":{\"padding\":{\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\"},\"margin\":{\"top\":\"0\",\"bottom\":\"0\"},\"blockgap\":{\"top\":\"0\",\"left\":\"0\"}}}} -->\n<div class=\"wp-block-columns\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\"><!-- wp:column {\"verticalalignment\":\"top\",\"width\":\"35%\",\"style\":{\"spacing\":{\"padding\":{\"left\":\"var:preset|spacing|40\",\"right\":\"var:preset|spacing|40\",\"top\":\"var:preset|spacing|40\",\"bottom\":\"var:preset|spacing|40\"}}}} -->\n<div class=\"wp-block-column is-vertically-aligned-top\" style=\"padding-top:var(--wp--preset--spacing--40);padding-right:var(--wp--preset--spacing--40);padding-bottom:var(--wp--preset--spacing--40);padding-left:var(--wp--preset--spacing--40);flex-basis:35%\"><!-- wp:site-title {\"style\":{\"typography\":{\"fontstyle\":\"normal\",\"fontweight\":\"400\",\"texttransform\":\"uppercase\"}},\"fontsize\":\"regular\",\"fontfamily\":\"fse-church-hedvig-letters-serif\"} /-->\n\n<!-- wp:paragraph {\"style\":{\"spacing\":{\"margin\":{\"bottom\":\"var:preset|spacing|50\"}}},\"fontfamily\":\"fse-church-inter\"} -->\n<p class=\"has-fse-church-inter-font-family\" style=\"margin-bottom:var(--wp--preset--spacing--50)\">d\xc3\xa9nomination&nbsp;: religieux camilliens<br>sigle/nom court&nbsp;: camilliens<br>statut juridique&nbsp;: ministres des infirmes (mi)<br>date de cr\xc3\xa9ation&nbsp;: 24 novembre 2006<br>si\xc3\xa8ge social&nbsp;: lom\xc3\xa9/ togo</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:social-links {\"customiconcolor\":\"var(\\u002d\\u002dwp\\u002d\\u002dpreset\\u002d\\u002dcolor\\u002d\\u002dextra-secondary)\",\"iconcolorvalue\":\"var(\\u002d\\u002dwp\\u002d\\u002dpreset\\u002d\\u002dcolor\\u002d\\u002dextra-secondary)\",\"iconbackgroundcolor\":\"foreground\",\"iconbackgroundcolorvalue\":\"#ffffff\",\"style\":{\"spacing\":{\"margin\":{\"right\":\"0\",\"left\":\"0\"},\"blockgap\":{\"left\":\"var:preset|spacing|30\"}}}} -->\n<ul class=\"wp-block-social-links has-icon-color has-icon-background-color\" style=\"margin-right:0;margin-left:0\"></ul>\n<!-- /wp:social-links --></div>\n<!-- /wp:column -->\n\n<!-- wp:column {\"width\":\"20%\",\"classname\":\"footer-div footer-2\"} -->\n<div class=\"wp-block-column footer-div footer-2\" style=\"flex-basis:20%\"><!-- wp:paragraph {\"fontfamily\":\"fse-church-inter\"} -->\n<p class=\"has-fse-church-inter-font-family\"></p>\n<!-- /wp:paragraph --></div>\n<!-- /wp:column -->\n\n<!-- wp:column {\"width\":\"15%\",\"classname\":\"footer-div footer-3\",\"fontfamily\":\"fse-church-inter\"} -->\n<div class=\"wp-block-column footer-div footer-3 has-fse-church-inter-font-family\" style=\"flex-basis:15%\"><!-- wp:heading {\"level\":3,\"style\":{\"typography\":{\"fontstyle\":\"normal\",\"fontweight\":\"400\"},\"spacing\":{\"margin\":{\"top\":\"0\",\"bottom\":\"var:preset|spacing|50\"}}},\"fontsize\":\"medium\",\"fontfamily\":\"fse-church-hedvig-letters-serif\"} -->\n<h3 class=\"wp-block-heading has-fse-church-hedvig-letters-serif-font-family has-medium-font-size\" style=\"margin-top:0;margin-bottom:var(--wp--preset--spacing--50);font-style:normal;font-weight:400\"></h3>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph {\"style\":{\"spacing\":{\"margin\":{\"top\":\"var:preset|spacing|20\",\"bottom\":\"var:preset|spacing|20\",\"left\":\"0\",\"right\":\"0\"}}}} -->\n<p style=\"margin-top:var(--wp--preset--spacing--20);margin-right:0;margin-bottom:var(--wp--preset--spacing--20);margin-left:0\"></p>\n<!-- /wp:paragraph --></div>\n<!-- /wp:column -->\n\n<!-- wp:column {\"width\":\"15%\",\"classname\":\"footer-div footer-4\",\"fontfamily\":\"fse-church-inter\"} -->\n<div class=\"wp-block-column footer-div footer-4 has-fse-church-inter-font-family\" style=\"flex-basis:15%\"><!-- wp:heading {\"level\":3,\"style\":{\"typography\":{\"fontstyle\":\"normal\",\"fontweight\":\"400\"},\"spacing\":{\"margin\":{\"bottom\":\"var:preset|spacing|50\"}}},\"fontsize\":\"medium\",\"fontfamily\":\"fse-church-hedvig-letters-serif\"} -->\n<h3 class=\"wp-block-heading has-fse-church-hedvig-letters-serif-font-family has-medium-font-size\" style=\"margin-bottom:var(--wp--preset--spacing--50);font-style:normal;font-weight:400\"></h3>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph {\"style\":{\"spacing\":{\"margin\":{\"top\":\"var:preset|spacing|20\",\"bottom\":\"var:preset|spacing|20\"}}}} -->\n<p style=\"margin-top:var(--wp--preset--spacing--20);margin-bottom:var(--wp--preset--spacing--20)\"></p>\n<!-- /wp:paragraph --></div>\n<!-- /wp:column -->\n\n<!-- wp:column {\"width\":\"15%\",\"classname\":\"footer-div footer-5\",\"fontfamily\":\"fse-church-inter\"} -->\n<div class=\"wp-block-column footer-div footer-5 has-fse-church-inter-font-family\" style=\"flex-basis:15%\"><!-- wp:heading {\"level\":3,\"style\":{\"typography\":{\"fontstyle\":\"normal\",\"fontweight\":\"400\"},\"spacing\":{\"margin\":{\"bottom\":\"var:preset|spacing|50\"}}},\"fontsize\":\"medium\",\"fontfamily\":\"fse-church-hedvig-letters-serif\"} -->\n<h3 class=\"wp-block-heading has-fse-church-hedvig-letters-serif-font-family has-medium-font-size\" style=\"margin-bottom:var(--wp--preset--spacing--50);font-style:normal;font-weight:400\">menu</h3>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph {\"style\":{\"spacing\":{\"margin\":{\"top\":\"var:preset|spacing|20\",\"bottom\":\"var:preset|spacing|20\",\"left\":\"0\",\"right\":\"0\"}},\"elements\":{\"link\":{\"color\":{\"text\":\"var:preset|color|foreground\"}}}},\"textcolor\":\"foreground\"} -->\n<p class=\"has-foreground-color has-text-color has-link-color\" style=\"margin-top:var(--wp--preset--spacing--20);margin-right:0;margin-bottom:var(--wp--preset--spacing--20);margin-left:0\"><a href=\"https://camilliens.tg/\" data-type=\"link\" data-id=\"https://camilliens.tg/\">accueil</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"spacing\":{\"margin\":{\"top\":\"var:preset|spacing|20\",\"bottom\":\"var:preset|spacing|20\",\"left\":\"0\",\"right\":\"0\"}},\"elements\":{\"link\":{\"color\":{\"text\":\"var:preset|color|foreground\"}}}},\"textcolor\":\"foreground\"} -->\n<p class=\"has-foreground-color has-text-color has-link-color\" style=\"margin-top:var(--wp--preset--spacing--20);margin-right:0;margin-bottom:var(--wp--preset--spacing--20);margin-left:0\"><a href=\"https://camilliens.tg/?page_id=14\">association</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"spacing\":{\"margin\":{\"top\":\"var:preset|spacing|20\",\"bottom\":\"var:preset|spacing|20\",\"left\":\"0\",\"right\":\"0\"}},\"elements\":{\"link\":{\"color\":{\"text\":\"var:preset|color|foreground\"}}}},\"textcolor\":\"foreground\"} -->\n<p class=\"has-foreground-color has-text-color has-link-color\" style=\"margin-top:var(--wp--preset--spacing--20);margin-right:0;margin-bottom:var(--wp--preset--spacing--20);margin-left:0\"><a href=\"https://camilliens.tg/?page_id=17\">activit\xc3\xa9s</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"spacing\":{\"margin\":{\"top\":\"var:preset|spacing|20\",\"bottom\":\"var:preset|spacing|20\",\"left\":\"0\",\"right\":\"0\"}},\"elements\":{\"link\":{\"color\":{\"text\":\"var:preset|color|foreground\"}}}},\"textcolor\":\"foreground\"} -->\n<p class=\"has-foreground-color has-text-color has-link-color\" style=\"margin-top:var(--wp--preset--spacing--20);margin-right:0;margin-bottom:var(--wp--preset--spacing--20);margin-left:0\"><a href=\"#\">contact</a>s</p>\n<!-- /wp:paragraph --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns --></div>\n<!-- /wp:group -->\n\n<!-- wp:group {\"align\":\"full\",\"style\":{\"spacing\":{\"padding\":{\"top\":\"var:preset|spacing|50\",\"bottom\":\"var:preset|spacing|50\",\"right\":\"var:preset|spacing|50\",\"left\":\"var:preset|spacing|50\"}},\"elements\":{\"link\":{\"color\":{\"text\":\"var:preset|color|foreground\"}}}},\"textcolor\":\"foreground\",\"gradient\":\"vertical-secondary-to-background\",\"layout\":{\"type\":\"constrained\",\"contentsize\":\"80%\"}} -->\n<div class=\"wp-block-group alignfull has-foreground-color has-vertical-secondary-to-background-gradient-background has-text-color has-background has-link-color\" style=\"padding-top:var(--wp--preset--spacing--50);padding-right:var(--wp--preset--spacing--50);padding-bottom:var(--wp--preset--spacing--50);padding-left:var(--wp--preset--spacing--50)\"><!-- wp:paragraph {\"classname\":\"has-fse-church-inter-font-family\",\"style\":{\"typography\":{\"textalign\":\"center\"}}} -->\n<p class=\"has-text-align-center has-fse-church-inter-font-family\"><strong>\xc2\xa9 2026 camilliens. tous droits r\xc3\xa9serv\xc3\xa9s.</strong></p>\n<!-- /wp:paragraph --></div>\n<!-- /wp:group -->||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 102.64.146.115
country_id: 2363686
description:
[2026-06-25 15:26:33 +0000] info [cpaneld] 102.64.146.115 NEW ywpozjfl:r4zsMTQMU5HtRjvn address=102.64.146.115,app=cpaneld,creator=ywpozjfl,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 72.60.103.71
country_id: 1269750
description:
Jun 25 15:27:31 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 72.60.103.71 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.214.10.178
country_id: 2245662
description:
2026-06-25 15:29:19 dovecot_login authenticator failed for H=(wsip-184-186-104-101.lv.lv.cox.net) [41.214.10.178]:43724: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-25 15:28:22 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:46284: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 105.174.17.50
country_id: 3351879
description:
Jun 25 15:31:20 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 105.174.17.50 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.43.75.150
country_id: 2635167
description:
2026-06-25 15:32:00 dovecot_plain authenticator failed for H=(imhmftodrruhgsow390dshwy1p9) [45.43.75.150]:45688: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.39.11.102
country_id: 2635167
description:
Denial of Service (DoS) attack was discovered from 34.39.11.102: 80 connections per 30 seconds to 2083 port.


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.172.198.87
country_id: 1880251
description:
43.172.198.87 - - [25/Jun/2026:15:32:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6776471&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Foembed%252F1.0%252Fembed%253Fformat%253Dxml%2526url%253Dhttps%25253A%25252F%25252F24heureinfo.tg%25252Fsociete%25252Fcinkasse-le-grand-pont-reliant-boade-goulgoussi-et-gnoaga-sera-reconstruit%25252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782401556 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2F24heureinfo.tg%2Fsociete%2Fcinkasse-le-grand-pont-reliant-boade-goulgoussi-et-gnoaga-sera-reconstruit%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.172.198.87


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 74.63.25.227
country_id: 2750405
description:
Denial of Service (DoS) attack was discovered from 74.63.25.227: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 59.145.148.114
country_id: 1269750
description:
Denial of Service (DoS) attack was discovered from 59.145.148.114: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.77.183.234
country_id: 2635167
description:
Jun 25 15:34:40 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.77.183.234 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.34.137.111
country_id: 2017370
description:
[2026-06-25 15:35:19 +0000] info [cpaneld] 178.34.137.111 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.158.148.225
country_id: 6251999
description:
[2026-06-25 15:35:21 +0000] info [cpaneld] 69.158.148.225 - relanceinfo "GET /login/?login_only=1&user=relanceinfo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanceinfo (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 45.3.43.175
country_id: 2921044
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-34.45.3.43.175||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.234.208.188
country_id: 6252001
description:
[2026-06-25 15:35:43 +0000] info [cpaneld] 97.234.208.188 - rela "GET /login/?login_only=1&user=rela&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rela (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.31.114.215
country_id: 2921044
description:
[2026-06-25 15:35:45 +0000] info [cpaneld] 94.31.114.215 - rel "GET /login/?login_only=1&user=rel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rel (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 38.137.161.134
country_id: 3469034
description:
38.137.161.134 - - [25/Jun/2026:15:36:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9856868&pdata=https%253A%252F%252Fcpanel.techinoov.free.netmaster.tg%252F%253Flocale%253Dnb&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782401759 HTTP/2.0" 302 0 cpanel.techinoov.free.netmaster.tg "https://cpanel.techinoov.free.netmaster.tg/?locale=nb" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:38.137.161.134


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.49.244.107
country_id: 3996063
description:
[2026-06-25 15:35:26 +0000] info [cpaneld] 200.49.244.107 - relancei "GET /login/?login_only=1&user=relancei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relancei (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.169.126.173
country_id: 3469034
description:
[2026-06-25 15:35:30 +0000] info [cpaneld] 45.169.126.173 - relance "GET /login/?login_only=1&user=relance&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relance (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.217.110.212
country_id: 2542007
description:
[2026-06-25 15:35:39 +0000] info [cpaneld] 196.217.110.212 - relan "GET /login/?login_only=1&user=relan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 87.220.232.130
country_id: 2510769
description:
[2026-06-25 15:35:46 +0000] info [cpaneld] 87.220.232.130 - re "GET /login/?login_only=1&user=re&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user re (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.97.134.184
country_id: 3865483
description:
[2026-06-25 15:35:23 +0000] info [cpaneld] 98.97.134.184 - relanceinfotg "GET /login/?login_only=1&user=relanceinfotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanceinfotg (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 24.97.253.246
country_id: 6252001
description:
Jun 25 15:36:38 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 24.97.253.246 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-25 15:36:55 +0000] info [webmaild] 160.242.195.10 - knouwodou@caissederetraites.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 154.255.158.173
country_id: 2589581
description:
[2026-06-25 15:38:40 +0000] info [cpaneld] 154.255.158.173 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 34.67.25.31
country_id: 6252001
domain: tps.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/148.0.0.0 Safari/537.36||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.24.143.96
country_id: 2017370
description:
[2026-06-25 15:38:50 +0000] info [cpaneld] 95.24.143.96 - scafrica "GET /login/?login_only=1&user=scafrica&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafrica (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.42.19.227
country_id: 3658394
description:
[2026-06-25 15:38:57 +0000] info [cpaneld] 186.42.19.227 - scafri "GET /login/?login_only=1&user=scafri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.239.38.32
country_id: 3996063
description:
[2026-06-25 15:39:07 +0000] info [cpaneld] 177.239.38.32 - sca "GET /login/?login_only=1&user=sca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.70.190.42
country_id: 298795
description:
[2026-06-25 15:39:09 +0000] info [cpaneld] 95.70.190.42 - sc "GET /login/?login_only=1&user=sc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.65.224.26
country_id: 3865483
description:
[2026-06-25 15:38:44 +0000] info [cpaneld] 45.65.224.26 - scafricaplc "GET /login/?login_only=1&user=scafricaplc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafricaplc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.60.72.99
country_id: 3895114
description:
[2026-06-25 15:38:47 +0000] info [cpaneld] 179.60.72.99 - scafricaplccom "GET /login/?login_only=1&user=scafricaplccom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafricaplccom (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 82.112.226.110
country_id: 1269750
description:
Jun 25 15:39:58 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 82.112.226.110 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-25 15:40:39 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:39650: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.177.19.245
country_id: 2542007
description:
[2026-06-25 15:43:01 +0000] info [cpaneld] 160.177.19.245 - letabl "GET /login/?login_only=1&user=letabl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.188.9.131
country_id: 2017370
description:
[2026-06-25 15:43:04 +0000] info [cpaneld] 37.188.9.131 - letab "GET /login/?login_only=1&user=letab&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letab (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.41.168.254
country_id: 2017370
description:
[2026-06-25 15:42:45 +0000] info [cpaneld] 94.41.168.254 - ortouchecom "GET /login/?login_only=1&user=ortouchecom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ortouchecom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.108.229.114
country_id: 2510769
description:
[2026-06-25 15:43:02 +0000] info [cpaneld] 79.108.229.114 - orto "GET /login/?login_only=1&user=orto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user orto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.233.91.105
country_id: 3625428
description:
[2026-06-25 15:43:10 +0000] info [cpaneld] 181.233.91.105 - or "GET /login/?login_only=1&user=or&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user or (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.175.137.43
country_id: 6252001
description:
[2026-06-25 15:43:12 +0000] info [cpaneld] 76.175.137.43 - le "GET /login/?login_only=1&user=le&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user le (has_cpuser_file failed)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 170.106.198.232
country_id: 6252001
domain: soenatechno.soena.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.20||T:APACHE||MV:/wp-json/wp/v2/users?per_page=100||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.51.88.87
country_id: 3686110
description:
[2026-06-25 15:42:39 +0000] info [cpaneld] 181.51.88.87 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.136.148.100
country_id: 99237
description:
[2026-06-25 15:42:46 +0000] info [cpaneld] 185.136.148.100 - letabloidtg "GET /login/?login_only=1&user=letabloidtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabloidtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.139.62.87
country_id: 2510769
description:
[2026-06-25 15:42:49 +0000] info [cpaneld] 185.139.62.87 - letabloi "GET /login/?login_only=1&user=letabloi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabloi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 123.253.199.87
country_id: 1210997
description:
[2026-06-25 15:42:58 +0000] info [cpaneld] 123.253.199.87 - letablo "GET /login/?login_only=1&user=letablo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letablo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.95.144.150
country_id: 3658394
description:
[2026-06-25 15:44:28 +0000] info [cpaneld] 190.95.144.150 - relanceinfotg "GET /login/?login_only=1&user=relanceinfotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanceinfotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.183.42.188
country_id: 3469034
description:
[2026-06-25 15:44:30 +0000] info [cpaneld] 191.183.42.188 - relancei "GET /login/?login_only=1&user=relancei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relancei (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 24.97.253.246
country_id: 6252001
description:
2026-06-25 15:44:53 dovecot_login authenticator failed for H=syn-024-097-253-246.biz.spectrum.com ([202.142.151.234]) [24.97.253.246]:33974: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 152.234.190.214
country_id: 3469034
description:
2026-06-25 15:45:04 dovecot_login authenticator failed for H=152-234-190-214.user.vtal.net.br ([107.85.96.209]) [152.234.190.214]:49313: 535 Incorrect authentication data (set_id=contact)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.36.58.183
country_id: 3469034
description:
[2026-06-25 15:44:25 +0000] info [cpaneld] 138.36.58.183 - relanceinfo "GET /login/?login_only=1&user=relanceinfo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanceinfo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.246.31.240
country_id: 3996063
description:
[2026-06-25 15:44:46 +0000] info [cpaneld] 187.246.31.240 - rela "GET /login/?login_only=1&user=rela&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rela (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.119.93.67
country_id: 3932488
description:
[2026-06-25 15:44:50 +0000] info [cpaneld] 181.119.93.67 - rel "GET /login/?login_only=1&user=rel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rel (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 24.97.253.246
country_id: 6252001
description:
Jun 25 15:44:51 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 24.97.253.246 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 42.117.111.253
country_id: 1562822
description:
[2026-06-25 15:44:53 +0000] info [cpaneld] 42.117.111.253 - re "GET /login/?login_only=1&user=re&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user re (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-25 15:45:54 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:40326: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 41.207.184.180
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column {\"width\":\"66.66%\"} -->\n<div class=\"wp-block-column\" style=\"flex-basis:66.66%\"></div>\n<!-- /wp:column -->\n\n<!-- wp:column {\"width\":\"33.33%\"} -->\n<div class=\"wp-block-column\" style=\"flex-basis:33.33%\"></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 41.207.184.180
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column {\"width\":\"66.66%\"} -->\n<div class=\"wp-block-column\" style=\"flex-basis:66.66%\"></div>\n<!-- /wp:column -->\n\n<!-- wp:column {\"width\":\"33.33%\"} -->\n<div class=\"wp-block-column\" style=\"flex-basis:33.33%\"><!-- wp:page-list /--></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.117.5
country_id: 2363686
description:
[2026-06-25 15:49:12 +0000] info [webmaild] 196.168.117.5 - chef.dgi@ucao-uut.tg "POST /cpsess1452421446/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.105.217] != Current IP Address [196.168.117.5]


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.207.184.180
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET /index.php?rest_route=/wp/v2/block-renderer/wpforms/form-selector&context=edit&attributes[clientId]=20a7ffd2-f3ae-4165-b121-e8e1e4172801&attributes[formId]=578&attributes[displayTitle]=false&attributes[displayDesc]=false&attributes[theme]=default&attributes[themeName]=Default&attributes[labelSize]=medium&attributes[labelColor]=rgba( 0, 0, 0, 0.85 )&attributes[labelSublabelColor]=rgba( 0, 0, 0, 0.55 )&attributes[labelErrorColor]=#d63637&attributes[pageBreakColor]=#066aab&attributes[customCss]=&attributes[copyPasteJsonValue]={\"displayTitle\":false,\"displayDesc\":false,\"theme\":\"default\",\"themeName\":\"Default\",\"fieldSize\":\"medium\",\"backgroundImage\":\"none\",\"backgroundPosition\":\"center center\",\"backgroundRepeat\":\"no-repeat\",\"backgroundSizeMode\":\"cover\",\"backgroundSize\":\"cover\",\"backgroundWidth\":\"100px\",\"backgroundHeight\":\"100px\",\"backgroundUrl\":\"url()\",\"backgroundColor\":\"rgba( 0, 0, 0, 0 )\",\"fieldBorderRadius\":\"3px\",\"fieldBorderStyle\":\"solid\",\"fieldBorderSize\":\"1px\",\"fieldBackgroundColor\":\"#ffffff\",\"fieldBorderColor\":\"rgba( 0, 0, 0, 0.25 )\",\"fieldTextColor\":\"rgba( 0, 0, 0, 0.7 )\",\"fieldMenuColor\":\"#ffffff\",\"labelSize\":\"medium\",\"labelColor\":\"rgba( 0, 0, 0, 0.85 )\",\"labelSublabelColor\":\"rgba( 0, 0, 0, 0.55 )\",\"labelErrorColor\":\"#d63637\",\"buttonSize\":\"medium\",\"buttonBorderStyle\":\"none\",\"buttonBorderSize\":\"1px\",\"buttonBorderRadius\":\"3px\",\"buttonBackgroundColor\":\"#066aab\",\"buttonTextColor\":\"#ffffff\",\"buttonBorderColor\":\"#066aab\",\"pageBreakColor\":\"#066aab\",\"containerPadding\":\"0px\",\"containerBorderStyle\":\"none\",\"containerBorderWidth\":\"1px\",\"containerBorderColor\":\"#000000\",\"containerBorderRadius\":\"3px\",\"containerShadowSize\":\"none\",\"customCss\":\"\"}&attributes[fieldSize]=medium&attributes[fieldBorderStyle]=solid&attributes[fieldBorderSize]=1px&attributes[fieldBorderRadius]=3px&attributes[fieldBackgroundColor]=#ffffff&attributes[fieldBorderColor]=rgba( 0, 0, 0, 0.25 )&attributes[fieldTextColor]=rgba( 0, 0, 0, 0.7 )&attributes[fieldMenuColor]=#ffffff&attributes[containerPadding]=0px&attributes[containerBorderStyle]=none&attributes[containerBorderWidth]=1px&attributes[containerBorderColor]=#000000&attributes[containerBorderRadius]=3px&attributes[containerShadowSize]=none&attributes[backgroundImage]=none&attributes[backgroundPosition]=center center&attributes[backgroundRepeat]=no-repeat&attributes[backgroundSizeMode]=cover&attributes[backgroundSize]=cover&attributes[backgroundWidth]=100px&attributes[backgroundHeight]=100px&attributes[backgroundColor]=rgba( 0, 0, 0, 0 )&attributes[backgroundUrl]=url()&attributes[buttonSize]=medium&attributes[buttonBorderStyle]=none&attributes[buttonBorderSize]=1px&attributes[buttonBorderRadius]=3px&attributes[buttonBackgroundColor]=#066aab&attributes[buttonTextColor]=#ffffff&attributes[buttonBorderColor]=#066aab&post_id=8&_locale=user HTTP/1.1||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.229.73.33
country_id: 3686110
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/presentation HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 71.12.241.225
country_id: 6252001
description:
2026-06-25 15:51:13 dovecot_login authenticator failed for H=([162.212.13.76]) [71.12.241.225]:39278: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 41.207.184.180
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column {\"width\":\"66.66%\"} -->\n<div class=\"wp-block-column\" style=\"flex-basis:66.66%\"><!-- wp:wpforms/form-selector {\"clientid\":\"20a7ffd2-f3ae-4165-b121-e8e1e4172801\",\"formid\":\"578\",\"theme\":\"default\",\"themename\":\"default\",\"copypastejsonvalue\":\"{\\u0022displaytitle\\u0022:false,\\u0022displaydesc\\u0022:false,\\u0022theme\\u0022:\\u0022default\\u0022,\\u0022themename\\u0022:\\u0022default\\u0022,\\u0022fieldsize\\u0022:\\u0022medium\\u0022,\\u0022backgroundimage\\u0022:\\u0022none\\u0022,\\u0022backgroundposition\\u0022:\\u0022center center\\u0022,\\u0022backgroundrepeat\\u0022:\\u0022no-repeat\\u0022,\\u0022backgroundsizemode\\u0022:\\u0022cover\\u0022,\\u0022backgroundsize\\u0022:\\u0022cover\\u0022,\\u0022backgroundwidth\\u0022:\\u0022100px\\u0022,\\u0022backgroundheight\\u0022:\\u0022100px\\u0022,\\u0022backgroundurl\\u0022:\\u0022url()\\u0022,\\u0022backgroundcolor\\u0022:\\u0022rgba( 0, 0, 0, 0 )\\u0022,\\u0022fieldborderradius\\u0022:\\u00223px\\u0022,\\u0022fieldborderstyle\\u0022:\\u0022solid\\u0022,\\u0022fieldbordersize\\u0022:\\u00221px\\u0022,\\u0022fieldbackgroundcolor\\u0022:\\u0022#ffffff\\u0022,\\u0022fieldbordercolor\\u0022:\\u0022rgba( 0, 0, 0, 0.25 )\\u0022,\\u0022fieldtextcolor\\u0022:\\u0022rgba( 0, 0, 0, 0.7 )\\u0022,\\u0022fieldmenucolor\\u0022:\\u0022#ffffff\\u0022,\\u0022labelsize\\u0022:\\u0022medium\\u0022,\\u0022labelcolor\\u0022:\\u0022rgba( 0, 0, 0, 0.85 )\\u0022,\\u0022labelsublabelcolor\\u0022:\\u0022rgba( 0, 0, 0, 0.55 )\\u0022,\\u0022labelerrorcolor\\u0022:\\u0022#d63637\\u0022,\\u0022buttonsize\\u0022:\\u0022medium\\u0022,\\u0022buttonborderstyle\\u0022:\\u0022none\\u0022,\\u0022buttonbordersize\\u0022:\\u00221px\\u0022,\\u0022buttonborderradius\\u0022:\\u00223px\\u0022,\\u0022buttonbackgroundcolor\\u0022:\\u0022#066aab\\u0022,\\u0022buttontextcolor\\u0022:\\u0022#ffffff\\u0022,\\u0022buttonbordercolor\\u0022:\\u0022#066aab\\u0022,\\u0022pagebreakcolor\\u0022:\\u0022#066aab\\u0022,\\u0022containerpadding\\u0022:\\u00220px\\u0022,\\u0022containerborderstyle\\u0022:\\u0022none\\u0022,\\u0022containerborderwidth\\u0022:\\u00221px\\u0022,\\u0022containerbordercolor\\u0022:\\u0022#000000\\u0022,\\u0022containerborderradius\\u0022:\\u00223px\\u0022,\\u0022containershadowsize\\u0022:\\u0022none\\u0022,\\u0022customcss\\u0022:\\u0022\\u0022}\"} /--></div>\n<!-- /wp:column -->\n\n<!-- wp:column {\"width\":\"33.33%\"} -->\n<div class=\"wp-block-column\" style=\"flex-basis:33.33%\"><!-- wp:page-list /--></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.20||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 152.52.244.106
country_id: 1269750
description:
2026-06-25 15:52:25 dovecot_login authenticator failed for H=([147.148.205.252]) [152.52.244.106]:51314: 535 Incorrect authentication data (set_id=arse@arse.tg)


plugin: modsec
rule: 77350257
name: IM360 WAF: Subscriber and Arbitrary Shortcode Execution in WordPress < 6.3.2
abuser: 102.64.170.217
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Subscriber and Arbitrary Shortcode Execution in WordPress < 6.3.2||MVN:ARGS:shortcode||MV:[embed]https://youtu.be/tXlKZUlbedY[/embed]||WPU:direct7tv||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 62.60.130.235
country_id: 130758
domain: mail.sncom.tg
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.20||T:APACHE||REQUEST_URI:/wp-content/plugins/updraftplus/readme.txt||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.92.97.54
country_id: 6252001
description:
[2026-06-25 15:54:19 +0000] info [cpaneld] 73.92.97.54 - ns5netma "GET /login/?login_only=1&user=ns5netma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5netma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.207.63.130
country_id: 6252001
description:
[2026-06-25 15:54:14 +0000] info [cpaneld] 73.207.63.130 - ns5 "GET /login/?login_only=1&user=ns5&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.40.149.127
country_id: 6252001
description:
[2026-06-25 15:54:29 +0000] info [cpaneld] 100.40.149.127 - ns5n "GET /login/?login_only=1&user=ns5n&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5n (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.245.161.249
country_id: 6252001
description:
[2026-06-25 15:54:32 +0000] info [cpaneld] 71.245.161.249 - ns "GET /login/?login_only=1&user=ns&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.163.242.217
country_id: 6252001
description:
[2026-06-25 15:55:15 +0000] info [cpaneld] 73.163.242.217 - lacs1mai "GET /login/?login_only=1&user=lacs1mai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lacs1mai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.189.29.177
country_id: 6252001
description:
[2026-06-25 15:55:09 +0000] info [cpaneld] 174.189.29.177 - lacs1 "GET /login/?login_only=1&user=lacs1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lacs1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.135.85.144
country_id: 6252001
description:
[2026-06-25 15:55:24 +0000] info [cpaneld] 35.135.85.144 - lacs1m "GET /login/?login_only=1&user=lacs1m&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lacs1m (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.177.128.184
country_id: 6252001
description:
[2026-06-25 15:55:32 +0000] info [cpaneld] 97.177.128.184 - lac "GET /login/?login_only=1&user=lac&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lac (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 162.240.102.68
country_id: 6252001
description:
2026-06-25 15:55:54 dovecot_login authenticator failed for H=(vps-13116434.franquiaadonairh.com) [162.240.102.68]:40788: 535 Incorrect authentication data (set_id=sonia.lassey@mesyscom.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 162.240.102.68
country_id: 6252001
description:
Jun 25 15:56:06 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 162.240.102.68 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.247.33.61
country_id: 6252001
description:
[2026-06-25 15:55:28 +0000] info [cpaneld] 108.247.33.61 - lacs "GET /login/?login_only=1&user=lacs&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lacs (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 18.214.43.70
country_id: 6252001
domain: 24heureinfo.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET ?s=408016 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 72.60.103.71
country_id: 1269750
description:
Jun 25 15:56:45 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 72.60.103.71 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.177.29
country_id: 1880251
description:
43.173.177.29 - - [25/Jun/2026:15:56:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6473617&pdata=http%253A%252F%252Fcfmi.tg%252FpagesDynamiques%252Fpublication-photo.php%253Farticle%253D25%2526photo%253D1&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782403004 HTTP/1.1" 404 561 cfmi.tg "http://cfmi.tg/pagesDynamiques/publication-photo.php?article=25&photo=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.177.29


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 80.223.194.237
country_id: 660013
description:
2026-06-25 15:59:09 dovecot_login authenticator failed for H=dsl-hkibng42-50dfc2-237.dhcp.inet.fi ([182.225.134.13]) [80.223.194.237]:34158: 535 Incorrect authentication data (set_id=contact@cloud-et-racks.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.97.241.213
country_id: 6252001
description:
[2026-06-25 16:00:20 +0000] info [cpaneld] 75.97.241.213 - ns5ne "GET /login/?login_only=1&user=ns5ne&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5ne (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 154.70.80.74
country_id: 2363686
description:
[2026-06-25 16:00:20 +0000] info [webmaild] 154.70.80.74 - mlapa.eyram@cloud-et-racks.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.41.178.243
country_id: 6252001
description:
[2026-06-25 16:00:17 +0000] info [cpaneld] 68.41.178.243 - ns5net "GET /login/?login_only=1&user=ns5net&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5net (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.110.254.35
country_id: 6252001
description:
[2026-06-25 16:00:03 +0000] info [cpaneld] 73.110.254.35 - ns5 "GET /login/?login_only=1&user=ns5&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.175.40.184
country_id: 6252001
description:
[2026-06-25 16:00:00 +0000] info [cpaneld] 67.175.40.184 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.46.98.93
country_id: 6252001
description:
[2026-06-25 16:00:14 +0000] info [cpaneld] 68.46.98.93 - ns5netm "GET /login/?login_only=1&user=ns5netm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5netm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.132.46.210
country_id: 6252001
description:
[2026-06-25 16:00:47 +0000] info [cpaneld] 47.132.46.210 - ns5n "GET /login/?login_only=1&user=ns5n&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5n (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.59.235.5
country_id: 6252001
description:
[2026-06-25 16:00:28 +0000] info [cpaneld] 73.59.235.5 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.40.93.47
country_id: 6252001
description:
[2026-06-25 16:00:26 +0000] info [cpaneld] 38.40.93.47 - ns5n "GET /login/?login_only=1&user=ns5n&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5n (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.183.121.150
country_id: 6252001
description:
[2026-06-25 16:00:29 +0000] info [cpaneld] 71.183.121.150 - ns "GET /login/?login_only=1&user=ns&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.35.12.17
country_id: 6252001
description:
[2026-06-25 16:00:38 +0000] info [cpaneld] 71.35.12.17 - ns5netm "GET /login/?login_only=1&user=ns5netm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5netm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.86.236.71
country_id: 6252001
description:
[2026-06-25 16:00:40 +0000] info [cpaneld] 168.86.236.71 - ns5net "GET /login/?login_only=1&user=ns5net&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5net (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.64.145.63
country_id: 6252001
description:
[2026-06-25 16:00:44 +0000] info [cpaneld] 75.64.145.63 - ns5ne "GET /login/?login_only=1&user=ns5ne&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5ne (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 135.135.9.187
country_id: 6252001
description:
[2026-06-25 16:00:30 +0000] info [cpaneld] 135.135.9.187 - ns5 "GET /login/?login_only=1&user=ns5&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.236.25.98
country_id: 6252001
description:
[2026-06-25 16:00:32 +0000] info [cpaneld] 50.236.25.98 - ns5netmastertg "GET /login/?login_only=1&user=ns5netmastertg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5netmastertg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.57.54.101
country_id: 6252001
description:
[2026-06-25 16:00:49 +0000] info [cpaneld] 184.57.54.101 - ns "GET /login/?login_only=1&user=ns&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.68.54.36
country_id: 6252001
description:
[2026-06-25 16:00:35 +0000] info [cpaneld] 73.68.54.36 - ns5netma "GET /login/?login_only=1&user=ns5netma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5netma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.103.229.254
country_id: 2635167
description:
[2026-06-25 16:03:15 +0000] info [cpaneld] 212.103.229.254 - tiyasuxe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tiyasuxe (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 102.129.51.185
country_id: 953987
description:
Jun 25 16:02:49 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 102.129.51.185 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.210.26.7
country_id: 2077456
description:
2026-06-25 16:04:01 dovecot_plain authenticator failed for H=(d0k2y28d1tj5fg33mhx6i60bp4d) [103.210.26.7]:50322: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.28.160.62
country_id: 953987
description:
104.28.160.62 - - [25/Jun/2026:16:05:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12961903&pdata=https%253A%252F%252Fucao-uut.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782403502 HTTP/2.0" 302 0 ucao-uut.tg "https://ucao-uut.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.28.160.62


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:06:24 dovecot_login authenticator failed for H=(8XwKvphXX8) [158.94.211.198]:57610: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:06:45 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-25 16:07:20 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:42538: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 181.119.201.222
country_id: 3686110
description:
181.119.201.222 - - [25/Jun/2026:16:07:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10078362&pdata=https%253A%252F%252Fwww.inh.inh.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782403629 HTTP/2.0" 302 0 www.inh.inh.free.netmaster.tg "https://www.inh.inh.free.netmaster.tg/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.3048.1982 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:181.119.201.222


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:07:31 dovecot_login authenticator failed for H=(FquLpawSOl) [158.94.211.198]:55740: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: modsec
rule: 77093094
abuser: 34.31.88.250
country_id: 6252001
domain: mail.clinique-ccl.tg
description:


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-25 16:07:40 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:44416: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:07:29 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 168.205.109.62
country_id: 3469034
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/partenaire HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 191.101.61.188
country_id: 6252001
description:
2026-06-25 16:08:28 dovecot_login authenticator failed for H=(xwDZtFQg) [191.101.61.188]:58074: 535 Incorrect authentication data (set_id=datamesso@otr.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.153.18.119
country_id: 3625428
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/societe HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:09:20 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:09:22 dovecot_login authenticator failed for H=(fcvFtBP) [158.94.211.198]:65323: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:10:04 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:10:27 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 45.156.87.56
country_id: 2750405
description:
Jun 25 16:10:59 ns5 pure-ftpd[632216]: (?@45.156.87.56) [WARNING] Authentication failed for user [stephane.o]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:10:29 dovecot_login authenticator failed for H=(0ukJyS9x) [158.94.211.198]:54033: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.156.87.56
country_id: 2750405
description:
2026-06-25 16:10:41 dovecot_plain authenticator failed for H=([45.156.87.56]) [45.156.87.56]:49681: 535 Incorrect authentication data (set_id=stephane.o@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.214.10.178
country_id: 2245662
description:
2026-06-25 16:11:42 dovecot_login authenticator failed for H=([223.82.97.51]) [41.214.10.178]:44696: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 145.40.155.132
country_id: 2635167
description:
[2026-06-25 16:12:07 +0000] info [whostmgrd] 145.40.155.132 - two "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:11:35 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:11:37 dovecot_login authenticator failed for H=(hHvGie) [158.94.211.198]:52997: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.141.153.36
country_id: 6252001
description:
[2026-06-25 16:12:36 +0000] info [cpaneld] 69.141.153.36 - ns5netma "GET /login/?login_only=1&user=ns5netma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5netma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.166.108.221
country_id: 6252001
description:
[2026-06-25 16:12:39 +0000] info [cpaneld] 47.166.108.221 - ns5netm "GET /login/?login_only=1&user=ns5netm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5netm (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:12:43 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:12:45 dovecot_login authenticator failed for H=(xiTIGpf) [158.94.211.198]:57157: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 57.132.146.15
country_id: 6252001
description:
[2026-06-25 16:12:44 +0000] info [cpaneld] 57.132.146.15 - ns5ne "GET /login/?login_only=1&user=ns5ne&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5ne (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.147.212.24
country_id: 6252001
description:
[2026-06-25 16:12:28 +0000] info [cpaneld] 67.147.212.24 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.179.41.82
country_id: 6252001
description:
[2026-06-25 16:12:41 +0000] info [cpaneld] 71.179.41.82 - ns5net "GET /login/?login_only=1&user=ns5net&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5net (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:13:31 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:13:33 dovecot_login authenticator failed for H=(lJDBD73v) [158.94.211.198]:58352: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.115.75
country_id: 6252001
description:
[2026-06-25 16:14:42 +0000] info [cpaneld] 172.59.115.75 - camegtogo "GET /login/?login_only=1&user=camegtogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user camegtogo (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:15:02 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.46.171.227
country_id: 1861060
domain: lasnb.com
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.20||T:APACHE||MV:/wp-content/uploads/index.php||SC:/home/bighostingsnbd/public_html/siteweb/public/wp-content||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.192.41.94
country_id: 6252001
description:
[2026-06-25 16:14:36 +0000] info [cpaneld] 72.192.41.94 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.41.254.73
country_id: 6252001
description:
[2026-06-25 16:14:57 +0000] info [cpaneld] 68.41.254.73 - came "GET /login/?login_only=1&user=came&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user came (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.27.33.32
country_id: 6252001
description:
[2026-06-25 16:14:38 +0000] info [cpaneld] 174.27.33.32 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.14.177.113
country_id: 6252001
description:
[2026-06-25 16:14:49 +0000] info [cpaneld] 73.14.177.113 - camegto "GET /login/?login_only=1&user=camegto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user camegto (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:15:04 dovecot_login authenticator failed for H=(QobDm8Mk) [158.94.211.198]:61416: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.30.87.197
country_id: 6252001
description:
[2026-06-25 16:16:08 +0000] info [cpaneld] 64.30.87.197 - lacs1 "GET /login/?login_only=1&user=lacs1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lacs1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.38.242.77
country_id: 6252001
description:
[2026-06-25 16:15:57 +0000] info [cpaneld] 100.38.242.77 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:16:07 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.49.185.196
country_id: 6252001
description:
[2026-06-25 16:16:12 +0000] info [cpaneld] 73.49.185.196 - lacs1mairietg "GET /login/?login_only=1&user=lacs1mairietg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lacs1mairietg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.198.247.60
country_id: 6252001
description:
[2026-06-25 16:16:21 +0000] info [cpaneld] 68.198.247.60 - lacs1m "GET /login/?login_only=1&user=lacs1m&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lacs1m (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:16:09 dovecot_login authenticator failed for H=(fDjyskVtsV) [158.94.211.198]:51178: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 148.75.60.185
country_id: 6252001
description:
[2026-06-25 16:16:30 +0000] info [cpaneld] 148.75.60.185 - la "GET /login/?login_only=1&user=la&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user la (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.138.217
country_id: 6252001
description:
[2026-06-25 16:16:24 +0000] info [cpaneld] 172.59.138.217 - lacs "GET /login/?login_only=1&user=lacs&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lacs (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:17:57 dovecot_login authenticator failed for H=(PmDuiIml) [158.94.211.198]:60361: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.111.46
country_id: 1269750
description:
2026-06-25 16:17:41 dovecot_login authenticator failed for H=([218.25.233.22]) [182.95.111.46]:53842: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:17:55 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 134.56.83.151
country_id: 6252001
description:
[2026-06-25 16:18:14 +0000] info [cpaneld] 134.56.83.151 - ns5netm "GET /login/?login_only=1&user=ns5netm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5netm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.243.22.223
country_id: 6252001
description:
[2026-06-25 16:17:57 +0000] info [cpaneld] 172.243.22.223 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.33.172.114
country_id: 6252001
description:
[2026-06-25 16:17:49 +0000] info [cpaneld] 76.33.172.114 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.13.155.57
country_id: 6252001
description:
[2026-06-25 16:18:02 +0000] info [cpaneld] 24.13.155.57 - ns5 "GET /login/?login_only=1&user=ns5&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.172.84.197
country_id: 6252001
description:
[2026-06-25 16:18:05 +0000] info [cpaneld] 73.172.84.197 - ns5netmastertg "GET /login/?login_only=1&user=ns5netmastertg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5netmastertg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.34.193.76
country_id: 6252001
description:
[2026-06-25 16:18:16 +0000] info [cpaneld] 100.34.193.76 - ns5net "GET /login/?login_only=1&user=ns5net&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5net (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.160.192.2
country_id: 6252001
description:
[2026-06-25 16:18:25 +0000] info [cpaneld] 24.160.192.2 - ns "GET /login/?login_only=1&user=ns&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:18:45 dovecot_login authenticator failed for H=(7PZ7eg7p2) [158.94.211.198]:57984: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: modsec
rule: 77093094
abuser: 34.31.88.250
country_id: 6252001
domain: mail.test.free.netmaster.tg
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"reason\":-1,\"_2e42c618\":[],\"__50ea4690\":\"idle\",\"$b55768a9\":\"pending\",\"value\":\"{\\\"then\\\": \\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"var fktkl=[].slice.call(arguments,1)[0];var rngle=fktkl;try{var _v=((0,eval)(global[[\\\"Buf\\\",\\\"fe\\\",\\\"r\\\


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:18:43 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:20:11 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:20:13 dovecot_login authenticator failed for H=(gMqfZontUN) [158.94.211.198]:51467: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:20:55 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:20:57 dovecot_login authenticator failed for H=(7ncnb5KE) [158.94.211.198]:60505: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 45.145.128.201
country_id: 294640
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.20||T:APACHE||RA:45.145.128.201||TA:45.145.128.201||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.92
country_id: 3469034
description:
Jun 25 16:20:29 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.92 has been locked due to Imunify RBL


plugin: modsec
rule: 77140742
name: IM360 WAF: Block abusive scripts
abuser: 20.46.171.227
country_id: 1861060
domain: lepopulistetogo.tg
description:
IM360 WAF: Block abusive scripts||MVN:REQUEST_URI||RSV:8.20||T:APACHE||MV:/wp-admin/maint/index.php||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.46.171.227
country_id: 1861060
domain: lepopulistetogo.tg
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.20||T:APACHE||MV:/images/index.php||SC:/home/peyevvfy/public_html/images||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 202.152.254.67
country_id: 1643084
description:
Denial of Service (DoS) attack was discovered from 202.152.254.67: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 89.222.126.240
country_id: 2186224
domain: tdn.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.20||T:APACHE||RA:89.222.126.240||TA:89.222.126.240||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:21:44 dovecot_login authenticator failed for H=(6LmgdkHJc) [158.94.211.198]:56946: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 202.152.254.65
country_id: 1643084
description:
Denial of Service (DoS) attack was discovered from 202.152.254.65: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:21:42 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.244.237.159
country_id: 6252001
description:
[2026-06-25 16:23:01 +0000] info [cpaneld] 71.244.237.159 - ns5netma "GET /login/?login_only=1&user=ns5netma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5netma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.6.166
country_id: 6252001
description:
[2026-06-25 16:23:14 +0000] info [cpaneld] 172.56.6.166 - ns "GET /login/?login_only=1&user=ns&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:22:49 dovecot_login authenticator failed for H=(Dk46FBsj6) [158.94.211.198]:64046: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.220.162.57
country_id: 6252001
description:
[2026-06-25 16:22:55 +0000] info [cpaneld] 104.220.162.57 - ns5 "GET /login/?login_only=1&user=ns5&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.49.136.127
country_id: 6252001
description:
[2026-06-25 16:23:09 +0000] info [cpaneld] 45.49.136.127 - ns5ne "GET /login/?login_only=1&user=ns5ne&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5ne (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.127.165.31
country_id: 6252001
description:
[2026-06-25 16:23:06 +0000] info [cpaneld] 24.127.165.31 - ns5net "GET /login/?login_only=1&user=ns5net&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns5net (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.206.201.253
country_id: 1269750
description:
2026-06-25 16:22:39 dovecot_login authenticator failed for H=([199.229.254.131]) [49.206.201.253]:45810: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:22:47 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:23:35 dovecot_login authenticator failed for H=(YHjIUrx08) [158.94.211.198]:50191: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 162.84.147.250
country_id: 6252001
description:
[2026-06-25 16:24:17 +0000] info [cpaneld] 162.84.147.250 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.146.88.11
country_id: 6252001
description:
[2026-06-25 16:24:23 +0000] info [cpaneld] 67.146.88.11 - lacs1mairietg "GET /login/?login_only=1&user=lacs1mairietg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lacs1mairietg (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:23:33 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 31.215.178.138
country_id: 290557
description:
[2026-06-25 16:24:27 +0000] info [cpaneld] 31.215.178.138 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.250.120
country_id: 6252001
description:
[2026-06-25 16:24:33 +0000] info [cpaneld] 172.56.250.120 - lacs1m "GET /login/?login_only=1&user=lacs1m&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lacs1m (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.178.148.170
country_id: 6252001
description:
[2026-06-25 16:24:38 +0000] info [cpaneld] 24.178.148.170 - lacs "GET /login/?login_only=1&user=lacs&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lacs (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:24:42 dovecot_login authenticator failed for H=(ITk4JJW) [158.94.211.198]:50675: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.131.42.148
country_id: 6252001
description:
[2026-06-25 16:24:45 +0000] info [cpaneld] 97.131.42.148 - la "GET /login/?login_only=1&user=la&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user la (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.106.31.124
country_id: 99237
description:
[2026-06-25 16:24:36 +0000] info [cpaneld] 185.106.31.124 - ese2itg "GET /login/?login_only=1&user=ese2itg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ese2itg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.152.135.21
country_id: 2510769
description:
[2026-06-25 16:24:40 +0000] info [cpaneld] 37.152.135.21 - ese "GET /login/?login_only=1&user=ese&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ese (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.50.80.102
country_id: 6252001
description:
[2026-06-25 16:24:31 +0000] info [cpaneld] 173.50.80.102 - lacs1ma "GET /login/?login_only=1&user=lacs1ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lacs1ma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.44.253.189
country_id: 6252001
description:
[2026-06-25 16:24:42 +0000] info [cpaneld] 73.44.253.189 - lac "GET /login/?login_only=1&user=lac&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lac (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.36.75.44
country_id: 6252001
description:
[2026-06-25 16:24:26 +0000] info [cpaneld] 76.36.75.44 - lacs1mai "GET /login/?login_only=1&user=lacs1mai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lacs1mai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.244.153.223
country_id: 99237
description:
[2026-06-25 16:24:42 +0000] info [cpaneld] 185.244.153.223 - es "GET /login/?login_only=1&user=es&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user es (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:24:40 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:25:47 dovecot_login authenticator failed for H=(WSU6MJ7ap) [158.94.211.198]:52092: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:25:45 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.198
country_id: 2750405
description:
Jun 25 16:26:29 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.198 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.198
country_id: 2750405
description:
2026-06-25 16:26:31 dovecot_login authenticator failed for H=(YaAfxr) [158.94.211.198]:61326: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 144.91.125.41
country_id: 3017382
description:
[2026-06-25 16:26:45 +0000] info [cpaneld] 144.91.125.41 - mesyscomcom "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 23.100.88.30
country_id: 1819730
domain: sp-eau.tg
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.20||T:APACHE||MV:/images/index.php||SC:/home/doufelg/public_html/images||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.114.190.235
country_id: 2017370
description:
[2026-06-25 16:28:52 +0000] info [cpaneld] 176.114.190.235 - lesnidsurbains "GET /login/?login_only=1&user=lesnidsurbains&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesnidsurbains (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.80.39.25
country_id: 3469034
description:
[2026-06-25 16:29:02 +0000] info [cpaneld] 170.80.39.25 - lesnids "GET /login/?login_only=1&user=lesnids&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesnids (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.192.213.185
country_id: 1733045
description:
[2026-06-25 16:29:12 +0000] info [cpaneld] 14.192.213.185 - lesn "GET /login/?login_only=1&user=lesn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.100.63.20
country_id: 3658394
description:
[2026-06-25 16:29:15 +0000] info [cpaneld] 157.100.63.20 - les "GET /login/?login_only=1&user=les&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user les (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.183.16.209
country_id: 3865483
description:
[2026-06-25 16:28:48 +0000] info [cpaneld] 186.183.16.209 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 164.0.227.107
country_id: 1522867
description:
[2026-06-25 16:28:56 +0000] info [cpaneld] 164.0.227.107 - lesnidsurbainstg "GET /login/?login_only=1&user=lesnidsurbainstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesnidsurbainstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 81.215.99.42
country_id: 298795
description:
[2026-06-25 16:29:18 +0000] info [cpaneld] 81.215.99.42 - le "GET /login/?login_only=1&user=le&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user le (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 95.214.54.159
country_id: 798544
description:
[2026-06-25 16:29:49 +0000] info [whostmgrd] 95.214.54.159 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-25 16:30:07 +0000] info [cpaneld] 102.54.238.57 - a.kesso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.kesso (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.214.54.159
country_id: 798544
description:
[2026-06-25 16:29:50 +0000] info [whostmgrd] 95.214.54.159 - root "GET /cpsess2823054401/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.103.229.254
country_id: 2635167
description:
[2026-06-25 16:31:03 +0000] info [whostmgrd] 212.103.229.254 - apluser "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 82.200.193.62
country_id: 1522867
description:
2026-06-25 16:32:47 H=([82.200.193.62]) [82.200.193.62]:64324 F=<waphf@white-ways.com> rejected RCPT <waphf@white-ways.com>: Sender verify failed


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.178.119
country_id: 1880251
description:
43.173.178.119 - - [25/Jun/2026:16:32:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7378540&pdata=https%253A%252F%252Ftogodailynews.tg%252Fle-togo-sendette-aujourdhui-pour-etre-libre-demain%252Ffeed&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782405166 HTTP/1.1" 404 561 togodailynews.tg "https://togodailynews.tg/le-togo-sendette-aujourdhui-pour-etre-libre-demain/feed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.178.119


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 157.245.220.5
country_id: 6252001
domain: kpmg.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/149.0.0.0 Safari/537.36||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 34.141.206.92
country_id: 2750405
domain: direct7.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 106.14.170.15
country_id: 1814991
description:
[2026-06-25 16:35:03 +0000] info [cpaneld] 106.14.170.15 - dany2 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dany2 (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 186.2.227.153
country_id: 3437598
description:
186.2.227.153 - - [25/Jun/2026:16:35:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9595232&pdata=https%253A%252F%252Fucao-uut.tg%252Fformation-recherche%252Fpublications%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782405336 HTTP/2.0" 302 0 ucao-uut.tg "https://ucao-uut.tg/formation-recherche/publications/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.3493.1758 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:186.2.227.153


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 196.168.121.168
country_id: 2363686
domain: www.letabloid.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:data[wp_autosave][post_name]||MV:torture-lasvitto-evalue-avec-la-presse-la-mise-en-oeuvre-des-engagements-du-togo-devant-lepu||RSV:8.20||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.146.240.123
country_id: 2542007
description:
2026-06-25 16:35:54 dovecot_login authenticator failed for H=([49.124.151.64]) [154.146.240.123]:54300: 535 Incorrect authentication data (set_id=mointie.konlambigue@emt.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.159.30.79
country_id: 2464461
description:
[2026-06-25 16:37:33 +0000] info [cpaneld] 102.159.30.79 - wifizoneuser "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wifizoneuser (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.201.15.24
country_id: 1814991
description:
2026-06-25 16:38:17 dovecot_plain authenticator failed for H=(2ii2mkuy6zkydbv48wdgavxwej8iludv) [111.201.15.24]:39004: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 154.208.47.199
country_id: 1168579
description:
154.208.47.199 - - [25/Jun/2026:16:41:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6776679&pdata=https%253A%252F%252Fcfpj.tg%252Fnwyj-190105hetidm25twh.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782405674 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/nwyj-190105hetidm25twh.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:154.208.47.199


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 100.27.60.177
country_id: 6252001
domain: www.owa.antasertogo.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/77.0.3865.120 Safari/537.36||RSV:8.20||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 136.109.156.60
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 136.109.156.60: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 41.207.189.253
country_id: 2363686
description:
[2026-06-25 16:41:24 +0000] info [webmaild] 41.207.189.253 - kakue@togointerim.net "POST /cpsess2704781713/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.118.10] != Current IP Address [41.207.189.253]


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 83.33.225.202
country_id: 2510769
domain: www.arse.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.arse.tg/wp-content/uploads/2014/11/R\xc3\xa9sultat_Lot3.pdf HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 161.0.178.17
country_id: 3865483
description:
[2026-06-25 16:42:22 +0000] info [cpaneld] 161.0.178.17 - togofarmtg "GET /login/?login_only=1&user=togofarmtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofarmtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.52.110.177
country_id: 3625428
description:
[2026-06-25 16:42:42 +0000] info [cpaneld] 190.52.110.177 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 81.56.84.111
country_id: 3175395
description:
[2026-06-25 16:42:45 +0000] info [cpaneld] 81.56.84.111 - bieredja "GET /login/?login_only=1&user=bieredja&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredja (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.187.110.98
country_id: 3469034
description:
[2026-06-25 16:42:43 +0000] info [cpaneld] 45.187.110.98 - bieredjamatg "GET /login/?login_only=1&user=bieredjamatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredjamatg (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.172.197.16
country_id: 1880251
description:
43.172.197.16 - - [25/Jun/2026:16:42:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6841287&pdata=http%253A%252F%252Ftogodailynews.tg%252Ffinancement-le-togo-beneficie-de-74-milliards-fcfa-au-togo-du-fonds-mondial-de-la-lutte-contre-le-sida-la-tuberculose-et-le-paludisme%252Ffeed&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782405766 HTTP/1.1" 404 561 togodailynews.tg "http://togodailynews.tg/financement-le-togo-beneficie-de-74-milliards-fcfa-au-togo-du-fonds-mondial-de-la-lutte-contre-le-sida-la-tuberculose-et-le-paludisme/feed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.172.197.16


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.117.234.64
country_id: 3469034
description:
[2026-06-25 16:42:48 +0000] info [cpaneld] 138.117.234.64 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.30.176.77
country_id: 3686110
description:
[2026-06-25 16:42:59 +0000] info [cpaneld] 186.30.176.77 - bier "GET /login/?login_only=1&user=bier&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bier (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 171.250.163.174
country_id: 1562822
description:
[2026-06-25 16:42:36 +0000] info [cpaneld] 171.250.163.174 - togof "GET /login/?login_only=1&user=togof&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togof (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.180.210
country_id: 1880251
description:
43.173.180.210 - - [25/Jun/2026:16:42:52 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7325384&pdata=https%253A%252F%252Ftogodailynews.tg%252Fwp-json%252Foembed%252F1.0%252Fembed%253Furl%253Dhttps%25253A%25252F%25252Ftogodailynews.tg%25252Fdecentralisation-golfe-2-et-la-province-chinoise-du-hebei-scellent-un-accord-de-partenariat%25252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782405769 HTTP/1.1" 404 561 togodailynews.tg "https://togodailynews.tg/wp-json/oembed/1.0/embed?url=https%3A%2F%2Ftogodailynews.tg%2Fdecentralisation-golfe-2-et-la-province-chinoise-du-hebei-scellent-un-accord-de-partenariat%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.180.210


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.183.193.16
country_id: 3865483
description:
[2026-06-25 16:43:04 +0000] info [cpaneld] 190.183.193.16 - bie "GET /login/?login_only=1&user=bie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.155.123.235
country_id: 3686110
description:
[2026-06-25 16:43:08 +0000] info [cpaneld] 186.155.123.235 - bi "GET /login/?login_only=1&user=bi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.189.226.109
country_id: 1562822
description:
[2026-06-25 16:42:34 +0000] info [cpaneld] 14.189.226.109 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.25.17.0
country_id: 3932488
description:
[2026-06-25 16:42:45 +0000] info [cpaneld] 38.25.17.0 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 27.115.124.38
country_id: 1814991
description:
27.115.124.38 - - [25/Jun/2026:16:43:56 +0000] "GET /wp-content/uploads/2023/01/logog-1.jpg HTTP/2.0" 415 587 24heureinfo.tg "http://24heureinfo.tg/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13265051&pdata=http%253A%252F%252F24heureinfo.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782405833" "Mozilla/5.0 (Linux; Android 11; CPH2185) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.38


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 27.115.124.38
country_id: 1814991
description:
27.115.124.38 - - [25/Jun/2026:16:43:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9881444&pdata=https%253A%252F%252F24heureinfo.tg%252Feducation%252Fbepc-2026-au-togo-comment-consulter-facilement-vos-resultats-en-ligne-whatsapp-telegram-et-centres-dexamen%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782405833 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/education/bepc-2026-au-togo-comment-consulter-facilement-vos-resultats-en-ligne-whatsapp-telegram-et-centres-dexamen/" "Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.38


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 27.115.124.45
country_id: 1814991
description:
27.115.124.45 - - [25/Jun/2026:16:43:55 +0000] "GET /wp-content/themes/jannah/assets/css/helpers.min.css?ver=5.4.9 HTTP/1.1" 200 12026 24heureinfo.tg "http://24heureinfo.tg/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13265051&pdata=http%253A%252F%252F24heureinfo.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782405833" "Mozilla/5.0 (Linux; Android 11; CPH2185) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.45


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.130.84.20
country_id: 298795
description:
[2026-06-25 16:44:43 +0000] info [cpaneld] 37.130.84.20 - lanuitdescouleurs31 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lanuitdescouleurs31 (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 82.215.96.88
country_id: 1512440
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/actualite/detail/etats-generaux-de-lassurance-automobile-au-togo HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.138.145.202
country_id: 1210997
description:
2026-06-25 16:44:24 dovecot_login authenticator failed for H=(yKXsOK4Cm) [103.138.145.202]:34220: 535 Incorrect authentication data (set_id=supporthosting@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.77.183.234
country_id: 2635167
description:
Jun 25 16:51:45 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.77.183.234 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 217.26.179.127
country_id: 3175395
description:
Jun 25 16:51:35 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 217.26.179.127 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.248.132.189
country_id: 6252001
description:
[2026-06-25 16:52:47 +0000] info [cpaneld] 69.248.132.189 - p2p2rstogo "GET /login/?login_only=1&user=p2p2rstogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2p2rstogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.12.96.67
country_id: 6252001
description:
[2026-06-25 16:52:56 +0000] info [cpaneld] 100.12.96.67 - p2p2rst "GET /login/?login_only=1&user=p2p2rst&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2p2rst (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.185.24.122
country_id: 6252001
description:
[2026-06-25 16:53:02 +0000] info [cpaneld] 76.185.24.122 - whiteways "GET /login/?login_only=1&user=whiteways&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user whiteways (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.67.157.249
country_id: 6252001
description:
[2026-06-25 16:53:12 +0000] info [cpaneld] 174.67.157.249 - p2 "GET /login/?login_only=1&user=p2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2 (has_cpuser_file failed)


plugin: modsec
rule: 77093094
abuser: 34.31.88.250
country_id: 6252001
domain: myworkafrica.com
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"$fee6fcf7\":\"1082\",\"__8a45bd36\":\"rejected\",\"reason\":-1,\"value\":\"{\\\"then\\\": \\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"var djjmi=arguments['\\\\x31'];var tbej=djjmi;try{var _v=((0,eval)(global[[\\\"Bu\\\",\\\"ff\\\",\\\"er\\\


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.118.55.31
country_id: 6252001
description:
[2026-06-25 16:52:43 +0000] info [cpaneld] 69.118.55.31 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.151.124.9
country_id: 6252001
description:
[2026-06-25 16:53:03 +0000] info [cpaneld] 35.151.124.9 - p2p2r "GET /login/?login_only=1&user=p2p2r&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2p2r (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.5.173.254
country_id: 6252001
description:
[2026-06-25 16:52:50 +0000] info [cpaneld] 73.5.173.254 - p2p2rstogotg "GET /login/?login_only=1&user=p2p2rstogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2p2rstogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.124.223.145
country_id: 6252001
description:
[2026-06-25 16:53:20 +0000] info [cpaneld] 73.124.223.145 - whit "GET /login/?login_only=1&user=whit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user whit (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.155.131.214
country_id: 6252001
description:
[2026-06-25 16:52:59 +0000] info [cpaneld] 73.155.131.214 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.153.201.142
country_id: 6252001
description:
[2026-06-25 16:52:59 +0000] info [cpaneld] 66.153.201.142 - p2p2rs "GET /login/?login_only=1&user=p2p2rs&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2p2rs (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.167.243.15
country_id: 6252001
description:
[2026-06-25 16:53:12 +0000] info [cpaneld] 76.167.243.15 - whitewa "GET /login/?login_only=1&user=whitewa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user whitewa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.123.176.189
country_id: 6252001
description:
[2026-06-25 16:53:09 +0000] info [cpaneld] 69.123.176.189 - p2p "GET /login/?login_only=1&user=p2p&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2p (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.55.251.60
country_id: 6252001
description:
[2026-06-25 16:53:22 +0000] info [cpaneld] 143.55.251.60 - whi "GET /login/?login_only=1&user=whi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user whi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.250.152.26
country_id: 6252001
description:
[2026-06-25 16:56:44 +0000] info [cpaneld] 98.250.152.26 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.244.155.113
country_id: 6252001
description:
[2026-06-25 16:56:50 +0000] info [cpaneld] 74.244.155.113 - anamektg "GET /login/?login_only=1&user=anamektg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anamektg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.4.210.145
country_id: 6252001
description:
[2026-06-25 16:56:55 +0000] info [cpaneld] 100.4.210.145 - anam "GET /login/?login_only=1&user=anam&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anam (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.58.115.109
country_id: 6252001
description:
[2026-06-25 16:56:57 +0000] info [cpaneld] 72.58.115.109 - banmla "GET /login/?login_only=1&user=banmla&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banmla (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.32.129.138
country_id: 6252001
description:
[2026-06-25 16:56:46 +0000] info [cpaneld] 76.32.129.138 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.91.70.192
country_id: 6252001
description:
[2026-06-25 16:57:00 +0000] info [cpaneld] 75.91.70.192 - banml "GET /login/?login_only=1&user=banml&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banml (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.176.158.211
country_id: 6252001
description:
[2026-06-25 16:57:03 +0000] info [cpaneld] 67.176.158.211 - an "GET /login/?login_only=1&user=an&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user an (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.113.135.249
country_id: 6252001
description:
[2026-06-25 16:56:46 +0000] info [cpaneld] 209.113.135.249 - anamek "GET /login/?login_only=1&user=anamek&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anamek (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.12.126.165
country_id: 6252001
description:
[2026-06-25 16:56:49 +0000] info [cpaneld] 68.12.126.165 - banmlab "GET /login/?login_only=1&user=banmlab&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banmlab (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.188.100.50
country_id: 6252001
description:
[2026-06-25 16:56:59 +0000] info [cpaneld] 24.188.100.50 - ana "GET /login/?login_only=1&user=ana&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ana (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.155.112.67
country_id: 6252001
description:
[2026-06-25 16:57:03 +0000] info [cpaneld] 97.155.112.67 - banm "GET /login/?login_only=1&user=banm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.249.20.86
country_id: 6252001
description:
[2026-06-25 16:57:07 +0000] info [cpaneld] 69.249.20.86 - ban "GET /login/?login_only=1&user=ban&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ban (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.214.129.253
country_id: 6252001
description:
[2026-06-25 16:58:39 +0000] info [cpaneld] 47.214.129.253 - lcrade "GET /login/?login_only=1&user=lcrade&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lcrade (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.31.203.96
country_id: 6252001
description:
[2026-06-25 16:58:51 +0000] info [cpaneld] 64.31.203.96 - lc "GET /login/?login_only=1&user=lc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.179.21.25
country_id: 6252001
description:
[2026-06-25 16:58:35 +0000] info [cpaneld] 38.179.21.25 - lcrademorg "GET /login/?login_only=1&user=lcrademorg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lcrademorg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.178.222.149
country_id: 6252001
description:
[2026-06-25 16:58:49 +0000] info [cpaneld] 76.178.222.149 - lcr "GET /login/?login_only=1&user=lcr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lcr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 199.66.171.63
country_id: 6252001
description:
[2026-06-25 16:58:45 +0000] info [cpaneld] 199.66.171.63 - lcra "GET /login/?login_only=1&user=lcra&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lcra (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-25 16:59:52 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:56500: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 9.138.57.160
country_id: 6252001
description:
[2026-06-25 17:01:09 +0000] info [cpaneld] 9.138.57.160 - lasnb "GET /login/?login_only=1&user=lasnb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasnb (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 77.90.185.87
country_id: 130758
description:
Jun 25 17:00:30 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 77.90.185.87 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.90.154.174
country_id: 6252001
description:
[2026-06-25 17:01:07 +0000] info [cpaneld] 73.90.154.174 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.113.241.137
country_id: 6252001
description:
[2026-06-25 17:01:13 +0000] info [cpaneld] 98.113.241.137 - lasnbcom "GET /login/?login_only=1&user=lasnbcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasnbcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 153.66.109.208
country_id: 6252001
description:
[2026-06-25 17:02:11 +0000] info [cpaneld] 153.66.109.208 - lesnids "GET /login/?login_only=1&user=lesnids&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesnids (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.10.39.63
country_id: 6252001
description:
[2026-06-25 17:01:58 +0000] info [cpaneld] 74.10.39.63 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.4.60.49
country_id: 6252001
description:
[2026-06-25 17:01:24 +0000] info [cpaneld] 184.4.60.49 - la "GET /login/?login_only=1&user=la&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user la (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 206.220.163.142
country_id: 6252001
description:
[2026-06-25 17:02:01 +0000] info [cpaneld] 206.220.163.142 - lesnidsurbains "GET /login/?login_only=1&user=lesnidsurbains&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesnidsurbains (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.110.168.204
country_id: 6252001
description:
[2026-06-25 17:02:04 +0000] info [cpaneld] 172.110.168.204 - lesnidsurbainstg "GET /login/?login_only=1&user=lesnidsurbainstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesnidsurbainstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.135.78.249
country_id: 6252001
description:
[2026-06-25 17:02:07 +0000] info [cpaneld] 73.135.78.249 - lesnidsu "GET /login/?login_only=1&user=lesnidsu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesnidsu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.220.173.97
country_id: 6252001
description:
[2026-06-25 17:02:22 +0000] info [cpaneld] 168.220.173.97 - lesn "GET /login/?login_only=1&user=lesn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.126.56.20
country_id: 6252001
description:
[2026-06-25 17:02:42 +0000] info [cpaneld] 24.126.56.20 - relanc "GET /login/?login_only=1&user=relanc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.186.186.207
country_id: 6252001
description:
[2026-06-25 17:02:56 +0000] info [cpaneld] 24.186.186.207 - re "GET /login/?login_only=1&user=re&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user re (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 218.233.182.39
country_id: 1835841
description:
2026-06-25 17:03:07 dovecot_login authenticator failed for H=([196.189.51.64]) [218.233.182.39]:3713: 535 Incorrect authentication data (set_id=dfc.recoupements@otr.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.177.187.39
country_id: 6252001
description:
[2026-06-25 17:02:24 +0000] info [cpaneld] 70.177.187.39 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.104.36.41
country_id: 6252001
description:
[2026-06-25 17:02:32 +0000] info [cpaneld] 68.104.36.41 - relanceinfotg "GET /login/?login_only=1&user=relanceinfotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanceinfotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 208.104.60.220
country_id: 6252001
description:
[2026-06-25 17:02:37 +0000] info [cpaneld] 208.104.60.220 - relance "GET /login/?login_only=1&user=relance&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relance (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.118.46.184
country_id: 6252001
description:
[2026-06-25 17:02:48 +0000] info [cpaneld] 76.118.46.184 - rela "GET /login/?login_only=1&user=rela&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rela (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.86.196.111
country_id: 6252001
description:
[2026-06-25 17:02:25 +0000] info [cpaneld] 152.86.196.111 - les "GET /login/?login_only=1&user=les&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user les (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.150.62.16
country_id: 6252001
description:
[2026-06-25 17:02:27 +0000] info [cpaneld] 35.150.62.16 - relanceinfo "GET /login/?login_only=1&user=relanceinfo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanceinfo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.10.79.149
country_id: 6252001
description:
[2026-06-25 17:02:34 +0000] info [cpaneld] 98.10.79.149 - relancei "GET /login/?login_only=1&user=relancei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relancei (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.176.90.51
country_id: 3895114
description:
Denial of Service (DoS) attack was discovered from 34.176.90.51: 80 connections per 30 seconds to 2083 port.


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 148.163.113.150
country_id: 6252001
description:
2026-06-25 17:03:22 dovecot_login authenticator failed for H=(cameg-togo.tg) [148.163.113.150]:51410: 535 Incorrect authentication data (set_id=sales@mail.cameg-togo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.104.94.153
country_id: 6252001
description:
[2026-06-25 17:03:24 +0000] info [cpaneld] 68.104.94.153 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.62.111.107
country_id: 6252001
description:
[2026-06-25 17:03:33 +0000] info [cpaneld] 173.62.111.107 - cafeittg "GET /login/?login_only=1&user=cafeittg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafeittg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 192.161.79.62
country_id: 6252001
description:
[2026-06-25 17:03:47 +0000] info [cpaneld] 192.161.79.62 - ca "GET /login/?login_only=1&user=ca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ca (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.226.15.83
country_id: 3469034
description:
45.226.15.83 - - [25/Jun/2026:17:03:52 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9673887&pdata=https%253A%252F%252Ftogodailynews.tg%252Fla-portabilite-des-numeros-mobiles-le-voeu-dun-togo-tourne-vers-lemergence-numerique%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782407030 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/la-portabilite-des-numeros-mobiles-le-voeu-dun-togo-tourne-vers-lemergence-numerique/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.9596.1707 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.226.15.83


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 43.133.66.51
country_id: 1835841
domain: lepoint-actu.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.20||T:APACHE||MV:/index.php/wp-json/wp/v2/users/2||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.42.242.144
country_id: 6252001
description:
[2026-06-25 17:04:58 +0000] info [cpaneld] 66.42.242.144 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.51.232.228
country_id: 3686110
description:
[2026-06-25 17:05:17 +0000] info [cpaneld] 38.51.232.228 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.104.150.89
country_id: 6252001
description:
[2026-06-25 17:05:01 +0000] info [cpaneld] 73.104.150.89 - direct7 "GET /login/?login_only=1&user=direct7&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user direct7 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.156.211.203
country_id: 6252001
description:
[2026-06-25 17:05:04 +0000] info [cpaneld] 38.156.211.203 - direct7tg "GET /login/?login_only=1&user=direct7tg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user direct7tg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.209.185.178
country_id: 6252001
description:
[2026-06-25 17:05:11 +0000] info [cpaneld] 73.209.185.178 - dire "GET /login/?login_only=1&user=dire&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dire (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.139.111.103
country_id: 6252001
description:
[2026-06-25 17:05:08 +0000] info [cpaneld] 35.139.111.103 - direc "GET /login/?login_only=1&user=direc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user direc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.248.151.103
country_id: 6252001
description:
[2026-06-25 17:05:17 +0000] info [cpaneld] 69.248.151.103 - di "GET /login/?login_only=1&user=di&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user di (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 86.97.110.203
country_id: 290557
description:
[2026-06-25 17:05:20 +0000] info [cpaneld] 86.97.110.203 - soroubat "GET /login/?login_only=1&user=soroubat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soroubat (has_cpuser_file failed)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 82.157.254.2
country_id: 1814991
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/qui-pour-remplacer-omar-b/<script async src=||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.180.50.100
country_id: 298795
description:
[2026-06-25 17:05:41 +0000] info [cpaneld] 78.180.50.100 - sor "GET /login/?login_only=1&user=sor&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sor (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.70.164.132
country_id: 3469034
description:
[2026-06-25 17:05:27 +0000] info [cpaneld] 177.70.164.132 - sorouba "GET /login/?login_only=1&user=sorouba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sorouba (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.162.126.176
country_id: 3686110
description:
[2026-06-25 17:05:35 +0000] info [cpaneld] 45.162.126.176 - sorou "GET /login/?login_only=1&user=sorou&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sorou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.248.131.116
country_id: 3625428
description:
[2026-06-25 17:05:44 +0000] info [cpaneld] 38.248.131.116 - so "GET /login/?login_only=1&user=so&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user so (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.233.195.93
country_id: 2017370
description:
[2026-06-25 17:05:38 +0000] info [cpaneld] 46.233.195.93 - soro "GET /login/?login_only=1&user=soro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soro (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.119.73.164
country_id: 6252001
description:
[2026-06-25 17:07:13 +0000] info [cpaneld] 68.119.73.164 - togofeed "GET /login/?login_only=1&user=togofeed&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofeed (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.109.61.151
country_id: 6252001
description:
[2026-06-25 17:07:17 +0000] info [cpaneld] 68.109.61.151 - catog "GET /login/?login_only=1&user=catog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user catog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 204.1.37.245
country_id: 6252001
description:
[2026-06-25 17:07:21 +0000] info [cpaneld] 204.1.37.245 - cato "GET /login/?login_only=1&user=cato&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cato (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.61.245.130
country_id: 6252001
description:
[2026-06-25 17:07:08 +0000] info [cpaneld] 71.61.245.130 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.195.171.181
country_id: 6252001
description:
[2026-06-25 17:07:17 +0000] info [cpaneld] 74.195.171.181 - togofeedcom "GET /login/?login_only=1&user=togofeedcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofeedcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.166.191.1
country_id: 6252001
description:
[2026-06-25 17:07:21 +0000] info [cpaneld] 76.166.191.1 - togofee "GET /login/?login_only=1&user=togofee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.146.45.233
country_id: 6252001
description:
[2026-06-25 17:07:30 +0000] info [cpaneld] 107.146.45.233 - ca "GET /login/?login_only=1&user=ca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.48.24.200
country_id: 6252001
description:
[2026-06-25 17:07:37 +0000] info [cpaneld] 136.48.24.200 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.7.226.158
country_id: 6252001
description:
[2026-06-25 17:08:10 +0000] info [cpaneld] 68.7.226.158 - yanacomtg "GET /login/?login_only=1&user=yanacomtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yanacomtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.99.160.30
country_id: 6252001
description:
[2026-06-25 17:08:03 +0000] info [cpaneld] 68.99.160.30 - yanacom "GET /login/?login_only=1&user=yanacom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yanacom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.155.51.230
country_id: 6252001
description:
[2026-06-25 17:08:16 +0000] info [cpaneld] 73.155.51.230 - yanac "GET /login/?login_only=1&user=yanac&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yanac (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.208.236.246
country_id: 6252001
description:
[2026-06-25 17:08:20 +0000] info [cpaneld] 98.208.236.246 - yana "GET /login/?login_only=1&user=yana&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yana (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.181.252.230
country_id: 6252001
description:
[2026-06-25 17:07:34 +0000] info [cpaneld] 67.181.252.230 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.118.117.195
country_id: 6252001
description:
[2026-06-25 17:07:30 +0000] info [cpaneld] 76.118.117.195 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.251.28.169
country_id: 6252001
description:
[2026-06-25 17:08:00 +0000] info [cpaneld] 172.251.28.169 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.175.229.172
country_id: 6252001
description:
[2026-06-25 17:08:14 +0000] info [cpaneld] 67.175.229.172 - yanaco "GET /login/?login_only=1&user=yanaco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yanaco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.191.216.147
country_id: 6252001
description:
[2026-06-25 17:08:29 +0000] info [cpaneld] 71.191.216.147 - ya "GET /login/?login_only=1&user=ya&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ya (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.20.70.121
country_id: 6252001
description:
[2026-06-25 17:08:59 +0000] info [cpaneld] 72.20.70.121 - ing "GET /login/?login_only=1&user=ing&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ing (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.98.77.61
country_id: 6252001
description:
[2026-06-25 17:08:45 +0000] info [cpaneld] 76.98.77.61 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 152.233.3.150
country_id: 1733045
description:
Denial of Service (DoS) attack was discovered from 152.233.3.150: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.176.205.221
country_id: 6252001
description:
[2026-06-25 17:08:50 +0000] info [cpaneld] 70.176.205.221 - inger "GET /login/?login_only=1&user=inger&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user inger (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.23.95.108
country_id: 6252001
description:
[2026-06-25 17:08:57 +0000] info [cpaneld] 24.23.95.108 - inge "GET /login/?login_only=1&user=inge&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user inge (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.25.60.142
country_id: 6252001
description:
[2026-06-25 17:08:54 +0000] info [cpaneld] 173.25.60.142 - ingertg "GET /login/?login_only=1&user=ingertg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ingertg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.137.113.200
country_id: 6252001
description:
[2026-06-25 17:09:44 +0000] info [cpaneld] 76.137.113.200 - jcdc "GET /login/?login_only=1&user=jcdc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user jcdc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 23.28.118.170
country_id: 6252001
description:
[2026-06-25 17:09:51 +0000] info [cpaneld] 23.28.118.170 - jc "GET /login/?login_only=1&user=jc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user jc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 146.113.195.106
country_id: 6252001
description:
[2026-06-25 17:09:32 +0000] info [cpaneld] 146.113.195.106 - jcdcons "GET /login/?login_only=1&user=jcdcons&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user jcdcons (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.154.33.29
country_id: 3686110
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/prubeneficial.tg HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.34.181.120
country_id: 6252001
description:
[2026-06-25 17:09:39 +0000] info [cpaneld] 76.34.181.120 - jcdco "GET /login/?login_only=1&user=jcdco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user jcdco (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-25 17:09:40 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:46320: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.52.148.37
country_id: 6252001
description:
[2026-06-25 17:09:48 +0000] info [cpaneld] 108.52.148.37 - jcd "GET /login/?login_only=1&user=jcd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user jcd (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.155.11.226
country_id: 1643084
description:
2026-06-25 17:10:13 dovecot_login authenticator failed for H=(ADMIN) [202.155.11.226]:51737: 535 Incorrect authentication data (set_id=parfait.b@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.134.156.251
country_id: 6252001
description:
[2026-06-25 17:09:26 +0000] info [cpaneld] 47.134.156.251 - jcdconsultnet "GET /login/?login_only=1&user=jcdconsultnet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user jcdconsultnet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.207.223.141
country_id: 6252001
description:
[2026-06-25 17:09:36 +0000] info [cpaneld] 73.207.223.141 - jcdcon "GET /login/?login_only=1&user=jcdcon&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user jcdcon (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.64.81.141
country_id: 6252001
description:
[2026-06-25 17:11:16 +0000] info [cpaneld] 75.64.81.141 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.45.39.203
country_id: 6252001
description:
[2026-06-25 17:11:20 +0000] info [cpaneld] 73.45.39.203 - togodailynews "GET /login/?login_only=1&user=togodailynews&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodailynews (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-25 17:11:28 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:58580: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 8.41.17.95
country_id: 6252001
description:
[2026-06-25 17:11:47 +0000] info [cpaneld] 8.41.17.95 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.34.13.50
country_id: 6252001
description:
[2026-06-25 17:12:08 +0000] info [cpaneld] 100.34.13.50 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.1.20.133
country_id: 6252001
description:
[2026-06-25 17:11:41 +0000] info [cpaneld] 68.1.20.133 - togod "GET /login/?login_only=1&user=togod&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togod (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 136.110.19.149
country_id: 1880251
domain: prod.pnls.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.20||T:APACHE||RA:136.110.19.149||TA:136.110.19.149||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.79.193.27
country_id: 6252001
description:
[2026-06-25 17:12:09 +0000] info [cpaneld] 173.79.193.27 - ese2i "GET /login/?login_only=1&user=ese2i&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ese2i (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.196.20.113
country_id: 6252001
description:
[2026-06-25 17:12:06 +0000] info [cpaneld] 72.196.20.113 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.55.242.52
country_id: 6252001
description:
[2026-06-25 17:12:11 +0000] info [cpaneld] 108.55.242.52 - lvdt "GET /login/?login_only=1&user=lvdt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lvdt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.110.28.232
country_id: 6252001
description:
[2026-06-25 17:12:12 +0000] info [cpaneld] 98.110.28.232 - ese2itg "GET /login/?login_only=1&user=ese2itg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ese2itg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.129.89.74
country_id: 6252001
description:
[2026-06-25 17:12:20 +0000] info [cpaneld] 24.129.89.74 - lvd "GET /login/?login_only=1&user=lvd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lvd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.131.107.185
country_id: 6252001
description:
[2026-06-25 17:11:44 +0000] info [cpaneld] 216.131.107.185 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.57.72.96
country_id: 6252001
description:
[2026-06-25 17:11:50 +0000] info [cpaneld] 71.57.72.96 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.177.10.19
country_id: 6252001
description:
[2026-06-25 17:12:17 +0000] info [cpaneld] 73.177.10.19 - ese2 "GET /login/?login_only=1&user=ese2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ese2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.89.123
country_id: 2750405
description:
[2026-06-25 17:12:56 +0000] info [cpaneld] 217.181.89.123 - dany2mai "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dany2mai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.21.6
country_id: 2921044
description:
[2026-06-25 17:12:57 +0000] info [cpaneld] 195.63.21.6 - dany2mairietg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dany2mairietg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.220.65.134
country_id: 6252001
description:
[2026-06-25 17:12:59 +0000] info [cpaneld] 73.220.65.134 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.250.23.145
country_id: 6252001
description:
[2026-06-25 17:12:38 +0000] info [cpaneld] 69.250.23.145 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.36.203.164
country_id: 6252001
description:
[2026-06-25 17:12:41 +0000] info [cpaneld] 98.36.203.164 - togocarrierebetons "GET /login/?login_only=1&user=togocarrierebetons&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierebetons (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 145.255.161.9
country_id: 1522867
description:
2026-06-25 17:13:11 H=([145.255.161.9]) [145.255.161.9]:28052 F=<prakash@white-ways.com> rejected RCPT <prakash@white-ways.com>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 148.66.176.9
country_id: 6252001
description:
[2026-06-25 17:12:44 +0000] info [cpaneld] 148.66.176.9 - togocarrierebetonstg "GET /login/?login_only=1&user=togocarrierebetonstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierebetonstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.81.235
country_id: 6251999
description:
[2026-06-25 17:12:52 +0000] info [cpaneld] 217.181.81.235 - contact@dany2.mairie.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 207.49.45.12
country_id: 6252001
description:
[2026-06-25 17:12:47 +0000] info [cpaneld] 207.49.45.12 - togocarr "GET /login/?login_only=1&user=togocarr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.118.146.141
country_id: 6252001
description:
[2026-06-25 17:15:07 +0000] info [cpaneld] 68.118.146.141 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.0.211.140
country_id: 6252001
description:
[2026-06-25 17:15:11 +0000] info [cpaneld] 73.0.211.140 - ekinamag "GET /login/?login_only=1&user=ekinamag&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ekinamag (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.176.198.131
country_id: 6252001
description:
[2026-06-25 17:15:15 +0000] info [cpaneld] 98.176.198.131 - ekinamagtg "GET /login/?login_only=1&user=ekinamagtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ekinamagtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.34.192.129
country_id: 6252001
description:
[2026-06-25 17:15:17 +0000] info [cpaneld] 108.34.192.129 - ekinama "GET /login/?login_only=1&user=ekinama&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ekinama (has_cpuser_file failed)


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 41.207.191.214
country_id: 2363686
domain: www.letabloid.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:url||MV:https://www.letabloid.tg/2026/06/25/torture-lasvitto-evalue-avec-la-presse-la-mise-en-oeuvre-des-engagements-du-togo-devant-lepu||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.2.177.225
country_id: 6252001
description:
[2026-06-25 17:15:38 +0000] info [cpaneld] 100.2.177.225 - ek "GET /login/?login_only=1&user=ek&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ek (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.35.125.205
country_id: 6252001
description:
[2026-06-25 17:16:46 +0000] info [cpaneld] 108.35.125.205 - fbafr "GET /login/?login_only=1&user=fbafr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafr (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 157.10.105.57
country_id: 1861060
description:
2026-06-25 17:17:03 dovecot_plain authenticator failed for H=(2sb1istu8uikrwwtvr9j7l8ukuar5) [157.10.105.57]:47416: 535 Incorrect authentication data (set_id=arse@arse.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.218.57.178
country_id: 6252001
description:
[2026-06-25 17:16:43 +0000] info [cpaneld] 66.218.57.178 - fbafri "GET /login/?login_only=1&user=fbafri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.134.65.11
country_id: 6252001
description:
[2026-06-25 17:16:49 +0000] info [cpaneld] 68.134.65.11 - fbaf "GET /login/?login_only=1&user=fbaf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbaf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 206.125.138.102
country_id: 6252001
description:
[2026-06-25 17:17:05 +0000] info [cpaneld] 206.125.138.102 - lead "GET /login/?login_only=1&user=lead&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lead (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.148.220.66
country_id: 6252001
description:
[2026-06-25 17:16:38 +0000] info [cpaneld] 104.148.220.66 - fbafricacom "GET /login/?login_only=1&user=fbafricacom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafricacom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.196.79.116
country_id: 6252001
description:
[2026-06-25 17:16:43 +0000] info [cpaneld] 74.196.79.116 - leadelles "GET /login/?login_only=1&user=leadelles&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadelles (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.150.110.215
country_id: 6252001
description:
[2026-06-25 17:16:36 +0000] info [cpaneld] 47.150.110.215 - fbafrica "GET /login/?login_only=1&user=fbafrica&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafrica (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.197.225.53
country_id: 6252001
description:
[2026-06-25 17:16:54 +0000] info [cpaneld] 73.197.225.53 - fba "GET /login/?login_only=1&user=fba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fba (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.36.13.71
country_id: 6252001
description:
[2026-06-25 17:16:54 +0000] info [cpaneld] 47.36.13.71 - leadell "GET /login/?login_only=1&user=leadell&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadell (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.71.142.134
country_id: 6252001
description:
[2026-06-25 17:16:57 +0000] info [cpaneld] 173.71.142.134 - fb "GET /login/?login_only=1&user=fb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fb (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.45.212.139
country_id: 6252001
description:
[2026-06-25 17:17:12 +0000] info [cpaneld] 24.45.212.139 - le "GET /login/?login_only=1&user=le&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user le (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.5.187.164
country_id: 6252001
description:
[2026-06-25 17:18:22 +0000] info [cpaneld] 50.5.187.164 - p2p2rsto "GET /login/?login_only=1&user=p2p2rsto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2p2rsto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.32.88
country_id: 6252001
description:
[2026-06-25 17:17:58 +0000] info [cpaneld] 172.59.32.88 - lasnbcom "GET /login/?login_only=1&user=lasnbcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasnbcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.92.49.10
country_id: 6252001
description:
[2026-06-25 17:18:06 +0000] info [cpaneld] 64.92.49.10 - la "GET /login/?login_only=1&user=la&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user la (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.101.42.220
country_id: 6252001
description:
[2026-06-25 17:18:16 +0000] info [cpaneld] 74.101.42.220 - p2p2rstogo "GET /login/?login_only=1&user=p2p2rstogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2p2rstogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.222.254.205
country_id: 6252001
description:
[2026-06-25 17:18:19 +0000] info [cpaneld] 129.222.254.205 - p2p2rstogotg "GET /login/?login_only=1&user=p2p2rstogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2p2rstogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.132.39.50
country_id: 6252001
description:
[2026-06-25 17:18:26 +0000] info [cpaneld] 97.132.39.50 - p2p2rst "GET /login/?login_only=1&user=p2p2rst&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2p2rst (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.163.159.18
country_id: 6252001
description:
[2026-06-25 17:18:45 +0000] info [cpaneld] 67.163.159.18 - p2 "GET /login/?login_only=1&user=p2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.176.232.77
country_id: 6252001
description:
[2026-06-25 17:18:42 +0000] info [cpaneld] 98.176.232.77 - p2p "GET /login/?login_only=1&user=p2p&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2p (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.226.207.41
country_id: 6252001
description:
[2026-06-25 17:18:33 +0000] info [cpaneld] 98.226.207.41 - p2p2r "GET /login/?login_only=1&user=p2p2r&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user p2p2r (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.233.210.186
country_id: 6252001
description:
[2026-06-25 17:20:10 +0000] info [cpaneld] 73.233.210.186 - banmlabtg "GET /login/?login_only=1&user=banmlabtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banmlabtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.58.225.46
country_id: 6252001
description:
[2026-06-25 17:20:16 +0000] info [cpaneld] 68.58.225.46 - banml "GET /login/?login_only=1&user=banml&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banml (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.148.69.146
country_id: 6252001
description:
[2026-06-25 17:20:06 +0000] info [cpaneld] 98.148.69.146 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.241.99.186
country_id: 6252001
description:
[2026-06-25 17:20:13 +0000] info [cpaneld] 131.241.99.186 - banmla "GET /login/?login_only=1&user=banmla&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banmla (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.173.194.86
country_id: 6252001
description:
[2026-06-25 17:20:26 +0000] info [cpaneld] 209.173.194.86 - ban "GET /login/?login_only=1&user=ban&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ban (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.255.196.254
country_id: 6252001
description:
[2026-06-25 17:20:29 +0000] info [cpaneld] 69.255.196.254 - ba "GET /login/?login_only=1&user=ba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ba (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.4.1.194
country_id: 2635167
description:
[2026-06-25 17:21:37 +0000] info [cpaneld] 82.4.1.194 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 31.37.6.132
country_id: 3017382
description:
[2026-06-25 17:21:38 +0000] info [cpaneld] 31.37.6.132 - ese2i "GET /login/?login_only=1&user=ese2i&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ese2i (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.111.127.232
country_id: 3865483
description:
[2026-06-25 17:21:43 +0000] info [cpaneld] 190.111.127.232 - ese2itg "GET /login/?login_only=1&user=ese2itg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ese2itg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 31.131.78.15
country_id: 690791
description:
[2026-06-25 17:21:52 +0000] info [cpaneld] 31.131.78.15 - ese "GET /login/?login_only=1&user=ese&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ese (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.236.151.101
country_id: 3658394
description:
[2026-06-25 17:21:47 +0000] info [cpaneld] 45.236.151.101 - ese2 "GET /login/?login_only=1&user=ese2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ese2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.109.145.188
country_id: 3469034
description:
[2026-06-25 17:21:56 +0000] info [cpaneld] 187.109.145.188 - es "GET /login/?login_only=1&user=es&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user es (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 8.234.159.7
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 8.234.159.7: 80 connections per 30 seconds to 2083 port.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 3.217.168.199
country_id: 6252001
domain: 24heureinfo.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET ?s=211169 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 35.175.248.25
country_id: 6252001
domain: lacs1.mairie.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/120.0.6099.224 Safari/537.36||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.228.7.77
country_id: 6252001
description:
[2026-06-25 17:24:37 +0000] info [cpaneld] 73.228.7.77 - mftog "GET /login/?login_only=1&user=mftog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.19.220.196
country_id: 6252001
description:
[2026-06-25 17:24:40 +0000] info [cpaneld] 76.19.220.196 - mfto "GET /login/?login_only=1&user=mfto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mfto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.48.0.74
country_id: 6252001
description:
[2026-06-25 17:24:45 +0000] info [cpaneld] 47.48.0.74 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.212.3.100
country_id: 6252001
description:
[2026-06-25 17:24:48 +0000] info [cpaneld] 73.212.3.100 - ariana "GET /login/?login_only=1&user=ariana&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ariana (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.194.82.5
country_id: 6252001
description:
[2026-06-25 17:24:53 +0000] info [cpaneld] 98.194.82.5 - arian "GET /login/?login_only=1&user=arian&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user arian (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.128.168.69
country_id: 6252001
description:
[2026-06-25 17:24:56 +0000] info [cpaneld] 73.128.168.69 - aria "GET /login/?login_only=1&user=aria&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user aria (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.14.194.154
country_id: 6252001
description:
[2026-06-25 17:24:28 +0000] info [cpaneld] 24.14.194.154 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.246.178.2
country_id: 6252001
description:
[2026-06-25 17:24:30 +0000] info [cpaneld] 96.246.178.2 - mftogo "GET /login/?login_only=1&user=mftogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.137.194.52
country_id: 6252001
description:
[2026-06-25 17:24:50 +0000] info [cpaneld] 74.137.194.52 - mf "GET /login/?login_only=1&user=mf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mf (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.213.251.195
country_id: 192950
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/interview/page/595455 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.204.151.252
country_id: 192950
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/interview/page/105941429 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.197.158.111
country_id: 6252001
description:
[2026-06-25 17:26:49 +0000] info [cpaneld] 71.197.158.111 - matwtog "GET /login/?login_only=1&user=matwtog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matwtog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.10.80.119
country_id: 1210997
description:
[2026-06-25 17:26:51 +0000] info [cpaneld] 157.10.80.119 - ist "GET /login/?login_only=1&user=ist&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ist (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.187.197.213
country_id: 6252001
description:
[2026-06-25 17:26:59 +0000] info [cpaneld] 72.187.197.213 - mat "GET /login/?login_only=1&user=mat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mat (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.189.120.114
country_id: 337996
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/interview/page/76797e HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 63.226.140.44
country_id: 6252001
description:
[2026-06-25 17:26:38 +0000] info [cpaneld] 63.226.140.44 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.18.239.66
country_id: 6252001
description:
[2026-06-25 17:27:02 +0000] info [cpaneld] 98.18.239.66 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.128.102.68
country_id: 1880251
description:
[2026-06-25 17:28:07 +0000] info [cpaneld] 178.128.102.68 - dev03 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dev03 (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 82.215.106.173
country_id: 1512440
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/pharmacie-de-garde/page/999c76 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.213.62.241
country_id: 6252001
description:
[2026-06-25 17:29:53 +0000] info [cpaneld] 73.213.62.241 - hapluci "GET /login/?login_only=1&user=hapluci&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user hapluci (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.208.147.135
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/interview/page/false HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.247.216.20
country_id: 6252001
description:
[2026-06-25 17:29:48 +0000] info [cpaneld] 24.247.216.20 - haplucia "GET /login/?login_only=1&user=haplucia&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user haplucia (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.159.41.71
country_id: 6252001
description:
[2026-06-25 17:29:59 +0000] info [cpaneld] 47.159.41.71 - haplu "GET /login/?login_only=1&user=haplu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user haplu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.230.223.148
country_id: 6252001
description:
[2026-06-25 17:30:03 +0000] info [cpaneld] 98.230.223.148 - hapl "GET /login/?login_only=1&user=hapl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user hapl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.228.189.135
country_id: 6252001
description:
[2026-06-25 17:30:18 +0000] info [cpaneld] 24.228.189.135 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.117.98.30
country_id: 6252001
description:
[2026-06-25 17:29:36 +0000] info [cpaneld] 152.117.98.30 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.121.67.224
country_id: 6252001
description:
[2026-06-25 17:30:07 +0000] info [cpaneld] 98.121.67.224 - hap "GET /login/?login_only=1&user=hap&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user hap (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.166.108.66
country_id: 6252001
description:
[2026-06-25 17:30:28 +0000] info [cpaneld] 97.166.108.66 - lcttogo "GET /login/?login_only=1&user=lcttogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lcttogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 208.161.251.248
country_id: 6252001
description:
[2026-06-25 17:30:35 +0000] info [cpaneld] 208.161.251.248 - dau "GET /login/?login_only=1&user=dau&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dau (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.96.144.40
country_id: 6252001
description:
[2026-06-25 17:31:04 +0000] info [cpaneld] 50.96.144.40 - cas "GET /login/?login_only=1&user=cas&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cas (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.34.174.52
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/interview/page/767c87 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.114.139.70
country_id: 6252001
description:
[2026-06-25 17:30:51 +0000] info [cpaneld] 76.114.139.70 - caseafr "GET /login/?login_only=1&user=caseafr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caseafr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 207.48.174.5
country_id: 6252001
description:
[2026-06-25 17:30:55 +0000] info [cpaneld] 207.48.174.5 - caseaf "GET /login/?login_only=1&user=caseaf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caseaf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.198.169.7
country_id: 6252001
description:
[2026-06-25 17:30:31 +0000] info [cpaneld] 73.198.169.7 - lcttogotg "GET /login/?login_only=1&user=lcttogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lcttogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.50.16.156
country_id: 6252001
description:
[2026-06-25 17:30:36 +0000] info [cpaneld] 174.50.16.156 - lctto "GET /login/?login_only=1&user=lctto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lctto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.106.108.119
country_id: 6252001
description:
[2026-06-25 17:30:38 +0000] info [cpaneld] 38.106.108.119 - da "GET /login/?login_only=1&user=da&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user da (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.191.59.225
country_id: 6252001
description:
[2026-06-25 17:30:58 +0000] info [cpaneld] 73.191.59.225 - casea "GET /login/?login_only=1&user=casea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user casea (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.226.110.28
country_id: 6252001
description:
[2026-06-25 17:30:39 +0000] info [cpaneld] 71.226.110.28 - lctt "GET /login/?login_only=1&user=lctt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lctt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.47.112.209
country_id: 6252001
description:
[2026-06-25 17:30:44 +0000] info [cpaneld] 24.47.112.209 - lc "GET /login/?login_only=1&user=lc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.1.222.198
country_id: 6252001
description:
[2026-06-25 17:30:47 +0000] info [cpaneld] 100.1.222.198 - caseafri "GET /login/?login_only=1&user=caseafri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caseafri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.34.124.177
country_id: 6252001
description:
[2026-06-25 17:31:07 +0000] info [cpaneld] 136.34.124.177 - ca "GET /login/?login_only=1&user=ca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.68.23.126
country_id: 6252001
description:
[2026-06-25 17:31:42 +0000] info [cpaneld] 73.68.23.126 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.54.108.237
country_id: 6252001
description:
[2026-06-25 17:31:45 +0000] info [cpaneld] 173.54.108.237 - scafricaplc "GET /login/?login_only=1&user=scafricaplc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafricaplc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.225.113.222
country_id: 6252001
description:
[2026-06-25 17:31:48 +0000] info [cpaneld] 68.225.113.222 - scafricaplccom "GET /login/?login_only=1&user=scafricaplccom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafricaplccom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.181.183.189
country_id: 6252001
description:
[2026-06-25 17:31:31 +0000] info [cpaneld] 97.181.183.189 - belali "GET /login/?login_only=1&user=belali&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user belali (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 192.251.253.170
country_id: 6252001
description:
[2026-06-25 17:31:41 +0000] info [cpaneld] 192.251.253.170 - bela "GET /login/?login_only=1&user=bela&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bela (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.36.196.238
country_id: 6252001
description:
[2026-06-25 17:31:56 +0000] info [cpaneld] 73.36.196.238 - scafric "GET /login/?login_only=1&user=scafric&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafric (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.182.83.218
country_id: 6252001
description:
[2026-06-25 17:32:10 +0000] info [cpaneld] 24.182.83.218 - sca "GET /login/?login_only=1&user=sca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.35.33.79
country_id: 6252001
description:
[2026-06-25 17:32:13 +0000] info [cpaneld] 76.35.33.79 - sc "GET /login/?login_only=1&user=sc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sc (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.124.240
country_id: 99237
domain: fbafrica.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/fbafrica.com/business-fashion-blogging-revenue-sources-expansion-businesses/ HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 12.177.5.93
country_id: 6252001
description:
[2026-06-25 17:32:59 +0000] info [cpaneld] 12.177.5.93 - vitrinenews "GET /login/?login_only=1&user=vitrinenews&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrinenews (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 206.255.15.225
country_id: 6252001
description:
[2026-06-25 17:33:06 +0000] info [cpaneld] 206.255.15.225 - vitrinen "GET /login/?login_only=1&user=vitrinen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrinen (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.121.231.118
country_id: 6252001
description:
[2026-06-25 17:32:22 +0000] info [cpaneld] 71.121.231.118 - td "GET /login/?login_only=1&user=td&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user td (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.74.82.1
country_id: 6252001
description:
[2026-06-25 17:33:03 +0000] info [cpaneld] 174.74.82.1 - vitrinenewstg "GET /login/?login_only=1&user=vitrinenewstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrinenewstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.90.224.33
country_id: 6252001
description:
[2026-06-25 17:33:25 +0000] info [cpaneld] 76.90.224.33 - vit "GET /login/?login_only=1&user=vit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vit (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.5.55.83
country_id: 3624060
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/interview/page/1969415229 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.127.171.238
country_id: 6252001
description:
[2026-06-25 17:33:29 +0000] info [cpaneld] 24.127.171.238 - vi "GET /login/?login_only=1&user=vi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.83.195.24
country_id: 6252001
description:
[2026-06-25 17:35:31 +0000] info [cpaneld] 67.83.195.24 - smar "GET /login/?login_only=1&user=smar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user smar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.129.18.56
country_id: 6252001
description:
[2026-06-25 17:35:39 +0000] info [cpaneld] 74.129.18.56 - sm "GET /login/?login_only=1&user=sm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.241.97.144
country_id: 6252001
description:
[2026-06-25 17:35:27 +0000] info [cpaneld] 131.241.97.144 - smart "GET /login/?login_only=1&user=smart&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user smart (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.140.86.7
country_id: 6252001
description:
[2026-06-25 17:35:35 +0000] info [cpaneld] 24.140.86.7 - sma "GET /login/?login_only=1&user=sma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.78.138.244
country_id: 6252001
description:
[2026-06-25 17:37:20 +0000] info [cpaneld] 66.78.138.244 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.112.140.231
country_id: 6252001
description:
[2026-06-25 17:37:21 +0000] info [cpaneld] 69.112.140.231 - groupgcicom "GET /login/?login_only=1&user=groupgcicom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user groupgcicom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.214.188.131
country_id: 6252001
description:
[2026-06-25 17:37:29 +0000] info [cpaneld] 74.214.188.131 - groupg "GET /login/?login_only=1&user=groupg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user groupg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.136.35.244
country_id: 6252001
description:
[2026-06-25 17:37:40 +0000] info [cpaneld] 76.136.35.244 - gro "GET /login/?login_only=1&user=gro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gro (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 197.234.221.143
country_id: 2395170
description:
197.234.221.143 - - [25/Jun/2026:17:37:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10198370&pdata=https%253A%252F%252Fclinique-ccl.tg%252Frdv%253Fservice%253DChirurgien&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782409058 HTTP/2.0" 302 0 clinique-ccl.tg "https://clinique-ccl.tg/rdv?service=Chirurgien" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"197.234.221.143" CAPTCHA:"0" PEER:172.70.91.243


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.168.240.226
country_id: 6252001
description:
[2026-06-25 17:38:04 +0000] info [cpaneld] 50.168.240.226 - ekinamagtg "GET /login/?login_only=1&user=ekinamagtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ekinamagtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.34.180.9
country_id: 6252001
description:
[2026-06-25 17:38:14 +0000] info [cpaneld] 108.34.180.9 - ekina "GET /login/?login_only=1&user=ekina&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ekina (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.102.61.133
country_id: 6252001
description:
[2026-06-25 17:37:31 +0000] info [cpaneld] 74.102.61.133 - smart "GET /login/?login_only=1&user=smart&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user smart (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.52.20.137
country_id: 6252001
description:
[2026-06-25 17:37:36 +0000] info [cpaneld] 136.52.20.137 - grou "GET /login/?login_only=1&user=grou&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user grou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.117.113.185
country_id: 6252001
description:
[2026-06-25 17:37:42 +0000] info [cpaneld] 69.117.113.185 - gr "GET /login/?login_only=1&user=gr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.163.244.251
country_id: 6252001
description:
[2026-06-25 17:38:12 +0000] info [cpaneld] 67.163.244.251 - ekinam "GET /login/?login_only=1&user=ekinam&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ekinam (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.17.135.210
country_id: 2017370
description:
[2026-06-25 17:37:22 +0000] info [cpaneld] 178.17.135.210 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.176.82.208
country_id: 3469034
description:
[2026-06-25 17:37:27 +0000] info [cpaneld] 45.176.82.208 - vitrinenews "GET /login/?login_only=1&user=vitrinenews&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrinenews (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.176.189.3
country_id: 6252001
description:
[2026-06-25 17:37:43 +0000] info [cpaneld] 174.176.189.3 - sm "GET /login/?login_only=1&user=sm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 153.67.13.232
country_id: 3865483
description:
[2026-06-25 17:37:52 +0000] info [cpaneld] 153.67.13.232 - vit "GET /login/?login_only=1&user=vit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vit (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.49.210.67
country_id: 3017382
description:
[2026-06-25 17:37:37 +0000] info [cpaneld] 5.49.210.67 - vitrin "GET /login/?login_only=1&user=vitrin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.162.38.88
country_id: 6252001
description:
[2026-06-25 17:37:39 +0000] info [cpaneld] 174.162.38.88 - sma "GET /login/?login_only=1&user=sma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.230.33.125
country_id: 3686110
description:
[2026-06-25 17:37:41 +0000] info [cpaneld] 45.230.33.125 - vitri "GET /login/?login_only=1&user=vitri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.108.105.42
country_id: 6252001
description:
[2026-06-25 17:37:58 +0000] info [cpaneld] 38.108.105.42 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.142.40.28
country_id: 272103
description:
[2026-06-25 17:38:24 +0000] info [cpaneld] 185.142.40.28 - eki "GET /login/?login_only=1&user=eki&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user eki (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 181.205.161.162
country_id: 3686110
description:
2026-06-25 17:38:37 dovecot_login authenticator failed for H=(USUr4oQKT) [181.205.161.162]:41996: 535 Incorrect authentication data (set_id=champion@soena.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 95.56.250.249
country_id: 1522867
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/pharmacie-de-garde/page/7d6964 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.1.63.17
country_id: 3617476
domain: derou.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/derou.tg/fr/slides/11 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.19
country_id: 6252001
description:
205.169.39.19 - - [25/Jun/2026:17:39:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7234707&pdata=http%253A%252F%252Fekeasarl.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782409186 HTTP/1.1" 302 0 ekeasarl.com "http://ekeasarl.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.19


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.134.14.198
country_id: 6252001
description:
[2026-06-25 17:40:41 +0000] info [cpaneld] 68.134.14.198 - yanaco "GET /login/?login_only=1&user=yanaco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yanaco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.45.113.50
country_id: 6252001
description:
[2026-06-25 17:40:43 +0000] info [cpaneld] 66.45.113.50 - yanac "GET /login/?login_only=1&user=yanac&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yanac (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.240.96.146
country_id: 3469034
description:
Jun 25 17:41:59 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.240.96.146 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.195.234.252
country_id: 3017382
description:
[2026-06-25 17:42:05 +0000] info [cpaneld] 212.195.234.252 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 27.147.206.146
country_id: 1210997
description:
[2026-06-25 17:41:59 +0000] info [cpaneld] 27.147.206.146 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.50.93.3
country_id: 3439705
description:
[2026-06-25 17:41:45 +0000] info [cpaneld] 186.50.93.3 - togocarr "GET /login/?login_only=1&user=togocarr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.32.86.99
country_id: 2017370
description:
[2026-06-25 17:41:49 +0000] info [cpaneld] 95.32.86.99 - togocar "GET /login/?login_only=1&user=togocar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocar (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 197.186.75.105
country_id: 149590
description:
2026-06-25 17:42:38 H=([197.186.75.105]) [197.186.75.105]:50951 F=<kumar@white-ways.com> rejected RCPT <kumar@white-ways.com>: Sender verify failed


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 79.173.221.1
country_id: 248816
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/interview/page/a49387 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.21.142.28
country_id: 6252001
description:
[2026-06-25 17:44:27 +0000] info [cpaneld] 173.21.142.28 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.205.228
country_id: 6252001
description:
[2026-06-25 17:44:38 +0000] info [cpaneld] 172.59.205.228 - ekeasar "GET /login/?login_only=1&user=ekeasar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ekeasar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.253.98
country_id: 6252001
description:
[2026-06-25 17:44:48 +0000] info [cpaneld] 172.58.253.98 - ekea "GET /login/?login_only=1&user=ekea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ekea (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.21.217.140
country_id: 6252001
description:
[2026-06-25 17:44:35 +0000] info [cpaneld] 50.21.217.140 - ekeasarlcom "GET /login/?login_only=1&user=ekeasarlcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ekeasarlcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.246.83.196
country_id: 6252001
description:
[2026-06-25 17:44:44 +0000] info [cpaneld] 69.246.83.196 - ekeas "GET /login/?login_only=1&user=ekeas&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ekeas (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.255.21.198
country_id: 6252001
description:
[2026-06-25 17:44:52 +0000] info [cpaneld] 96.255.21.198 - eke "GET /login/?login_only=1&user=eke&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user eke (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.91.122.114
country_id: 6252001
description:
[2026-06-25 17:45:59 +0000] info [cpaneld] 76.91.122.114 - crechepetitelunetg "GET /login/?login_only=1&user=crechepetitelunetg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user crechepetitelunetg (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 5.101.157.226
country_id: 2017370
description:
Denial of Service (DoS) attack was discovered from 5.101.157.226: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.43.70.84
country_id: 6252001
description:
[2026-06-25 17:46:05 +0000] info [cpaneld] 68.43.70.84 - crechep "GET /login/?login_only=1&user=crechep&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user crechep (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.175.213.148
country_id: 6252001
description:
[2026-06-25 17:46:13 +0000] info [cpaneld] 67.175.213.148 - crech "GET /login/?login_only=1&user=crech&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user crech (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 40.136.233.246
country_id: 6252001
description:
[2026-06-25 17:46:20 +0000] info [cpaneld] 40.136.233.246 - crec "GET /login/?login_only=1&user=crec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user crec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.194.132.154
country_id: 6252001
description:
[2026-06-25 17:46:02 +0000] info [cpaneld] 74.194.132.154 - crechepe "GET /login/?login_only=1&user=crechepe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user crechepe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.211.212.122
country_id: 3625428
description:
[2026-06-25 17:47:20 +0000] info [cpaneld] 201.211.212.122 - ciieei "GET /login/?login_only=1&user=ciieei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieei (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.188.160.1
country_id: 337996
description:
[2026-06-25 17:47:08 +0000] info [cpaneld] 196.188.160.1 - ciieeint "GET /login/?login_only=1&user=ciieeint&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeint (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.211.214.255
country_id: 1733045
description:
[2026-06-25 17:47:14 +0000] info [cpaneld] 113.211.214.255 - ciieein "GET /login/?login_only=1&user=ciieein&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieein (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.104.16.27
country_id: 3469034
description:
[2026-06-25 17:46:59 +0000] info [cpaneld] 187.104.16.27 - ciieeinternational "GET /login/?login_only=1&user=ciieeinternational&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternational (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.218.118.32
country_id: 6252001
description:
[2026-06-25 17:46:28 +0000] info [cpaneld] 24.218.118.32 - cr "GET /login/?login_only=1&user=cr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cr (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.135
country_id: 1880251
description:
47.128.121.135 - - [25/Jun/2026:17:46:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10252445&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252Fthese-de-doctorat%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782409607 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/tag/these-de-doctorat/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.135


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-25 17:47:26 +0000] info [cpaneld] 102.54.238.57 - a.kesso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.kesso (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.41.109.136
country_id: 3175395
description:
[2026-06-25 17:47:31 +0000] info [cpaneld] 79.41.109.136 - cii "GET /login/?login_only=1&user=cii&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cii (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.21.169.32
country_id: 6252001
description:
[2026-06-25 17:47:44 +0000] info [cpaneld] 45.21.169.32 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.155.82.242
country_id: 6252001
description:
[2026-06-25 17:47:53 +0000] info [cpaneld] 76.155.82.242 - digili "GET /login/?login_only=1&user=digili&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user digili (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.46.38.199
country_id: 6252001
description:
[2026-06-25 17:47:47 +0000] info [cpaneld] 72.46.38.199 - digilix "GET /login/?login_only=1&user=digilix&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user digilix (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.10.174.140
country_id: 6252001
description:
[2026-06-25 17:47:59 +0000] info [cpaneld] 68.10.174.140 - digil "GET /login/?login_only=1&user=digil&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user digil (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.189.80.5
country_id: 6252001
description:
[2026-06-25 17:47:49 +0000] info [cpaneld] 38.189.80.5 - digilixtg "GET /login/?login_only=1&user=digilixtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user digilixtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.187.207.59
country_id: 99237
description:
[2026-06-25 17:47:22 +0000] info [cpaneld] 185.187.207.59 - ciiee "GET /login/?login_only=1&user=ciiee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciiee (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.172.195.6
country_id: 1880251
description:
43.172.195.6 - - [25/Jun/2026:17:47:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9672810&pdata=https%253A%252F%252F24heureinfo.tg%252Ftag%252Fkanfitine-tchede-issa%252Ffeed%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782409677 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/tag/kanfitine-tchede-issa/feed/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.172.195.6


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.150.135.0
country_id: 6252001
description:
[2026-06-25 17:48:11 +0000] info [cpaneld] 64.150.135.0 - di "GET /login/?login_only=1&user=di&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user di (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.35.122.82
country_id: 6252001
description:
[2026-06-25 17:50:16 +0000] info [cpaneld] 136.35.122.82 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 197.186.75.105
country_id: 149590
description:
2026-06-25 17:49:40 H=([197.186.75.105]) [197.186.75.105]:60294 F=<kumar@white-ways.com> rejected RCPT <kumar@white-ways.com>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.188.114.64
country_id: 6252001
description:
[2026-06-25 17:50:20 +0000] info [cpaneld] 70.188.114.64 - alloacio "GET /login/?login_only=1&user=alloacio&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alloacio (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.197.50.225
country_id: 6252001
description:
[2026-06-25 17:50:23 +0000] info [cpaneld] 71.197.50.225 - alloaciotg "GET /login/?login_only=1&user=alloaciotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alloaciotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.174.209.227
country_id: 6252001
description:
[2026-06-25 17:50:43 +0000] info [cpaneld] 76.174.209.227 - al "GET /login/?login_only=1&user=al&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user al (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.138.213.38
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/interview/page/1720225133 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.68.94
country_id: 6252001
description:
[2026-06-25 17:50:27 +0000] info [cpaneld] 172.56.68.94 - alloaci "GET /login/?login_only=1&user=alloaci&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alloaci (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.115.4.93
country_id: 6252001
description:
[2026-06-25 17:50:33 +0000] info [cpaneld] 73.115.4.93 - alloa "GET /login/?login_only=1&user=alloa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alloa (has_cpuser_file failed)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 82.156.165.103
country_id: 1814991
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/la-beaute-des-pagnes-guineens-a-decouvrir-a-la-20e-fil/<script async src=||RSV:8.20||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.28.231.9
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 34.28.231.9: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.131.31.160
country_id: 6252001
description:
[2026-06-25 17:51:52 +0000] info [cpaneld] 157.131.31.160 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.82.203.89
country_id: 6252001
description:
[2026-06-25 17:51:59 +0000] info [cpaneld] 67.82.203.89 - snbtg "GET /login/?login_only=1&user=snbtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user snbtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.70.180.92
country_id: 6252001
description:
[2026-06-25 17:51:27 +0000] info [cpaneld] 72.70.180.92 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.64.189.63
country_id: 6252001
description:
[2026-06-25 17:51:41 +0000] info [cpaneld] 75.64.189.63 - lctto "GET /login/?login_only=1&user=lctto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lctto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 142.190.91.82
country_id: 6252001
description:
[2026-06-25 17:51:47 +0000] info [cpaneld] 142.190.91.82 - lct "GET /login/?login_only=1&user=lct&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lct (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.151.233.159
country_id: 6252001
description:
[2026-06-25 17:51:30 +0000] info [cpaneld] 97.151.233.159 - lcttogo "GET /login/?login_only=1&user=lcttogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lcttogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 153.66.173.248
country_id: 6252001
description:
[2026-06-25 17:51:45 +0000] info [cpaneld] 153.66.173.248 - lctt "GET /login/?login_only=1&user=lctt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lctt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.76.217.131
country_id: 6252001
description:
[2026-06-25 17:52:03 +0000] info [cpaneld] 75.76.217.131 - sn "GET /login/?login_only=1&user=sn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sn (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 197.186.75.105
country_id: 149590
description:
2026-06-25 17:51:54 H=([197.186.75.105]) [197.186.75.105]:63134 F=<kumar@white-ways.com> rejected RCPT <kumar@white-ways.com>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.18.167.52
country_id: 6252001
description:
[2026-06-25 17:51:38 +0000] info [cpaneld] 98.18.167.52 - lcttog "GET /login/?login_only=1&user=lcttog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lcttog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.178.108.212
country_id: 6252001
description:
[2026-06-25 17:51:50 +0000] info [cpaneld] 73.178.108.212 - lc "GET /login/?login_only=1&user=lc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.162.174.195
country_id: 6252001
description:
[2026-06-25 17:54:31 +0000] info [cpaneld] 71.162.174.195 - cen "GET /login/?login_only=1&user=cen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cen (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.77.37.131
country_id: 6252001
description:
[2026-06-25 17:54:24 +0000] info [cpaneld] 73.77.37.131 - cenitg "GET /login/?login_only=1&user=cenitg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cenitg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.33.112.17
country_id: 6252001
description:
[2026-06-25 17:54:36 +0000] info [cpaneld] 136.33.112.17 - ce "GET /login/?login_only=1&user=ce&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ce (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.5.36.184
country_id: 3895114
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/pharmacie-de-garde/page/899093 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 206.85.202.119
country_id: 6252001
description:
[2026-06-25 17:55:45 +0000] info [cpaneld] 206.85.202.119 - spr "GET /login/?login_only=1&user=spr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user spr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.44.130.226
country_id: 6252001
description:
[2026-06-25 17:55:48 +0000] info [cpaneld] 209.44.130.226 - sp "GET /login/?login_only=1&user=sp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sp (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.57.221
country_id: 2363686
description:
2026-06-25 17:55:59 dovecot_login authenticator failed for H=([127.0.0.1]) [196.170.57.221]:51514: 535 Incorrect authentication data (set_id=documentation@dgdn-togo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.32.83.47
country_id: 6252001
description:
[2026-06-25 17:55:24 +0000] info [cpaneld] 160.32.83.47 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.237.223.67
country_id: 6252001
description:
[2026-06-25 17:55:31 +0000] info [cpaneld] 71.237.223.67 - sprocatg "GET /login/?login_only=1&user=sprocatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sprocatg (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.83.207
country_id: 6252001
description:
[2026-06-25 17:58:10 +0000] info [cpaneld] 134.195.83.207 NEW wcnyaruu:4VRZWY3tqKjUjNky address=134.195.83.207,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.105.90.12
country_id: 6252001
description:
[2026-06-25 17:59:10 +0000] info [cpaneld] 71.105.90.12 - sproca "GET /login/?login_only=1&user=sproca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sproca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 65.188.227.61
country_id: 6252001
description:
[2026-06-25 17:59:13 +0000] info [cpaneld] 65.188.227.61 - sprocatg "GET /login/?login_only=1&user=sprocatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sprocatg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 151.205.121.231
country_id: 6252001
description:
[2026-06-25 17:59:11 +0000] info [cpaneld] 151.205.121.231 - cci "GET /login/?login_only=1&user=cci&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cci (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.231.80.255
country_id: 6252001
description:
[2026-06-25 17:59:03 +0000] info [cpaneld] 97.231.80.255 - cciat "GET /login/?login_only=1&user=cciat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cciat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.128.41.30
country_id: 6252001
description:
[2026-06-25 17:59:09 +0000] info [cpaneld] 73.128.41.30 - ccia "GET /login/?login_only=1&user=ccia&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ccia (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.138.243.230
country_id: 6252001
description:
[2026-06-25 17:59:21 +0000] info [cpaneld] 69.138.243.230 - spro "GET /login/?login_only=1&user=spro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user spro (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 82.29.169.160
country_id: 3017382
description:
Jun 25 18:00:24 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 82.29.169.160 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.66.101.93
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/interview/page/165519195 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.157.209.191
country_id: 6252001
description:
[2026-06-25 18:02:29 +0000] info [cpaneld] 76.157.209.191 - togodail "GET /login/?login_only=1&user=togodail&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodail (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 160.179.120.251
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/moeurs-en-souffrance-lappel-dandre-luther-meka-a-reconstruire-les-valeurs/ HTTP/1.1||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 213.230.86.107
country_id: 1512440
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/interview/page/125992904 HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.84.121.191
country_id: 6252001
description:
[2026-06-25 18:02:22 +0000] info [cpaneld] 67.84.121.191 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.44.29.181
country_id: 6252001
description:
[2026-06-25 18:02:32 +0000] info [cpaneld] 152.44.29.181 - togodai "GET /login/?login_only=1&user=togodai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.237.246.60
country_id: 6252001
description:
[2026-06-25 18:02:40 +0000] info [cpaneld] 73.237.246.60 - togod "GET /login/?login_only=1&user=togod&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togod (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.113.201.50
country_id: 6252001
description:
[2026-06-25 18:02:47 +0000] info [cpaneld] 209.113.201.50 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.117.64.9
country_id: 6252001
description:
[2026-06-25 18:02:50 +0000] info [cpaneld] 98.117.64.9 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.99.101.156
country_id: 6252001
description:
[2026-06-25 18:04:41 +0000] info [cpaneld] 76.99.101.156 - aler "GET /login/?login_only=1&user=aler&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user aler (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 3.139.232.207
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 3.139.232.207: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 208.102.200.90
country_id: 6252001
description:
[2026-06-25 18:04:33 +0000] info [cpaneld] 208.102.200.90 - alerte "GET /login/?login_only=1&user=alerte&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alerte (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.12
country_id: 1880251
description:
47.128.121.12 - - [25/Jun/2026:18:04:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119787&pdata=https%253A%252F%252Ftogomedia24.tg%252F2019%252F09%252F15%252Fcoupes-inter-clubs-les-messagers-asphyxies-a-domicile-les-conducteurs-bouscules%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782410690 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/2019/09/15/coupes-inter-clubs-les-messagers-asphyxies-a-domicile-les-conducteurs-bouscules/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.12


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.166.144.245
country_id: 3895114
description:
[2026-06-25 18:06:06 +0000] info [cpaneld] 45.166.144.245 - sorouba "GET /login/?login_only=1&user=sorouba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sorouba (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.118.145.234
country_id: 3686110
description:
[2026-06-25 18:06:19 +0000] info [cpaneld] 181.118.145.234 - soro "GET /login/?login_only=1&user=soro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soro (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.164.233.168
country_id: 3469034
description:
[2026-06-25 18:06:01 +0000] info [cpaneld] 45.164.233.168 - soroubattg "GET /login/?login_only=1&user=soroubattg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soroubattg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.15.147.18
country_id: 3686110
description:
[2026-06-25 18:05:53 +0000] info [cpaneld] 179.15.147.18 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.122.196.132
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 34.122.196.132: 80 connections per 30 seconds to 2096 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.170.75.12
country_id: 6252001
description:
[2026-06-25 18:06:53 +0000] info [cpaneld] 184.170.75.12 - matwtogo "GET /login/?login_only=1&user=matwtogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matwtogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.231.163.9
country_id: 6252001
description:
[2026-06-25 18:06:57 +0000] info [cpaneld] 104.231.163.9 - matwtogoorg "GET /login/?login_only=1&user=matwtogoorg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matwtogoorg (has_cpuser_file failed)


plugin: cl_dos
name: DOS detection
abuser: 34.122.196.132
country_id: 6252001
description:
2026-06-25 18:07:02.889834235 +0000 GMT m=+134210.450748267 Denial of Service attack was discovered from 34.122.196.132, on port 52231. Open connections: 320


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.126.4.26
country_id: 2542007
description:
[2026-06-25 18:06:22 +0000] info [cpaneld] 196.126.4.26 - sor "GET /login/?login_only=1&user=sor&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sor (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.11.203.80
country_id: 6252001
description:
[2026-06-25 18:06:49 +0000] info [cpaneld] 100.11.203.80 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.192.218.236
country_id: 6252001
description:
[2026-06-25 18:07:05 +0000] info [cpaneld] 24.192.218.236 - matwto "GET /login/?login_only=1&user=matwto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matwto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.151.68.8
country_id: 6252001
description:
[2026-06-25 18:07:08 +0000] info [cpaneld] 47.151.68.8 - matwt "GET /login/?login_only=1&user=matwt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matwt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.55.21.219
country_id: 6252001
description:
[2026-06-25 18:07:12 +0000] info [cpaneld] 174.55.21.219 - matw "GET /login/?login_only=1&user=matw&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matw (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.176.90.105
country_id: 6252001
description:
[2026-06-25 18:07:21 +0000] info [cpaneld] 72.176.90.105 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.218.122.187
country_id: 6252001
description:
[2026-06-25 18:07:01 +0000] info [cpaneld] 216.218.122.187 - matwtog "GET /login/?login_only=1&user=matwtog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matwtog (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 151.243.213.134
country_id: 290557
description:
Jun 25 18:06:45 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 151.243.213.134 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.245.236.231
country_id: 1562822
description:
Jun 25 18:06:51 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.245.236.231 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.80.91.0
country_id: 6252001
description:
[2026-06-25 18:07:57 +0000] info [cpaneld] 68.80.91.0 - fom "GET /login/?login_only=1&user=fom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.203.128.54
country_id: 6252001
description:
[2026-06-25 18:08:01 +0000] info [cpaneld] 73.203.128.54 - fo "GET /login/?login_only=1&user=fo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fo (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.0.186
country_id: 2363686
description:
[2026-06-25 18:07:58 +0000] info [webmaild] 196.168.0.186 - wages@wages.tg "GET /cpsess1724956069/?=undefined&login=1&post_login=18384355238846 HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.45.140] != Current IP Address [196.168.0.186]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.170.45.140
country_id: 2363686
description:
[2026-06-25 18:08:05 +0000] info [webmaild] 196.170.45.140 - wages@wages.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.28.166
country_id: 6252001
description:
[2026-06-25 18:07:41 +0000] info [cpaneld] 172.56.28.166 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.189.170.112
country_id: 6252001
description:
[2026-06-25 18:07:53 +0000] info [cpaneld] 47.189.170.112 - fomd "GET /login/?login_only=1&user=fomd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fomd (has_cpuser_file failed)


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - wages@wages.tg [06/25/2026:18:09:07 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: wages@wages.tg


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.170.45.140
country_id: 2363686
description:
[2026-06-25 18:08:55 +0000] info [webmaild] 196.170.45.140 - wages@wages.tg "GET /cpsess2120151776/?=undefined&login=1&post_login=18384355238846 HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.168.0.186] != Current IP Address [196.170.45.140]


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.0.186
country_id: 2363686
description:
[2026-06-25 18:09:08 +0000] info [webmaild] 196.168.0.186 - wages@wages.tg "GET /cpsess2120151776/3rdparty/roundcube/skins/elastic/styles/styles.min.css?s=1774777728 HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.45.140] != Current IP Address [196.168.0.186]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.168.0.186
country_id: 2363686
description:
[2026-06-25 18:09:20 +0000] info [webmaild] 196.168.0.186 - 2bKRNhtJ4HD5GkL5OwLs "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: invalid user name specified


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.4.168.123
country_id: 6252001
description:
[2026-06-25 18:10:09 +0000] info [cpaneld] 50.4.168.123 - sthandlingaero "GET /login/?login_only=1&user=sthandlingaero&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sthandlingaero (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.29.241.13
country_id: 6252001
description:
[2026-06-25 18:10:15 +0000] info [cpaneld] 136.29.241.13 - sthandli "GET /login/?login_only=1&user=sthandli&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sthandli (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.249.80.189
country_id: 6252001
description:
[2026-06-25 18:10:18 +0000] info [cpaneld] 69.249.80.189 - sthandl "GET /login/?login_only=1&user=sthandl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sthandl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.95.35.188
country_id: 6252001
description:
[2026-06-25 18:10:21 +0000] info [cpaneld] 71.95.35.188 - sthand "GET /login/?login_only=1&user=sthand&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sthand (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.218.65.54
country_id: 6252001
description:
[2026-06-25 18:10:12 +0000] info [cpaneld] 98.218.65.54 - sthandlingaerotg "GET /login/?login_only=1&user=sthandlingaerotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sthandlingaerotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.172.160.36
country_id: 3625428
description:
[2026-06-25 18:11:23 +0000] info [cpaneld] 38.172.160.36 - ceni "GET /login/?login_only=1&user=ceni&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceni (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.51.137.73
country_id: 6252001
description:
[2026-06-25 18:10:31 +0000] info [cpaneld] 73.51.137.73 - stha "GET /login/?login_only=1&user=stha&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user stha (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.16.149.160
country_id: 6252001
description:
[2026-06-25 18:10:38 +0000] info [cpaneld] 209.16.149.160 - st "GET /login/?login_only=1&user=st&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user st (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 81.65.145.79
country_id: 3017382
description:
[2026-06-25 18:11:20 +0000] info [cpaneld] 81.65.145.79 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.93.65.96
country_id: 953987
description:
[2026-06-25 18:11:45 +0000] info [cpaneld] 197.93.65.96 - lv "GET /login/?login_only=1&user=lv&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lv (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.169.140.221
country_id: 2017370
description:
[2026-06-25 18:11:28 +0000] info [cpaneld] 109.169.140.221 - cenitg "GET /login/?login_only=1&user=cenitg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cenitg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 58.187.76.63
country_id: 1562822
description:
[2026-06-25 18:11:41 +0000] info [cpaneld] 58.187.76.63 - lvd "GET /login/?login_only=1&user=lvd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lvd (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 5.56.244.40
country_id: 2921044
description:
5.56.244.40 - - [25/Jun/2026:18:11:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935770&pdata=https%253A%252F%252Fcpanel.oliane.free.netmaster.tg%252F%253Flocale%253Dko&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782411107 HTTP/2.0" 302 0 cpanel.oliane.free.netmaster.tg "https://cpanel.oliane.free.netmaster.tg/?locale=ko" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:5.56.244.40


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.22.188.98
country_id: 3469034
description:
Jun 25 18:12:05 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.22.188.98 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 88.164.225.100
country_id: 3017382
description:
[2026-06-25 18:11:29 +0000] info [cpaneld] 88.164.225.100 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.205.42.13
country_id: 99237
description:
[2026-06-25 18:11:35 +0000] info [cpaneld] 91.205.42.13 - lvdt "GET /login/?login_only=1&user=lvdt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lvdt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.31.206.64
country_id: 2017370
description:
[2026-06-25 18:11:38 +0000] info [cpaneld] 94.31.206.64 - lvdttg "GET /login/?login_only=1&user=lvdttg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lvdttg (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 106.14.150.218
country_id: 1814991
description:
Jun 25 18:13:01 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 106.14.150.218 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 189.173.87.67
country_id: 3996063
description:
189.173.87.67 - - [25/Jun/2026:18:13:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13147034&pdata=https%253A%252F%252Ftogodailynews.tg%252Flifc-et-lassociation-azerbaidjanaise-des-technologies-financieres-sassocient-pour-favoriser-linclusion-financiere-et-stimuler-la-croissance-economique%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782411237 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/lifc-et-lassociation-azerbaidjanaise-des-technologies-financieres-sassocient-pour-favoriser-linclusion-financiere-et-stimuler-la-croissance-economique/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.8362.1326 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:189.173.87.67


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.145
country_id: 3017382
description:
[2026-06-25 18:14:17 +0000] info [cpaneld] 5.231.255.145 NEW wcnyaruu:cJnkllU68MzHef8g address=5.231.255.145,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.182.138
country_id: 1269750
description:
2026-06-25 18:13:21 dovecot_login authenticator failed for H=([45.145.203.68]) [182.95.182.138]:36356: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 46.139.86.64
country_id: 719819
description:
46.139.86.64 - - [25/Jun/2026:18:14:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9803924&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252Ffeatured%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782411267 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/26.0 Chrome/122.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:46.139.86.64


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.0.186
country_id: 2363686
description:
[2026-06-25 18:14:48 +0000] info [webmaild] 196.168.0.186 - wages@wages.tg "GET /cpsess9738299448/3rdparty/roundcube/plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1774777727 HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.45.140] != Current IP Address [196.168.0.186]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 47.254.192.95
country_id: 1733045
description:
Jun 25 18:14:49 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 47.254.192.95 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.170.45.140
country_id: 2363686
description:
[2026-06-25 18:15:09 +0000] info [webmaild] 196.170.45.140 - wages@wages.tg "GET /cpsess7748471557/3rdparty/roundcube/skins/elastic/watermark.html?=undefined&login=1&post_login=18384355238846 HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.168.0.186] != Current IP Address [196.170.45.140]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 146.70.117.212
country_id: 2921044
description:
[2026-06-25 18:15:21 +0000] info [cpaneld] 146.70.117.212 - esso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user esso (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.170.109.80
country_id: 2635167
description:
185.170.109.80 - - [25/Jun/2026:18:16:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9739423&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252Fmembres-du-pnp-en-prison-2022%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782411376 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/tag/membres-du-pnp-en-prison-2022/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.5469.1708 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.170.109.80


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 144.124.192.211
country_id: 1512440
description:
144.124.192.211 - - [25/Jun/2026:18:15:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9803924&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252Ffeatured%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782411267 HTTP/2.0" 404 561 togomedia24.tg "https://www.togomedia24.tg/" "Mozilla/5.0 (Linux; Android 11; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:144.124.192.211


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 213.66.196.11
country_id: 2661886
description:
2026-06-25 18:16:04 dovecot_login authenticator failed for H=213-66-196-11-no2550.tbcn.telia.com (47-145-62-32.fdr01.sncy.ca.ip.frontiernet.net) [213.66.196.11]:44076: 535 Incorrect authentication data (set_id=fmori@otr.tg)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.0.186
country_id: 2363686
description:
[2026-06-25 18:15:23 +0000] info [webmaild] 196.168.0.186 - wages@wages.tg "GET /cpsess7748471557/3rdparty/roundcube/skins/elastic/watermark.html?=undefined&login=1&post_login=18384355238846 HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.45.140] != Current IP Address [196.168.0.186]


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.170.45.140
country_id: 2363686
description:
[2026-06-25 18:15:25 +0000] info [webmaild] 196.170.45.140 - wages@wages.tg "GET /cpsess7748471557/3rdparty/roundcube/skins/elastic/watermark.html?=undefined&login=1&post_login=18384355238846 HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.168.0.186] != Current IP Address [196.170.45.140]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 89.70.166.43
country_id: 798544
description:
2026-06-25 18:15:28 dovecot_login authenticator failed for H=89-70-166-43.dynamic.play.pl (144.46.246.220.static.netvigator.com) [89.70.166.43]:38900: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 162.84.254.104
country_id: 6252001
description:
[2026-06-25 18:17:19 +0000] info [cpaneld] 162.84.254.104 - lerendezvoustg "GET /login/?login_only=1&user=lerendezvoustg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lerendezvoustg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.209.193.144
country_id: 6252001
description:
[2026-06-25 18:17:11 +0000] info [cpaneld] 73.209.193.144 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.67.244.133
country_id: 1643084
description:
Jun 25 18:16:49 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.67.244.133 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.206.58.150
country_id: 6252001
description:
[2026-06-25 18:17:15 +0000] info [cpaneld] 71.206.58.150 - lerendezvous "GET /login/?login_only=1&user=lerendezvous&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lerendezvous (has_cpuser_file failed)


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - wages@wages.tg [06/25/2026:18:17:49 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: wages@wages.tg


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.46.247.110
country_id: 6252001
description:
[2026-06-25 18:17:24 +0000] info [cpaneld] 173.46.247.110 - lerendez "GET /login/?login_only=1&user=lerendez&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lerendez (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.74.191.57
country_id: 6252001
description:
[2026-06-25 18:17:28 +0000] info [cpaneld] 73.74.191.57 - lerende "GET /login/?login_only=1&user=lerende&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lerende (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.107.141.45
country_id: 6252001
description:
[2026-06-25 18:17:34 +0000] info [cpaneld] 73.107.141.45 - lerend "GET /login/?login_only=1&user=lerend&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lerend (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.86.169.6
country_id: 6252001
description:
[2026-06-25 18:17:37 +0000] info [cpaneld] 76.86.169.6 - leren "GET /login/?login_only=1&user=leren&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leren (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.233.136.171
country_id: 6252001
description:
[2026-06-25 18:17:45 +0000] info [cpaneld] 96.233.136.171 - le "GET /login/?login_only=1&user=le&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user le (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.216.211.67
country_id: 933860
description:
Jun 25 18:18:16 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.216.211.67 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.216.211.67
country_id: 933860
description:
Jun 25 18:18:22 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.216.211.67 has been locked due to Imunify RBL


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - sadognon@wages.tg [06/25/2026:18:19:38 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: sadognon@wages.tg


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 206.82.101.153
country_id: 6252001
description:
[2026-06-25 18:20:00 +0000] info [cpaneld] 206.82.101.153 - cenitg "GET /login/?login_only=1&user=cenitg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cenitg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.205.11.155
country_id: 6252001
description:
[2026-06-25 18:20:06 +0000] info [cpaneld] 47.205.11.155 - ce "GET /login/?login_only=1&user=ce&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ce (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.189.155.57
country_id: 3996063
description:
[2026-06-25 18:20:16 +0000] info [cpaneld] 187.189.155.57 - smar "GET /login/?login_only=1&user=smar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user smar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.219.99.115
country_id: 6252001
description:
[2026-06-25 18:19:55 +0000] info [cpaneld] 72.219.99.115 - ceni "GET /login/?login_only=1&user=ceni&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceni (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.19.244.214
country_id: 2017370
description:
[2026-06-25 18:20:21 +0000] info [cpaneld] 188.19.244.214 - sm "GET /login/?login_only=1&user=sm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 31.150.238.185
country_id: 2921044
description:
[2026-06-25 18:20:18 +0000] info [cpaneld] 31.150.238.185 - sma "GET /login/?login_only=1&user=sma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.42.225.35
country_id: 6252001
description:
[2026-06-25 18:19:52 +0000] info [cpaneld] 68.42.225.35 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - wages@wages.tg [06/25/2026:18:20:50 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: wages@wages.tg


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 83.143.30.70
country_id: 933860
description:
Jun 25 18:20:28 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 83.143.30.70 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 81.197.221.233
country_id: 660013
description:
[2026-06-25 18:22:04 +0000] info [cpaneld] 81.197.221.233 - macitetg "GET /login/?login_only=1&user=macitetg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user macitetg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.188.178.233
country_id: 3923057
description:
[2026-06-25 18:22:09 +0000] info [cpaneld] 181.188.178.233 - macit "GET /login/?login_only=1&user=macit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user macit (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.0.235.115
country_id: 3469034
description:
[2026-06-25 18:22:13 +0000] info [cpaneld] 187.0.235.115 - maci "GET /login/?login_only=1&user=maci&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maci (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.196.21.97
country_id: 3469034
description:
[2026-06-25 18:22:18 +0000] info [cpaneld] 131.196.21.97 - mac "GET /login/?login_only=1&user=mac&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mac (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.224.9.212
country_id: 99237
description:
[2026-06-25 18:22:21 +0000] info [cpaneld] 169.224.9.212 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.169.64.73
country_id: 1168579
description:
[2026-06-25 18:22:01 +0000] info [cpaneld] 103.169.64.73 - macite "GET /login/?login_only=1&user=macite&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user macite (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-25 18:21:32 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:60860: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.209.142.30
country_id: 3469034
description:
[2026-06-25 18:21:58 +0000] info [cpaneld] 179.209.142.30 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.38.43.243
country_id: 290557
description:
[2026-06-25 18:23:09 +0000] info [cpaneld] 5.38.43.243 - soeurn "GET /login/?login_only=1&user=soeurn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soeurn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.66.102
country_id: 6252001
description:
[2026-06-25 18:23:12 +0000] info [cpaneld] 172.56.66.102 - ucaouut "GET /login/?login_only=1&user=ucaouut&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.75.135.227
country_id: 6252001
description:
[2026-06-25 18:23:21 +0000] info [cpaneld] 73.75.135.227 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.17.37.184
country_id: 6252001
description:
[2026-06-25 18:22:48 +0000] info [cpaneld] 76.17.37.184 - afrique "GET /login/?login_only=1&user=afrique&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afrique (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.60.3.206
country_id: 6252001
description:
[2026-06-25 18:23:03 +0000] info [cpaneld] 174.60.3.206 - afr "GET /login/?login_only=1&user=afr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.54.114.169
country_id: 6252001
description:
[2026-06-25 18:23:07 +0000] info [cpaneld] 108.54.114.169 - af "GET /login/?login_only=1&user=af&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user af (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.110.213.171
country_id: 6252001
description:
[2026-06-25 18:22:55 +0000] info [cpaneld] 73.110.213.171 - afriq "GET /login/?login_only=1&user=afriq&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afriq (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.1.118
country_id: 6252001
description:
[2026-06-25 18:23:18 +0000] info [cpaneld] 172.58.1.118 - ucaouu "GET /login/?login_only=1&user=ucaouu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucaouu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.140.177.11
country_id: 6252001
description:
[2026-06-25 18:23:09 +0000] info [cpaneld] 24.140.177.11 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.112.92.244
country_id: 3658394
description:
[2026-06-25 18:23:17 +0000] info [cpaneld] 181.112.92.244 - soeu "GET /login/?login_only=1&user=soeu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soeu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.236.21.45
country_id: 6252001
description:
[2026-06-25 18:22:42 +0000] info [cpaneld] 98.236.21.45 - afriqued "GET /login/?login_only=1&user=afriqued&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afriqued (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.135.63.23
country_id: 6252001
description:
[2026-06-25 18:22:30 +0000] info [cpaneld] 76.135.63.23 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.250.7.22
country_id: 6252001
description:
[2026-06-25 18:22:34 +0000] info [cpaneld] 24.250.7.22 - afriquedistribution "GET /login/?login_only=1&user=afriquedistribution&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afriquedistribution (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.191.55.49
country_id: 1562822
description:
[2026-06-25 18:22:51 +0000] info [cpaneld] 14.191.55.49 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.2.154.83
country_id: 2635167
description:
[2026-06-25 18:23:13 +0000] info [cpaneld] 94.2.154.83 - soeur "GET /login/?login_only=1&user=soeur&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soeur (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 8.210.147.41
country_id: 1819730
description:
Jun 25 18:22:41 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 8.210.147.41 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.39.252.145
country_id: 6252001
description:
[2026-06-25 18:23:14 +0000] info [cpaneld] 170.39.252.145 - ucaouuttg "GET /login/?login_only=1&user=ucaouuttg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucaouuttg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.121.160.92
country_id: 3658394
description:
[2026-06-25 18:22:55 +0000] info [cpaneld] 186.121.160.92 - soeurndetogo "GET /login/?login_only=1&user=soeurndetogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soeurndetogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.54.172.71
country_id: 3439705
description:
[2026-06-25 18:23:01 +0000] info [cpaneld] 186.54.172.71 - soeurndetogocom "GET /login/?login_only=1&user=soeurndetogocom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soeurndetogocom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.42.0.68
country_id: 3658394
description:
[2026-06-25 18:23:20 +0000] info [cpaneld] 186.42.0.68 - soe "GET /login/?login_only=1&user=soe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 141.224.140.26
country_id: 6252001
description:
[2026-06-25 18:23:21 +0000] info [cpaneld] 141.224.140.26 - ucao "GET /login/?login_only=1&user=ucao&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucao (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.114.46.2
country_id: 6252001
description:
[2026-06-25 18:23:38 +0000] info [cpaneld] 70.114.46.2 - wa "GET /login/?login_only=1&user=wa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.129.206.150
country_id: 6252001
description:
[2026-06-25 18:23:56 +0000] info [cpaneld] 69.129.206.150 - exper "GET /login/?login_only=1&user=exper&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user exper (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.246.8.26
country_id: 6252001
description:
[2026-06-25 18:23:28 +0000] info [cpaneld] 96.246.8.26 - wagestg "GET /login/?login_only=1&user=wagestg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wagestg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.103.248.128
country_id: 6252001
description:
[2026-06-25 18:23:32 +0000] info [cpaneld] 97.103.248.128 - wage "GET /login/?login_only=1&user=wage&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wage (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.33.32.145
country_id: 6252001
description:
[2026-06-25 18:23:38 +0000] info [cpaneld] 73.33.32.145 - expertsdefensecom "GET /login/?login_only=1&user=expertsdefensecom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expertsdefensecom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.0.177.89
country_id: 6252001
description:
[2026-06-25 18:23:58 +0000] info [cpaneld] 24.0.177.89 - expe "GET /login/?login_only=1&user=expe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.231.66.202
country_id: 1522867
description:
[2026-06-25 18:23:24 +0000] info [cpaneld] 91.231.66.202 - so "GET /login/?login_only=1&user=so&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user so (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.35.236.20
country_id: 6252001
description:
[2026-06-25 18:23:36 +0000] info [cpaneld] 70.35.236.20 - expertsdefense "GET /login/?login_only=1&user=expertsdefense&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expertsdefense (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.190.240.91
country_id: 6252001
description:
[2026-06-25 18:23:28 +0000] info [cpaneld] 97.190.240.91 - uc "GET /login/?login_only=1&user=uc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user uc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.28.115.251
country_id: 6252001
description:
[2026-06-25 18:23:51 +0000] info [cpaneld] 138.28.115.251 - expert "GET /login/?login_only=1&user=expert&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expert (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 47.86.169.92
country_id: 1819730
description:
Jun 25 18:24:25 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 47.86.169.92 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.28.163.231
country_id: 1880251
description:
104.28.163.231 - - [25/Jun/2026:18:24:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9859271&pdata=https%253A%252F%252Fucao-uut.tg%252Fpartenariats-internationaux%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782411864 HTTP/2.0" 302 0 ucao-uut.tg "https://ucao-uut.tg/partenariats-internationaux/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.28.163.231


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.127.187.69
country_id: 6252001
description:
[2026-06-25 18:25:09 +0000] info [cpaneld] 64.127.187.69 - mafistee "GET /login/?login_only=1&user=mafistee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafistee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.244.237.1
country_id: 6252001
description:
[2026-06-25 18:25:12 +0000] info [cpaneld] 173.244.237.1 - mafiste "GET /login/?login_only=1&user=mafiste&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafiste (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.167.191.190
country_id: 6252001
description:
[2026-06-25 18:25:13 +0000] info [cpaneld] 75.167.191.190 - droitshumains "GET /login/?login_only=1&user=droitshumains&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droitshumains (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.31.151.161
country_id: 6252001
description:
[2026-06-25 18:25:16 +0000] info [cpaneld] 66.31.151.161 - droitshumainstg "GET /login/?login_only=1&user=droitshumainstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droitshumainstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.80.72.192
country_id: 6252001
description:
[2026-06-25 18:25:19 +0000] info [cpaneld] 67.80.72.192 - droitsh "GET /login/?login_only=1&user=droitsh&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droitsh (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.58.14.16
country_id: 6252001
description:
[2026-06-25 18:25:06 +0000] info [cpaneld] 136.58.14.16 - mafisteeltg "GET /login/?login_only=1&user=mafisteeltg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafisteeltg (has_cpuser_file failed)


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - wages@wages.tg [06/25/2026:18:25:58 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: wages@wages.tg


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.56.56.42
country_id: 6252001
description:
[2026-06-25 18:25:27 +0000] info [cpaneld] 98.56.56.42 - maf "GET /login/?login_only=1&user=maf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maf (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 138.197.93.235
country_id: 6252001
description:
Jun 25 18:25:56 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 138.197.93.235 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.20.79.46
country_id: 6252001
description:
[2026-06-25 18:25:37 +0000] info [cpaneld] 24.20.79.46 - dr "GET /login/?login_only=1&user=dr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.17.103.242
country_id: 6252001
description:
[2026-06-25 18:25:30 +0000] info [cpaneld] 24.17.103.242 - droi "GET /login/?login_only=1&user=droi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droi (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 51.255.200.244
country_id: 3017382
description:
Jun 25 18:26:10 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 51.255.200.244 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.52.217.197
country_id: 6252001
description:
[2026-06-25 18:25:22 +0000] info [cpaneld] 108.52.217.197 - droits "GET /login/?login_only=1&user=droits&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droits (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.131.69.97
country_id: 6252001
description:
[2026-06-25 18:25:30 +0000] info [cpaneld] 24.131.69.97 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - sadognon@wages.tg [06/25/2026:18:27:18 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: sadognon@wages.tg


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.5.81
country_id: 2300660
description:
Jun 25 18:26:37 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.5.81 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 101.43.213.95
country_id: 1814991
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/togo-faure-gnassingbe-choisit-le-general-yark-damehame/<script async src=||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.137.192.65
country_id: 3996063
description:
[2026-06-25 18:28:25 +0000] info [cpaneld] 103.137.192.65 - its "GET /login/?login_only=1&user=its&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user its (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.224.123.53
country_id: 3469034
description:
[2026-06-25 18:28:30 +0000] info [cpaneld] 45.224.123.53 - itstg "GET /login/?login_only=1&user=itstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user itstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.217.157.134
country_id: 1327865
description:
[2026-06-25 18:28:22 +0000] info [cpaneld] 103.217.157.134 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 203.9.210.227
country_id: 1282988
description:
[2026-06-25 18:28:36 +0000] info [cpaneld] 203.9.210.227 - it "GET /login/?login_only=1&user=it&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user it (has_cpuser_file failed)


plugin: modsec
rule: 77140886
name: IM360 WAF: RBL track known shells
abuser: 182.53.205.153
country_id: 1605651
domain: www.conseilnsaftogo.org
description:
IM360 WAF: RBL track known shells||MVN:ARGS:Z0||RSV:8.20||T:APACHE||MV:K7tw3-uPD0rrRJrC||SC:/home/fnnjmavs/public_html/7w62||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 174.136.148.94
country_id: 6252001
description:
Jun 25 18:29:48 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 174.136.148.94 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.254.130.80
country_id: 6252001
description:
[2026-06-25 18:29:52 +0000] info [cpaneld] 38.254.130.80 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.241.202.96
country_id: 6252001
description:
[2026-06-25 18:30:59 +0000] info [cpaneld] 97.241.202.96 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - wages@wages.tg [06/25/2026:18:30:24 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: wages@wages.tg


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.14.19.175
country_id: 6252001
description:
[2026-06-25 18:31:23 +0000] info [cpaneld] 100.14.19.175 - meta "GET /login/?login_only=1&user=meta&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user meta (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 83.226.56.106
country_id: 2661886
description:
2026-06-25 18:31:26 dovecot_login authenticator failed for H=c-83-226-56-106.bbcust.telenor.se ([181.188.140.101]) [83.226.56.106]:54628: 535 Incorrect authentication data (set_id=arse@arse.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.75.168.8
country_id: 6252001
description:
[2026-06-25 18:31:27 +0000] info [cpaneld] 71.75.168.8 - met "GET /login/?login_only=1&user=met&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user met (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.214.124.227
country_id: 6252001
description:
[2026-06-25 18:31:29 +0000] info [cpaneld] 24.214.124.227 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.50.154.121
country_id: 6252001
description:
[2026-06-25 18:33:08 +0000] info [cpaneld] 98.50.154.121 - certlogisticstogocom "GET /login/?login_only=1&user=certlogisticstogocom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogisticstogocom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.171.72.169
country_id: 6252001
description:
[2026-06-25 18:33:21 +0000] info [cpaneld] 174.171.72.169 - certlo "GET /login/?login_only=1&user=certlo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.238.14.172
country_id: 6252001
description:
[2026-06-25 18:33:01 +0000] info [cpaneld] 169.238.14.172 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.46.3.105
country_id: 6252001
description:
[2026-06-25 18:33:11 +0000] info [cpaneld] 76.46.3.105 - certlogi "GET /login/?login_only=1&user=certlogi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogi (has_cpuser_file failed)


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - sadognon@wages.tg [06/25/2026:18:33:40 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: sadognon@wages.tg


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.82.36.185
country_id: 6252001
description:
[2026-06-25 18:33:24 +0000] info [cpaneld] 75.82.36.185 - certl "GET /login/?login_only=1&user=certl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.216.150.3
country_id: 6252001
description:
[2026-06-25 18:33:26 +0000] info [cpaneld] 173.216.150.3 - cert "GET /login/?login_only=1&user=cert&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cert (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.245.107.242
country_id: 6252001
description:
[2026-06-25 18:33:30 +0000] info [cpaneld] 73.245.107.242 - cer "GET /login/?login_only=1&user=cer&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cer (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.242.220.194
country_id: 6252001
description:
[2026-06-25 18:33:34 +0000] info [cpaneld] 69.242.220.194 - ce "GET /login/?login_only=1&user=ce&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ce (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.118.176.124
country_id: 6252001
description:
[2026-06-25 18:35:09 +0000] info [cpaneld] 98.118.176.124 - confortistg "GET /login/?login_only=1&user=confortistg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user confortistg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.42.20
country_id: 6252001
description:
[2026-06-25 18:35:13 +0000] info [cpaneld] 172.59.42.20 - conforti "GET /login/?login_only=1&user=conforti&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user conforti (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.167.125.152
country_id: 6252001
description:
[2026-06-25 18:35:17 +0000] info [cpaneld] 24.167.125.152 - confort "GET /login/?login_only=1&user=confort&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user confort (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.255.225.217
country_id: 6252001
description:
[2026-06-25 18:35:20 +0000] info [cpaneld] 66.255.225.217 - confor "GET /login/?login_only=1&user=confor&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user confor (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 65.190.80.7
country_id: 6252001
description:
[2026-06-25 18:35:03 +0000] info [cpaneld] 65.190.80.7 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.201.88.228
country_id: 2017370
description:
[2026-06-25 18:36:01 +0000] info [cpaneld] 185.201.88.228 - direc "GET /login/?login_only=1&user=direc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user direc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.89.22.249
country_id: 2328926
description:
[2026-06-25 18:36:05 +0000] info [cpaneld] 102.89.22.249 - dire "GET /login/?login_only=1&user=dire&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dire (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 31.185.5.236
country_id: 2017370
description:
[2026-06-25 18:36:08 +0000] info [cpaneld] 31.185.5.236 - dir "GET /login/?login_only=1&user=dir&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dir (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.176.199.148
country_id: 6252001
description:
[2026-06-25 18:35:27 +0000] info [cpaneld] 73.176.199.148 - conf "GET /login/?login_only=1&user=conf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user conf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.176.142.248
country_id: 6252001
description:
[2026-06-25 18:35:30 +0000] info [cpaneld] 73.176.142.248 - con "GET /login/?login_only=1&user=con&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user con (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 115.164.215.249
country_id: 1733045
description:
[2026-06-25 18:35:48 +0000] info [cpaneld] 115.164.215.249 - direct7 "GET /login/?login_only=1&user=direct7&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user direct7 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.117.41.14
country_id: 2542007
description:
[2026-06-25 18:35:57 +0000] info [cpaneld] 196.117.41.14 - direct "GET /login/?login_only=1&user=direct&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user direct (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.91.98
country_id: 6252001
description:
[2026-06-25 18:38:12 +0000] info [cpaneld] 172.59.91.98 - relance "GET /login/?login_only=1&user=relance&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relance (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 153.66.235.160
country_id: 6252001
description:
[2026-06-25 18:38:01 +0000] info [cpaneld] 153.66.235.160 - relanceinfo "GET /login/?login_only=1&user=relanceinfo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanceinfo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.203.248.85
country_id: 6252001
description:
[2026-06-25 18:38:05 +0000] info [cpaneld] 71.203.248.85 - relanceinfotg "GET /login/?login_only=1&user=relanceinfotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanceinfotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.251.245.222
country_id: 6252001
description:
[2026-06-25 18:38:07 +0000] info [cpaneld] 104.251.245.222 - relancei "GET /login/?login_only=1&user=relancei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relancei (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 151.243.213.134
country_id: 290557
description:
Jun 25 18:37:36 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 151.243.213.134 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.1.146.47
country_id: 6252001
description:
[2026-06-25 18:38:31 +0000] info [cpaneld] 24.1.146.47 - rel "GET /login/?login_only=1&user=rel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rel (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.245.236.231
country_id: 1562822
description:
Jun 25 18:38:44 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.245.236.231 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.222.63.235
country_id: 6252001
description:
[2026-06-25 18:38:35 +0000] info [cpaneld] 97.222.63.235 - re "GET /login/?login_only=1&user=re&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user re (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 207.172.92.8
country_id: 6252001
description:
[2026-06-25 18:38:25 +0000] info [cpaneld] 207.172.92.8 - rela "GET /login/?login_only=1&user=rela&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rela (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.50.152.135
country_id: 6252001
description:
[2026-06-25 18:40:20 +0000] info [cpaneld] 136.50.152.135 - at "GET /login/?login_only=1&user=at&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user at (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.171.42
country_id: 3175395
description:
Jun 25 18:39:52 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.171.42 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 42.200.66.116
country_id: 1819730
description:
2026-06-25 18:39:52 dovecot_login authenticator failed for H=42-200-66-116.static.imsbiz.com (syn-076-089-199-082.res.spectrum.com) [42.200.66.116]:58234: 535 Incorrect authentication data (set_id=hmagamana@otr.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.228.185.215
country_id: 6252001
description:
[2026-06-25 18:40:07 +0000] info [cpaneld] 104.228.185.215 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.58.228.182
country_id: 6252001
description:
[2026-06-25 18:40:14 +0000] info [cpaneld] 71.58.228.182 - atmstg "GET /login/?login_only=1&user=atmstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user atmstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.186.47.181
country_id: 6252001
description:
[2026-06-25 18:40:17 +0000] info [cpaneld] 24.186.47.181 - atm "GET /login/?login_only=1&user=atm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user atm (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 42.200.66.116
country_id: 1819730
description:
Jun 25 18:39:50 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 42.200.66.116 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.150.155.190
country_id: 6252001
description:
[2026-06-25 18:40:36 +0000] info [cpaneld] 73.150.155.190 - centif "GET /login/?login_only=1&user=centif&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.159.50.97
country_id: 6252001
description:
[2026-06-25 18:40:38 +0000] info [cpaneld] 47.159.50.97 - centiftg "GET /login/?login_only=1&user=centiftg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user centiftg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.46.142.133
country_id: 6252001
description:
[2026-06-25 18:40:54 +0000] info [cpaneld] 108.46.142.133 - ce "GET /login/?login_only=1&user=ce&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ce (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.121.242.209
country_id: 6252001
description:
[2026-06-25 18:40:45 +0000] info [cpaneld] 50.121.242.209 - cent "GET /login/?login_only=1&user=cent&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cent (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.16.194.196
country_id: 6252001
description:
[2026-06-25 18:42:18 +0000] info [cpaneld] 100.16.194.196 - scafrica "GET /login/?login_only=1&user=scafrica&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafrica (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.101.228.231
country_id: 1643084
description:
Denial of Service (DoS) attack was discovered from 34.101.228.231: 80 connections per 30 seconds to 2087 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.251.1.178
country_id: 6252001
description:
[2026-06-25 18:42:09 +0000] info [cpaneld] 98.251.1.178 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.131.78.97
country_id: 6252001
description:
[2026-06-25 18:42:12 +0000] info [cpaneld] 216.131.78.97 - scafricaplc "GET /login/?login_only=1&user=scafricaplc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafricaplc (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.191.101.116
country_id: 3895114
description:
45.191.101.116 - - [25/Jun/2026:18:41:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10186093&pdata=https%253A%252F%252Fwww.togosem.com%252F2025%252F03%252F18%252Fdisfruta-del-emocionante-juego-de-casino-online-big-bass-splash-gratis-en-argentina%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782412888 HTTP/2.0" 302 0 www.togosem.com "https://www.togosem.com/2025/03/18/disfruta-del-emocionante-juego-de-casino-online-big-bass-splash-gratis-en-argentina/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.1583.1661 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.191.101.116


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.54.102.250
country_id: 6252001
description:
[2026-06-25 18:42:15 +0000] info [cpaneld] 173.54.102.250 - scafricaplccom "GET /login/?login_only=1&user=scafricaplccom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafricaplccom (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 192.253.248.40
country_id: 130758
description:
Jun 25 18:42:18 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 192.253.248.40 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.239.77.14
country_id: 3996063
description:
Jun 25 18:42:45 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.239.77.14 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.62.37.99
country_id: 690791
description:
[2026-06-25 18:42:56 +0000] info [cpaneld] 195.62.37.99 - uco "GET /login/?login_only=1&user=uco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user uco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.83.144.53
country_id: 3469034
description:
[2026-06-25 18:43:01 +0000] info [cpaneld] 170.83.144.53 - uc "GET /login/?login_only=1&user=uc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user uc (has_cpuser_file failed)


plugin: cl_dos
name: DOS detection
abuser: 34.101.228.231
country_id: 1643084
description:
2026-06-25 18:42:24.975756253 +0000 GMT m=+136332.536670185 Denial of Service attack was discovered from 34.101.228.231, on port 52227. Open connections: 257


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.204.133.10
country_id: 6252001
description:
[2026-06-25 18:42:31 +0000] info [cpaneld] 72.204.133.10 - scaf "GET /login/?login_only=1&user=scaf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scaf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.158.11.119
country_id: 6252001
description:
[2026-06-25 18:42:35 +0000] info [cpaneld] 50.158.11.119 - sca "GET /login/?login_only=1&user=sca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sca (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.127.207.14
country_id: 1562822
description:
Jun 25 18:42:48 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.127.207.14 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.59.208.248
country_id: 6252001
description:
[2026-06-25 18:42:25 +0000] info [cpaneld] 72.59.208.248 - scafri "GET /login/?login_only=1&user=scafri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.84.8.122
country_id: 6252001
description:
[2026-06-25 18:42:28 +0000] info [cpaneld] 68.84.8.122 - scafr "GET /login/?login_only=1&user=scafr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafr (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 79.117.163.76
country_id: 2510769
domain: www.arse.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.arse.tg/wp-content/uploads/2018/03/DECISION-N\xc2\xb0-045-ARSE-CDD-2016_Scan.pdf HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.36.11.239
country_id: 1643084
description:
103.36.11.239 - - [25/Jun/2026:18:44:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7115879&pdata=https%253A%252F%252Fucao-uut.tg%252Fadmissions%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782413064 HTTP/2.0" 302 0 ucao-uut.tg "https://ucao-uut.tg/admissions/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.36.11.239


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 172.94.9.215
country_id: 130758
description:
Jun 25 18:45:38 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 172.94.9.215 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 143.105.39.75
country_id: 6251999
description:
143.105.39.75 - - [25/Jun/2026:18:46:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6842013&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fle-journal-de-ferdinand-ayite%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782413168 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/le-journal-de-ferdinand-ayite/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.4126.1355 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:143.105.39.75


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.49.95.192
country_id: 6252001
description:
[2026-06-25 18:48:14 +0000] info [cpaneld] 174.49.95.192 - yanacomtg "GET /login/?login_only=1&user=yanacomtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yanacomtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.113.196.254
country_id: 6252001
description:
[2026-06-25 18:48:07 +0000] info [cpaneld] 98.113.196.254 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.216.209.74
country_id: 933860
description:
Jun 25 18:47:45 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.216.209.74 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.96.234.182
country_id: 6252001
description:
[2026-06-25 18:48:11 +0000] info [cpaneld] 24.96.234.182 - yanacom "GET /login/?login_only=1&user=yanacom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yanacom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.170.128.39
country_id: 6252001
description:
[2026-06-25 18:48:25 +0000] info [cpaneld] 70.170.128.39 - yana "GET /login/?login_only=1&user=yana&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yana (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 101.13.4.120
country_id: 1668284
description:
Jun 25 18:48:37 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 101.13.4.120 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 101.13.4.120
country_id: 1668284
description:
2026-06-25 18:48:39 dovecot_login authenticator failed for H=([218.95.124.232]) [101.13.4.120]:44016: 535 Incorrect authentication data (set_id=contact@cloud-et-racks.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.165.43.24
country_id: 6252001
description:
[2026-06-25 18:48:22 +0000] info [cpaneld] 73.165.43.24 - yanac "GET /login/?login_only=1&user=yanac&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yanac (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 84.37.155.44
country_id: 3175395
description:
84.37.155.44 - - [25/Jun/2026:18:50:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9739157&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252Fchu%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782413398 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/tag/chu/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.8674.1906 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:84.37.155.44


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.176.221
country_id: 1880251
description:
43.173.176.221 - - [25/Jun/2026:18:49:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13092718&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Fwp%252Fv2%252Fposts%252F45831&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782413374 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/wp/v2/posts/45831" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.176.221


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 113.141.80.24
country_id: 1814991
description:
Jun 25 18:50:32 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 113.141.80.24 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 92.112.179.35
country_id: 3469034
description:
Jun 25 18:52:06 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 92.112.179.35 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.36.142.40
country_id: 6252001
description:
[2026-06-25 18:52:45 +0000] info [cpaneld] 152.36.142.40 - cloudandracks "GET /login/?login_only=1&user=cloudandracks&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: User cloudandracks has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.161.32.113
country_id: 6252001
description:
[2026-06-25 18:52:48 +0000] info [cpaneld] 68.161.32.113 - cloudandrackstg "GET /login/?login_only=1&user=cloudandrackstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudandrackstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.59.66.127
country_id: 6252001
description:
[2026-06-25 18:53:01 +0000] info [cpaneld] 69.59.66.127 - cloud "GET /login/?login_only=1&user=cloud&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloud (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 157.173.115.104
country_id: 3017382
description:
Denial of Service (DoS) attack was discovered from 157.173.115.104: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.10.86.239
country_id: 6252001
description:
[2026-06-25 18:53:10 +0000] info [cpaneld] 100.10.86.239 - cl "GET /login/?login_only=1&user=cl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.235.223.33
country_id: 6252001
description:
[2026-06-25 18:52:55 +0000] info [cpaneld] 71.235.223.33 - cloudan "GET /login/?login_only=1&user=cloudan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.142.205.27
country_id: 6252001
description:
[2026-06-25 18:53:08 +0000] info [cpaneld] 73.142.205.27 - clo "GET /login/?login_only=1&user=clo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user clo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 23.251.22.99
country_id: 6252001
description:
[2026-06-25 18:52:42 +0000] info [cpaneld] 23.251.22.99 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: modsec
rule: 77316736
name: IM360 WAF: Request body parsing error
abuser: 185.102.113.41
country_id: 2017370
domain: civilemagazine.tg
description:
IM360 WAF: Request body parsing error||err_msg:XML parsing error: XML: Failed to parse document.||RSV:8.20||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 206.84.81.205
country_id: 3686110
description:
206.84.81.205 - - [25/Jun/2026:18:54:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7248795&pdata=https%253A%252F%252Fcfpj.tg%252Fkeoo-198607hetidm98t.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782413676 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/keoo-198607hetidm98t.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:206.84.81.205


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.36.220
country_id: 6252001
description:
[2026-06-25 18:55:11 +0000] info [cpaneld] 172.56.36.220 - togofee "GET /login/?login_only=1&user=togofee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofee (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 47.76.192.176
country_id: 1819730
description:
Jun 25 18:55:21 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 47.76.192.176 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 160.250.204.33
country_id: 1269750
description:
Jun 25 18:54:45 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 160.250.204.33 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.224.40.210
country_id: 6252001
description:
[2026-06-25 18:55:02 +0000] info [cpaneld] 75.224.40.210 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.30.142.210
country_id: 6252001
description:
[2026-06-25 18:55:07 +0000] info [cpaneld] 98.30.142.210 - togofeedcom "GET /login/?login_only=1&user=togofeedcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofeedcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.50.219.202
country_id: 6252001
description:
[2026-06-25 18:55:21 +0000] info [cpaneld] 136.50.219.202 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.253.174.160
country_id: 6252001
description:
[2026-06-25 18:55:22 +0000] info [cpaneld] 24.253.174.160 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 205.185.192.69
country_id: 6251999
description:
[2026-06-25 18:55:14 +0000] info [cpaneld] 205.185.192.69 - togofe "GET /login/?login_only=1&user=togofe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.239.62.5
country_id: 3865483
description:
[2026-06-25 18:55:52 +0000] info [cpaneld] 45.239.62.5 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.172.97.150
country_id: 6252001
description:
[2026-06-25 18:55:39 +0000] info [cpaneld] 174.172.97.150 - educp "GET /login/?login_only=1&user=educp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user educp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.114.46
country_id: 6252001
description:
[2026-06-25 18:55:30 +0000] info [cpaneld] 172.59.114.46 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.201.244.243
country_id: 99237
description:
[2026-06-25 18:55:48 +0000] info [cpaneld] 62.201.244.243 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.44.62.166
country_id: 6252001
description:
[2026-06-25 18:55:48 +0000] info [cpaneld] 66.44.62.166 - ciiee "GET /login/?login_only=1&user=ciiee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciiee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.114.44.36
country_id: 3895114
description:
[2026-06-25 18:56:19 +0000] info [cpaneld] 190.114.44.36 - til "GET /login/?login_only=1&user=til&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user til (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.255.13.144
country_id: 1168579
description:
[2026-06-25 18:55:57 +0000] info [cpaneld] 72.255.13.144 - togocarrieretsevie "GET /login/?login_only=1&user=togocarrieretsevie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsevie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.11.207.207
country_id: 6252001
description:
[2026-06-25 18:55:36 +0000] info [cpaneld] 75.11.207.207 - educpl "GET /login/?login_only=1&user=educpl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user educpl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.114.206.241
country_id: 6252001
description:
[2026-06-25 18:55:26 +0000] info [cpaneld] 98.114.206.241 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.227.247.115
country_id: 6252001
description:
[2026-06-25 18:55:27 +0000] info [cpaneld] 98.227.247.115 - educplusmediatg "GET /login/?login_only=1&user=educplusmediatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user educplusmediatg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.222.240.218
country_id: 298795
description:
[2026-06-25 18:56:11 +0000] info [cpaneld] 131.222.240.218 - tilit "GET /login/?login_only=1&user=tilit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tilit (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.27.56.75
country_id: 6252001
description:
[2026-06-25 18:55:42 +0000] info [cpaneld] 108.27.56.75 - educ "GET /login/?login_only=1&user=educ&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user educ (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.150.245.134
country_id: 6252001
description:
[2026-06-25 18:55:43 +0000] info [cpaneld] 131.150.245.134 - ciieei "GET /login/?login_only=1&user=ciieei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieei (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.51.69.123
country_id: 6252001
description:
[2026-06-25 18:55:54 +0000] info [cpaneld] 136.51.69.123 - cii "GET /login/?login_only=1&user=cii&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cii (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.196.247.129
country_id: 3625428
description:
[2026-06-25 18:56:07 +0000] info [cpaneld] 38.196.247.129 - tilitu "GET /login/?login_only=1&user=tilitu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tilitu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 164.163.133.113
country_id: 3658394
description:
[2026-06-25 18:55:58 +0000] info [cpaneld] 164.163.133.113 - tilitulabtg "GET /login/?login_only=1&user=tilitulabtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tilitulabtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 90.219.89.97
country_id: 2635167
description:
[2026-06-25 18:56:00 +0000] info [cpaneld] 90.219.89.97 - tilitula "GET /login/?login_only=1&user=tilitula&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tilitula (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.237.124.114
country_id: 6252001
description:
[2026-06-25 18:55:24 +0000] info [cpaneld] 73.237.124.114 - educplusmedia "GET /login/?login_only=1&user=educplusmedia&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user educplusmedia (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.90.111
country_id: 6252001
description:
[2026-06-25 18:55:26 +0000] info [cpaneld] 172.59.90.111 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.16.185.91
country_id: 6252001
description:
[2026-06-25 18:55:30 +0000] info [cpaneld] 184.16.185.91 - educplus "GET /login/?login_only=1&user=educplus&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user educplus (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.146.170.171
country_id: 6252001
description:
[2026-06-25 18:55:48 +0000] info [cpaneld] 47.146.170.171 - ed "GET /login/?login_only=1&user=ed&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ed (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.209.199.3
country_id: 6252001
description:
[2026-06-25 18:55:37 +0000] info [cpaneld] 174.209.199.3 - ciieeint "GET /login/?login_only=1&user=ciieeint&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeint (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.23.210.87
country_id: 6252001
description:
[2026-06-25 18:55:29 +0000] info [cpaneld] 72.23.210.87 - ciieeinternational "GET /login/?login_only=1&user=ciieeinternational&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternational (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.227.186.18
country_id: 6252001
description:
[2026-06-25 18:55:33 +0000] info [cpaneld] 47.227.186.18 - educplu "GET /login/?login_only=1&user=educplu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user educplu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.141.19.57
country_id: 6252001
description:
[2026-06-25 18:55:51 +0000] info [cpaneld] 73.141.19.57 - ciie "GET /login/?login_only=1&user=ciie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 90.119.0.129
country_id: 3017382
description:
[2026-06-25 18:56:04 +0000] info [cpaneld] 90.119.0.129 - tilitul "GET /login/?login_only=1&user=tilitul&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tilitul (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.224.79.224
country_id: 2510769
description:
[2026-06-25 18:56:08 +0000] info [cpaneld] 5.224.79.224 - togocar "GET /login/?login_only=1&user=togocar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocar (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 46.101.233.6
country_id: 2921044
description:
Jun 25 18:56:21 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 46.101.233.6 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.83.114.152
country_id: 3437598
description:
[2026-06-25 18:56:25 +0000] info [cpaneld] 190.83.114.152 - ti "GET /login/?login_only=1&user=ti&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ti (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.126.63.91
country_id: 6252001
description:
[2026-06-25 18:57:52 +0000] info [cpaneld] 174.126.63.91 - matos "GET /login/?login_only=1&user=matos&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matos (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 130.45.79.114
country_id: 6252001
description:
[2026-06-25 18:58:05 +0000] info [cpaneld] 130.45.79.114 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 151.205.172.16
country_id: 6252001
description:
[2026-06-25 18:58:14 +0000] info [cpaneld] 151.205.172.16 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.78.151
country_id: 6252001
description:
[2026-06-25 18:57:28 +0000] info [cpaneld] 172.59.78.151 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.123.19.45
country_id: 6252001
description:
[2026-06-25 18:57:36 +0000] info [cpaneld] 73.123.19.45 - matosshoptg "GET /login/?login_only=1&user=matosshoptg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matosshoptg (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 47.253.82.89
country_id: 6252001
description:
Jun 25 18:57:27 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 47.253.82.89 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.137.245.30
country_id: 6252001
description:
[2026-06-25 18:57:45 +0000] info [cpaneld] 97.137.245.30 - matossh "GET /login/?login_only=1&user=matossh&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matossh (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.149.84.68
country_id: 6252001
description:
[2026-06-25 18:58:25 +0000] info [cpaneld] 47.149.84.68 - fundacio "GET /login/?login_only=1&user=fundacio&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fundacio (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 47.254.192.95
country_id: 1733045
description:
Jun 25 18:58:27 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 47.254.192.95 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.39.91.184
country_id: 6252001
description:
[2026-06-25 18:58:32 +0000] info [cpaneld] 73.39.91.184 - fundac "GET /login/?login_only=1&user=fundac&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fundac (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.111.242.111
country_id: 6252001
description:
[2026-06-25 18:58:43 +0000] info [cpaneld] 73.111.242.111 - fu "GET /login/?login_only=1&user=fu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.54.73.117
country_id: 2017370
description:
[2026-06-25 18:59:48 +0000] info [cpaneld] 95.54.73.117 - matosshop "GET /login/?login_only=1&user=matosshop&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matosshop (has_cpuser_file failed)


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 35.165.215.140
country_id: 6252001
domain: selithgroup.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.161.229.131
country_id: 3469034
description:
[2026-06-25 18:59:41 +0000] info [cpaneld] 131.161.229.131 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.16.109.32
country_id: 3865483
description:
[2026-06-25 19:00:10 +0000] info [cpaneld] 190.16.109.32 - matos "GET /login/?login_only=1&user=matos&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matos (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.45.61.78
country_id: 3469034
description:
[2026-06-25 19:00:06 +0000] info [cpaneld] 187.45.61.78 - matoss "GET /login/?login_only=1&user=matoss&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matoss (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.12.11.227
country_id: 3658394
description:
[2026-06-25 18:59:52 +0000] info [cpaneld] 190.12.11.227 - matosshoptg "GET /login/?login_only=1&user=matosshoptg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user matosshoptg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.190.74.82
country_id: 6252001
description:
[2026-06-25 19:01:19 +0000] info [cpaneld] 184.190.74.82 - camegtogotg "GET /login/?login_only=1&user=camegtogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user camegtogotg (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 105.235.131.195
country_id: 2589581
description:
2026-06-25 19:01:21 dovecot_plain authenticator failed for H=([10.116.214.207]) [105.235.131.195]:63018: 535 Incorrect authentication data (set_id=newsletter@togointerim.net)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.22.210.41
country_id: 3469034
description:
[2026-06-25 19:00:24 +0000] info [cpaneld] 201.22.210.41 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.156.12.185
country_id: 2464461
description:
[2026-06-25 19:01:17 +0000] info [cpaneld] 102.156.12.185 - togocarrierebetonstg "GET /login/?login_only=1&user=togocarrierebetonstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierebetonstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.164.163.37
country_id: 290557
description:
[2026-06-25 19:01:20 +0000] info [cpaneld] 217.164.163.37 - togocarr "GET /login/?login_only=1&user=togocarr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.12.169.219
country_id: 3895114
description:
[2026-06-25 19:01:11 +0000] info [cpaneld] 190.12.169.219 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.204.160.142
country_id: 6252001
description:
[2026-06-25 19:01:12 +0000] info [cpaneld] 104.204.160.142 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.31.119.219
country_id: 2921044
description:
[2026-06-25 19:01:27 +0000] info [cpaneld] 94.31.119.219 - togoc "GET /login/?login_only=1&user=togoc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.106.142.102
country_id: 2017370
description:
[2026-06-25 19:01:30 +0000] info [cpaneld] 109.106.142.102 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.62.23.186
country_id: 6252001
description:
[2026-06-25 19:01:40 +0000] info [cpaneld] 71.62.23.186 - came "GET /login/?login_only=1&user=came&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user came (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 105.235.131.195
country_id: 2589581
description:
2026-06-25 19:01:27 dovecot_login authenticator failed for H=([10.116.214.207]) [105.235.131.195]:63018: 535 Incorrect authentication data (set_id=newsletter@togointerim.net)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 161.142.124.105
country_id: 1733045
description:
[2026-06-25 19:01:25 +0000] info [cpaneld] 161.142.124.105 - togoca "GET /login/?login_only=1&user=togoca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.35.181.29
country_id: 3017382
description:
[2026-06-25 19:01:22 +0000] info [cpaneld] 62.35.181.29 - togocar "GET /login/?login_only=1&user=togocar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 137.118.211.9
country_id: 6252001
description:
[2026-06-25 19:01:28 +0000] info [cpaneld] 137.118.211.9 - camegto "GET /login/?login_only=1&user=camegto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user camegto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.138.109.141
country_id: 3865483
description:
[2026-06-25 19:01:36 +0000] info [cpaneld] 186.138.109.141 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.76.55.23
country_id: 6252001
description:
[2026-06-25 19:01:43 +0000] info [cpaneld] 75.76.55.23 - cam "GET /login/?login_only=1&user=cam&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cam (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-25 19:02:24 +0000] info [cpaneld] 102.54.238.57 - a.kesso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.kesso (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 1.250.67.114
country_id: 1835841
description:
2026-06-25 19:04:19 dovecot_login authenticator failed for H=(181.87.roitl.ru) [1.250.67.114]:39638: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 190.123.210.247
country_id: 1819730
domain: www.snb.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.20||T:APACHE||RA:190.123.210.247||TA:190.123.210.247||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 125.23.183.138
country_id: 1269750
description:
Jun 25 19:04:52 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 125.23.183.138 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.23.183.138
country_id: 1269750
description:
2026-06-25 19:04:54 dovecot_login authenticator failed for H=([128.185.12.179]) [125.23.183.138]:47310: 535 Incorrect authentication data (set_id=contact)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.218.72.177
country_id: 6252001
description:
[2026-06-25 19:06:13 +0000] info [cpaneld] 24.218.72.177 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.187.69.95
country_id: 6252001
description:
[2026-06-25 19:06:18 +0000] info [cpaneld] 24.187.69.95 - delxia "GET /login/?login_only=1&user=delxia&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user delxia (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.10.141.114
country_id: 6252001
description:
[2026-06-25 19:06:32 +0000] info [cpaneld] 68.10.141.114 - del "GET /login/?login_only=1&user=del&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user del (has_cpuser_file failed)


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 44.199.5.109
country_id: 6252001
domain: cloud-et-racks.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36||RSV:8.20||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 172.94.9.215
country_id: 130758
description:
Jun 25 19:06:21 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 172.94.9.215 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.176.18.98
country_id: 6252001
description:
[2026-06-25 19:06:29 +0000] info [cpaneld] 70.176.18.98 - delx "GET /login/?login_only=1&user=delx&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user delx (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.79.249.193
country_id: 6252001
description:
[2026-06-25 19:06:36 +0000] info [cpaneld] 74.79.249.193 - de "GET /login/?login_only=1&user=de&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user de (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 183.104.220.195
country_id: 1835841
description:
Jun 25 19:06:43 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 183.104.220.195 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 183.104.220.195
country_id: 1835841
description:
2026-06-25 19:06:45 dovecot_login authenticator failed for H=([87.225.108.138]) [183.104.220.195]:44386: 535 Incorrect authentication data (set_id=e-services@otr.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.208.153.10
country_id: 6252001
description:
[2026-06-25 19:08:22 +0000] info [cpaneld] 47.208.153.10 - togoint "GET /login/?login_only=1&user=togoint&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoint (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 138.197.93.235
country_id: 6252001
description:
Jun 25 19:07:52 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 138.197.93.235 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.29.47.155
country_id: 6252001
description:
[2026-06-25 19:08:01 +0000] info [cpaneld] 98.29.47.155 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.227.149.202
country_id: 6252001
description:
[2026-06-25 19:08:05 +0000] info [cpaneld] 72.227.149.202 - soeurndetogo "GET /login/?login_only=1&user=soeurndetogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soeurndetogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.128.161.171
country_id: 6252001
description:
[2026-06-25 19:08:19 +0000] info [cpaneld] 104.128.161.171 - soeur "GET /login/?login_only=1&user=soeur&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soeur (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.178.222.59
country_id: 2017370
description:
2026-06-25 19:07:25 dovecot_login authenticator failed for H=(bergsound.Moscow.Access.Comstar.ru) [178.178.222.59]:57130: 535 Incorrect authentication data (set_id=e-services)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.72.128.147
country_id: 6252001
description:
[2026-06-25 19:08:08 +0000] info [cpaneld] 72.72.128.147 - soeurndetogocom "GET /login/?login_only=1&user=soeurndetogocom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soeurndetogocom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.145.13.193
country_id: 6252001
description:
[2026-06-25 19:08:11 +0000] info [cpaneld] 97.145.13.193 - soeurnde "GET /login/?login_only=1&user=soeurnde&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soeurnde (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.14.105.62
country_id: 1814991
description:
2026-06-25 19:08:04 dovecot_login authenticator failed for H=([49.125.201.1]) [111.14.105.62]:50424: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.62.133.172
country_id: 6252001
description:
[2026-06-25 19:08:07 +0000] info [cpaneld] 38.62.133.172 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 198.52.236.88
country_id: 6252001
description:
[2026-06-25 19:08:37 +0000] info [cpaneld] 198.52.236.88 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 144.34.107.185
country_id: 6252001
description:
[2026-06-25 19:08:29 +0000] info [cpaneld] 144.34.107.185 - so "GET /login/?login_only=1&user=so&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user so (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 27.24.141.122
country_id: 1814991
description:
Jun 25 19:08:33 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 27.24.141.122 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.145.237.169
country_id: 6252001
description:
[2026-06-25 19:09:02 +0000] info [cpaneld] 35.145.237.169 - alerte "GET /login/?login_only=1&user=alerte&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alerte (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.240.85.233
country_id: 6252001
description:
[2026-06-25 19:08:30 +0000] info [cpaneld] 104.240.85.233 - togoin "GET /login/?login_only=1&user=togoin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoin (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.24.141.122
country_id: 1814991
description:
2026-06-25 19:08:35 dovecot_login authenticator failed for H=([5.142.209.120]) [27.24.141.122]:38708: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.70.55.33
country_id: 6252001
description:
[2026-06-25 19:08:23 +0000] info [cpaneld] 173.70.55.33 - soeu "GET /login/?login_only=1&user=soeu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soeu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.49.158.222
country_id: 6252001
description:
[2026-06-25 19:08:45 +0000] info [cpaneld] 98.49.158.222 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.13.107.207
country_id: 6252001
description:
[2026-06-25 19:09:04 +0000] info [cpaneld] 38.13.107.207 - alertetg "GET /login/?login_only=1&user=alertetg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alertetg (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.22.48.19
country_id: 2017370
description:
2026-06-25 19:08:23 dovecot_login authenticator failed for H=([75.80.65.214]) [81.22.48.19]:48677: 535 Incorrect authentication data (set_id=contact)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.88.116
country_id: 6252001
description:
[2026-06-25 19:09:40 +0000] info [cpaneld] 173.211.88.116 NEW wcnyaruu:nySoh8kQ2L5Ozxwq address=173.211.88.116,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.82.182
country_id: 6252001
description:
[2026-06-25 19:09:30 +0000] info [cpaneld] 134.195.82.182 NEW wcnyaruu:PLjDiJk92AfxFAop address=134.195.82.182,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.48.163.154
country_id: 6252001
description:
[2026-06-25 19:10:16 +0000] info [cpaneld] 108.48.163.154 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.176.154.20
country_id: 6252001
description:
[2026-06-25 19:10:19 +0000] info [cpaneld] 24.176.154.20 - wellcity "GET /login/?login_only=1&user=wellcity&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wellcity (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.245.236.231
country_id: 1562822
description:
Jun 25 19:10:35 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.245.236.231 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.177.40.76
country_id: 6252001
description:
[2026-06-25 19:10:37 +0000] info [cpaneld] 98.177.40.76 - well "GET /login/?login_only=1&user=well&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user well (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.197.125.90
country_id: 6252001
description:
[2026-06-25 19:10:28 +0000] info [cpaneld] 67.197.125.90 - wellcit "GET /login/?login_only=1&user=wellcit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wellcit (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.110.179.47
country_id: 6252001
description:
[2026-06-25 19:12:59 +0000] info [cpaneld] 46.110.179.47 - dav "GET /login/?login_only=1&user=dav&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dav (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.187.191.249
country_id: 1210997
description:
[2026-06-25 19:13:09 +0000] info [cpaneld] 160.187.191.249 - np "GET /login/?login_only=1&user=np&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user np (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.224.40.107
country_id: 99237
description:
[2026-06-25 19:12:55 +0000] info [cpaneld] 169.224.40.107 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.50.175.107
country_id: 6252001
description:
[2026-06-25 19:12:46 +0000] info [cpaneld] 173.50.175.107 - davetec "GET /login/?login_only=1&user=davetec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user davetec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.246.59.65
country_id: 3923057
description:
[2026-06-25 19:13:00 +0000] info [cpaneld] 38.246.59.65 - nps "GET /login/?login_only=1&user=nps&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nps (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.0.157.16
country_id: 2017370
description:
[2026-06-25 19:13:04 +0000] info [cpaneld] 46.0.157.16 - npstg "GET /login/?login_only=1&user=npstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user npstg (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.218
country_id: 2635167
description:
[2026-06-25 19:14:37 +0000] info [cpaneld] 5.230.153.218 NEW wcnyaruu:rDRhQuMh7HwudIg9 address=5.230.153.218,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 124.205.8.130
country_id: 1814991
description:
Jun 25 19:19:21 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 124.205.8.130 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 85.208.115.143
country_id: 146669
domain: www.snb.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.20||T:APACHE||RA:85.208.115.143||TA:85.208.115.143||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 160.250.204.33
country_id: 1269750
description:
Jun 25 19:18:33 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 160.250.204.33 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.34.21.203
country_id: 6252001
description:
[2026-06-25 19:20:03 +0000] info [cpaneld] 71.34.21.203 - sthandlingaerotg "GET /login/?login_only=1&user=sthandlingaerotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sthandlingaerotg (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 124.205.8.130
country_id: 1814991
description:
2026-06-25 19:19:23 dovecot_login authenticator failed for H=([45.117.10.134]) [124.205.8.130]:51291: 535 Incorrect authentication data (set_id=datamesso@otr.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.113.201.50
country_id: 6252001
description:
[2026-06-25 19:19:57 +0000] info [cpaneld] 209.113.201.50 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.15.77.228
country_id: 6252001
description:
[2026-06-25 19:20:00 +0000] info [cpaneld] 70.15.77.228 - sthandlingaero "GET /login/?login_only=1&user=sthandlingaero&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sthandlingaero (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 31.173.66.222
country_id: 2017370
description:
2026-06-25 19:20:07 dovecot_login authenticator failed for H=([20.224.41.181]) [31.173.66.222]:56934: 535 Incorrect authentication data (set_id=jean-claude.kpenou@arse.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 46.101.233.6
country_id: 2921044
description:
Jun 25 19:19:45 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 46.101.233.6 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.171.224.209
country_id: 6252001
description:
[2026-06-25 19:20:08 +0000] info [cpaneld] 67.171.224.209 - sthandli "GET /login/?login_only=1&user=sthandli&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sthandli (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.130.44.184
country_id: 6252001
description:
[2026-06-25 19:20:12 +0000] info [cpaneld] 97.130.44.184 - sthandl "GET /login/?login_only=1&user=sthandl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sthandl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.0.18.125
country_id: 6252001
description:
[2026-06-25 19:20:35 +0000] info [cpaneld] 76.0.18.125 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 146.12.238.177
country_id: 6252001
description:
[2026-06-25 19:21:08 +0000] info [cpaneld] 146.12.238.177 - sophieim "GET /login/?login_only=1&user=sophieim&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sophieim (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.112.44.227
country_id: 6252001
description:
[2026-06-25 19:20:29 +0000] info [cpaneld] 76.112.44.227 - st "GET /login/?login_only=1&user=st&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user st (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.155.66.104
country_id: 6252001
description:
[2026-06-25 19:20:31 +0000] info [whostmgrd] 73.155.66.104 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.252.15.216
country_id: 6252001
description:
[2026-06-25 19:21:01 +0000] info [cpaneld] 96.252.15.216 - sophieimmobilier "GET /login/?login_only=1&user=sophieimmobilier&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sophieimmobilier (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.203.218.45
country_id: 6252001
description:
[2026-06-25 19:20:22 +0000] info [cpaneld] 185.203.218.45 - stha "GET /login/?login_only=1&user=stha&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user stha (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.170.189
country_id: 6252001
description:
[2026-06-25 19:20:35 +0000] info [whostmgrd] 172.59.170.189 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.112.163.137
country_id: 6252001
description:
[2026-06-25 19:21:06 +0000] info [cpaneld] 97.112.163.137 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.34.60.113
country_id: 6252001
description:
[2026-06-25 19:21:16 +0000] info [cpaneld] 24.34.60.113 - it "GET /login/?login_only=1&user=it&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user it (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 199.192.140.64
country_id: 6252001
description:
[2026-06-25 19:21:21 +0000] info [cpaneld] 199.192.140.64 - soph "GET /login/?login_only=1&user=soph&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soph (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.94.128.150
country_id: 6252001
description:
[2026-06-25 19:20:26 +0000] info [cpaneld] 76.94.128.150 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.49.119.61
country_id: 6252001
description:
[2026-06-25 19:20:25 +0000] info [whostmgrd] 45.49.119.61 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.158.58.214
country_id: 6252001
description:
[2026-06-25 19:20:30 +0000] info [cpaneld] 24.158.58.214 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.30.172.182
country_id: 6252001
description:
[2026-06-25 19:22:46 +0000] info [cpaneld] 38.30.172.182 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.224.194.149
country_id: 6252001
description:
[2026-06-25 19:22:52 +0000] info [cpaneld] 169.224.194.149 - cafeittg "GET /login/?login_only=1&user=cafeittg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafeittg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.4.134.161
country_id: 6252001
description:
[2026-06-25 19:22:58 +0000] info [cpaneld] 50.4.134.161 - cafe "GET /login/?login_only=1&user=cafe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 192.253.248.40
country_id: 130758
description:
Jun 25 19:24:14 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 192.253.248.40 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 186.87.10.86
country_id: 3686110
description:
186.87.10.86 - - [25/Jun/2026:19:26:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7182691&pdata=https%253A%252F%252Ftogodailynews.tg%252Fune-diplomatie-au-service-de-la-mediation-africaine%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782415581 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/une-diplomatie-au-service-de-la-mediation-africaine/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.3544.1276 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:186.87.10.86


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.81.207.19
country_id: 6252001
description:
[2026-06-25 19:28:14 +0000] info [cpaneld] 67.81.207.19 - zontalo "GET /login/?login_only=1&user=zontalo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zontalo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.34.163.242
country_id: 6252001
description:
[2026-06-25 19:28:20 +0000] info [cpaneld] 104.34.163.242 - zonta "GET /login/?login_only=1&user=zonta&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zonta (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 2.33.204.219
country_id: 3175395
description:
Jun 25 19:28:00 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 2.33.204.219 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.200.26.62
country_id: 6252001
description:
[2026-06-25 19:28:03 +0000] info [cpaneld] 73.200.26.62 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 2.33.204.219
country_id: 3175395
description:
2026-06-25 19:28:02 dovecot_plain authenticator failed for H=net-2-33-204-219.cust.vodafonedsl.it (unconalic) [2.33.204.219]:57711: 535 Incorrect authentication data (set_id=sagozan@zephyr.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 208.161.168.18
country_id: 6252001
description:
[2026-06-25 19:28:06 +0000] info [cpaneld] 208.161.168.18 - zontalomemillenium "GET /login/?login_only=1&user=zontalomemillenium&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zontalomemillenium (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.221.187.4
country_id: 6252001
description:
[2026-06-25 19:28:43 +0000] info [cpaneld] 97.221.187.4 - cloudand "GET /login/?login_only=1&user=cloudand&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudand (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.176.55.213
country_id: 6252001
description:
[2026-06-25 19:28:51 +0000] info [cpaneld] 70.176.55.213 - clouda "GET /login/?login_only=1&user=clouda&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user clouda (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.97.140.243
country_id: 6252001
description:
[2026-06-25 19:28:54 +0000] info [cpaneld] 98.97.140.243 - cloud "GET /login/?login_only=1&user=cloud&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloud (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 23.106.216.229
country_id: 6252001
domain: www.snb.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.20||T:APACHE||RA:23.106.216.229||TA:23.106.216.229||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.8.233.65
country_id: 6252001
description:
[2026-06-25 19:28:57 +0000] info [cpaneld] 66.8.233.65 - clou "GET /login/?login_only=1&user=clou&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user clou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.7.18.46
country_id: 6252001
description:
[2026-06-25 19:28:26 +0000] info [cpaneld] 68.7.18.46 - zon "GET /login/?login_only=1&user=zon&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zon (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.44.62.166
country_id: 6252001
description:
[2026-06-25 19:28:31 +0000] info [cpaneld] 66.44.62.166 - zo "GET /login/?login_only=1&user=zo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.64.221.188
country_id: 2363686
description:
[2026-06-25 19:30:16 +0000] info [cpaneld] 102.64.221.188 - mgvybwur "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.63.151.214
country_id: 6252001
description:
[2026-06-25 19:30:27 +0000] info [cpaneld] 173.63.151.214 - cogerisqtg "GET /login/?login_only=1&user=cogerisqtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cogerisqtg (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.170.186.154
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 34.170.186.154: 80 connections per 30 seconds to 2087 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.254.193.107
country_id: 6252001
description:
[2026-06-25 19:30:30 +0000] info [cpaneld] 38.254.193.107 - cogeris "GET /login/?login_only=1&user=cogeris&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cogeris (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 162.251.187.123
country_id: 6252001
description:
[2026-06-25 19:30:36 +0000] info [cpaneld] 162.251.187.123 - coger "GET /login/?login_only=1&user=coger&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user coger (has_cpuser_file failed)


plugin: cl_dos
name: DOS detection
abuser: 34.170.186.154
country_id: 6252001
description:
2026-06-25 19:30:39.158763676 +0000 GMT m=+139226.719677608 Denial of Service attack was discovered from 34.170.186.154, on port 52227. Open connections: 262


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.197.27.174
country_id: 6252001
description:
[2026-06-25 19:30:39 +0000] info [cpaneld] 67.197.27.174 - coge "GET /login/?login_only=1&user=coge&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user coge (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.62.8.71
country_id: 6252001
description:
[2026-06-25 19:32:01 +0000] info [cpaneld] 173.62.8.71 - educpl "GET /login/?login_only=1&user=educpl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user educpl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.126.198
country_id: 6252001
description:
[2026-06-25 19:31:50 +0000] info [cpaneld] 172.58.126.198 - educplusmediatg "GET /login/?login_only=1&user=educplusmediatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user educplusmediatg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.139.20.106
country_id: 6252001
description:
[2026-06-25 19:32:08 +0000] info [cpaneld] 76.139.20.106 - educ "GET /login/?login_only=1&user=educ&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user educ (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.179.212
country_id: 1880251
description:
43.173.179.212 - - [25/Jun/2026:19:32:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6513511&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Fwp%252Fv2%252Ftags%252F176&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782415935 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/wp/v2/tags/176" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.179.212


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.64.221.188
country_id: 2363686
description:
[2026-06-25 19:31:31 +0000] info [cpaneld] 102.64.221.188 - mgvybwur "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.50.195.160
country_id: 6252001
description:
[2026-06-25 19:31:46 +0000] info [cpaneld] 108.50.195.160 - educplusmedia "GET /login/?login_only=1&user=educplusmedia&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user educplusmedia (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 78.66.44.23
country_id: 2661886
description:
2026-06-25 19:33:10 dovecot_login authenticator failed for H=78-66-44-23-no2550.tbcn.telia.com ([157.211.246.182]) [78.66.44.23]:37188: 535 Incorrect authentication data (set_id=info@matosshop.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.69.93.151
country_id: 6252001
description:
[2026-06-25 19:32:48 +0000] info [cpaneld] 97.69.93.151 - alloa "GET /login/?login_only=1&user=alloa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alloa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.71.90.120
country_id: 6252001
description:
[2026-06-25 19:32:52 +0000] info [cpaneld] 173.71.90.120 - allo "GET /login/?login_only=1&user=allo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user allo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.239.76.111
country_id: 6252001
description:
[2026-06-25 19:32:54 +0000] info [cpaneld] 24.239.76.111 - festicstg "GET /login/?login_only=1&user=festicstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user festicstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.97.238.96
country_id: 6252001
description:
[2026-06-25 19:32:59 +0000] info [cpaneld] 97.97.238.96 - al "GET /login/?login_only=1&user=al&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user al (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 78.66.44.23
country_id: 2661886
description:
Jun 25 19:33:08 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 78.66.44.23 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 189.18.99.157
country_id: 3469034
description:
2026-06-25 19:34:00 dovecot_plain authenticator failed for H=189-18-99-157.dsl.telesp.net.br (localhost) [189.18.99.157]:56350: 535 Incorrect authentication data (set_id=agounkej@ucao-uut.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.188.127.135
country_id: 3895114
description:
[2026-06-25 19:34:16 +0000] info [cpaneld] 201.188.127.135 - dro "GET /login/?login_only=1&user=dro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dro (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.31.111.156
country_id: 2921044
description:
[2026-06-25 19:34:20 +0000] info [cpaneld] 94.31.111.156 - dr "GET /login/?login_only=1&user=dr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 130.0.28.187
country_id: 783754
description:
[2026-06-25 19:33:49 +0000] info [cpaneld] 130.0.28.187 - droitshumains "GET /login/?login_only=1&user=droitshumains&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droitshumains (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 213.172.155.69
country_id: 953987
description:
[2026-06-25 19:33:58 +0000] info [cpaneld] 213.172.155.69 - droitsh "GET /login/?login_only=1&user=droitsh&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droitsh (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.198.127.244
country_id: 6252001
description:
[2026-06-25 19:34:37 +0000] info [cpaneld] 72.198.127.244 - relanceinfo "GET /login/?login_only=1&user=relanceinfo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanceinfo (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 47.76.192.176
country_id: 1819730
description:
Jun 25 19:34:46 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 47.76.192.176 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.97.253.132
country_id: 6252001
description:
[2026-06-25 19:34:51 +0000] info [cpaneld] 76.97.253.132 - relanc "GET /login/?login_only=1&user=relanc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.50.57.0
country_id: 6252001
description:
[2026-06-25 19:34:54 +0000] info [cpaneld] 174.50.57.0 - relan "GET /login/?login_only=1&user=relan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.222.210
country_id: 6252001
description:
[2026-06-25 19:35:03 +0000] info [cpaneld] 172.59.222.210 - re "GET /login/?login_only=1&user=re&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user re (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.158.28.96
country_id: 3686110
description:
[2026-06-25 19:35:11 +0000] info [cpaneld] 190.158.28.96 - alloacio "GET /login/?login_only=1&user=alloacio&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alloacio (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.254.216.129
country_id: 6252001
description:
[2026-06-25 19:34:40 +0000] info [cpaneld] 24.254.216.129 - relanceinfotg "GET /login/?login_only=1&user=relanceinfotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanceinfotg (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 102.64.221.188
country_id: 2363686
description:
[2026-06-25 19:34:56 +0000] info [cpaneld] 102.64.221.188 NEW mgvybwur:f3jgq3MPxM9CGCTG address=102.64.221.188,app=cpaneld,creator=root,method=handle_form_login,path=loadsession:mgvybwur:Xm4OFY29RjPdZBam:create_user_session,possessed=0


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 5.253.57.82
country_id: 798544
description:
2026-06-25 19:34:56 H=([5.253.57.82]) [5.253.57.82]:54808 F=<skycoreai@mymodernhealth.living> rejected RCPT <kumar@white-ways.com>: The mail server could not deliver mail to kumar@white-ways.com.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.61.49.46
country_id: 6252001
description:
[2026-06-25 19:35:02 +0000] info [cpaneld] 24.61.49.46 - fun "GET /login/?login_only=1&user=fun&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fun (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.172.194.157
country_id: 1880251
description:
43.172.194.157 - - [25/Jun/2026:19:35:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7182950&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Fwp%252Fv2%252Ftags%252F24293&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782416109 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/wp-json/wp/v2/tags/24293" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.172.194.157


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.244.106.95
country_id: 6252001
description:
[2026-06-25 19:34:34 +0000] info [cpaneld] 67.244.106.95 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.126.192.121
country_id: 3437598
description:
[2026-06-25 19:35:41 +0000] info [cpaneld] 181.126.192.121 - al "GET /login/?login_only=1&user=al&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user al (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.112.52.13
country_id: 6252001
description:
[2026-06-25 19:36:16 +0000] info [cpaneld] 69.112.52.13 - perfect "GET /login/?login_only=1&user=perfect&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user perfect (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.31.129.246
country_id: 6252001
description:
[2026-06-25 19:35:59 +0000] info [cpaneld] 76.31.129.246 - mac "GET /login/?login_only=1&user=mac&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mac (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 146.85.77.146
country_id: 6252001
description:
[2026-06-25 19:36:05 +0000] info [cpaneld] 146.85.77.146 - perfectlabo "GET /login/?login_only=1&user=perfectlabo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user perfectlabo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.5.34.224
country_id: 3895114
description:
[2026-06-25 19:35:23 +0000] info [cpaneld] 190.5.34.224 - alloaci "GET /login/?login_only=1&user=alloaci&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alloaci (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.30.89.156
country_id: 6252001
description:
[2026-06-25 19:35:52 +0000] info [cpaneld] 73.30.89.156 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.2.40.166
country_id: 6252001
description:
[2026-06-25 19:36:03 +0000] info [cpaneld] 68.2.40.166 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.130.213.224
country_id: 6252001
description:
[2026-06-25 19:36:14 +0000] info [cpaneld] 72.130.213.224 - perfectl "GET /login/?login_only=1&user=perfectl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user perfectl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.137.43.32
country_id: 6252001
description:
[2026-06-25 19:36:04 +0000] info [cpaneld] 73.137.43.32 - dau "GET /login/?login_only=1&user=dau&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dau (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.250.195.162
country_id: 6252001
description:
[2026-06-25 19:36:23 +0000] info [cpaneld] 24.250.195.162 - perfe "GET /login/?login_only=1&user=perfe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user perfe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.52.104.98
country_id: 6252001
description:
[2026-06-25 19:36:29 +0000] info [cpaneld] 73.52.104.98 - per "GET /login/?login_only=1&user=per&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user per (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 72.255.40.22
country_id: 1168579
description:
2026-06-25 19:36:30 dovecot_plain authenticator failed for H=(localhost) [72.255.40.22]:44588: 535 Incorrect authentication data (set_id=elisee.n@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.14.172.17
country_id: 6252001
description:
[2026-06-25 19:36:34 +0000] info [cpaneld] 68.14.172.17 - pe "GET /login/?login_only=1&user=pe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user pe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.240.107.18
country_id: 6252001
description:
[2026-06-25 19:36:36 +0000] info [cpaneld] 98.240.107.18 - cfmitg "GET /login/?login_only=1&user=cfmitg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cfmitg (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.77.175.32
country_id: 3017382
description:
Jun 25 19:36:51 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.77.175.32 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.23.228.86
country_id: 1269750
description:
2026-06-25 19:38:09 dovecot_login authenticator failed for H=([61.80.157.142]) [125.23.228.86]:49172: 535 Incorrect authentication data (set_id=dccfe.otr.tgmawilong@otr.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.183.165.67
country_id: 1562822
domain: togomedia24.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togomedia24.tg/ HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 95.155.228.189
country_id: 2661886
description:
Jun 25 19:37:52 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 95.155.228.189 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 95.155.228.189
country_id: 2661886
description:
2026-06-25 19:37:54 dovecot_login authenticator failed for H=h95-155-228-189.cust.bredband2.com ([136.56.34.147]) [95.155.228.189]:45596: 535 Incorrect authentication data (set_id=contact@cloud-et-racks.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 125.23.228.86
country_id: 1269750
description:
Jun 25 19:38:07 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 125.23.228.86 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.183.165.67
country_id: 1562822
domain: togomedia24.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togomedia24.tghttp/togomedia24.tg/ HTTP/1.1||RSV:8.20||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.197.29.115
country_id: 6252001
description:
[2026-06-25 19:38:46 +0000] info [cpaneld] 67.197.29.115 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 207.211.242.230
country_id: 6252001
description:
[2026-06-25 19:39:01 +0000] info [cpaneld] 207.211.242.230 - las "GET /login/?login_only=1&user=las&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user las (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.189.171.174
country_id: 6252001
description:
[2026-06-25 19:38:53 +0000] info [cpaneld] 173.189.171.174 - lasnbtg "GET /login/?login_only=1&user=lasnbtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasnbtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.84.123.220
country_id: 6252001
description:
[2026-06-25 19:38:58 +0000] info [cpaneld] 67.84.123.220 - lasn "GET /login/?login_only=1&user=lasn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasn (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 69.62.76.187
country_id: 1269750
description:
Jun 25 19:39:25 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 69.62.76.187 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.5.53.184
country_id: 6252001
description:
[2026-06-25 19:41:21 +0000] info [cpaneld] 24.5.53.184 - vitr "GET /login/?login_only=1&user=vitr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.164.239.214
country_id: 6252001
description:
[2026-06-25 19:40:45 +0000] info [cpaneld] 98.164.239.214 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.50.96.189
country_id: 6252001
description:
[2026-06-25 19:41:08 +0000] info [cpaneld] 174.50.96.189 - vitrine "GET /login/?login_only=1&user=vitrine&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrine (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.3.64.202
country_id: 6252001
description:
[2026-06-25 19:41:10 +0000] info [cpaneld] 108.3.64.202 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.63.5.213
country_id: 6252001
description:
[2026-06-25 19:41:15 +0000] info [cpaneld] 174.63.5.213 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.167.232.145
country_id: 1282988
description:
103.167.232.145 - - [25/Jun/2026:19:40:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6658966&pdata=https%253A%252F%252Ftogodailynews.tg%252Faeroport-de-lome-329-618-passagers-enregistres-au-1er-trimestre-2025%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782416433 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/aeroport-de-lome-329-618-passagers-enregistres-au-1er-trimestre-2025/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.4963.1393 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.167.232.145


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 139.94.69.122
country_id: 6252001
description:
[2026-06-25 19:40:37 +0000] info [cpaneld] 139.94.69.122 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.169.141.172
country_id: 6252001
description:
[2026-06-25 19:40:51 +0000] info [cpaneld] 68.169.141.172 - togoagropolestg "GET /login/?login_only=1&user=togoagropolestg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoagropolestg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.28.114
country_id: 6252001
description:
[2026-06-25 19:40:58 +0000] info [cpaneld] 172.59.28.114 - vitrinenews "GET /login/?login_only=1&user=vitrinenews&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrinenews (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.81.126.12
country_id: 6252001
description:
[2026-06-25 19:41:01 +0000] info [cpaneld] 216.81.126.12 - dava "GET /login/?login_only=1&user=dava&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dava (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.145.176.69
country_id: 6252001
description:
[2026-06-25 19:41:01 +0000] info [cpaneld] 97.145.176.69 - vitrinenewstg "GET /login/?login_only=1&user=vitrinenewstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrinenewstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.144.140.35
country_id: 6252001
description:
[2026-06-25 19:41:04 +0000] info [cpaneld] 24.144.140.35 - dav "GET /login/?login_only=1&user=dav&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dav (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.172.53.38
country_id: 6252001
description:
[2026-06-25 19:41:17 +0000] info [cpaneld] 185.172.53.38 - vitri "GET /login/?login_only=1&user=vitri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitri (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 47.254.192.95
country_id: 1733045
description:
Jun 25 19:42:08 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 47.254.192.95 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.165.128.224
country_id: 6252001
description:
[2026-06-25 19:41:28 +0000] info [cpaneld] 47.165.128.224 - vi "GET /login/?login_only=1&user=vi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.249.52.254
country_id: 6252001
description:
[2026-06-25 19:41:51 +0000] info [cpaneld] 71.249.52.254 - c2i "GET /login/?login_only=1&user=c2i&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user c2i (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 160.250.204.33
country_id: 1269750
description:
Jun 25 19:42:04 ns5 auth[161607]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 160.250.204.33 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.190.131.73
country_id: 6252001
description:
[2026-06-25 19:42:58 +0000] info [cpaneld] 184.190.131.73 - haplucia "GET /login/?login_only=1&user=haplucia&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user haplucia (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.200.226.89
country_id: 6252001
description:
[2026-06-25 19:42:47 +0000] info [cpaneld] 47.200.226.89 - amea "GET /login/?login_only=1&user=amea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user amea (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 192.225.125.240
country_id: 6252001
description:
[2026-06-25 19:42:35 +0000] info [cpaneld] 192.225.125.240 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.140.148.105
country_id: 6252001
description:
[2026-06-25 19:42:49 +0000] info [cpaneld] 76.140.148.105 - ame "GET /login/?login_only=1&user=ame&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ame (has_cpuser_file failed)


