# incident

plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.212.228.74
country_id: 1880251
description:
[2026-06-28 23:30:47 +0000] info [cpaneld] 129.212.228.74 - administration "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user administration (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 193.167.245.119
country_id: 660013
description:
Denial of Service (DoS) attack was discovered from 193.167.245.119: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.77.51.208
country_id: 3175395
description:
Jun 28 23:32:34 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.77.51.208 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.171.123
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:html -->\n<style data-wp-block-html=\"css\">\n<style>\n/* styles g\xc3\xa9n\xc3\xa9raux pour la page activit\xc3\xa9 */\n.bls-activity-page-container {\n    font-family: -apple-system, blinkmacsystemfont, \"segoe ui\", roboto, oxygen-sans, ubuntu, cantarell, \"helvetica neue\", sans-serif;\n    color: #333;\n    line-height: 1.7;\n    overflow-x: hidden;\n}\n\n.bls-activity-title {\n    font-size: 2.8em;\n    color: #2c3e50;\n    text-align: center;\n    margin-bottom: 30px;\n    font-weight: 700;\n}\n\n/* section introduction */\n.bls-activity-intro {\n    padding: 80px 20px;\n    background-color: #f9f9f9;\n    text-align: center;\n    max-width: 900px;\n    margin: 0 auto;\n}\n\n.bls-activity-intro-text {\n    font-size: 1.2em;\n    color: #555;\n    line-height: 1.8;\n}\n\n/* section activit\xc3\xa9s cl\xc3\xa9s (sant\xc3\xa9, aum\xc3\xb4nerie, chapelle) */\n.bls-activity-features {\n    display: flex;\n    flex-wrap: wrap;\n    justify-content: center;\n    gap: 30px;\n    padding: 60px 20px;\n    background-color: #f3f0eb; /* couleur de fond douce */\n}\n\n.bls-feature-card {\n    background-color: #ffffff;\n    border-radius: 10px;\n    padding: 30px;\n    box-shadow: 0 5px 15px rgba(0, 0, 0, 0.1);\n    flex: 1 1 300px;\n    max-width: 350px;\n    text-align: center;\n    transition: transform 0.3s ease, box-shadow 0.3s ease;\n    position: relative;\n    overflow: hidden;\n}\n\n.bls-feature-card:hover {\n    transform: translatey(-10px);\n    box-shadow: 0 10px 25px rgba(0, 0, 0, 0.15);\n}\n\n.bls-feature-icon {\n    width: 80px;\n    height: 80px;\n    margin: 0 auto 20px;\n    background-color: #5a7d9a; /* couleur d'accentuation */\n    border-radius: 50%;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    transition: background-color 0.3s ease;\n}\n\n.bls-feature-card:hover .bls-feature-icon {\n    background-color: #b8860b; /* changement de couleur au survol */\n}\n\n.bls-feature-icon svg {\n    width: 40px;\n    height: 40px;\n    color: #ffffff;\n}\n\n.bls-feature-title {\n    font-size: 1.6em;\n    color: #2c3e50;\n    margin-bottom: 15px;\n    font-weight: 600;\n}\n\n.bls-feature-description {\n    font-size: 1em;\n    color: #666;\n}\n\n/* section h\xc3\xb4pital saint camille de lom\xc3\xa9 (focus) */\n.bls-hospital-focus {\n    padding: 80px 20px;\n    background-color: #e0dcd5; /* fond contrast\xc3\xa9 */\n    text-align: center;\n}\n\n.bls-hospital-content {\n    max-width: 900px;\n    margin: 0 auto;\n    text-align: justify;\n}\n\n.bls-hospital-title {\n    font-size: 2.8em;\n    color: #2c3e50;\n    margin-bottom: 30px;\n    font-weight: 700;\n    text-align: center;\n}\n\n.bls-hospital-focus p {\n    font-size: 1.1em;\n    color: #444;\n    margin-bottom: 1.5em;\n}\n\n.bls-hospital-quote {\n    background-color: #ffffff;\n    border-left: 5px solid #b8860b; /* liser\xc3\xa9 dor\xc3\xa9 */\n    margin: 40px 0;\n    padding: 25px 35px;\n    font-style: italic;\n    color: #333;\n    font-size: 1.2em;\n    border-radius: 5px;\n    box-shadow: 0 2px 10px rgba(0, 0, 0, 0.08);\n    text-align: center;\n}\n\n/* animations g\xc3\xa9n\xc3\xa9rales */\n.bls-animate-fade-in {\n    opacity: 0;\n    transform: translatey(20px);\n    animation: blsfadeinup 0.8s ease-out forwards;\n}\n\n.bls-animate-slide-left {\n    opacity: 0;\n    transform: translatex(-50px);\n    animation: blsslideinleft 0.8s ease-out forwards;\n}\n\n.bls-animate-slide-up {\n    opacity: 0;\n    transform: translatey(50px);\n    animation: blsfadeinup 0.8s ease-out forwards;\n}\n\n.bls-animate-slide-right {\n    opacity: 0;\n    transform: translatex(50px);\n    animation: blsslideinright 0.8s ease-out forwards;\n}\n\n/* d\xc3\xa9lai pour les animations \xc3\xa9chelonn\xc3\xa9es */\n.bls-activity-intro {\n    animation-delay: 0.1s;\n}\n.bls-feature-card:nth-child(1) { animation-delay: 0.3s; }\n.bls-feature-card:nth-child(2) { animation-delay: 0.5s; }\n.bls-feature-card:nth-child(3) { animation-delay: 0.7s; }\n.bls-hospital-focus { animation-delay: 0.9s; }\n\n/* keyframes */\n@keyframes blsfadeinup {\n    from {\n        opacity: 0;\n        transform: translatey(20px);\n    }\n    to {\n        opacity: 1;\n        transform: translatey(0);\n    }\n}\n\n@keyframes blsslideinleft {\n    from {\n        opacity: 0;\n        transform: translatex(-50px);\n    }\n    to {\n        opacity: 1;\n        transform: translatex(0);\n    }\n}\n\n@keyframes blsslideinright {\n    from {\n        opacity: 0;\n        transform: translatex(50px);\n    }\n    to {\n        opacity: 1;\n        transform: translatex(0);\n    }\n}\n\n/* responsive adjustments */\n@media (max-width: 768px) {\n    .bls-activity-title, .bls-hospital-title {\n        font-size: 2em;\n    }\n    .bls-activity-intro, .bls-activity-features, .bls-hospital-focus {\n        padding: 40px 15px;\n    }\n    .bls-activity-intro-text, .bls-hospital-focus p, .bls-hospital-quote {\n        font-size: 1em;\n    }\n    .bls-feature-card {\n        flex: 1 1 100%;\n        max-width: 400px;\n    }\n}\n\n@media (max-width: 480px) {\n    .bls-activity-title, .bls-hospital-title {\n        font-size: 1.8em;\n    }\n    .bls-feature-title {\n        font-size: 1.4em;\n    }\n}\n</style>\n\n<div class=\"bls-activity-page-container\">\n\n    <!-- section introduction -->\n    <section class=\"bls-activity-intro bls-animate-fade-in\">\n        <h2 class=\"bls-activity-title\">notre mission en action</h2>\n        <p class=\"bls-activity-intro-text\">\n            le champ principal de notre mission est le service des malades qui viennent dans notre centre de sant\xc3\xa9, des membres de la famille camillienne la\xc3\xafque, et des fid\xc3\xa8les qui fr\xc3\xa9quentent la communaut\xc3\xa9. la communaut\xc3\xa9 et le centre sont les deux poumons de notre vie religieuse.\n        </p>\n    </section>\n\n    <!-- section activit\xc3\xa9s cl\xc3\xa9s (sant\xc3\xa9, aum\xc3\xb4nerie, chapelle) -->\n    <section class=\"bls-activity-features\">\n        <div class=\"bls-feature-card bls-animate-slide-left\">\n            <div class=\"bls-feature-icon\">\n                <svg viewbox=\"0 0 24 24\" fill=\"none\" stroke=\"currentcolor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"m11 4h4a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2v-7\"></path><path d=\"m18.5 2.5a2.121 2.121 0 0 1 3 3l12 15l-4 1 1-4 9.5-9.5z\"></path></svg>\n            </div>\n            <h3 class=\"bls-feature-title\">sant\xc3\x89</h3>\n            <p class=\"bls-feature-description\">\n                l\xe2\x80\x99h\xc3\xb4pital saint camille de lom\xc3\xa9, ouvert depuis 2010, \xc3\xa0 but non lucratif, au service de tous selon l\xe2\x80\x99esprit de saint camille : \xc2\xab servir les malades m\xc3\xaame au p\xc3\xa9ril de la vie. \xc2\xbb\n            </p>\n        </div>\n\n        <div class=\"bls-feature-card bls-animate-slide-up\">\n            <div class=\"bls-feature-icon\">\n                <svg viewbox=\"0 0 24 24\" fill=\"none\" stroke=\"currentcolor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"m4 14.899a7 7 0 0 1 7 2h10a7 7 0 0 1 3 12.899\"></path><path d=\"m16.73 14h7.27a2 2 0 0 0-1.82 1.18l3 20h18l-2.45-4.82a2 2 0 0 0-1.82-1.18z\"></path></svg>\n            </div>\n            <h3 class=\"bls-feature-title\">aum\xc3\x94nerie</h3>\n            <p class=\"bls-feature-description\">\n                un service d\xe2\x80\x99\xc3\x89glise pour le r\xc3\xa9confort spirituel des malades et de leurs familles \xe2\x80\x94 pr\xc3\xa9sence, \xc3\xa9coute et accompagnement.\n            </p>\n        </div>\n\n        <div class=\"bls-feature-card bls-animate-slide-right\">\n            <div class=\"bls-feature-icon\">\n                <svg viewbox=\"0 0 24 24\" fill=\"none\" stroke=\"currentcolor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"m12 22s8-4 8-10v5l-8-3-8 3v7c0 6 8 10 8 10z\"></path></svg>\n            </div>\n            <h3 class=\"bls-feature-title\">chapelle</h3>\n            <p class=\"bls-feature-description\">\n                messe quotidienne \xc3\xa0 6h, c\xc3\xa9l\xc3\xa9brations du dimanche \xe2\x80\x94 un lieu de pri\xc3\xa8re ouvert \xc3\xa0 tous au c\xc5\x93ur de l\xe2\x80\x99h\xc3\xb4pital.\n            </p>\n        </div>\n    </section>\n\n    <!-- section h\xc3\xb4pital saint camille de lom\xc3\xa9 (focus) -->\n    <section class=\"bls-hospital-focus bls-animate-fade-in\">\n        <div class=\"bls-hospital-content\">\n            <h2 class=\"bls-hospital-title\">h\xc3\xb4pital saint camille de lom\xc3\xa9</h2>\n            <p>\n                l\xe2\x80\x99h\xc3\xb4pital saint camille de lom\xc3\xa9 est une \xc5\x93uvre sanitaire confessionnelle des religieux camilliens du togo, implant\xc3\xa9 dans le golfe 1. il a ouvert ses portes le 26 novembre 2010. situ\xc3\xa9 \xc3\xa0 adakpam\xc3\xa8-colas, un quartier p\xc3\xa9riurbain de lom\xc3\xa9 qui abrite plusieurs zones d\xc3\xa9favoris\xc3\xa9es, c\xe2\x80\x99est l\xe2\x80\x99une des structures sanitaires de r\xc3\xa9f\xc3\xa9rence de la commune golfe 1.\n            </p>\n            <p>\n                il dispose d\xe2\x80\x99un personnel qualifi\xc3\xa9, comp\xc3\xa9tent et disponible. \xc3\x80 but non lucratif, il porte une attention particuli\xc3\xa8re aux patients, surtout les plus d\xc3\xa9munis, afin de permettre \xc3\xa0 toutes les couches sociales de se soigner \xe2\x80\x94 selon l\xe2\x80\x99esprit de saint camille de lellis :\n            </p>\n            <blockquote class=\"bls-hospital-quote\">\n                \xc2\xab servir les malades m\xc3\xaame au p\xc3\xa9ril de la vie. \xc2\xbb\n            </blockquote>\n        </div>\n    </section>\n\n</div>\n<!-- /wp:html -->||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 39.100.91.113
country_id: 1814991
description:
Jun 28 23:32:39 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 39.100.91.113 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 45.147.235.218
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:45.147.235.218||TA:45.147.235.218||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-28 23:34:01 +0000] info [whostmgrd] 45.198.224.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-28 23:34:03 +0000] info [whostmgrd] 45.198.224.5 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.64.171.123
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET /index.php?rest_route=/wp/v2/block-renderer/wpforms/form-selector&context=edit&attributes[clientId]=20a7ffd2-f3ae-4165-b121-e8e1e4172801&attributes[formId]=578&attributes[displayTitle]=false&attributes[displayDesc]=false&attributes[theme]=default&attributes[themeName]=Default&attributes[labelSize]=medium&attributes[labelColor]=rgba( 0, 0, 0, 0.85 )&attributes[labelSublabelColor]=rgba( 0, 0, 0, 0.55 )&attributes[labelErrorColor]=#d63637&attributes[pageBreakColor]=#066aab&attributes[customCss]=&attributes[copyPasteJsonValue]={\"displayTitle\":false,\"displayDesc\":false,\"theme\":\"default\",\"themeName\":\"Default\",\"fieldSize\":\"medium\",\"backgroundImage\":\"none\",\"backgroundPosition\":\"center center\",\"backgroundRepeat\":\"no-repeat\",\"backgroundSizeMode\":\"cover\",\"backgroundSize\":\"cover\",\"backgroundWidth\":\"100px\",\"backgroundHeight\":\"100px\",\"backgroundUrl\":\"url()\",\"backgroundColor\":\"rgba( 0, 0, 0, 0 )\",\"fieldBorderRadius\":\"3px\",\"fieldBorderStyle\":\"solid\",\"fieldBorderSize\":\"1px\",\"fieldBackgroundColor\":\"#ffffff\",\"fieldBorderColor\":\"rgba( 0, 0, 0, 0.25 )\",\"fieldTextColor\":\"rgba( 0, 0, 0, 0.7 )\",\"fieldMenuColor\":\"#ffffff\",\"labelSize\":\"medium\",\"labelColor\":\"rgba( 0, 0, 0, 0.85 )\",\"labelSublabelColor\":\"rgba( 0, 0, 0, 0.55 )\",\"labelErrorColor\":\"#d63637\",\"buttonSize\":\"medium\",\"buttonBorderStyle\":\"none\",\"buttonBorderSize\":\"1px\",\"buttonBorderRadius\":\"3px\",\"buttonBackgroundColor\":\"#066aab\",\"buttonTextColor\":\"#ffffff\",\"buttonBorderColor\":\"#066aab\",\"pageBreakColor\":\"#066aab\",\"containerPadding\":\"0px\",\"containerBorderStyle\":\"none\",\"containerBorderWidth\":\"1px\",\"containerBorderColor\":\"#000000\",\"containerBorderRadius\":\"3px\",\"containerShadowSize\":\"none\",\"customCss\":\"\"}&attributes[fieldSize]=medium&attributes[fieldBorderStyle]=solid&attributes[fieldBorderSize]=1px&attributes[fieldBorderRadius]=3px&attributes[fieldBackgroundColor]=#ffffff&attributes[fieldBorderColor]=rgba( 0, 0, 0, 0.25 )&attributes[fieldTextColor]=rgba( 0, 0, 0, 0.7 )&attributes[fieldMenuColor]=#ffffff&attributes[containerPadding]=0px&attributes[containerBorderStyle]=none&attributes[containerBorderWidth]=1px&attributes[containerBorderColor]=#000000&attributes[containerBorderRadius]=3px&attributes[containerShadowSize]=none&attributes[backgroundImage]=none&attributes[backgroundPosition]=center center&attributes[backgroundRepeat]=no-repeat&attributes[backgroundSizeMode]=cover&attributes[backgroundSize]=cover&attributes[backgroundWidth]=100px&attributes[backgroundHeight]=100px&attributes[backgroundColor]=rgba( 0, 0, 0, 0 )&attributes[backgroundUrl]=url()&attributes[buttonSize]=medium&attributes[buttonBorderStyle]=none&attributes[buttonBorderSize]=1px&attributes[buttonBorderRadius]=3px&attributes[buttonBackgroundColor]=#066aab&attributes[buttonTextColor]=#ffffff&attributes[buttonBorderColor]=#066aab&post_id=8&_locale=user HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-28 23:37:12 +0000] info [whostmgrd] 45.198.224.5 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-28 23:37:11 +0000] info [whostmgrd] 45.198.224.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 115.59.69.220
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/11/images-26.jpeg 275w, http:/togodailynews.tg/wp-content/uploads/2021/11/images-26-272x182.jpeg 272w HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.212.228.74
country_id: 1880251
description:
[2026-06-28 23:42:03 +0000] info [cpaneld] 129.212.228.74 - wgqhqbem "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.221.130.246
country_id: 690791
description:
Jun 28 23:44:08 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.221.130.246 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.171.123
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:html -->\n<style data-wp-block-html=\"css\">\n@import url('https://fonts.googleapis.com/css2?family=poppins:wght@300;400;500;600;700&display=swap');\n\n*{\n    margin:0;\n    padding:0;\n    box-sizing:border-box;\n    font-family:'poppins',sans-serif;\n}\n\nbody{\n\n    background:#f5f7fb;\n}\n\n.contact-section{\n\n    padding:80px 20px;\n}\n\n.container{\n\n    max-width:950px;\n    margin:auto;\n    background:#fff;\n    border-radius:18px;\n    padding:45px;\n    box-shadow:0 15px 40px rgba(0,0,0,.08);\n\n    animation:fadeup .8s ease;\n}\n\n.form-header{\n\n    text-align:center;\n    margin-bottom:40px;\n}\n\n.form-header span{\n\n    color:#c62828;\n    font-weight:600;\n    text-transform:uppercase;\n    letter-spacing:2px;\n}\n\n.form-header h2{\n\n    margin-top:10px;\n    font-size:35px;\n    color:#222;\n}\n\n.form-header p{\n\n    margin-top:10px;\n    color:#777;\n}\n\n.row{\n\n    display:grid;\n    grid-template-columns:repeat(2,1fr);\n    gap:25px;\n}\n\n.input-group{\n\n    margin-bottom:25px;\n}\n\n.input-group label{\n\n    display:block;\n    margin-bottom:10px;\n    font-weight:600;\n    color:#222;\n}\n\n.input-group span{\n\n    color:#c62828;\n}\n\n.input-box{\n\n    position:relative;\n}\n\n.input-box i{\n\n    position:absolute;\n    top:50%;\n    left:18px;\n    transform:translatey(-50%);\n    color:#999;\n    transition:.3s;\n}\n\n.input-box input,\n.input-box select,\n.input-box textarea{\n\n    width:100%;\n    border:2px solid #e4e4e4;\n    border-radius:12px;\n    padding:16px 18px 16px 50px;\n    font-size:15px;\n    outline:none;\n    transition:.35s;\n    background:#fff;\n}\n\ntextarea{\n\n    resize:none;\n}\n\n.textarea i{\n\n    top:25px;\n}\n\n.input-box:hover input,\n.input-box:hover select,\n.input-box:hover textarea{\n\n    border-color:#c62828;\n}\n\n.input-box input:focus,\n.input-box select:focus,\n.input-box textarea:focus{\n\n    border-color:#c62828;\n    box-shadow:0 0 0 4px rgba(198,40,40,.15);\n}\n\n.input-box:focus-within i{\n\n    color:#c62828;\n}\n\n.btn{\n\n    width:100%;\n    border:none;\n    padding:18px;\n    border-radius:12px;\n    background:#c62828;\n    color:#fff;\n    font-size:17px;\n    font-weight:600;\n    cursor:pointer;\n    transition:.35s;\n}\n\n.btn i{\n\n    margin-left:10px;\n}\n\n.btn:hover{\n\n    transform:translatey(-3px);\n    background:#9e1b1b;\n    box-shadow:0 15px 30px rgba(198,40,40,.35);\n}\n\n@keyframes fadeup{\n\n    from{\n\n        opacity:0;\n        transform:translatey(40px);\n    }\n\n    to{\n\n        opacity:1;\n        transform:translatey(0);\n    }\n}\n\n@media(max-width:768px){\n\n.row{\n\ngrid-template-columns:1fr;\n\n}\n\n.container{\n\npadding:25px;\n\n}\n\n.form-header h2{\n\nfont-size:28px;\n\n}\n\n}\n</style>\n\n<!doctype html>\n<html lang=\"fr\">\n<head>\n    <meta charset=\"utf-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>formulaire de contact</title>\n\n    <link rel=\"stylesheet\" href=\"style.css\">\n\n    <!-- font awesome -->\n    <link rel=\"stylesheet\"\n        href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/css/all.min.css\">\n</head>\n<body>\n\n<section class=\"contact-section\">\n\n    <div class=\"container\">\n\n        <div class=\"form-header\">\n            <span>nous contacter</span>\n            <h2>envoyez-nous un message</h2>\n            <p>\n                notre \xc3\xa9quipe vous r\xc3\xa9pond dans les meilleurs d\xc3\xa9lais.\n            </p>\n        </div>\n\n        <form>\n\n            <div class=\"row\">\n\n                <div class=\"input-group\">\n                    <label>pr\xc3\xa9nom <span>*</span></label>\n                    <div class=\"input-box\">\n                        <i class=\"fa-solid fa-user\"></i>\n                        <input type=\"text\" placeholder=\"votre pr\xc3\xa9nom\">\n                    </div>\n                </div>\n\n                <div class=\"input-group\">\n                    <label>nom <span>*</span></label>\n                    <div class=\"input-box\">\n                        <i class=\"fa-solid fa-user\"></i>\n                        <input type=\"text\" placeholder=\"votre nom\">\n                    </div>\n                </div>\n\n            </div>\n\n            <div class=\"input-group\">\n                <label>e-mail <span>*</span></label>\n                <div class=\"input-box\">\n                    <i class=\"fa-solid fa-envelope\"></i>\n                    <input type=\"email\" placeholder=\"exemple@email.com\">\n                </div>\n            </div>\n\n            <div class=\"input-group\">\n                <label>t\xc3\xa9l\xc3\xa9phone</label>\n                <div class=\"input-box\">\n                    <i class=\"fa-solid fa-phone\"></i>\n                    <input type=\"tel\" placeholder=\" 228 xx xx xx xx\">\n                </div>\n            </div>\n\n            <div class=\"input-group\">\n                <label>sujet <span>*</span></label>\n\n                <div class=\"input-box\">\n                    <i class=\"fa-solid fa-list\"></i>\n\n                    <select>\n                        <option selected disabled>s\xc3\xa9lectionnez un sujet</option>\n                        <option>demande g\xc3\xa9n\xc3\xa9rale</option>\n                        <option>don / soutien</option>\n                        <option>assistance spirituelle</option>\n                        <option>autre</option>\n                    </select>\n                </div>\n\n            </div>\n\n            <div class=\"input-group\">\n                <label>commentaire ou message</label>\n\n                <div class=\"input-box textarea\">\n                    <i class=\"fa-solid fa-comment\"></i>\n                    <textarea rows=\"6\"\n                        placeholder=\"\xc3\x89crivez votre message...\"></textarea>\n                </div>\n            </div>\n\n            <button class=\"btn\">\n                envoyer le message\n                <i class=\"fa-solid fa-paper-plane\"></i>\n            </button>\n\n        </form>\n\n    </div>\n\n</section>\n\n</body>\n</html>\n<!-- /wp:html -->||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-28 23:46:47 +0000] info [whostmgrd] 45.198.224.5 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-28 23:46:46 +0000] info [whostmgrd] 45.198.224.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.209.243.2
country_id: 3469034
description:
Jun 28 23:48:15 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.209.243.2 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.230.51.88
country_id: 1814991
description:
Jun 28 23:48:48 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.230.51.88 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.230.51.88
country_id: 1814991
description:
2026-06-28 23:48:50 dovecot_login authenticator failed for H=([192.111.130.1]) [122.230.51.88]:33898: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 46.175.185.48
country_id: 690791
description:
Jun 28 23:47:56 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 46.175.185.48 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.171.123
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:html -->\n<style data-wp-block-html=\"css\">\n<style>\n.bls-vision-section {\n    font-family: -apple-system, blinkmacsystemfont, \"segoe ui\", roboto, oxygen-sans, ubuntu, cantarell, \"helvetica neue\", sans-serif; /* police similaire \xc3\xa0 l'image */\n    padding: 40px 20px;\n    background-color: #f8f8f8; /* couleur de fond g\xc3\xa9n\xc3\xa9rale si n\xc3\xa9cessaire */\n    text-align: center;\n    overflow: hidden; /* cache les \xc3\xa9l\xc3\xa9ments avant leur animation */\n}\n\n.bls-vision-header {\n    margin-bottom: 40px;\n}\n\n.bls-subtitle {\n    font-size: 0.9em;\n    color: #666;\n    letter-spacing: 2px;\n    text-transform: uppercase;\n    margin-bottom: 5px;\n    text-align: center;\n\n}\n\n.bls-title {\n    font-size: 2.5em;\n    color: #333;\n    margin-top: 0;\n    font-weight: bold;\n    text-align: center;\n}\n\n.bls-cards-container {\n    display: flex;\n    flex-wrap: wrap;\n    justify-content: center;\n    gap: 20px;\n    max-width: 1200px;\n    margin: 0 auto;\n}\n\n.bls-card {\n    background-color: #f3f0eb; /* couleur de fond des cartes */\n    border-radius: 15px;\n    padding: 30px;\n    box-shadow: 0 4px 8px rgba(0, 0, 0, 0.05);\n    flex: 1 1 300px; /* permet aux cartes de s'adapter */\n    max-width: 350px;\n    text-align: left;\n    display: flex;\n    flex-direction: column;\n    justify-content: space-between; /* pour pousser l'ic\xc3\xb4ne vers le bas */\n    position: relative; /* pour positionner l'ic\xc3\xb4ne */\n    min-height: 350px; /* hauteur minimale pour l'uniformit\xc3\xa9 */\n\n    /* animations */\n    opacity: 0;\n    transform: translatey(20px);\n    animation: fadeinup 0.8s ease-out forwards; /* animation de base */\n    transition: transform 0.3s ease, box-shadow 0.3s ease; /* transition pour le survol */\n}\n\n/* d\xc3\xa9lai pour l'animation \xc3\xa9chelonn\xc3\xa9e */\n.bls-card:nth-child(1) {\n    animation-delay: 0.1s;\n}\n.bls-card:nth-child(2) {\n    animation-delay: 0.3s;\n}\n.bls-card:nth-child(3) {\n    animation-delay: 0.5s;\n}\n\n/* effet de survol */\n.bls-card:hover {\n    transform: translatey(-5px); /* l\xc3\xa9g\xc3\xa8re \xc3\xa9l\xc3\xa9vation */\n    box-shadow: 0 8px 16px rgba(0, 0, 0, 0.1); /* ombre plus prononc\xc3\xa9e */\n}\n\n/* keyframes pour l'animation d'apparition */\n@keyframes fadeinup {\n    from {\n        opacity: 0;\n        transform: translatey(20px);\n    }\n    to {\n        opacity: 1;\n        transform: translatey(0);\n    }\n}\n\n.bls-card-title {\n    font-size: 1.3em;\n    color: #333;\n    margin-top: 0;\n    margin-bottom: 15px;\n    font-weight: bold;\n    text-transform: uppercase;\n}\n\n.bls-card-text {\n    font-size: 1em;\n    color: #555;\n    line-height: 1.6;\n    margin-bottom: 20px;\n    text-align: justify;\n}\n\n.bls-card-icon {\n    width: 50px;\n    height: 50px;\n    background-color: #e0dcd5; /* couleur de fond de l'ic\xc3\xb4ne */\n    border-radius: 50%;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    position: absolute;\n    bottom: 20px;\n    right: 20px;\n}\n\n.bls-card-icon svg {\n    width: 24px;\n    height: 24px;\n    color: #888; /* couleur de l'ic\xc3\xb4ne */\n}\n\n/* responsive adjustments */\n@media (max-width: 768px) {\n    .bls-title {\n        font-size: 2em;\n    }\n    .bls-cards-container {\n        flex-direction: column;\n        align-items: center;\n    }\n    .bls-card {\n        max-width: 90%;\n    }\n}\n\n@media (max-width: 480px) {\n    .bls-vision-section {\n        padding: 20px 10px;\n    }\n    .bls-card {\n        padding: 20px;\n    }\n    .bls-card-title {\n        font-size: 1.1em;\n    }\n    .bls-card-text {\n        font-size: 0.9em;\n    }\n}\n</style>\n\n<div class=\"bls-vision-section\">\n    <div class=\"bls-vision-header\">\n        <p class=\"bls-subtitle\">d\xc3\xa9l\xc3\xa9gation du togo</p>\n        <h2 class=\"bls-title\">nos origines</h2>\n    </div>\n\n    <div class=\"bls-cards-container\">\n        <div class=\"bls-card\">\n            <h3 class=\"bls-card-title\">histoire de la d\xc3\x89l\xc3\x89gation du togo</h3>\n            <p class=\"bls-card-text\">\n                la communaut\xc3\xa9 de lom\xc3\xa9 est la seule communaut\xc3\xa9 camillienne au togo depuis plus de 20 ans.\n                d'autres communaut\xc3\xa9s sont en cours de cr\xc3\xa9ation. elle accueillait principalement les\n                postulants camilliens, dont tout le cycle de philosophie se d\xc3\xa9roulait \xc3\xa0 l'institut de\n                philosophie des sal\xc3\xa9siens, situ\xc3\xa9 \xc3\xa0 akod\xc3\xa9ss\xc3\xa9wa.\n            </p>\n            <div class=\"bls-card-icon\">\n                <svg viewbox=\"0 0 24 24\" fill=\"none\" stroke=\"currentcolor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" class=\"feather feather-home\">\n                    <path d=\"m3 9l9-7 9 7v11a2 2 0 0 1-2 2h5a2 2 0 0 1-2-2z\"></path>\n                    <polyline points=\"9 22 9 12 15 12 15 22\"></polyline>\n                </svg>\n            </div>\n        </div>\n\n        <div class=\"bls-card\">\n            <h3 class=\"bls-card-title\">situation g\xc3\x89ographique</h3>\n            <p class=\"bls-card-text\">\n                la communaut\xc3\xa9 est situ\xc3\xa9e au quartier b\xc3\xa8-adakpam\xc3\xa8 colas, dans le doyenn\xc3\xa9 de lom\xc3\xa9 est 1,\n                sur le territoire de la paroisse sainte antoine de padoue d'adakpam\xc3\xa8. la c\xc3\xa9r\xc3\xa9monie de\n                pose de la premi\xc3\xa8re pierre s'est tenue le 15 juillet 2007, au lendemain de la f\xc3\xaate de\n                saint camille de lellis, sous la pr\xc3\xa9sidence de mgr philippe fanoko kpodzro.\n            </p>\n            <div class=\"bls-card-icon\">\n                <svg viewbox=\"0 0 24 24\" fill=\"none\" stroke=\"currentcolor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" class=\"feather feather-layers\">\n                    <polygon points=\"12 2 2 7 12 12 22 7 12 2\"></polygon>\n                    <polyline points=\"2 17 12 22 22 17\"></polyline>\n                    <polyline points=\"2 12 12 17 22 12\"></polyline>\n                </svg>\n            </div>\n        </div>\n\n        <div class=\"bls-card\">\n            <h3 class=\"bls-card-title\">objectifs de la cr\xc3\x89ation</h3>\n            <p class=\"bls-card-text\">\n                n\xc3\xa9e de la volont\xc3\xa9 de la province siculo-napolitaine d'\xc3\xa9tendre le charisme camillien au\n                togo, la mission avait pour objectif de d\xc3\xa9localiser le postulat et de permettre aux\n                postulants de s'exercer aux premiers soins. le centre de sant\xc3\xa9 saint camille a ainsi\n                ouvert ses portes le 22 novembre 2010, devenant un lieu de t\xc3\xa9moignage de la mis\xc3\xa9ricorde\n                du christ selon l'esprit de saint camille.\n            </p>\n            <div class=\"bls-card-icon\">\n                <svg viewbox=\"0 0 24 24\" fill=\"none\" stroke=\"currentcolor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" class=\"feather feather-globe\">\n                    <circle cx=\"12\" cy=\"12\" r=\"10\"></circle>\n                    <line x1=\"2\" y1=\"12\" x2=\"22\" y2=\"12\"></line>\n                    <path d=\"m12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"></path>\n                </svg>\n            </div>\n        </div>\n    </div>\n</div>\n<!-- /wp:html -->\n\n<!-- wp:html -->\n<style data-wp-block-html=\"css\">\n<style>\n.bls-vision-section {\n    font-family: -apple-system, blinkmacsystemfont, \"segoe ui\", roboto, oxygen-sans, ubuntu, cantarell, \"helvetica neue\", sans-serif; /* police similaire \xc3\xa0 l'image */\n    padding: 40px 20px;\n    background-color: #f8f8f8; /* couleur de fond g\xc3\xa9n\xc3\xa9rale si n\xc3\xa9cessaire */\n    text-align: center;\n    overflow: hidden; /* cache les \xc3\xa9l\xc3\xa9ments avant leur animation */\n}\n\n.bls-vision-header {\n    margin-bottom: 40px;\n}\n\n.bls-subtitle {\n    font-size: 0.9em;\n    color: #666;\n    letter-spacing: 2px;\n    text-transform: uppercase;\n    margin-bottom: 5px;\n    text-align: center;\n}\n\n.bls-title {\n    font-size: 2.5em;\n    color: #333;\n    margin-top: 0;\n    font-weight: bold;\ntext-align: center;\n}\n\n.bls-cards-container {\n    display: flex;\n    flex-wrap: wrap;\n    justify-content: center;\n    gap: 20px;\n    max-width: 1200px;\n    margin: 0 auto;\n}\n\n.bls-card {\n    background-color: #f3f0eb; /* couleur de fond des cartes */\n    border-radius: 15px;\n    padding: 30px;\n    box-shadow: 0 4px 8px rgba(0, 0, 0, 0.05);\n    flex: 1 1 300px; /* permet aux cartes de s'adapter */\n    max-width: 350px;\n    text-align: left;\n    display: flex;\n    flex-direction: column;\n    justify-content: space-between; /* pour pousser l'ic\xc3\xb4ne vers le bas */\n    position: relative; /* pour positionner l'ic\xc3\xb4ne */\n    min-height: 350px; /* hauteur minimale pour l'uniformit\xc3\xa9 */\n\n    /* animations */\n    opacity: 0;\n    transform: translatey(20px);\n    animation: fadeinup 0.8s ease-out forwards; /* animation de base */\n    transition: transform 0.3s ease, box-shadow 0.3s ease; /* transition pour le survol */\n}\n\n/* d\xc3\xa9lai pour l'animation \xc3\xa9chelonn\xc3\xa9e */\n.bls-card:nth-child(1) {\n    animation-delay: 0.1s;\n}\n.bls-card:nth-child(2) {\n    animation-delay: 0.3s;\n}\n.bls-card:nth-child(3) {\n    animation-delay: 0.5s;\n}\n\n/* effet de survol */\n.bls-card:hover {\n    transform: translatey(-5px); /* l\xc3\xa9g\xc3\xa8re \xc3\xa9l\xc3\xa9vation */\n    box-shadow: 0 8px 16px rgba(0, 0, 0, 0.1); /* ombre plus prononc\xc3\xa9e */\n}\n\n/* keyframes pour l'animation d'apparition */\n@keyframes fadeinup {\n    from {\n        opacity: 0;\n        transform: translatey(20px);\n    }\n    to {\n        opacity: 1;\n        transform: translatey(0);\n    }\n}\n\n.bls-card-title {\n    font-size: 1.3em;\n    color: #333;\n    margin-top: 0;\n    margin-bottom: 15px;\n    font-weight: bold;\n    text-transform: uppercase;\n}\n\n.bls-card-text {\n    font-size: 1em;\n    color: #555;\n    line-height: 1.6;\n    margin-bottom: 20px;\n}\n\n.bls-card-icon {\n    width: 50px;\n    height: 50px;\n    background-color: #e0dcd5; /* couleur de fond de l'ic\xc3\xb4ne */\n    border-radius: 50%;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    position: absolute;\n    bottom: 20px;\n    right: 20px;\n}\n\n.bls-card-icon svg {\n    width: 24px;\n    height: 24px;\n    color: #888; /* couleur de l'ic\xc3\xb4ne */\n}\n\n/* responsive adjustments */\n@media (max-width: 768px) {\n    .bls-title {\n        font-size: 2em;\n    }\n    .bls-cards-container {\n        flex-direction: column;\n        align-items: center;\n    }\n    .bls-card {\n        max-width: 90%;\n    }\n}\n\n@media (max-width: 480px) {\n    .bls-vision-section {\n        padding: 20px 10px;\n    }\n    .bls-card {\n        padding: 20px;\n    }\n    .bls-card-title {\n        font-size: 1.1em;\n    }\n    .bls-card-text {\n        font-size: 0.9em;\n    }\n}\n</style>\n</style>\n\n<div class=\"bls-vision-section\">\n    <div class=\"bls-vision-header\">\n        <p class=\"bls-subtitle\">d\xc3\xa9l\xc3\xa9gation du togo</p>\n        <h2 class=\"bls-title\">notre fondation</h2>\n    </div>\n\n    <div class=\"bls-cards-container\">\n\n        <div class=\"bls-card\">\n            <h3 class=\"bls-card-title\">cr\xc3\x89ation (2006)</h3>\n            <p class=\"bls-card-text\">\n                le 24 novembre 2006, la mission camillienne est officiellement fond\xc3\xa9e \xc3\xa0 lom\xc3\xa9 avec\n                l'arriv\xc3\xa9e de deux religieux : le fr\xc3\xa8re laurent dossou-kiti, originaire du b\xc3\xa9nin,\n                et le p\xc3\xa8re l\xc3\xa9on kodjo zotchi, du togo. leur mission est de poser les bases de la\n                pr\xc3\xa9sence camillienne et de d\xc3\xa9velopper l'\xc5\x93uvre de saint camille au togo.\n            </p>\n            <div class=\"bls-card-icon\">\n                <svg viewbox=\"0 0 24 24\" fill=\"none\" stroke=\"currentcolor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" class=\"feather feather-home\">\n                    <path d=\"m3 9l9-7 9 7v11a2 2 0 0 1-2 2h5a2 2 0 0 1-2-2z\"></path>\n                    <polyline points=\"9 22 9 12 15 12 15 22\"></polyline>\n                </svg>\n            </div>\n        </div>\n\n        <div class=\"bls-card\">\n            <h3 class=\"bls-card-title\">le postulat (2008\xe2\x80\x932017)</h3>\n            <p class=\"bls-card-text\">\n                en septembre 2008, la communaut\xc3\xa9 accueille les neuf premiers postulants. sept\n                promotions se succ\xc3\xa8dent jusqu'en 2017, faisant de la maison de lom\xc3\xa9 un v\xc3\xa9ritable\n                lieu de formation. en 2010, les postulants des carmes d\xc3\xa9chaux y sont \xc3\xa9galement\n                accueillis temporairement pour leur parcours de formation.\n            </p>\n            <div class=\"bls-card-icon\">\n                <svg viewbox=\"0 0 24 24\" fill=\"none\" stroke=\"currentcolor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" class=\"feather feather-layers\">\n                    <polygon points=\"12 2 2 7 12 12 22 7 12 2\"></polygon>\n                    <polyline points=\"2 17 12 22 22 17\"></polyline>\n                    <polyline points=\"2 12 12 17 22 12\"></polyline>\n                </svg>\n            </div>\n        </div>\n\n        <div class=\"bls-card\">\n            <h3 class=\"bls-card-title\">changements depuis 2017</h3>\n            <p class=\"bls-card-text\">\n                \xc3\x80 la suite du chapitre d'atrokpocodji, la maison de lom\xc3\xa9 est transform\xc3\xa9e en centre\n                de sant\xc3\xa9 avec r\xc3\xa9sidence des religieux. le centre obtient son autorisation de\n                conversion en h\xc3\xb4pital priv\xc3\xa9, concr\xc3\xa9tisant ainsi le r\xc3\xaave de feue maman pauline\n                tchakpali, g\xc3\xa9n\xc3\xa9reuse donatrice du terrain.\n            </p>\n            <div class=\"bls-card-icon\">\n                <svg viewbox=\"0 0 24 24\" fill=\"none\" stroke=\"currentcolor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" class=\"feather feather-globe\">\n                    <circle cx=\"12\" cy=\"12\" r=\"10\"></circle>\n                    <line x1=\"2\" y1=\"12\" x2=\"22\" y2=\"12\"></line>\n                    <path d=\"m12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"></path>\n                </svg>\n            </div>\n        </div>\n\n    </div>\n</div>\n<!-- /wp:html -->\n\n<!-- wp:html -->\n<style data-wp-block-html=\"css\">\n<style>\n/* styles g\xc3\xa9n\xc3\xa9raux pour les nouvelles sections */\n.bls-section {\n    font-family: -apple-system, blinkmacsystemfont, \"segoe ui\", roboto, oxygen-sans, ubuntu, cantarell, \"helvetica neue\", sans-serif;\n    padding: 60px 20px;\n    text-align: center;\n    background-color: #f8f8f8;\n    overflow: hidden;\n}\n\n.bls-section:nth-of-type(even) {\n    background-color: #f3f0eb;\n}\n\n.bls-team-section .bls-title, .bls-mission-section .bls-title {\n    margin-bottom: 40px;\n    color: #333;\n    font-size: 2.5em;\n    font-weight: bold;\ntext-align: center;\n}\n\n/* styles pour l'\xc3\x89quipe dirigeante - forc\xc3\xa9 sur une ligne */\n.bls-team-cards-container {\n    display: flex;\n    flex-wrap: nowrap; /* emp\xc3\xaache le passage \xc3\xa0 la ligne */\n    justify-content: center;\n    gap: 30px;\n    max-width: 1200px;\n    margin: 0 auto;\n}\n\n.bls-team-card {\n    background-color: #ffffff;\n    border-radius: 15px;\n    padding: 30px;\n    box-shadow: 0 4px 15px rgba(0, 0, 0, 0.08);\n    flex: 1 1 50%; /* chaque carte prend 50% de l'espace disponible */\n    text-align: left;\n    border-left: 5px solid #5a7d9a;\n\n    /* animations */\n    opacity: 0;\n    transform: translatey(30px);\n    animation: fadeinup 0.8s ease-out forwards;\n    transition: transform 0.3s ease, box-shadow 0.3s ease;\n}\n\n.bls-team-card:nth-child(1) {\n    animation-delay: 0.2s;\n}\n\n.bls-team-card:nth-child(2) {\n    border-left: 5px solid #b8860b;\n    animation-delay: 0.4s;\n}\n\n.bls-team-card:hover {\n    transform: translatey(-5px);\n    box-shadow: 0 8px 20px rgba(0, 0, 0, 0.12);\n}\n\n.bls-team-card-title {\n    font-size: 1.5em;\n    color: #333;\n    margin-top: 0;\n    margin-bottom: 20px;\n    font-weight: bold;\n    text-transform: uppercase;\n    border-bottom: 2px solid rgba(0, 0, 0, 0.1);\n    padding-bottom: 10px;\n}\n\n.bls-team-list {\n    list-style: none;\n    padding: 0;\n    margin: 0;\n}\n\n.bls-team-list li {\n    margin-bottom: 10px;\n    line-height: 1.6;\n    color: #555;\n}\n\n.bls-member-name {\n    font-weight: bold;\n    color: #333;\n}\n\n/* styles pour notre mission */\n.bls-mission-content {\n    max-width: 900px;\n    margin: 0 auto;\n    text-align: justify;\n    color: #444;\n    font-size: 1.1em;\n    line-height: 1.8;\n}\n\n.bls-mission-content p {\n    margin-bottom: 1.5em;\n}\n\n.bls-mission-content blockquote {\n    background-color: #e0dcd5;\n    border-left: 5px solid #5a7d9a;\n    margin: 30px 0;\n    padding: 20px 30px;\n    font-style: italic;\n    color: #333;\n    position: relative;\n    border-radius: 5px;\n    box-shadow: 0 2px 8px rgba(0, 0, 0, 0.05);\n}\n\n.bls-mission-content blockquote p {\n    margin-bottom: 10px;\n}\n\n.bls-mission-content blockquote cite {\n    display: block;\n    text-align: right;\n    font-size: 0.9em;\n    color: #666;\n    margin-top: 15px;\n}\n\n/* animations pour la section mission */\n.animate-element {\n    opacity: 0;\n    transform: translatey(20px);\n    animation: fadeinup 0.8s ease-out forwards;\n}\n\n.delay-1 { animation-delay: 0.2s; }\n.delay-2 { animation-delay: 0.4s; }\n.delay-3 { animation-delay: 0.6s; }\n.delay-4 { animation-delay: 0.8s; }\n\n/* keyframes pour l'animation d'apparition */\n@keyframes fadeinup {\n    from {\n        opacity: 0;\n        transform: translatey(30px);\n    }\n    to {\n        opacity: 1;\n        transform: translatey(0);\n    }\n}\n\n/* responsive adjustments */\n@media (max-width: 768px) {\n    /* sur mobile, on empile les cartes pour qu'elles restent lisibles */\n    .bls-team-cards-container {\n        flex-wrap: wrap; \n    }\n    .bls-team-card {\n        flex: 1 1 100%;\n    }\n    \n    .bls-team-section .bls-title, .bls-mission-section .bls-title {\n        font-size: 2em;\n    }\n    .bls-section {\n        padding: 40px 15px;\n    }\n    .bls-mission-content {\n        font-size: 1em;\n    }\n    .bls-mission-content blockquote {\n        padding: 15px 20px;\n    }\n}\n\n@media (max-width: 480px) {\n    .bls-team-card-title {\n        font-size: 1.3em;\n    }\n    .bls-team-list li {\n        font-size: 0.9em;\n    }\n}\n</style>\n\n<div class=\"bls-section bls-team-section\">\n    <div class=\"bls-vision-header\">\n        <h2 class=\"bls-title animate-element\">\xc3\x89quipe dirigeante</h2>\n    </div>\n    <div class=\"bls-team-cards-container\">\n        <div class=\"bls-team-card\">\n            <h3 class=\"bls-team-card-title\">conseil d'administration</h3>\n            <ul class=\"bls-team-list\">\n                <li><span class=\"bls-member-name\">p\xc3\xa8re jean pierre pius bida</span> \xe2\x80\x94 provincial, pr\xc3\xa9sident</li>\n                <li><span class=\"bls-member-name\">p\xc3\xa8re marius yabi</span> \xe2\x80\x94 vicaire provincial, vice-pr\xc3\xa9sident</li>\n                <li><span class=\"bls-member-name\">p\xc3\xa8re josu\xc3\xa9 loko</span> \xe2\x80\x94 secr\xc3\xa9taire</li>\n                <li><span class=\"bls-member-name\">p\xc3\xa8re augustin gbegnahoun</span> \xe2\x80\x94 \xc3\x89conome provincial</li>\n                <li><span class=\"bls-member-name\">p\xc3\xa8res augustin etse, hugues gozo, ferdinand todote, emmanuel dogbovi, ghislain missiho, casimir guezo</span> \xe2\x80\x94 membres</li>\n            </ul>\n        </div>\n        <div class=\"bls-team-card\">\n            <h3 class=\"bls-team-card-title\">\xc3\x89quipe de lom\xc3\x89</h3>\n            <ul class=\"bls-team-list\">\n                <li><span class=\"bls-member-name\">p\xc3\xa8re denis kpatkana</span> \xe2\x80\x94 sup\xc3\xa9rieur de la communaut\xc3\xa9</li>\n                <li><span class=\"bls-member-name\">p\xc3\xa8re emmanuel beweli</span> \xe2\x80\x94 directeur de l'h\xc3\xb4pital saint camille</li>\n                <li><span class=\"bls-member-name\">p\xc3\xa8re roberto koudadje</span> \xe2\x80\x94 directeur adjoint</li>\n                <li><span class=\"bls-member-name\">p\xc3\xa8re augustin etse</span> \xe2\x80\x94 \xc3\x89conome principal</li>\n                <li><span class=\"bls-member-name\">p\xc3\xa8re rom\xc3\xa9o akpegnon</span> \xe2\x80\x94 \xc3\x89conome adjoint</li>\n                <li><span class=\"bls-member-name\">p\xc3\xa8re emmanuel dogbovi</span> \xe2\x80\x94 m\xc3\xa9decin chef</li>\n            </ul>\n        </div>\n    </div>\n</div>\n\n<div class=\"bls-section bls-mission-section\">\n    <div class=\"bls-vision-header\">\n        <h2 class=\"bls-title animate-element\">notre mission</h2>\n    </div>\n    <div class=\"bls-mission-content\">\n        <blockquote class=\"animate-element delay-1\">\n            <p>\xc2\xab notre institut, de par sa nature, est form\xc3\xa9 de religieux clercs et de religieux la\xc3\xafcs, appel\xc3\xa9s par saint camille p\xc3\xa8res et fr\xc3\xa8res. il a pour objectif le service global du malade dans toutes les dimensions de sa personne. \xc2\xbb</p>\n            <cite>\xe2\x80\x94 constitution des ministres des infirmes, article n\xc2\xb043</cite>\n        </blockquote>\n        <p class=\"animate-element delay-2\">j\xc3\xa9sus-christ est pass\xc3\xa9 en faisant le bien, et ce bien nous voulons le faire pour tous les malades, en toutes circonstances (actes des ap\xc3\xb4tres 10, 38). c'est lui, le malade, qui dit : \xc2\xab j'\xc3\xa9tais malade \xc2\xbb \xe2\x80\x94 \xc2\xab c'est \xc3\xa0 moi que vous l'avez fait \xc2\xbb (cf. mt 25, 31-40).</p>\n        <p class=\"animate-element delay-3\">l'activit\xc3\xa9 des professionnels de la sant\xc3\xa9 a une valeur inestimable de service envers la vie \xe2\x80\x94 un engagement profond\xc3\xa9ment humain et chr\xc3\xa9tien, une v\xc3\xa9ritable \xc2\xab forme de t\xc3\xa9moignage chr\xc3\xa9tien \xc2\xbb.</p>\n        <blockquote class=\"animate-element delay-4\">\n            <p>prendre soin d'un malade avec amour, c'est s'acquitter d'une mission divine. le professionnel de sant\xc3\xa9 est le bon samaritain qui s'arr\xc3\xaate aupr\xc3\xa8s de l'homme bless\xc3\xa9 et se fait son prochain (cf. lc 10, 29-37).</p>\n            <p>servir la vie, c'est servir dieu en l'homme \xe2\x80\x94 \xc3\xaatre collaborateur de dieu en redonnant la sant\xc3\xa9 au corps malade.</p>\n            <cite>\xe2\x80\x94 charte des professionnels de la sant\xc3\xa9, cit\xc3\xa9 du vatican, 1995</cite>\n        </blockquote>\n    </div>\n</div>\n<!-- /wp:html -->||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 35.194.153.62
country_id: 1668284
domain: soena.tg
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/backend/.git/config||RSV:8.21||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.24.66.1
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 34.24.66.1: 80 connections per 30 seconds to 443 port.


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 35.187.208.229
country_id: 1861060
domain: sophie-immobilier.tg.154-70-82-246.cpanel.site
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/dashboard/.git/config||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 114.104.153.51
country_id: 1814991
description:
Jun 28 23:55:43 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 114.104.153.51 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.198.128.204
country_id: 1835841
description:
Jun 28 23:55:01 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.198.128.204 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.182.58.197
country_id: 1814991
description:
2026-06-28 23:56:31 dovecot_login authenticator failed for H=(sggusf) [123.182.58.197]:53933: 535 Incorrect authentication data (set_id=info)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.198.128.204
country_id: 1835841
description:
Jun 28 23:56:27 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.198.128.204 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 112.133.27.37
country_id: 1835841
description:
Jun 28 23:56:50 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 112.133.27.37 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
description:
[2026-06-28 23:56:55 +0000] info [cpaneld] 103.65.237.227 -  waywcbyw  "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.182.58.197
country_id: 1814991
description:
2026-06-28 23:56:57 dovecot_login authenticator failed for H=(uspme) [123.182.58.197]:54761: 535 Incorrect authentication data (set_id=info@cafe.tg)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 143.92.38.229
country_id: 1880251
description:
Denial of Service (DoS) attack was discovered from 143.92.38.229: 80 connections per 30 seconds to 443 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 143.92.38.224
country_id: 1880251
description:
Denial of Service (DoS) attack was discovered from 143.92.38.224: 80 connections per 30 seconds to 443 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 143.92.38.190
country_id: 1880251
description:
Denial of Service (DoS) attack was discovered from 143.92.38.190: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.216.58.204
country_id: 1835841
description:
Jun 28 23:58:06 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.216.58.204 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 58.115.51.246
country_id: 1668284
description:
Jun 28 23:58:31 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 58.115.51.246 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 58.115.51.246
country_id: 1668284
description:
2026-06-28 23:58:33 dovecot_login authenticator failed for H=([87.245.211.37]) [58.115.51.246]:47359: 535 Incorrect authentication data (set_id=dguedikouma@otr.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.4.81.106
country_id: 1562822
description:
Jun 28 23:58:39 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.4.81.106 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.192.226.83
country_id: 2017370
description:
2026-06-28 23:59:48 dovecot_login authenticator failed for H=([115.190.220.166]) [62.192.226.83]:49844: 535 Incorrect authentication data (set_id=j_essoh@centif.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.192.226.83
country_id: 2017370
description:
Jun 28 23:59:46 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.192.226.83 has been locked due to Imunify RBL


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 105.101.28.145
country_id: 2589581
description:
Jun 29 00:01:51 ns5 pure-ftpd[737713]: (?@105.101.28.145) [WARNING] Authentication failed for user [rappels]


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 31.24.158.52
country_id: 2510769
domain: www.togosem.com
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 94.78.89.20
country_id: 298795
description:
Jun 29 00:04:39 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 94.78.89.20 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 156.231.70.9
country_id: 1861060
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2023/03/Page-3-C.jpg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 102.90.61.8
country_id: 2328926
description:
Denial of Service (DoS) attack was discovered from 102.90.61.8: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.186.98.226
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 34.186.98.226: 80 connections per 30 seconds to 443 port.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 112.40.184.145
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1755729114 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.174.253.61
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 34.174.253.61: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.212.228.74
country_id: 1880251
description:
[2026-06-29 00:09:06 +0000] info [cpaneld] 129.212.228.74 - mouss "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mouss (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 119.116.72.18
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/11/images-24-300x168.jpeg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.152
country_id: 2635167
description:
[2026-06-29 00:12:17 +0000] info [cpaneld] 5.230.133.152 NEW wcnyaruu:cP7jSniInetCkK0b address=5.230.133.152,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 3.228.170.254
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 3.228.170.254: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 116.62.147.43
country_id: 1814991
description:
2026-06-29 00:14:32 dovecot_plain authenticator failed for H=(nbhd7hmplt3lenb33mlb) [116.62.147.43]:58360: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 39.100.91.113
country_id: 1814991
description:
Jun 29 00:14:29 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 39.100.91.113 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 154.196.36.240
country_id: 2921044
domain: www.snb.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:154.196.36.240||TA:154.196.36.240||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 31.24.158.52
country_id: 2510769
domain: togosem.com
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/4?_fields=id,slug,roles||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.203.137.246
country_id: 192950
domain: soena.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/soena.tg/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.166.248.160
country_id: 1880251
description:
[2026-06-29 00:20:12 +0000] info [cpaneld] 188.166.248.160 - admin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 195.64.250.15
country_id: 690791
description:
Jun 29 00:22:35 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 195.64.250.15 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 217.26.179.56
country_id: 3175395
description:
Jun 29 00:22:18 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 217.26.179.56 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 168.0.227.214
country_id: 3469034
description:
Jun 29 00:24:22 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 168.0.227.214 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.141
country_id: 3469034
description:
Jun 29 00:25:25 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.141 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-29 00:25:41 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:43222: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.86.152.168
country_id: 1880251
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/06/insgnia.jpg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.173.174.227
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/product-category/restaurant/pizzavi/assiettes/?add-to-cart=3662||QS:add-to-cart=3662||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.217.206.223
country_id: 241170
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2022/12/tamberma.jpg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 101.31.130.140
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1783793451 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 138.252.88.3
country_id: 1210997
description:
138.252.88.3 - - [29/Jun/2026:00:36:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7259754&pdata=https%253A%252F%252Fucao-uut.tg%252Fformation-recherche%252Fdiplomes%252Flicence-informatique%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782693368 HTTP/2.0" 302 0 ucao-uut.tg "https://ucao-uut.tg/formation-recherche/diplomes/licence-informatique/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.5213.1307 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:138.252.88.3


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 143.44.169.226
country_id: 1694008
description:
Jun 29 00:38:39 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 143.44.169.226 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 143.44.169.226
country_id: 1694008
description:
2026-06-29 00:38:41 dovecot_plain authenticator failed for H=(localhost) [143.44.169.226]:17545: 535 Incorrect authentication data (set_id=support@mesyscom.com)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:fb4e9c5c38297ca4a37a7ab544752c4e2c6a98b3||Title:jq7saobg63ycxq||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.120.73.105
country_id: 3469034
description:
Jun 29 00:40:34 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.120.73.105 has been locked due to Imunify RBL


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 196.170.73.165
country_id: 2363686
description:
Denial of Service (DoS) attack was discovered from 196.170.73.165: 80 connections per 30 seconds to 443 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.186.31.205
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 34.186.31.205: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 95.0.32.188
country_id: 298795
description:
Jun 29 00:40:14 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 95.0.32.188 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.237.58.63
country_id: 1269750
description:
Jun 29 00:41:17 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.237.58.63 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 196.170.73.165
country_id: 2363686
description:
196.170.73.165 - - [29/Jun/2026:00:40:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13070230&pdata=https%253A%252F%252Fwww.togosem.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782693656 HTTP/2.0" 302 0 www.togosem.com "https://www.togosem.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:196.170.73.165


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:5428074ee89d1228c42c3dd6b744efc335a00093||Title:qzadr0o54r2sg5||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:2506f0b2361617d6bc41c46381d46922824b9f6a||Title:7762d5ac09ci8z4rrq||RSV:8.21||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 35.224.0.173
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 35.224.0.173: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.101.207
country_id: 3865483
description:
Jun 29 00:43:45 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.101.207 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0b1b722c165edb996dbca7562be037abe4eb0a18||Title:xqnf28axhbra2zgs1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 20.212.169.175
country_id: 1880251
description:
[2026-06-29 00:43:41 +0000] info [cpaneld] 20.212.169.175 - czqxxxnu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User czqxxxnu has their account suspended. Login blocked.


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:6d6966b28819132bc77ef67f9b9590dae3bf5322||Title:0afl89vfzo1i7o||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.101.207
country_id: 3865483
description:
Jun 29 00:43:59 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.101.207 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ce8947bab4b21e7929315a922c1725df287da7e1||Title:b462glmu9b0tzxccmy||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 18.221.177.191
country_id: 6252001
description:
18.221.177.191 - - [29/Jun/2026:00:45:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9856917&pdata=https%253A%252F%252Fns5.netmaster.tg%253A2083%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782693942 HTTP/2.0" 302 0 ns5.netmaster.tg "https://ns5.netmaster.tg:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:18.221.177.191


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 18.221.177.191
country_id: 6252001
description:
[2026-06-29 00:45:49 +0000] info [cpaneld] 18.221.177.191 - AWADI "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user AWADI (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:c2c0d799e8bf19f33ab08ff3d53bfd75d3cfcb47||Title:n4gn5jn1zlwbxzob5x||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 209.242.192.51
country_id: 3017382
description:
209.242.192.51 - - [29/Jun/2026:00:46:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9922659&pdata=https%253A%252F%252Flibertetogo.tg%252Findex.php%252Ftag%252Funion-africaine-des-consommateurs%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782694008 HTTP/2.0" 302 0 libertetogo.tg "https://libertetogo.tg/index.php/tag/union-africaine-des-consommateurs/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.1554.1822 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:209.242.192.51


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0dbaca381c25da8d95a812a6e579bb925626a6ef||Title:l49w8pk8dx0l9b||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.91.164.131
country_id: 3469034
description:
Jun 29 00:46:55 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.91.164.131 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d2671bc78502c250351c9838c43bc88475b3afe6||Title:it0tsyc9ugsbbxs7s||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d1afc3a57c05a89ef2e469917b5d43aedc3d4e5b||Title:v49trvxjw88gzptv6||RSV:8.21||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.175.220.155
country_id: 2510769
description:
Denial of Service (DoS) attack was discovered from 34.175.220.155: 80 connections per 30 seconds to 443 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 8.230.127.232
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 8.230.127.232: 80 connections per 30 seconds to 443 port.


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ad04370bd30b18ef81ea4be20663336fd091cf16||Title:qa4bb3buto7iyw1ke||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b27f8d66398a9785f669449cecafd09b18376e84||Title:3w333fnzeui3yz||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:311b1aaed8122e3b9ad9b330050a65a54d28df69||Title:ni9syasp3v1tju||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:de10df357f4a7a0cf0e0287b363f66bdea85938e||Title:eh4adrkr8shbd33||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:e6aa09c676ac7344659d057f43c45765f0c67571||Title:jjfkla0r21mfoi||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.212.228.74
country_id: 1880251
description:
[2026-06-29 00:55:12 +0000] info [cpaneld] 129.212.228.74 - web_tv "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user web_tv (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:87a1ce0171054bc7a6f251b59f9fe9b594f4af2d||Title:3vc10canj72xqs2||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:9928d312e91ca34e3788ca0d033e960656c3c28e||Title:09rtojy5a15itoes7j||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 39.100.91.113
country_id: 1814991
description:
Jun 29 00:56:27 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 39.100.91.113 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:c29afbec833375e13d4beddaefa6a4b668273dd7||Title:h4wlc43deogs8g8m||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 78.159.126.48
country_id: 2921044
domain: test.free.netmaster.tg
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.21||T:APACHE||MV:/images/images/cache.php||SC:/home/hphhdcxi/public_html/images||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a08e460e75564b22c34c7db191af81c9ac313fcd||Title:irs2xoybeuefrz||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:dd7cb166fd2045adc8015cb4fa4c68664e3cb8b1||Title:cdc63cco8j08o0i707||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.131.220.135
country_id: 1835841
description:
2026-06-29 00:59:48 dovecot_login authenticator failed for H=([223.86.148.242]) [121.131.220.135]:55254: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 198.142.152.124
country_id: 2077456
description:
Denial of Service (DoS) attack was discovered from 198.142.152.124: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 121.131.220.135
country_id: 1835841
description:
Jun 29 00:59:46 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 121.131.220.135 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:09fcbfd18237fb82cddb72fcb75e2a9ad35ba980||Title:4gyf5qa7hosyo8xc5||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.0.127
country_id: 2300660
description:
Jun 29 01:00:43 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.0.127 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:205c9e235e64f803461a1b19ee1922e6c350bddc||Title:6yxxb07nlaazuwnq||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.0.127
country_id: 2300660
description:
Jun 29 01:00:58 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.0.127 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 116.109.70.49
country_id: 1562822
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b7a606ca56d831e1018856c5408a68e8c160a56b||Title:ej5xk4pczohzc7c2ah||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 177.136.93.11
country_id: 3469034
description:
177.136.93.11 - - [29/Jun/2026:01:03:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6843500&pdata=https%253A%252F%252Fcivilemagazine.tg%252Fvisage-parfait-comment-avoir-une-belle-peau%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782694981 HTTP/2.0" 302 0 civilemagazine.tg "https://civilemagazine.tg/visage-parfait-comment-avoir-une-belle-peau/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.3366.1077 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:177.136.93.11


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.216.26.147
country_id: 798544
description:
Jun 29 01:06:21 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.216.26.147 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:87541caf741b08d5636f3f32eaa18f90004511dc||Title:c8keg8id1f2hiy5sn||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1062596bceed90252ed4a0ab4d2d3c815371bdc3||Title:4mank069kl4v2e5q||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:2660ac98535f00c688ca5d57a272b7258f6d12a4||Title:sp5lfxm77blu6lx||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a15b50146c85502c8bad2541d22cd8f76a38665e||Title:4buw0qc5ux3p2e83wv||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1a97042436d73abe42a750b06ff73cb9b0568de4||Title:u0dwof4wk2dypnup||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:158bcbd4e5d02b94f60c554a31e211aa563106ef||Title:lnbejfnckvqle0ux||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:994d4f84fa87fdc8a98800a9a030c645a65bdbf7||Title:zy77rmoaukr60i||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:72fde1687d90ca02f4dba0700f4f2e65e77f395b||Title:09qpn3z9obnhh9||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:23d484faaae4ea2c03a013c382387782d36b65d8||Title:mtcvl9hub6t4ez||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:12765766b19e045ec02cb1a7105b382fb17c7bec||Title:i1ztyzy36d4a7fbcuv||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:5a12b21862a5cfdab68a0616b5f58856c99c7349||Title:juuhwa9kqctskea6i||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ae3902b179a331bdd8913bd90f838aeb17a9fcdc||Title:cl0u9859nptbvcw||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.74
country_id: 2635167
description:
[2026-06-29 01:19:34 +0000] info [cpaneld] 5.230.153.74 NEW wcnyaruu:0jI2EdhO6bRfJDW4 address=5.230.153.74,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77350309
name: IM360 WAF: Hidden file access
abuser: 5.231.255.174
country_id: 3017382
domain: lcr-adem.org
description:
IM360 WAF: Hidden file access||RSV:8.21||T:APACHE||QS:to=apoirier@budgetblindschwk.onmicrosoft.com||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 96.232.163.154
country_id: 6252001
description:
96.232.163.154 - - [29/Jun/2026:01:19:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13144423&pdata=https%253A%252F%252Fcfpj.tg%252Feedo-18826qitems%252Feti.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782695974 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/eedo-18826qitems/eti.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:96.232.163.154


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:52937b97ba460ecb99ac1cadcb1973ec4cae197f||Title:gymcjccs868185z||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:bfbe70ce2a8cf7406cbd7cfd5c8a41f7eca80c85||Title:a38mk26zbby9zr62||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.212.228.74
country_id: 1880251
description:
[2026-06-29 01:19:55 +0000] info [cpaneld] 129.212.228.74 - hcbcmrio "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: User hcbcmrio has their account suspended. Login blocked.


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d0e0aa0089828d6472dd1d460383bce79535c590||Title:a2o4vgy58fey82of||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d3bb96325795e71e144cf7ce2d9461a749190186||Title:dtjps54u4c17lmvuq||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:201528bd9ffc792d89756cc4eaf8c17e928c506c||Title:p1m8jsq6pjdi30go||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.162
country_id: 1880251
description:
47.128.121.162 - - [29/Jun/2026:01:24:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9857643&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252Fmusellement-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782696252 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/tag/musellement-togo/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.162


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:91b663c217354fb3b233f9344fe1d4bb171c1883||Title:k9zonzpjdyautws||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:455c183fb2630336f29e38b4e12dc8665744c800||Title:ay24i06ip1kh49e||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 212.119.41.206
country_id: 294640
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:212.119.41.206||TA:212.119.41.206||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d66deec751a390e15228bf66d6e607ec6457de7b||Title:as8ivbt8qgi2m4g34g||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:2c8fff3bdb662208648007d0a344773458e8862c||Title:39pc8zz1wdg8r33||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:96b1722781e6d1ee795d5196664691f1fa221e5e||Title:jt1kzp9w8ldkbz0a||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:aaf9ce1718bf325d2441d4dede991172bd65ae8f||Title:o5o9e0kd7qm5iy5w||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:30bccc55d50ba6c1cad37ba89f692bd7fba10b84||Title:0kasorthzts7hm||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:472baf66ae6f59c05a27bd852a554b811c8a791b||Title:scubl1yzefufr9y17y||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:c25e2e739c30d110dcdbd8ec72a53db66c49d42a||Title:k9mu88apoywg1jq1gn||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 195.133.250.173
country_id: 2017370
description:
2026-06-29 01:33:07 dovecot_plain authenticator failed for H=(h0s9f8kogwt0eomog) [195.133.250.173]:49159: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.241.206.125
country_id: 1643084
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1bf9ecc08ab66f5657ab213a6a044235538323d4||Title:bbvrbkygso9sbf5d||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.166.248.160
country_id: 1880251
description:
[2026-06-29 01:33:59 +0000] info [cpaneld] 188.166.248.160 - ingertgsarl "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77350307
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 104.207.40.198
country_id: 6252001
domain: civilemagazine.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:wadminw||User:aifkjzqm||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350307
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 65.111.7.122
country_id: 6252001
domain: civilemagazine.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:yanz@123457||User:aifkjzqm||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 39.100.91.113
country_id: 1814991
description:
Jun 29 01:38:07 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 39.100.91.113 has been locked due to Imunify RBL


plugin: modsec
rule: 77350307
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 104.207.37.180
country_id: 6252001
domain: civilemagazine.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:trumpweiss||User:aifkjzqm||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 209.101.128.145
country_id: 798549
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:01-42.209.101.128.145||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 64.81.190.143
country_id: 798549
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:01-42.64.81.190.143||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 45.10.156.228
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:01-42.45.10.156.228||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 191.101.127.124
country_id: 2921044
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:01-42.191.101.127.124||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 209.101.128.145
country_id: 798549
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:01-43.209.101.128.145||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 64.81.190.90
country_id: 798549
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:01-43.64.81.190.90||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 188.255.196.185
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:01-42.188.255.196.185||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 64.81.190.143
country_id: 798549
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:01-43.64.81.190.143||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 151.243.174.196
country_id: 798544
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:01-42.151.243.174.196||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 151.243.174.31
country_id: 798544
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:01-43.151.243.174.31||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 173.244.41.141
country_id: 6252001
domain: www.arse.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:173.244.41.141||TA:173.244.41.141||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 37.187.154.156
country_id: 3017382
description:
Denial of Service (DoS) attack was discovered from 37.187.154.156: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 20.212.169.175
country_id: 1880251
description:
[2026-06-29 01:50:41 +0000] info [cpaneld] 20.212.169.175 - rolle "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rolle (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 118.160.144.182
country_id: 1668284
description:
[2026-06-29 01:52:46 +0000] info [cpaneld] 118.160.144.182 NEW wcnyaruu:iSInwyvo3RVNkvgK address=118.160.144.182,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.83.181.142
country_id: 1643084
description:
[2026-06-29 01:57:19 +0000] info [cpaneld] 178.83.181.142 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 20.212.169.175
country_id: 1880251
description:
[2026-06-29 02:00:28 +0000] info [cpaneld] 20.212.169.175 - esso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user esso (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.48
country_id: 6252001
description:
205.169.39.48 - - [29/Jun/2026:02:02:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9738647&pdata=http%253A%252F%252Fevamegroup.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782698529 HTTP/1.1" 302 0 evamegroup.tg "http://evamegroup.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.48


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.19
country_id: 6252001
description:
205.169.39.19 - - [29/Jun/2026:02:02:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9792611&pdata=http%253A%252F%252Fevamegroup.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782698520 HTTP/1.1" 302 0 evamegroup.tg "http://evamegroup.tg/" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_1 like Mac OS X) AppleWebKit/603.1.30 (KHTML, like Gecko) Version/10.0 Mobile/14E304 Safari/602.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.19


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.58
country_id: 6252001
description:
205.169.39.58 - - [29/Jun/2026:02:02:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6800485&pdata=https%253A%252F%252Fevamegroup.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782698526 HTTP/2.0" 302 0 evamegroup.tg "https://evamegroup.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.58


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.25
country_id: 6252001
description:
205.169.39.25 - - [29/Jun/2026:02:02:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7249092&pdata=http%253A%252F%252Fevamegroup.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782698519 HTTP/1.1" 302 0 evamegroup.tg "http://evamegroup.tg/" "Mozilla/5.0 (Linux; Android 7.0; SM-G930V Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.25


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 134.56.217.34
country_id: 6252001
description:
[2026-06-29 02:04:00 +0000] info [whostmgrd] 134.56.217.34 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.182.213.3
country_id: 6252001
description:
[2026-06-29 02:03:57 +0000] info [whostmgrd] 107.182.213.3 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.136.35.97
country_id: 6252001
description:
[2026-06-29 02:03:57 +0000] info [cpaneld] 169.136.35.97 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 23.245.71.202
country_id: 6252001
description:
[2026-06-29 02:04:06 +0000] info [whostmgrd] 23.245.71.202 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.168.243.210
country_id: 6252001
description:
[2026-06-29 02:04:01 +0000] info [cpaneld] 73.168.243.210 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 199.84.218.244
country_id: 6252001
description:
199.84.218.244 - - [29/Jun/2026:02:04:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10130072&pdata=http%253A%252F%252Fevamegroup.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782698695 HTTP/1.1" 302 0 evamegroup.tg "http://evamegroup.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:199.84.218.244


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 138.186.106.178
country_id: 3469034
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/13.jpeg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.120.203
country_id: 1880251
description:
47.128.120.203 - - [29/Jun/2026:02:08:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10132632&pdata=https%253A%252F%252Flibertetogo.tg%252Findex.php%252Fau-togo-la-paix-sans-le-pain%252Fnon-classe%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782698898 HTTP/2.0" 302 0 libertetogo.tg "https://libertetogo.tg/index.php/au-togo-la-paix-sans-le-pain/non-classe/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.120.203


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.53.42.101
country_id: 3469034
description:
Jun 29 02:09:16 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.53.42.101 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.44
country_id: 6252001
description:
205.169.39.44 - - [29/Jun/2026:02:10:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13394329&pdata=http%253A%252F%252Fsahamtg.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782699038 HTTP/1.1" 302 0 sahamtg.com "http://sahamtg.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.44


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.24.88.255
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 34.24.88.255: 80 connections per 30 seconds to 2096 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.67.244.133
country_id: 1643084
description:
Jun 29 02:11:22 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.67.244.133 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 177.223.49.21
country_id: 3469034
description:
[2026-06-29 02:11:33 +0000] info [cpaneld] 177.223.49.21 NEW ifxmoxbf:lWmHywnA3U0r1btv address=177.223.49.21,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 212.241.13.45
country_id: 1527747
description:
2026-06-29 02:12:51 H=([212.241.13.45]) [212.241.13.45]:9414 F=<prakash@white-ways.com> rejected RCPT <prakash@white-ways.com>: Sender verify failed


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.174.152.169
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 34.174.152.169: 80 connections per 30 seconds to 2083 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.90.94.229
country_id: 2750405
description:
Denial of Service (DoS) attack was discovered from 34.90.94.229: 80 connections per 30 seconds to 2096 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 39.100.91.113
country_id: 1814991
description:
Jun 29 02:19:42 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 39.100.91.113 has been locked due to Imunify RBL


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.172.196.106
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/shop/bouffe/opera/pizza-opera/new-york/?add-to-cart=2171||QS:add-to-cart=2171||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.212.228.74
country_id: 1880251
description:
[2026-06-29 02:21:35 +0000] info [cpaneld] 129.212.228.74 - conseiller "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user conseiller (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.35.129.104
country_id: 953987
description:
Denial of Service (DoS) attack was discovered from 34.35.129.104: 80 connections per 30 seconds to 2083 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.83.181.142
country_id: 1643084
description:
[2026-06-29 02:24:44 +0000] info [cpaneld] 178.83.181.142 - AMEDEKA "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user AMEDEKA (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.162
country_id: 1880251
description:
47.128.121.162 - - [29/Jun/2026:02:25:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9749960&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252Fjanvier-2024%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782699924 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/tag/janvier-2024/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.162


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 181.91.84.48
country_id: 3437598
description:
181.91.84.48 - - [29/Jun/2026:02:25:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051369&pdata=https%253A%252F%252Fcfpj.tg%252Ftag%252Fblog%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782699932 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/tag/blog/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.3903.1259 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:181.91.84.48


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.249.86.14
country_id: 3469034
description:
Jun 29 02:26:42 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.249.86.14 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 151.243.174.37
country_id: 798544
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:151.243.174.37||TA:151.243.174.37||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.249.86.14
country_id: 3469034
description:
Jun 29 02:26:56 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.249.86.14 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 192.126.169.48
country_id: 6252001
domain: www.snb.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:192.126.169.48||TA:192.126.169.48||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.28.151
country_id: 2300660
description:
Jun 29 02:27:25 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.28.151 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.221.112.15
country_id: 617790
description:
2026-06-29 02:29:16 dovecot_plain authenticator failed for H=15.112.221.62.dyn.idknet.com (ki0tyoytfyl6barg4) [62.221.112.15]:55976: 535 Incorrect authentication data (set_id=kpip@emt.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.65.237.227
country_id: 1643084
description:
[2026-06-29 02:29:45 +0000] info [cpaneld] 103.65.237.227 - web_tv "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user web_tv (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.25.249.197
country_id: 1210997
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/wp-content/plugins/td-composer/legacy/Newspaper/js/tdAjaxSearch.js?ver=12.7.1 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.246.82.43
country_id: 3625428
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/wp-content/plugins/td-composer/legacy/Newspaper/js/tdWeather.js?ver=12.7.1 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.103.18.24
country_id: 3865483
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/wp-content/plugins/td-subscription/assets/js/js_files_for_front.min.js?ver=1.7.1 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 197.204.97.176
country_id: 2589581
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/wp-content/plugins/advanced-ads/admin/assets/js/advertisement.js HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.225.105.207
country_id: 2510769
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min.js?ver=12.7.1 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.123.224.84
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/988670 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.120.95.16
country_id: 3437598
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/wp-content/plugins/td-cloud-library/assets/js/tdbSearch.js?ver=d578089f160957352b9b4ca6d880fd8f HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.103.29.212
country_id: 3625428
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/wp-includes/js/wp-embed.min.js?ver=6.8.1 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-29 02:30:08 +0000] info [cpaneld] 167.99.236.81 - a.mathey "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.mathey (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.37.142.71
country_id: 3469034
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/wp-content/plugins/td-cloud-library/assets/js/tdbMenu.js?ver=d578089f160957352b9b4ca6d880fd8f HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.24.143.172
country_id: 3439705
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/wp-content/plugins/td-composer/legacy/Newspaper/js/tdDatei18n.js?ver=12.7.1 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 213.230.93.72
country_id: 1512440
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/wp-content/plugins/td-composer/legacy/Newspaper/js/tdAnimationSprite.js?ver=12.7.1 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 197.185.138.91
country_id: 953987
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 186.238.210.226
country_id: 3469034
description:
2026-06-29 02:31:59 dovecot_login authenticator failed for H=(ip-104-200-152-25.hosts.zerolag.com) [186.238.210.226]:47221: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.238.210.226
country_id: 3469034
description:
Jun 29 02:31:57 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.238.210.226 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.67.244.133
country_id: 1643084
description:
Jun 29 02:33:23 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.67.244.133 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 218.21.246.238
country_id: 1814991
description:
Jun 29 02:33:48 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 218.21.246.238 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.118.20.95
country_id: 2542007
description:
2026-06-29 02:37:01 dovecot_plain authenticator failed for H=([69.172.210.47]) [196.118.20.95]:44160: 535 Incorrect authentication data (set_id=info@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 193.106.50.227
country_id: 1527747
description:
2026-06-29 02:37:19 dovecot_plain authenticator failed for H=([69.172.210.47]) [193.106.50.227]:24545: 535 Incorrect authentication data (set_id=admin@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 177.136.15.197
country_id: 3469034
description:
2026-06-29 02:37:34 dovecot_plain authenticator failed for H=([69.172.210.47]) [177.136.15.197]:25372: 535 Incorrect authentication data (set_id=support@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 190.94.213.113
country_id: 3625428
description:
2026-06-29 02:38:33 dovecot_plain authenticator failed for H=([69.172.210.47]) [190.94.213.113]:45422: 535 Incorrect authentication data (set_id=contacto@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.113.38.214
country_id: 1522867
description:
2026-06-29 02:38:48 dovecot_plain authenticator failed for H=([69.172.210.47]) [185.113.38.214]:6177: 535 Incorrect authentication data (set_id=financeiro@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 78.66.44.61
country_id: 2661886
description:
2026-06-29 02:38:04 dovecot_login authenticator failed for H=78-66-44-61-no2550.tbcn.telia.com (94.154.35.215) [78.66.44.61]:39210: 535 Incorrect authentication data (set_id=contact@toumida.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 186.204.61.54
country_id: 3469034
description:
2026-06-29 02:38:14 dovecot_plain authenticator failed for H=([69.172.210.47]) [186.204.61.54]:3495: 535 Incorrect authentication data (set_id=contato@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 170.83.72.171
country_id: 3469034
description:
2026-06-29 02:37:57 dovecot_plain authenticator failed for H=([69.172.210.47]) [170.83.72.171]:61324: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.204.61.54
country_id: 3469034
description:
Jun 29 02:38:12 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.204.61.54 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 190.62.83.77
country_id: 3585968
description:
2026-06-29 02:39:40 dovecot_plain authenticator failed for H=([69.172.210.47]) [190.62.83.77]:2033: 535 Incorrect authentication data (set_id=accounts@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 105.154.83.110
country_id: 2542007
description:
2026-06-29 02:39:54 dovecot_plain authenticator failed for H=([69.172.210.47]) [105.154.83.110]:40492: 535 Incorrect authentication data (set_id=suporte@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 118.101.206.216
country_id: 1733045
description:
2026-06-29 02:39:08 dovecot_plain authenticator failed for H=([69.172.210.47]) [118.101.206.216]:43979: 535 Incorrect authentication data (set_id=comercial@dgdn-togo.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.225
country_id: 2635167
description:
[2026-06-29 02:39:07 +0000] info [cpaneld] 5.230.133.225 NEW wcnyaruu:g2UF3nD2AB3WW7pw address=5.230.133.225,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 212.237.122.240
country_id: 99237
description:
2026-06-29 02:39:23 dovecot_plain authenticator failed for H=([69.172.210.47]) [212.237.122.240]:8453: 535 Incorrect authentication data (set_id=it@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 105.154.83.110
country_id: 2542007
description:
2026-06-29 02:40:01 dovecot_login authenticator failed for H=([69.172.210.47]) [105.154.83.110]:40492: 535 Incorrect authentication data (set_id=suporte@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.177.81.189
country_id: 3865483
description:
2026-06-29 02:40:16 dovecot_plain authenticator failed for H=([69.172.210.47]) [45.177.81.189]:42806: 535 Incorrect authentication data (set_id=office@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 201.94.149.87
country_id: 3895114
description:
2026-06-29 02:40:37 dovecot_plain authenticator failed for H=201-94-149-87-dynamic-cgn.wilcomspa.cl ([69.172.210.47]) [201.94.149.87]:8514: 535 Incorrect authentication data (set_id=soporte@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 195.209.104.114
country_id: 2017370
description:
2026-06-29 02:40:58 dovecot_plain authenticator failed for H=([69.172.210.47]) [195.209.104.114]:59164: 535 Incorrect authentication data (set_id=clients@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 89.92.137.50
country_id: 3017382
description:
2026-06-29 02:41:11 dovecot_plain authenticator failed for H=89-92-137-50.hfc.dyn.abo.bbox.fr ([69.172.210.47]) [89.92.137.50]:35177: 535 Incorrect authentication data (set_id=info@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.9.62
country_id: 3175395
description:
Jun 29 02:42:16 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.9.62 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.255.212.10
country_id: 732800
description:
Jun 29 02:42:34 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.255.212.10 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 111.61.97.5
country_id: 1814991
description:
Jun 29 02:47:32 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 111.61.97.5 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.55.89.5
country_id: 1269750
description:
2026-06-29 02:47:53 dovecot_login authenticator failed for H=([58.47.137.190]) [103.55.89.5]:45300: 535 Incorrect authentication data (set_id=info@matosshop.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 36.148.146.85
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/bebbb3 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.239.85.189
country_id: 3865483
description:
Jun 29 02:50:20 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.239.85.189 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.67.244.133
country_id: 1643084
description:
Jun 29 02:55:28 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.67.244.133 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.150.105.144
country_id: 1168579
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/albums/page/7 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.12.58
country_id: 3469034
description:
Jun 29 02:58:35 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.12.58 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.120.169
country_id: 1880251
description:
47.128.120.169 - - [29/Jun/2026:03:00:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6985671&pdata=https%253A%252F%252Flibertetogo.tg%252Findex.php%252Fleducation-le-cadet-des-soucis-des-gouvernants%252Fnon-classe%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782702023 HTTP/2.0" 302 0 libertetogo.tg "https://libertetogo.tg/index.php/leducation-le-cadet-des-soucis-des-gouvernants/non-classe/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.120.169


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 192.144.90.222
country_id: 2750405
description:
192.144.90.222 - - [29/Jun/2026:03:00:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9924254&pdata=https%253A%252F%252Ftogomedia24.tg%252F2024%252F08%252F02%252Ftogo-victoire-dogbe-reste-a-la-primature%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782702012 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/2024/08/02/togo-victoire-dogbe-reste-a-la-primature/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2865.1358 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:192.144.90.222


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 114.119.150.27
country_id: 1880251
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/mivo-energie-tres-efficace-dans-sa-lutte-contre-la-precarite-energetique/<script async src||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 39.100.91.113
country_id: 1814991
description:
Jun 29 03:01:21 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 39.100.91.113 has been locked due to Imunify RBL


plugin: modsec
rule: 77350307
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 104.207.36.190
country_id: 6252001
domain: metaart.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:wadminw||User:ebbmnmtd||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.139.209.77
country_id: 192950
domain: www.arse.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.arse.tg/wp-content/uploads/2018/03/Discours-du-chef-de-lEtat-Faure-Gnassingb\xc3\xa9.-Somment-de-lancement-de-lAlliance-Solaire-Internationale.pdf HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77896900
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 65.111.24.241
country_id: 2921044
domain: metaart.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:wpadminerlzp||User:ebbmnmtd||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.32.9
country_id: 1668284
description:
2026-06-29 03:08:16 dovecot_login authenticator failed for H=111-70-32-9.emome-ip.hinet.net (red.179.63.55.122.fastfiber.com.ar) [111.70.32.9]:54789: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 194.70.234.129
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:194.70.234.129||TA:194.70.234.129||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 112.211.36.181
country_id: 1694008
description:
2026-06-29 03:15:51 dovecot_plain authenticator failed for H=(localhost) [112.211.36.181]:20422: 535 Incorrect authentication data (set_id=ptitrikou@mesyscom.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.67.244.133
country_id: 1643084
description:
Jun 29 03:17:33 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.67.244.133 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.28.221.16
country_id: 660013
description:
2026-06-29 03:17:52 dovecot_plain authenticator failed for H=vds2224640.my-ihor.ru (xv98mbl2vrkc7h7cbfjaaeacnwm) [139.28.221.16]:36223: 535 Incorrect authentication data (set_id=knousrougbo@otr.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 139.28.221.16
country_id: 660013
description:
Jun 29 03:17:50 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 139.28.221.16 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.255.212.4
country_id: 732800
description:
Jun 29 03:18:51 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.255.212.4 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.255.212.4
country_id: 732800
description:
Jun 29 03:18:58 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.255.212.4 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 171.25.193.45
country_id: 2661886
description:
171.25.193.45 - - [29/Jun/2026:03:20:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9988202&pdata=https%253A%252F%252Fcafe.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782703240 HTTP/2.0" 302 0 cafe.tg "https://cafe.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:171.25.193.45


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 171.25.193.45
country_id: 2661886
description:
171.25.193.45 - - [29/Jun/2026:03:20:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10393497&pdata=https%253A%252F%252Fcafe.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782703255 HTTP/2.0" 302 0 cafe.tg "https://cafe.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:171.25.193.45


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 181.81.250.162
country_id: 3865483
description:
2026-06-29 03:22:39 dovecot_plain authenticator failed for H=([69.172.210.47]) [181.81.250.162]:38802: 535 Incorrect authentication data (set_id=admin@cafeit.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 131.221.148.108
country_id: 3469034
description:
Jun 29 03:22:08 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 131.221.148.108 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 187.40.208.159
country_id: 3469034
description:
2026-06-29 03:22:22 dovecot_plain authenticator failed for H=187-40-208-159.user3p.vtal.net.br ([69.172.210.47]) [187.40.208.159]:38462: 535 Incorrect authentication data (set_id=info@cafeit.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.169.223
country_id: 3175395
description:
Jun 29 03:22:29 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.169.223 has been locked due to Imunify RBL


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.173.176.120
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/shop/bouffe/osouper/nos-crepes/crepe-a-la-banane/?add-to-cart=2092||QS:add-to-cart=2092||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 51.39.227.80
country_id: 102358
description:
2026-06-29 03:22:58 dovecot_plain authenticator failed for H=([69.172.210.47]) [51.39.227.80]:1340: 535 Incorrect authentication data (set_id=marketing@cafeit.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 115.135.25.175
country_id: 1733045
description:
2026-06-29 03:23:32 dovecot_plain authenticator failed for H=([69.172.210.47]) [115.135.25.175]:39385: 535 Incorrect authentication data (set_id=contato@cafeit.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 160.20.85.209
country_id: 3469034
description:
2026-06-29 03:23:45 dovecot_plain authenticator failed for H=([69.172.210.47]) [160.20.85.209]:57896: 535 Incorrect authentication data (set_id=contacto@cafeit.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.139.152.21
country_id: 1282988
description:
2026-06-29 03:23:15 dovecot_plain authenticator failed for H=([69.172.210.47]) [103.139.152.21]:22847: 535 Incorrect authentication data (set_id=contact@cafeit.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 190.6.243.107
country_id: 3865483
description:
2026-06-29 03:24:03 dovecot_plain authenticator failed for H=([69.172.210.47]) [190.6.243.107]:51714: 535 Incorrect authentication data (set_id=financeiro@cafeit.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.56
country_id: 6252001
description:
205.169.39.56 - - [29/Jun/2026:03:24:52 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9856663&pdata=http%253A%252F%252Fboutique.cafe.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782703491 HTTP/1.1" 302 0 boutique.cafe.tg "http://boutique.cafe.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.56


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 187.62.241.19
country_id: 3469034
description:
187.62.241.19 - - [29/Jun/2026:03:25:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13343341&pdata=https%253A%252F%252Fcfpj.tg%252Feedo-24226iitems%252Feti.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782703546 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/eedo-24226iitems/eti.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:187.62.241.19


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.143
country_id: 3017382
description:
[2026-06-29 03:25:50 +0000] info [cpaneld] 5.231.255.143 NEW wcnyaruu:Oh8r8dtweXnoJkKC address=5.231.255.143,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 64.177.117.102
country_id: 6252001
description:
64.177.117.102 - - [29/Jun/2026:03:27:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9790662&pdata=https%253A%252F%252Fbawasongroup.com%252Fcontact&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782703622 HTTP/2.0" 302 0 bawasongroup.com "https://bawasongroup.com/contact" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.7827.55 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:64.177.117.102


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.212.228.74
country_id: 1880251
description:
[2026-06-29 03:28:41 +0000] info [cpaneld] 129.212.228.74 - einguval "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user einguval (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.47.134.75
country_id: 1269750
description:
Denial of Service (DoS) attack was discovered from 34.47.134.75: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.96.127
country_id: 3469034
description:
Jun 29 03:32:27 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.96.127 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.191.81.171
country_id: 3865483
description:
2026-06-29 03:34:51 dovecot_plain authenticator failed for H=([69.172.210.47]) [45.191.81.171]:43746: 535 Incorrect authentication data (set_id=marketing@mafisteel.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 170.83.240.249
country_id: 3437598
description:
2026-06-29 03:34:22 dovecot_plain authenticator failed for H=([69.172.210.47]) [170.83.240.249]:42510: 535 Incorrect authentication data (set_id=info@mafisteel.tg)


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.172.198.131
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/product/chawarma-poulet/?add-to-cart=3575||QS:add-to-cart=3575||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 213.173.36.227
country_id: 3932488
description:
2026-06-29 03:35:06 dovecot_plain authenticator failed for H=([69.172.210.47]) [213.173.36.227]:55074: 535 Incorrect authentication data (set_id=contact@mafisteel.tg)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 117.5.142.91
country_id: 1562822
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:03-35.117.5.142.91||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350307
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 104.207.33.248
country_id: 6252001
domain: misstogo.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:trumpweiss||User:tgmisefred||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 186.151.101.18
country_id: 3624060
description:
2026-06-29 03:35:27 dovecot_plain authenticator failed for H=([69.172.210.47]) [186.151.101.18]:25283: 535 Incorrect authentication data (set_id=contacto@mafisteel.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 179.6.164.48
country_id: 3932488
description:
2026-06-29 03:35:43 dovecot_plain authenticator failed for H=([69.172.210.47]) [179.6.164.48]:65152: 535 Incorrect authentication data (set_id=financeiro@mafisteel.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.191.81.171
country_id: 3865483
description:
2026-06-29 03:34:58 dovecot_login authenticator failed for H=([69.172.210.47]) [45.191.81.171]:43746: 535 Incorrect authentication data (set_id=marketing@mafisteel.tg)


plugin: modsec
rule: 77350307
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 216.26.254.109
country_id: 3017382
domain: misstogo.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:wadminw||User:tgmisefred||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 37.214.65.138
country_id: 630336
description:
2026-06-29 03:35:58 dovecot_plain authenticator failed for H=([69.172.210.47]) [37.214.65.138]:1952: 535 Incorrect authentication data (set_id=comercial@mafisteel.tg)


plugin: modsec
rule: 77350307
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 65.111.30.209
country_id: 3017382
domain: misstogo.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:wadminw@wordpress.com||User:tgmisefred||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350307
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 209.50.190.37
country_id: 3017382
domain: misstogo.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:yanz@123457||User:tgmisefred||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 39.100.91.113
country_id: 1814991
description:
Jun 29 03:42:56 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 39.100.91.113 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.183.93.130
country_id: 3469034
description:
Jun 29 03:42:13 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.183.93.130 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 77.83.39.59
country_id: 690791
description:
2026-06-29 03:43:57 H=([77.83.39.59]) [77.83.39.59]:54181 F=<DOFAEPUR@dof.com> rejected RCPT <contact@sthandling-aero.tg>: The mail server could not deliver mail to contact@sthandling-aero.tg.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 77.83.39.59
country_id: 690791
description:
2026-06-29 03:46:15 H=([77.83.39.59]) [77.83.39.59]:55898 F=<omsagent@oki-marine.co.jp> rejected RCPT <contact@sthandling-aero.tg>: The mail server could not deliver mail to contact@sthandling-aero.tg.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 20.212.169.175
country_id: 1880251
description:
[2026-06-29 03:47:19 +0000] info [cpaneld] 20.212.169.175 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 34.143.230.104
country_id: 1880251
domain: sproca.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:34.143.230.104||TA:34.143.230.104||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.238.106.172
country_id: 3865483
description:
Jun 29 03:48:34 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.238.106.172 has been locked due to Imunify RBL


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 198.142.152.93
country_id: 2077456
description:
Denial of Service (DoS) attack was discovered from 198.142.152.93: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.89.146
country_id: 2750405
description:
[2026-06-29 04:00:37 +0000] info [cpaneld] 217.181.89.146 - mipbtgnb "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.88.168
country_id: 2750405
description:
[2026-06-29 04:00:41 +0000] info [cpaneld] 217.181.88.168 - aopsacai "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.91.64.7
country_id: 2017370
description:
45.91.64.7 - - [29/Jun/2026:04:03:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12895638&pdata=https%253A%252F%252Fwww.kics.kpmg.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782705794 HTTP/2.0" 302 0 www.kics.kpmg.tg "https://www.kics.kpmg.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.91.64.7


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 138.255.206.215
country_id: 3469034
description:
Jun 29 04:04:29 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 138.255.206.215 has been locked due to Imunify RBL


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 220.245.246.130
country_id: 2077456
description:
Denial of Service (DoS) attack was discovered from 220.245.246.130: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.111.157.12
country_id: 6252001
description:
[2026-06-29 04:07:54 +0000] info [whostmgrd] 172.111.157.12 - cpsess1944531318scripts5wwwacctformnetmastersarl "POST /login?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: invalid user name specified


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.91.164.131
country_id: 3469034
description:
Jun 29 04:08:18 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.91.164.131 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-29 04:09:00 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:51118: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.82.223.8
country_id: 1269750
description:
45.82.223.8 - - [29/Jun/2026:04:09:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7378578&pdata=https%253A%252F%252Flibertetogo.tg%252Findex.php%252Ftag%252Fgroupe-qi%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782706174 HTTP/2.0" 302 0 libertetogo.tg "https://libertetogo.tg/index.php/tag/groupe-qi/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.7956.1110 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.82.223.8


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 85.195.131.28
country_id: 102358
domain: afrique-distribution.net
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:59058.afrique-distribution.net||ServerName:afrique-distribution.net||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f9c1ceea4f4a7208d229ae3cd29d6494934e125a||Title:lpfsr9zkg82q3u||RSV:8.21||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 3.238.178.168
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 3.238.178.168: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.111.157.12
country_id: 6252001
description:
[2026-06-29 04:11:21 +0000] info [whostmgrd] 172.111.157.12 - test1 "POST /login?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.212.228.74
country_id: 1880251
description:
[2026-06-29 04:11:15 +0000] info [cpaneld] 129.212.228.74 - masfloy "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 31.131.141.209
country_id: 690791
description:
Jun 29 04:11:35 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 31.131.141.209 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 37.26.83.161
country_id: 783754
description:
37.26.83.161 - - [29/Jun/2026:04:11:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12951450&pdata=https%253A%252F%252Fcfpj.tg%252Feedo-58027jetid.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782706312 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/eedo-58027jetid.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.26.83.161


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 136.110.78.155
country_id: 1861060
description:
Denial of Service (DoS) attack was discovered from 136.110.78.155: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.164.246.134
country_id: 1269750
description:
Jun 29 04:16:42 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.164.246.134 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.164.246.134
country_id: 1269750
description:
Jun 29 04:16:59 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.164.246.134 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 128.1.227.233
country_id: 1643084
description:
128.1.227.233 - - [29/Jun/2026:04:18:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13331557&pdata=https%253A%252F%252Fwww.lcr-adem.org%252Fcontact%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782706689 HTTP/2.0" 302 0 www.lcr-adem.org "https://www.lcr-adem.org/contact/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:128.1.227.233


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 27.77.189.251
country_id: 1562822
domain: togomedia24.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togomedia24.tg/wp-json/oembed/1.0/embed?url=http:/togomedia24.tg/2025/05/27/togo-quand-le-silence-devient-un-danger-leglise-appelle-a-parler-vrai/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 170.168.6.27
country_id: 1512440
description:
2026-06-29 04:20:43 dovecot_plain authenticator failed for H=(ovelisal) [170.168.6.27]:54004: 535 Incorrect authentication data (set_id=admin@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 31.131.141.209
country_id: 690791
description:
Jun 29 04:20:08 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 31.131.141.209 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 170.168.6.27
country_id: 1512440
description:
Jun 29 04:20:41 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 170.168.6.27 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 31.131.141.209
country_id: 690791
description:
2026-06-29 04:20:10 dovecot_plain authenticator failed for H=(ingulatial) [31.131.141.209]:42892: 535 Incorrect authentication data (set_id=admin@cloud-et-racks.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 95.58.4.6
country_id: 1522867
description:
2026-06-29 04:21:28 H=([95.58.4.6]) [95.58.4.6]:56876 F=<prakash@white-ways.com> rejected RCPT <prakash@white-ways.com>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.66.189
country_id: 6252001
description:
[2026-06-29 04:22:12 +0000] info [cpaneld] 217.181.66.189 - dmmkifel "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 39.100.91.113
country_id: 1814991
description:
Jun 29 04:24:05 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 39.100.91.113 has been locked due to Imunify RBL


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.185.154.60
country_id: 2921044
description:
Denial of Service (DoS) attack was discovered from 34.185.154.60: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.120.203
country_id: 1880251
description:
47.128.120.203 - - [29/Jun/2026:04:28:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6527641&pdata=https%253A%252F%252Flibertetogo.tg%252Findex.php%252Ftag%252Fgerry-tamaa%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782707315 HTTP/2.0" 302 0 libertetogo.tg "https://libertetogo.tg/index.php/tag/gerry-tamaa/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.120.203


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 95.58.4.6
country_id: 1522867
description:
2026-06-29 04:30:18 H=([95.58.4.6]) [95.58.4.6]:54687 F=<prakash@white-ways.com> rejected RCPT <prakash@white-ways.com>: Sender verify failed


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.167.107.190
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/education-au-togo-le-taux-dachevement-au-primaire-est-au-dessus-de-la-moyenne/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.167.107.190
country_id: 1562822
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/education-au-togo-le-taux-dachevement-au-primaire-est-au-dessus-de-la-moyenne/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.182.47
country_id: 1880251
description:
43.173.182.47 - - [29/Jun/2026:04:31:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7236456&pdata=https%253A%252F%252F24heureinfo.tg%252Fpolitique%252Fil-ny-a-pas-de-probleme-majeur-mon-retour-est-acte-par-ladministration-togolaise%252Ffeed&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782707458 HTTP/1.1" 404 561 24heureinfo.tg "https://24heureinfo.tg/politique/il-ny-a-pas-de-probleme-majeur-mon-retour-est-acte-par-ladministration-togolaise/feed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.182.47


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 110.138.84.222
country_id: 1643084
description:
[2026-06-29 04:36:49 +0000] info [cpaneld] 110.138.84.222 - kwbcfbmo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kwbcfbmo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 110.138.84.222
country_id: 1643084
description:
[2026-06-29 04:38:52 +0000] info [cpaneld] 110.138.84.222 - cpsess7670975485frontendpaper_lanternemail_accountsindex.html "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 220.189.239.206
country_id: 1814991
description:
Jun 29 04:40:35 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 220.189.239.206 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 220.189.239.206
country_id: 1814991
description:
Jun 29 04:40:59 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 220.189.239.206 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 195.178.110.236
country_id: 732800
description:
Jun 29 04:42:31 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 195.178.110.236 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 195.178.110.236
country_id: 732800
description:
2026-06-29 04:42:33 dovecot_login authenticator failed for H=(DiX4XL6Y) [195.178.110.236]:63109: 535 Incorrect authentication data (set_id=contact@cloud-et-racks.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 195.178.110.236
country_id: 732800
description:
2026-06-29 04:43:02 dovecot_login authenticator failed for H=(Z7wXwSRY4) [195.178.110.236]:63548: 535 Incorrect authentication data (set_id=contact)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 195.178.110.236
country_id: 732800
description:
Jun 29 04:43:00 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 195.178.110.236 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.25
country_id: 6252001
description:
205.169.39.25 - - [29/Jun/2026:04:49:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6843758&pdata=http%253A%252F%252Fkpmg.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782708561 HTTP/1.1" 302 0 kpmg.tg "http://kpmg.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.25


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 152.52.244.106
country_id: 1269750
description:
Jun 29 04:49:25 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 152.52.244.106 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 152.52.244.106
country_id: 1269750
description:
2026-06-29 04:49:27 dovecot_login authenticator failed for H=([174.94.236.211]) [152.52.244.106]:54674: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 221.5.211.14
country_id: 1814991
description:
Denial of Service (DoS) attack was discovered from 221.5.211.14: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.229.201
country_id: 1269750
description:
Jun 29 04:50:34 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.229.201 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 117.5.142.91
country_id: 1562822
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:04-51.117.5.142.91||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.84.165.242
country_id: 3469034
description:
Jun 29 04:51:31 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.84.165.242 has been locked due to Imunify RBL


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.196.195.239
country_id: 1835841
domain: www.lasnbtg.snb.tg
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.21||T:APACHE||MV:/wp-content/uploads/index.php||SC:/home/bighostingsnbd/public_html/siteweb/public/wp-content||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 140.235.169.218
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:140.235.169.218||TA:140.235.169.218||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 175.107.216.13
country_id: 1168579
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/mpoti-blitta-le-cacao-togolais-vise-les-marches-premium/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 52.32.147.91
country_id: 6252001
description:
52.32.147.91 - - [29/Jun/2026:04:58:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10262678&pdata=https%253A%252F%252Fkpmg.tg%252Ff3fcede3ceb48531317d565cce982d2b%252Facf2d8c858075b0500387330fbe3e107%252Fea425e05eea2788cc063ebda30164563%252F0e3d26786953aa33eaa79d2011a94992%252F223e0c8cca861474d24cfd8905cb5776%252F8c32bedce4ca929e901353d4db9eebcc%252Findex.php%253Fcmd%253Dlogin%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782709114 HTTP/2.0" 302 0 kpmg.tg "https://kpmg.tg/f3fcede3ceb48531317d565cce982d2b/acf2d8c858075b0500387330fbe3e107/ea425e05eea2788cc063ebda30164563/0e3d26786953aa33eaa79d2011a94992/223e0c8cca861474d24cfd8905cb5776/8c32bedce4ca929e901353d4db9eebcc/index.php?cmd=login/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.7827.200 Safari/537.36 Edge/18.19582" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:52.32.147.91


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 175.107.216.13
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/mpoti-blitta-le-cacao-togolais-vise-les-marches-premium/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.162.175.83
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/273846031 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.16.95
country_id: 6251999
description:
[2026-06-29 05:01:32 +0000] info [cpaneld] 195.63.16.95 - aifkjzqm "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 123.160.174.142
country_id: 1814991
description:
Jun 29 05:02:39 ns5 pure-ftpd[860342]: (?@123.160.174.142) [INFO] New connection from 123.160.174.142


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.175.143.23
country_id: 6252001
domain: www.snb.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:107.175.143.23||TA:107.175.143.23||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 39.100.91.113
country_id: 1814991
description:
Jun 29 05:05:37 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 39.100.91.113 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 93.187.7.160
country_id: 3042362
description:
[2026-06-29 05:05:44 +0000] info [cpaneld] 93.187.7.160 - kwbcfbmo "GET / HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 120.228.139.113
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/737030508 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 151.192.163.216
country_id: 1880251
description:
2026-06-29 05:15:42 dovecot_login authenticator failed for H=([157.88.38.35]) [151.192.163.216]:47162: 535 Incorrect authentication data (set_id=etomety@otr.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.120.169
country_id: 1880251
description:
47.128.120.169 - - [29/Jun/2026:05:16:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6790548&pdata=https%253A%252F%252Flibertetogo.tg%252Findex.php%252Ftag%252Fwiyao%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782710203 HTTP/2.0" 302 0 libertetogo.tg "https://libertetogo.tg/index.php/tag/wiyao/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.120.169


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.7.120.61
country_id: 1210997
description:
[2026-06-29 05:21:08 +0000] info [cpaneld] 103.7.120.61 - web_tv "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user web_tv (has_cpuser_file failed)


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 194.187.176.226
country_id: 2921044
description:
Jun 29 05:29:11 ns5 pure-ftpd[880073]: (?@194.187.176.226) [INFO] New connection from 194.187.176.226


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.131.228.128
country_id: 1269750
description:
Denial of Service (DoS) attack was discovered from 34.131.228.128: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 179.60.70.57
country_id: 3895114
description:
179.60.70.57 - - [29/Jun/2026:05:31:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9660056&pdata=https%253A%252F%252Fcfpj.tg%252Fhdvc-307675fetid.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782711106 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/hdvc-307675fetid.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:179.60.70.57


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.120.11.79
country_id: 3469034
domain: www.wages.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.wages.tg/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 101.13.2.182
country_id: 1668284
description:
Jun 29 05:31:40 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 101.13.2.182 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.192.215.109
country_id: 1733045
description:
[2026-06-29 05:31:52 +0000] info [cpaneld] 14.192.215.109 - pduusmyf "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.120.11.79
country_id: 3469034
domain: www.wages.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.wages.tghttp/www.wages.tg/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 101.13.2.182
country_id: 1668284
description:
2026-06-29 05:31:42 dovecot_login authenticator failed for H=(119.92.76.212.static.pldt.net) [101.13.2.182]:41926: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.55.146.14
country_id: 1210997
description:
[2026-06-29 05:33:55 +0000] info [whostmgrd] 103.55.146.14 - masfloy "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 146.190.11.185
country_id: 1269750
description:
146.190.11.185 - - [29/Jun/2026:05:39:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7193956&pdata=https%253A%252F%252Fappflutter.free.netmaster.tg%252Fbee&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782711583 HTTP/2.0" 302 0 appflutter.free.netmaster.tg "https://appflutter.free.netmaster.tg/bee" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:146.190.11.185


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 20.212.169.175
country_id: 1880251
description:
[2026-06-29 05:39:49 +0000] info [cpaneld] 20.212.169.175 - czqxxxnu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User czqxxxnu has their account suspended. Login blocked.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 220.245.47.130
country_id: 2077456
description:
Denial of Service (DoS) attack was discovered from 220.245.47.130: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.59.116.150
country_id: 1269750
description:
2026-06-29 05:42:20 dovecot_plain authenticator failed for H=(localhost) [27.59.116.150]:50889: 535 Incorrect authentication data (set_id=tpelei@cameg-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 27.59.116.150
country_id: 1269750
description:
Jun 29 05:42:18 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 27.59.116.150 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 195.91.129.101
country_id: 2017370
description:
2026-06-29 05:46:02 dovecot_plain authenticator failed for H=(scz3153c0cab3u28u) [195.91.129.101]:49898: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 138.197.93.235
country_id: 6252001
description:
Jun 29 05:46:37 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 138.197.93.235 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 197.234.221.5
country_id: 2395170
description:
197.234.221.5 - - [29/Jun/2026:05:47:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12873374&pdata=https%253A%252F%252F24heureinfo.tg%252Feconomie%252Ftogo-fanmilk-augmente-a-son-tour-le-prix-de-ses-produits%252Fattachment%252Ffan-milk%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782712051 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/economie/togo-fanmilk-augmente-a-son-tour-le-prix-de-ses-produits/attachment/fan-milk/" "Mozilla/5.0 (Linux; Android 13; TECNO BG6 Build/TP1A.220624.014) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.7827.93 Mobile Safari/537.36" WL:"0" "com.google.android.apps.searchlite" XFF:"-" CAPTCHA:"0" PEER:197.234.221.5


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.162.20.192
country_id: 3865483
description:
Jun 29 05:50:34 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.162.20.192 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 186.84.21.131
country_id: 3686110
description:
2026-06-29 05:53:24 dovecot_plain authenticator failed for H=([69.172.210.47]) [186.84.21.131]:14270: 535 Incorrect authentication data (set_id=marketing@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 106.222.208.232
country_id: 1269750
description:
Jun 29 05:53:26 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 106.222.208.232 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 20.212.169.175
country_id: 1880251
description:
[2026-06-29 05:53:09 +0000] info [cpaneld] 20.212.169.175 - afxvhoxo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afxvhoxo (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 106.222.208.232
country_id: 1269750
description:
2026-06-29 05:53:28 dovecot_plain authenticator failed for H=(localhost) [106.222.208.232]:15723: 535 Incorrect authentication data (set_id=andre.k@cafe.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.228.57.156
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/Photo-3.webp HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.120.203
country_id: 1880251
description:
47.128.120.203 - - [29/Jun/2026:06:00:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9987481&pdata=https%253A%252F%252Flibertetogo.tg%252Findex.php%252Faffaire-de-double-vente-impliquant-un-depute-beninois-et-un-avocat-togolais%252Fnon-classe%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782712847 HTTP/2.0" 302 0 libertetogo.tg "https://libertetogo.tg/index.php/affaire-de-double-vente-impliquant-un-depute-beninois-et-un-avocat-togolais/non-classe/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.120.203


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.15
country_id: 6252001
description:
205.169.39.15 - - [29/Jun/2026:06:01:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10056132&pdata=http%253A%252F%252Fcollation.ucao-uut.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782712898 HTTP/1.1" 302 0 collation.ucao-uut.tg "http://collation.ucao-uut.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.15


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 138.197.93.235
country_id: 6252001
description:
Jun 29 06:06:58 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 138.197.93.235 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.56
country_id: 6252001
description:
205.169.39.56 - - [29/Jun/2026:06:08:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7050901&pdata=http%253A%252F%252Fwww.test.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782713309 HTTP/1.1" 302 0 www.test.free.netmaster.tg "http://www.test.free.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.56


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.177.193.50
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/societe/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.177.193.50
country_id: 3865483
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/category/societe/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.165.171.28
country_id: 2750405
domain: vitrinenews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.165.171.28||TA:104.165.171.28||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.221.130.246
country_id: 690791
description:
Jun 29 06:14:55 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.221.130.246 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.221.130.246
country_id: 690791
description:
Jun 29 06:15:02 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.221.130.246 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.164.44.218
country_id: 798544
description:
104.164.44.218 - - [29/Jun/2026:06:19:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9856411&pdata=https%253A%252F%252Flibertetogo.tg%252Findex.php%252Fpouvoirisme-en-afrique-francophone%252Fedito%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782713968 HTTP/2.0" 302 0 libertetogo.tg "https://libertetogo.tg/index.php/pouvoirisme-en-afrique-francophone/edito/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.1491.1874 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.164.44.218


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 47.84.199.24
country_id: 1880251
description:
Jun 29 06:20:33 ns5 pure-ftpd[904119]: (?@47.84.199.24) [WARNING] Authentication failed for user [aogodmm]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 217.75.222.30
country_id: 3077311
description:
Jun 29 06:23:34 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 217.75.222.30 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.66.56.231
country_id: 1643084
description:
[2026-06-29 06:25:34 +0000] info [whostmgrd] 157.66.56.231 - anadebfreenetmas "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 64.71.131.242
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 64.71.131.242: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.66.56.231
country_id: 1643084
description:
[2026-06-29 06:27:35 +0000] info [whostmgrd] 157.66.56.231 - koolnetfree "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.3.220.88
country_id: 798544
description:
[2026-06-29 06:31:12 +0000] info [cpaneld] 195.3.220.88 - .SAPHYRTOUR "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.245
country_id: 3017382
description:
[2026-06-29 06:35:42 +0000] info [cpaneld] 5.231.255.245 NEW wcnyaruu:4gJOEVv3NVwIPduB address=5.231.255.245,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77350309
name: IM360 WAF: Hidden file access
abuser: 5.230.153.13
country_id: 2635167
domain: lcr-adem.org
description:
IM360 WAF: Hidden file access||RSV:8.21||T:APACHE||QS:to=bobilopaol@universitasnasional506.onmicrosoft.com||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.237.58.102
country_id: 1269750
description:
Jun 29 06:35:19 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.237.58.102 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.233
country_id: 3469034
description:
Jun 29 06:41:38 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.233 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 154.127.36.237
country_id: 2395170
description:
Jun 29 06:42:34 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 154.127.36.237 has been locked due to Imunify RBL


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 46.20.38.176
country_id: 2921044
description:
Denial of Service (DoS) attack was discovered from 46.20.38.176: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-29 06:47:58 +0000] info [cpaneld] 167.99.236.81 - aogodmm "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 192.64.118.208
country_id: 6252001
domain: togomedia24.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?per_page=100&_fields=id,slug,name,link,roles||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.181.248
country_id: 1880251
description:
43.173.181.248 - - [29/Jun/2026:06:52:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9881803&pdata=https%253A%252F%252Fsoena.tg%252Fproduct-category%252Fbaby-clothes%252F%253Fadd-to-cart%253D135&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782715967 HTTP/1.1" 404 561 soena.tg "https://soena.tg/product-category/baby-clothes/?add-to-cart=135" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.181.248


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.3.220.88
country_id: 798544
description:
[2026-06-29 06:52:07 +0000] info [cpaneld] 195.3.220.88 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 186.204.56.78
country_id: 3469034
description:
186.204.56.78 - - [29/Jun/2026:06:55:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9999505&pdata=https%253A%252F%252Fdirect7.tg%252Fde-la-mobilisation-a-la-celebration-unir-ave-savoure-sa-victoire-a-keve%252Ffeed%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782716132 HTTP/1.1" 302 0 direct7.tg "https://direct7.tg/de-la-mobilisation-a-la-celebration-unir-ave-savoure-sa-victoire-a-keve/feed/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:186.204.56.78


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 194.226.75.81
country_id: 2017370
description:
Denial of Service (DoS) attack was discovered from 194.226.75.81: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 176.59.62.28
country_id: 2017370
description:
Denial of Service (DoS) attack was discovered from 176.59.62.28: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.127.146.58
country_id: 3469034
domain: caissederetraites.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/caissederetraites.tg/sitemap.xml HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.172.1.81
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1502727753 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 160.30.109.149
country_id: 1168579
domain: mesyscom.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:45706.mesyscom.com||ServerName:mesyscom.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:2348a097e547e59eb51fe26e18efc0da37be80e9||Title:0x402be953||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33375
name: IM360 WAF: XMLRPC fault response
abuser: 160.30.109.149
country_id: 1168579
domain: mesyscom.com
description:
IM360 WAF: XMLRPC fault response||MV:<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<methodResponse>\n  <fault>\n    <value>\n      <struct>\n        <member>\n          <name>faultCode</name>\n          <value><int>403</int></value>\n        </member>\n        <member>\n          <name>faultString</name>\n          <value><string>Votre IP (160.30.109.149) a \xc3\xa9t\xc3\xa9 signal\xc3\xa9e pour de potentielles violations de s\xc3\xa9curit\xc3\xa9.</string></value>\n        </member>\n      </struct>\n    </value>\n  </fault>\n</methodResponse>\n||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.3.220.88
country_id: 798544
description:
[2026-06-29 07:02:59 +0000] info [cpaneld] 195.3.220.88 - ingertgsarl "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.91.138.88
country_id: 2661886
domain: webdisk.ekeasarl.com
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.21||T:APACHE||MV:/wp-content/uploads/2024/index.php||SC:/home/edjatiapougloe/public_html/_wildcard_.ekeasarl.com/wp-content||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 122.177.244.99
country_id: 1269750
domain: sp-eau.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:richgnim22.sp-eau.tg||ServerName:sp-eau.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:894c5c73f4d1c3924071496f92e5af4b4210cad5||Title:jeqr0w54mnetmzxnj||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 122.177.244.99
country_id: 1269750
domain: sp-eau.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:richgnim22.sp-eau.tg||ServerName:sp-eau.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:15d3a659530861bd3106959dced35855df926176||Title:u8u8egekbzj2cjhzz||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 152.232.74.239
country_id: 6251999
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:152.232.74.239||TA:152.232.74.239||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 165.227.227.95
country_id: 2635167
description:
165.227.227.95 - - [29/Jun/2026:07:13:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6920555&pdata=https%253A%252F%252Fwww.togocarrierebetons.tg.154-70-82-246.cpanel.site&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782717187 HTTP/2.0" 302 0 www.togocarrierebetons.tg.154-70-82-246.cpanel.site "https://www.togocarrierebetons.tg.154-70-82-246.cpanel.site/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:165.227.227.95


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 102.64.220.180
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?context=view&search=l&_locale=user||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 102.64.220.180
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?context=view&search=lacs1.mairie&_locale=user||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 190.120.254.132
country_id: 3625428
description:
190.120.254.132 - - [29/Jun/2026:07:14:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7039129&pdata=https%253A%252F%252Fcfpj.tg%252Fnwyj-320584sitems%252Fetidm84en.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782717293 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/nwyj-320584sitems/etidm84en.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:190.120.254.132


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 41.79.219.222
country_id: 2395170
description:
41.79.219.222 - - [29/Jun/2026:07:16:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6854550&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D14638&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782717402 HTTP/2.0" 302 0 mediatopnews.tg "https://mediatopnews.tg/?p=14638" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:41.79.219.222


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 44.251.206.138
country_id: 6252001
description:
44.251.206.138 - - [29/Jun/2026:07:18:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9673321&pdata=https%253A%252F%252Fkpmg.tg%252Ff3fcede3ceb48531317d565cce982d2b%252F956caa81b3c8ac8e2112f34b9feb7a31%252Fcadfa3ecfb3cf582999aab5e7605639c%252F8571a2ceb35e65b3d65c55dd83391103%252Fffb26351ca0884cdba0fbb3b179a3b22%252Fb796193adc2ddcab2642e046563b2b9a%252Findex.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782717536 HTTP/2.0" 302 0 kpmg.tg "https://kpmg.tg/f3fcede3ceb48531317d565cce982d2b/956caa81b3c8ac8e2112f34b9feb7a31/cadfa3ecfb3cf582999aab5e7605639c/8571a2ceb35e65b3d65c55dd83391103/ffb26351ca0884cdba0fbb3b179a3b22/b796193adc2ddcab2642e046563b2b9a/index.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.7827.200 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:44.251.206.138


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 122.168.68.216
country_id: 1269750
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:maurice.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:93a96224f88f1c746f051389d8ae4d87fe13a4db||Title:a93d764oxpwdgh||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 122.168.68.216
country_id: 1269750
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:maurice.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:926306729599dff6a0d46fb3f08ca216d0c785eb||Title:9p0c3y6p9hzq084bn||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 122.168.68.216
country_id: 1269750
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:maurice.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:5e00472ba01a602c2af8d3e0a3b5270354b4aa93||Title:ov5awob106ss6kl||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.176.253.226
country_id: 2363686
description:
[2026-06-29 07:23:31 +0000] info [webmaild] 102.176.253.226 - issj@ucao-uut.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: User issj@ucao-uut.tg has their account suspended. Login blocked.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 52.34.76.65
country_id: 6252001
description:
52.34.76.65 - - [29/Jun/2026:07:23:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6972564&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782717822 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:52.34.76.65


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 122.168.68.216
country_id: 1269750
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:maurice.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:cd7f81fe864d733ac946d52b943ba0c4fe09aa45||Title:bzcnhywkfx35vy||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 122.168.68.216
country_id: 1269750
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:maurice.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:dc958e4517e6d81904e155d2ffc40e478f2cd3c1||Title:rdz4cvg0xe8qe9c||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.132.195.147
country_id: 2960313
description:
45.132.195.147 - - [29/Jun/2026:07:24:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9946769&pdata=https%253A%252F%252Ftogocarrierebetons.tg.154-70-82-246.cpanel.site&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782717876 HTTP/2.0" 302 0 togocarrierebetons.tg.154-70-82-246.cpanel.site "https://togocarrierebetons.tg.154-70-82-246.cpanel.site/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.132.195.147


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 134.255.243.78
country_id: 2635167
domain: www.snb.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:134.255.243.78||TA:134.255.243.78||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 122.168.68.216
country_id: 1269750
domain: misstogo.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:maurice.misstogo.tg||ServerName:misstogo.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:e9edb5f7e4d1d3a7d6f674a74726e2db02df816c||Title:568uf2d8szczozy0u||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.141.209.224
country_id: 1210997
description:
103.141.209.224 - - [29/Jun/2026:07:28:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13263466&pdata=https%253A%252F%252Fucao-uut.tg%252Fformation-recherche%252Fdiplomes%252Fingenierie-informatique%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782718109 HTTP/2.0" 302 0 ucao-uut.tg "https://ucao-uut.tg/formation-recherche/diplomes/ingenierie-informatique/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.4704.1621 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.141.209.224


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 157.90.47.82
country_id: 2921044
description:
Denial of Service (DoS) attack was discovered from 157.90.47.82: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 46.101.194.217
country_id: 2921044
domain: sp-eau.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/8?_fields=id,slug,roles||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 165.245.185.54
country_id: 1880251
domain: togosem.com
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?roles=administrator&per_page=100&_fields=slug||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.114.13.243
country_id: 2328926
domain: healthcarenavigatorsllc.net
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/healthcarenavigatorsllc.net/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 80.209.229.158
country_id: 597427
description:
[2026-06-29 07:42:22 +0000] info [cpaneld] 80.209.229.158 NEW ifxmoxbf:MEyCog3R7VjFobqs address=80.209.229.158,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.61.63.252
country_id: 3686110
description:
[2026-06-29 07:48:12 +0000] info [cpaneld] 190.61.63.252 - cvajhehu "GET / HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.65.223.79
country_id: 1694008
description:
2026-06-29 07:49:20 dovecot_plain authenticator failed for H=(localhost) [103.65.223.79]:54909: 535 Incorrect authentication data (set_id=rappels@mesyscom.com)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.58
country_id: 6252001
description:
205.169.39.58 - - [29/Jun/2026:07:51:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10066585&pdata=http%253A%252F%252Fwww.boutique.cafe.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782719475 HTTP/1.1" 302 0 www.boutique.cafe.tg "http://www.boutique.cafe.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.58


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.164.246.214
country_id: 1269750
description:
Jun 29 07:51:45 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.164.246.214 has been locked due to Imunify RBL


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 185.181.252.117
country_id: 6252001
domain: lepoint-actu.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/9?_fields=id,slug,roles||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 64.89.163.29
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 64.89.163.29: 80 connections per 30 seconds to 80 port.


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.42.191.122
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:emilebutodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:bb92b7a52832ad85a130b2cff97c42782693568f||Title:mdlco7cdpdnx7lm||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.117.84
country_id: 6252001
description:
[2026-06-29 08:01:06 +0000] info [whostmgrd] 172.56.117.84 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 52.246.162.142
country_id: 1861060
domain: www.snbrasserie.snb.tg
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.21||T:APACHE||MV:/wp-content/uploads/index.php||SC:/home/bighostingsnbd/public_html/wp-content||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.42.191.122
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:emilebutodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:8f7e9976c0e126c28897c4f0ac77287ed2bd23d7||Title:sth503yfgxgzxc||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.42.191.122
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:emilebutodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f06657ae2193683c851d9728677227312c7933af||Title:9q2nfqdxdx8fdxtj||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.42.191.122
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:emilebutodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7582651dd4922f11beaf743c1cdefe501c74b5b3||Title:72igd6y4sfwekmjo||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-29 08:05:17 +0000] info [whostmgrd] 45.198.224.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.42.191.122
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:emilebutodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a85ffddacf3de57a8b464d72d55958d07c91411a||Title:9b455pycz5y5jxe||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-29 08:05:19 +0000] info [whostmgrd] 45.198.224.5 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.42.191.122
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:emilebutodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:e57b66459b3b07314759782a1c430c6266f08d4d||Title:h9sls4ca3lhdv2ssv||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.230
country_id: 2635167
description:
[2026-06-29 08:06:39 +0000] info [cpaneld] 5.230.153.230 NEW wcnyaruu:byZLw6XFcSFs8m7f address=5.230.153.230,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.42.191.122
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:emilebutodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1acffc1bbe19f029be8d0c402a299d2bb928aedd||Title:mftm3yaxr90v8oh||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.42.191.122
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:emilebutodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:8214194cc4a8a1772b654a6382724992267c0994||Title:e268o2i2k1d5on243||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.42.191.122
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:emilebutodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7b8eaec2fd35aab28db62dcd4bbf6661b020fd95||Title:nug56uf6gnj4ch6xx||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.42.191.122
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:emilebutodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:acba0dcbee3f51911090e5b69d8a5e57a0a65b20||Title:qlazjtcx1nix7op||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.42.191.122
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:emilebutodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:9b873b7931df41522aa51eda2e74ee5ac8e5f40d||Title:fdfk4ioddwr4vu9ml||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 117.9.93.19
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1651693996 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 123.6.49.12
country_id: 1814991
description:
123.6.49.12 - - [29/Jun/2026:08:14:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001050&pdata=https%253A%252F%252Fhaplucia-togo.tg%252Fcontact%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782720838 HTTP/2.0" 302 0 haplucia-togo.tg "https://haplucia-togo.tg/contact/" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.12


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 123.6.49.12
country_id: 1814991
description:
123.6.49.12 - - [29/Jun/2026:08:15:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10054343&pdata=https%253A%252F%252Fekeasarl.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782720920 HTTP/2.0" 302 0 ekeasarl.com "https://ekeasarl.com/" "Mozilla/5.0 (Linux; Android 11; V2055A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.12


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.156.215
country_id: 1819730
description:
2026-06-29 08:16:02 dovecot_plain authenticator failed for H=(smtp.arse.tg) [104.28.156.215]:12657: 535 Incorrect authentication data (set_id=dossa.amoussou@arse.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 193.29.139.204
country_id: 2750405
description:
2026-06-29 08:20:23 dovecot_plain authenticator failed for H=(smtp.arse.tg) [193.29.139.204]:34052: 535 Incorrect authentication data (set_id=dossa.amoussou@arse.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 193.29.139.204
country_id: 2750405
description:
Jun 29 08:20:28 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 193.29.139.204 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 54.70.53.60
country_id: 6252001
description:
54.70.53.60 - - [29/Jun/2026:08:22:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7433629&pdata=https%253A%252F%252Fcentif.tg%252Ffiles%252Floi_14.pdf&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782721351 HTTP/2.0" 302 0 centif.tg "https://centif.tg/files/loi_14.pdf" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:54.70.53.60


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.111.11.16
country_id: 6252001
description:
[2026-06-29 08:24:32 +0000] info [whostmgrd] 74.111.11.16 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 212.47.149.157
country_id: 587116
domain: www.worldinfo.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.worldinfo.tg/internet-haut-debit-la-3g-de-moov-togo-arrive/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.77.216.189
country_id: 6252001
description:
47.77.216.189 - - [29/Jun/2026:08:26:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9867886&pdata=http%253A%252F%252Ftdn.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782721612 HTTP/1.1" 302 0 tdn.tg "http://tdn.tg/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.77.216.189


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 102.64.165.22
country_id: 2363686
description:
[2026-06-29 08:32:31 +0000] info [webmaild] 102.64.165.22 - some.f@inger.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.101.117.73
country_id: 1269750
description:
Jun 29 08:37:27 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.101.117.73 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.65.237.55
country_id: 1643084
description:
[2026-06-29 08:39:38 +0000] info [cpaneld] 103.65.237.55 - esso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user esso (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 94.154.113.253
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:94.154.113.253||TA:94.154.113.253||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 156.38.73.89
country_id: 2363686
description:
156.38.73.89 - - [29/Jun/2026:08:46:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10186602&pdata=https%253A%252F%252Fcertlogisticstogo.com%252Fcontact%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782722776 HTTP/2.0" 302 0 certlogisticstogo.com "https://certlogisticstogo.com/contact/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:156.38.73.89


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 27.115.124.101
country_id: 1814991
description:
27.115.124.101 - - [29/Jun/2026:08:47:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935982&pdata=http%253A%252F%252Fcafe.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782722853 HTTP/1.1" 404 561 cafe.tg "http://cafe.tg/" "Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.101


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 27.115.124.109
country_id: 1814991
description:
27.115.124.109 - - [29/Jun/2026:08:47:38 +0000] "GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1" 200 11760 cafe.tg "http://cafe.tg/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935718&pdata=http%253A%252F%252Fcafe.tg%252Flogin&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782722854" "Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.109


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 209.242.201.150
country_id: 3190538
domain: www.arse.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:209.242.201.150||TA:209.242.201.150||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 27.115.124.45
country_id: 1814991
description:
27.115.124.45 - - [29/Jun/2026:08:47:38 +0000] "GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.5 HTTP/1.1" 200 11702 cafe.tg "http://cafe.tg/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935718&pdata=http%253A%252F%252Fcafe.tg%252Flogin&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782722854" "Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.45


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 27.115.124.109
country_id: 1814991
description:
27.115.124.109 - - [29/Jun/2026:08:47:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13355153&pdata=https%253A%252F%252Fcloud-et-racks.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782722876 HTTP/2.0" 302 0 cloud-et-racks.tg "https://cloud-et-racks.tg/" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.109


plugin: modsec
rule: 77141095
name: IM360 WAF: Track spam in PrestaShop
abuser: 196.168.96.210
country_id: 2363686
domain: wages.tg
description:
IM360 WAF: Track spam in PrestaShop||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/wp-json/contact-form-7/v1/contact-forms/1675/feedback||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.146.37.74
country_id: 6252001
description:
[2026-06-29 08:49:04 +0000] info [whostmgrd] 97.146.37.74 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 221.9.19.240
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/918376148 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 46.182.7.168
country_id: 3017382
domain: davetechno.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?per_page=100&orderby=id&order=desc&_fields=id,slug||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 46.182.7.168
country_id: 3017382
domain: davetechno.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/6?_fields=id,slug,roles||


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 194.5.82.127
country_id: 1880251
description:
Jun 29 08:53:35 ns5 pure-ftpd[965804]: (?@194.5.82.127) [WARNING] Authentication failed for user [two]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.168.106.213
country_id: 2363686
description:
2026-06-29 08:56:08 dovecot_login authenticator failed for H=(Yoga) [196.168.106.213]:15871: 535 Incorrect authentication data (set_id=contactcert@certlogisticstogo.com)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 102.64.222.202
country_id: 2363686
description:
[2026-06-29 08:56:09 +0000] info [cpaneld] 102.64.222.202 NEW vejjghdd:JDle1XQqLRWmN5Ez address=102.64.222.202,app=cpaneld,creator=vejjghdd,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.168.106.213
country_id: 2363686
description:
2026-06-29 08:57:11 dovecot_login authenticator failed for H=(Yoga) [196.168.106.213]:16086: 535 Incorrect authentication data (set_id=contactcert@certlogisticstogo.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.222.82.222
country_id: 6252001
description:
[2026-06-29 08:58:55 +0000] info [whostmgrd] 172.222.82.222 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.60.168.138
country_id: 3469034
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/une-soiree-hommage-pour-eugene-atigan-le-1er-juillet-prochain/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.60.168.138
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/une-soiree-hommage-pour-eugene-atigan-le-1er-juillet-prochain/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 180.75.239.119
country_id: 1733045
description:
180.75.239.119 - - [29/Jun/2026:09:03:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10065260&pdata=https%253A%252F%252Fcpanel.florian.free.netmaster.tg%252F%253Flocale%253Dpt&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782723796 HTTP/2.0" 302 0 cpanel.florian.free.netmaster.tg "https://cpanel.florian.free.netmaster.tg/?locale=pt" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:180.75.239.119


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.82.132
country_id: 6251999
description:
[2026-06-29 09:06:13 +0000] info [cpaneld] 217.181.82.132 - doufelg "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 102.64.165.22
country_id: 2363686
description:
[2026-06-29 09:08:36 +0000] info [webmaild] 102.64.165.22 - some.f@inger.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - info@cloud-et-racks.tg [06/29/2026:09:09:52 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: info@cloud-et-racks.tg


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 154.70.80.74
country_id: 2363686
description:
[2026-06-29 09:09:43 +0000] info [cpaneld] 154.70.80.74 NEW cloudetracks:8TXHyxMDEeWS91Rc address=154.70.80.74,app=cpaneld,creator=cloudetracks,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 154.70.80.74
country_id: 2363686
description:
[2026-06-29 09:09:53 +0000] info [cpaneld] 154.70.80.74 - cloudetracks "GET /cpsess1007843279/frontend/jupiter/email_accounts/index.html HTTP/1.1" DEFERRED LOGIN cpaneld: security token incorrect


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - contact@cloud-et-racks.tg [06/29/2026:09:11:54 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: contact@cloud-et-racks.tg


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - cloudetracks [06/29/2026:09:13:08 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: cloudetracks


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 94.154.113.121
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:94.154.113.121||TA:94.154.113.121||


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - sandrine.a@cloud-et-racks.tg [06/29/2026:09:14:25 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: sandrine.a@cloud-et-racks.tg


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 91.1.108.134
country_id: 2921044
domain: togomedia24.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togomedia24.tg/wp-content/uploads/2024/04/Recrutement-stagiaire-communication-15124_inputCP_VF.pdf HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - support@cloud-et-racks.tg [06/29/2026:09:15:49 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: support@cloud-et-racks.tg


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 158.94.211.154
country_id: 2750405
description:
2026-06-29 09:15:10 H=([158.94.211.154]) [158.94.211.154]:51433 F=<orlovavv@kursksmu.net> rejected RCPT <whiteway@white-ways.com>: The mail server could not deliver mail to whiteway@white-ways.com.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - visite@cloud-et-racks.tg [06/29/2026:09:17:00 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: visite@cloud-et-racks.tg


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 223.102.185.79
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/10/SeventyFour-shutterstock-780x440-1.webp HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.176.253.226
country_id: 2363686
description:
[2026-06-29 09:17:47 +0000] info [webmaild] 102.176.253.226 - dgi@ucao-uut.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: User dgi@ucao-uut.tg has their account suspended. Login blocked.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 153.34.151.43
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/10/de674bf08531db4d17221d4394f380b0_L.webp HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 148.227.74.50
country_id: 3865483
description:
148.227.74.50 - - [29/Jun/2026:09:20:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13068485&pdata=https%253A%252F%252Fcfpj.tg%252Fvivu-4522mitems%252Feti.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782724797 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/vivu-4522mitems/eti.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:148.227.74.50


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 158.94.211.154
country_id: 2750405
description:
2026-06-29 09:24:30 H=([158.94.211.154]) [158.94.211.154]:54055 F=<shahina@kursksmu.net> rejected RCPT <whiteway@white-ways.com>: The mail server could not deliver mail to whiteway@white-ways.com.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.223
country_id: 2635167
description:
[2026-06-29 09:25:17 +0000] info [cpaneld] 5.230.133.223 NEW wcnyaruu:m_RF8ZGrJmIUtwAz address=5.230.133.223,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 42.6.236.242
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/8692a1 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 54.174.52.20
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 54.174.52.20: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 54.174.52.22
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 54.174.52.22: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 54.174.52.21
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 54.174.52.21: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.208.145.237
country_id: 6252001
description:
[2026-06-29 09:30:34 +0000] info [whostmgrd] 71.208.145.237 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.58
country_id: 6252001
description:
205.169.39.58 - - [29/Jun/2026:09:31:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9793221&pdata=http%253A%252F%252Fqx0gfv.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782725475 HTTP/1.1" 302 0 qx0gfv.mediatopnews.tg "http://qx0gfv.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.58


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 80.248.64.198
country_id: 2363686
description:
[2026-06-29 09:33:27 +0000] info [cpaneld] 80.248.64.198 NEW neliam:zEju2u416TBxCIxq address=80.248.64.198,app=cpaneld,creator=neliam,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.51.97.5
country_id: 614540
description:
[2026-06-29 09:33:51 +0000] info [cpaneld] 92.51.97.5 - anadebfreenetmas "GET / HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 139.28.190.206
country_id: 2510769
description:
Jun 29 09:34:07 ns5 auth[540423]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 139.28.190.206 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.11
country_id: 6252001
description:
205.169.39.11 - - [29/Jun/2026:09:34:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13210513&pdata=http%253A%252F%252Fdgpu8l.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782725661 HTTP/1.1" 302 0 dgpu8l.mediatopnews.tg "http://dgpu8l.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.11


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.30
country_id: 6252001
description:
205.169.39.30 - - [29/Jun/2026:09:37:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131824&pdata=http%253A%252F%252Fv2lhxq.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782725870 HTTP/1.1" 302 0 v2lhxq.mediatopnews.tg "http://v2lhxq.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.30


plugin: ossec
rule: 2501
name: User authentication failure.
description:
102.176.253.228 - daf@ucao-uut.tg [06/29/2026:09:39:19 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: daf@ucao-uut.tg


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.227.196
country_id: 1269750
description:
Jun 29 09:43:39 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.227.196 has been locked due to Imunify RBL


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 64.89.161.82
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 64.89.161.82: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.190.177.178
country_id: 6252001
description:
[2026-06-29 09:45:17 +0000] info [whostmgrd] 173.190.177.178 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.44
country_id: 6252001
description:
205.169.39.44 - - [29/Jun/2026:09:46:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10054503&pdata=http%253A%252F%252Fformation.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782726402 HTTP/1.1" 302 0 formation.free.netmaster.tg "http://formation.free.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.44


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 103.189.186.52
country_id: 1831722
description:
[2026-06-29 09:46:51 +0000] info [cpaneld] 103.189.186.52 NEW wcnyaruu:KrrpFT74dTT8pjBB address=103.189.186.52,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 80.248.70.76
country_id: 2363686
description:
[2026-06-29 09:49:20 +0000] info [cpaneld] 80.248.70.76 NEW cfpjusti:aHdpT81EUJT8pFsE address=80.248.70.76,app=cpaneld,creator=cfpjusti,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-29 09:49:25 +0000] info [webmaild] 196.171.46.177 - matthieu.awide@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 27.115.124.101
country_id: 1814991
description:
27.115.124.101 - - [29/Jun/2026:09:51:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9868646&pdata=https%253A%252F%252Fwww.dagl.tg%252Fcommunes%252F11-commune-agoe-nyive-3&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782726659 HTTP/2.0" 302 0 www.dagl.tg "https://www.dagl.tg/communes/11-commune-agoe-nyive-3" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.101


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 27.115.124.38
country_id: 1814991
description:
27.115.124.38 - - [29/Jun/2026:09:51:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13081234&pdata=http%253A%252F%252Fwww.dagl.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782726661 HTTP/1.1" 404 561 www.dagl.tg "http://www.dagl.tg/" "Mozilla/5.0 (Linux; Android 11; V2055A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.38


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - simtaya@cfpj.tg [06/29/2026:09:53:07 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: simtaya@cfpj.tg


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.163.72.157
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2023/06/2e034e38c062851b214e66c4b19fe1d7_L.jpg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.173.173.182
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/shop/telephones-2/tecno/tecno-fi/?add-to-cart=2349||QS:add-to-cart=2349||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.28.223.45
country_id: 597427
description:
[2026-06-29 09:54:52 +0000] info [cpaneld] 104.28.223.45 - waywcbyw "GET /execute/DomainInfo/domains_data?format=json&return_https_redirect_status=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 54.209.33.33
country_id: 6252001
domain: nps.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 181.115.171.81
country_id: 3923057
description:
181.115.171.81 - - [29/Jun/2026:09:58:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10183782&pdata=https%253A%252F%252Fcfpj.tg%252Fcnrw-4402witems%252Feti.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782727076 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/cnrw-4402witems/eti.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:181.115.171.81


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.176.253.226
country_id: 2363686
description:
[2026-06-29 09:59:35 +0000] info [webmaild] 102.176.253.226 - dgi@ucao-uut.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: User dgi@ucao-uut.tg has their account suspended. Login blocked.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 31.154.161.179
country_id: 294640
domain: www.24heureinfo.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.24heureinfo.tg/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - support@cloud-et-racks.tg [06/29/2026:10:01:05 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: support@cloud-et-racks.tg


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 31.154.161.179
country_id: 294640
domain: www.24heureinfo.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.24heureinfo.tghttp/www.24heureinfo.tg/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.176.253.226
country_id: 2363686
description:
[2026-06-29 10:03:31 +0000] info [webmaild] 102.176.253.226 - iseg@ucao-uut.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: User iseg@ucao-uut.tg has their account suspended. Login blocked.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 86.147.241.1
country_id: 2635167
domain: derou.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/derou.tg/fr/slides/10 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 204.111.232.13
country_id: 6252001
description:
2026-06-29 10:09:36 dovecot_plain authenticator failed for H=(59acy6oh7sjxvfjxx3wvwwtknfo) [204.111.232.13]:32992: 535 Incorrect authentication data (set_id=admin@togocarrierebetons.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 92.111.200.242
country_id: 2750405
description:
2026-06-29 10:10:11 dovecot_login authenticator failed for H=92-111-200-242.static.v4.ziggozakelijk.nl (110-25-109-58.adsl.fetnet.net) [92.111.200.242]:40249: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 176.106.60.171
country_id: 458258
domain: www.snb.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:176.106.60.171||TA:176.106.60.171||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 204.168.130.219
country_id: 2921044
domain: cafe.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/133.0.0.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.183
country_id: 1880251
description:
47.128.121.183 - - [29/Jun/2026:10:22:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6985621&pdata=https%253A%252F%252Fmacite.tg%252Fcategory%252Fsports%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782728539 HTTP/2.0" 302 0 macite.tg "https://macite.tg/category/sports/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.183


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.172.198.184
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/product/cocktail-malta-sport-actif/?add-to-cart=3670||QS:add-to-cart=3670||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.125
country_id: 1880251
description:
47.128.121.125 - - [29/Jun/2026:10:25:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9595757&pdata=https%253A%252F%252Fmacite.tg%252F2026%252F06%252F28%252Fconseil-des-ministres-du-26-juin-six-6-decrets-reglementaires-et-quatorze-14-decrets-examines-et-adoptes%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782728718 HTTP/2.0" 302 0 macite.tg "https://macite.tg/2026/06/28/conseil-des-ministres-du-26-juin-six-6-decrets-reglementaires-et-quatorze-14-decrets-examines-et-adoptes/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.125


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.120.141
country_id: 3865483
description:
Jun 29 10:27:55 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.120.141 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.120.141
country_id: 3865483
description:
Jun 29 10:28:02 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.120.141 has been locked due to Imunify RBL


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - ingersarlu@inger.tg [06/29/2026:10:29:53 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: ingersarlu@inger.tg


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-29 10:32:41 +0000] info [webmaild] 196.171.46.177 - kekeli.alemawo@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 77317977
name: IM360 WAF: Sensitive Information Disclosure in OptinMonster plugin for WordPress (CVE-2021-39341)
abuser: 196.168.197.91
country_id: 2363686
domain: mo2.mairie.tg
description:
IM360 WAF: Sensitive Information Disclosure in OptinMonster plugin for WordPress (CVE-2021-39341)||RSV:8.21||T:APACHE||User:tqbcalqt||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:36:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:52884: 535 Incorrect authentication data (set_id=hector@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:36:44 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:37:08 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:37:10 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:28984: 535 Incorrect authentication data (set_id=cairo@ns5.netmaster.tg)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.168.197.91
country_id: 2363686
domain: mo2.mairie.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?context=view&who=authors&per_page=50&_fields=id%2Cname&_locale=user||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:37:09 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:13906: 535 Incorrect authentication data (set_id=commons@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:38:20 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:3878: 535 Incorrect authentication data (set_id=yoshidak@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:38:29 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:38:12 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.97.13.5
country_id: 6252001
description:
[2026-06-29 10:38:47 +0000] info [whostmgrd] 98.97.13.5 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:37:58 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:5100: 535 Incorrect authentication data (set_id=jerbeau@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:39:05 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:39:09 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:44278: 535 Incorrect authentication data (set_id=dhcp@ns5.netmaster.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 117.214.223.218
country_id: 1269750
domain: ciieeinternational.org
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:46959.ciieeinternational.org||ServerName:ciieeinternational.org||Method:metaWeblog.newPost||BlogID:1||TitleSHA:4a11f4ecbc32a98f41cb17efd16436b1e280f0db||Title:foed5286ahllfj2||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:39:46 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:6976: 535 Incorrect authentication data (set_id=dead@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:39:07 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:30882: 535 Incorrect authentication data (set_id=ares@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:39:07 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:40:13 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:46388: 535 Incorrect authentication data (set_id=netgear1@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:40:11 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:40:24 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:40:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:47556: 535 Incorrect authentication data (set_id=dms@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:41:04 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:38438: 535 Incorrect authentication data (set_id=fad@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:41:02 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 34.86.165.170
country_id: 6252001
domain: autodiscover.davetechno.tg
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.21||T:APACHE||REQUEST_URI:/autodiscover/autodiscover.xml/blog/wp-includes/wlwmanifest.xml||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-29 10:41:00 +0000] info [webmaild] 196.171.46.177 - matthieu.awide@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:41:27 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:41:29 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:36612: 535 Incorrect authentication data (set_id=rightfax@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:42:07 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:42:09 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:12560: 535 Incorrect authentication data (set_id=dorthy@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:42:13 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:6758: 535 Incorrect authentication data (set_id=ils@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:42:11 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:43:00 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:57220: 535 Incorrect authentication data (set_id=emilio@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:43:00 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:42:58 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:43:02 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:47350: 535 Incorrect authentication data (set_id=ver@ns5.netmaster.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:43:51 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:33306: 535 Incorrect authentication data (set_id=camaras@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:44:02 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:44:04 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:7070: 535 Incorrect authentication data (set_id=laptop@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:44:06 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:55346: 535 Incorrect authentication data (set_id=camaras@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:44:04 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:44:58 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:45:16 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 54.177.246.172
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 54.177.246.172: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:45:18 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:45394: 535 Incorrect authentication data (set_id=lnet@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:45:00 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:47726: 535 Incorrect authentication data (set_id=zua@ns5.netmaster.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.32.141.34
country_id: 617790
description:
[2026-06-29 10:44:56 +0000] info [cpaneld] 89.32.141.34 - cafeitadm "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 114.8.205.73
country_id: 1643084
description:
2026-06-29 10:46:01 dovecot_plain authenticator failed for H=(localhost) [114.8.205.73]:19478: 535 Incorrect authentication data (set_id=dnador@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:46:05 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:46:23 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:46:25 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:64416: 535 Incorrect authentication data (set_id=videoconferencia@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:46:07 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:21446: 535 Incorrect authentication data (set_id=nana@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:46:56 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:1570: 535 Incorrect authentication data (set_id=marathon@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:47:05 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:47:07 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:23614: 535 Incorrect authentication data (set_id=marathon@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:47:12 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:47:14 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:40462: 535 Incorrect authentication data (set_id=lp2@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:47:56 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:64032: 535 Incorrect authentication data (set_id=laboratorio1@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:48:09 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:48:11 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:1506: 535 Incorrect authentication data (set_id=pak@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 37.111.213.154
country_id: 1210997
description:
2026-06-29 10:48:32 dovecot_plain authenticator failed for H=(localhost) [37.111.213.154]:34145: 535 Incorrect authentication data (set_id=dnador@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:48:18 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:49:00 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:49:02 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:49330: 535 Incorrect authentication data (set_id=ronny@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:49:05 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:54020: 535 Incorrect authentication data (set_id=rudolf@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:49:03 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:49:59 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:50:06 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:50:08 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:8874: 535 Incorrect authentication data (set_id=webmail3@ns5.netmaster.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:50:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:1236: 535 Incorrect authentication data (set_id=webmail3@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:50:01 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:33950: 535 Incorrect authentication data (set_id=dolly@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:50:59 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:51:21 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:51:23 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:45966: 535 Incorrect authentication data (set_id=res@ns5.netmaster.tg)


plugin: modsec
rule: 77350307
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 209.50.169.77
country_id: 6252001
domain: letabloid.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:yanz@123457||User:pnlpzmfv||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:51:01 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:49526: 535 Incorrect authentication data (set_id=andre@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:52:12 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 102.64.220.180
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?context=view&search=lacs1.mairie.t&_locale=user||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 4.15.194.220
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 4.15.194.220: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 77896900
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 65.111.10.77
country_id: 6252001
domain: letabloid.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:wpadminerlzp||User:pnlpzmfv||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:51:57 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:51:59 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:17706: 535 Incorrect authentication data (set_id=tw@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:52:14 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:21778: 535 Incorrect authentication data (set_id=orban@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:53:15 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:53:04 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:1828: 535 Incorrect authentication data (set_id=kitty@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:53:17 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:41848: 535 Incorrect authentication data (set_id=teams@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:53:02 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:53:58 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:17800: 535 Incorrect authentication data (set_id=teszt123@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:53:56 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:54:36 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:40012: 535 Incorrect authentication data (set_id=comment@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:53:58 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:54:00 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:64230: 535 Incorrect authentication data (set_id=longlake@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:55:08 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-29 10:55:00 +0000] info [cpaneld] 167.99.236.81 - trgtsjot "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user trgtsjot (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:55:00 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:43566: 535 Incorrect authentication data (set_id=yourweb@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:55:10 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:54138: 535 Incorrect authentication data (set_id=mail2@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:54:58 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:56:16 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:10950: 535 Incorrect authentication data (set_id=asshole@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:56:00 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:56:02 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:29786: 535 Incorrect authentication data (set_id=driver@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:56:14 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:57:16 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:27528: 535 Incorrect authentication data (set_id=mirko@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:57:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:45850: 535 Incorrect authentication data (set_id=cooper66@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:57:14 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 197.185.144.195
country_id: 953987
domain: mail.formation.free.netmaster.tg
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/.env.swp||User:formationfreenet||


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:57:18 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:20254: 535 Incorrect authentication data (set_id=mirko@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:57:25 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.145.197
country_id: 2363686
description:
[2026-06-29 10:57:42 +0000] info [webmaild] 196.168.145.197 - pmdct@emt.tg "POST /cpsess0700913745/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.168.34.16] != Current IP Address [196.168.145.197]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:58:10 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:58:12 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:21586: 535 Incorrect authentication data (set_id=sandra123@ns5.netmaster.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 95.134.66.22
country_id: 732800
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/plugins/gtranslate/flags/svg/fr.svg HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.245.231.161
country_id: 290557
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:POST http:/togodailynews.tg:80/wp-admin/admin-ajax.php HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:57:58 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:60798: 535 Incorrect authentication data (set_id=dunia@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:57:56 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:59:06 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:1428: 535 Incorrect authentication data (set_id=recette9@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 10:59:14 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:59:04 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 197.185.144.195
country_id: 953987
domain: mail.formation.free.netmaster.tg
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/root/.config/gcloud/credentials.db||User:formationfreenet||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 10:59:16 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:43154: 535 Incorrect authentication data (set_id=kyj@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 10:59:59 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:63914: 535 Incorrect authentication data (set_id=imap@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 10:59:57 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 11:00:37 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:17764: 535 Incorrect authentication data (set_id=jaiden@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 11:00:00 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 11:00:02 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:51564: 535 Incorrect authentication data (set_id=dace@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 11:01:14 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 11:01:13 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:54096: 535 Incorrect authentication data (set_id=recall@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 11:01:16 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:33734: 535 Incorrect authentication data (set_id=kramirez@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 11:01:11 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 11:02:05 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:9368: 535 Incorrect authentication data (set_id=yd@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 11:02:03 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 11:02:04 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 11:02:06 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:34236: 535 Incorrect authentication data (set_id=gusti@ns5.netmaster.tg)


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 165.154.11.206
country_id: 2328926
description:
Jun 29 11:02:51 ns5 pure-ftpd[1029356]: (?@165.154.11.206) [INFO] New connection from 165.154.11.206


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 165.154.11.206
country_id: 2328926
description:
Jun 29 11:02:58 ns5 pure-ftpd[1029379]: (?@165.154.11.206) [WARNING] Authentication failed for user [anonymous]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 11:03:05 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:18154: 535 Incorrect authentication data (set_id=economie@ns5.netmaster.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 148.135.179.191
country_id: 3017382
domain: www.arse.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:148.135.179.191||TA:148.135.179.191||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-29 11:03:02 +0000] info [cpaneld] 167.99.236.81 - enadamso "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user enadamso (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 11:03:05 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:32186: 535 Incorrect authentication data (set_id=cvsuser@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 11:03:03 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 11:03:03 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 11:04:10 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 11:04:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:26516: 535 Incorrect authentication data (set_id=shlomi@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 11:04:12 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:65154: 535 Incorrect authentication data (set_id=jamie@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 11:04:17 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.143.245.53
country_id: 2510769
domain: www.arse.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.143.245.53||TA:104.143.245.53||


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 11:04:19 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:22398: 535 Incorrect authentication data (set_id=shlomi@ns5.netmaster.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 193.151.190.221
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:193.151.190.221||TA:193.151.190.221||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 11:04:58 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:62790: 535 Incorrect authentication data (set_id=rome@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 11:05:06 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 185.101.252.26
country_id: 2750405
domain: www.arse.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:185.101.252.26||TA:185.101.252.26||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 11:05:10 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 11:05:12 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:9526: 535 Incorrect authentication data (set_id=ul@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 29 11:06:04 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 142.147.132.214
country_id: 6252001
domain: www.arse.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:142.147.132.214||TA:142.147.132.214||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-29 11:06:06 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:64812: 535 Incorrect authentication data (set_id=pc@ns5.netmaster.tg)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 5.196.125.120
country_id: 3017382
description:
Denial of Service (DoS) attack was discovered from 5.196.125.120: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 29 11:06:24 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-29 11:06:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:56518: 535 Incorrect authentication data (set_id=ponto@ns5.netmaster.tg)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 18.97.26.46
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 18.97.26.46: 80 connections per 30 seconds to 2080 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-29 11:07:26 +0000] info [cpaneld] 167.99.236.81 - contactmairieaneho "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user contactmairieaneho (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.125
country_id: 1880251
description:
47.128.121.125 - - [29/Jun/2026:11:09:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6984596&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252Fcompte-rendu-conseil-des-ministres-10-fevrier-2021%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782731348 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/tag/compte-rendu-conseil-des-ministres-10-fevrier-2021/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.125


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 196.196.222.155
country_id: 453733
domain: sia-togo.tg
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:undici||MV:/wp-json/wp/v2/categories?search=uncategorized&per_page=100||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.187.68.237
country_id: 1210997
description:
[2026-06-29 11:16:10 +0000] info [cpaneld] 103.187.68.237 - 2083 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 120.243.141.210
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1981597469 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 51.83.4.60
country_id: 3017382
description:
[2026-06-29 11:17:31 +0000] info [cpaneld] 51.83.4.60 NEW he24djure:VeOoDskDZNYxobPY address=51.83.4.60,app=cpaneld,creator=he24djure,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 81.70.234.246
country_id: 1814991
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/golfe-5-les-services-de-la-mairie-desormais-accessibles-en-ligne/<script async src=||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.222.93.122
country_id: 597427
domain: c2ie.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/c2ie.tg/wp-json/wp/v2/users HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.6.7.54
country_id: 3932488
domain: c2ie.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/c2ie.tg/wp-login.php HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.228.33.91
country_id: 798544
description:
Jun 29 11:27:51 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.228.33.91 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.169.10.1
country_id: 2363686
description:
[2026-06-29 11:28:16 +0000] info [webmaild] 196.169.10.1 - emt@emt.tg "POST /cpsess7786442405/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.29.120] != Current IP Address [196.169.10.1]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.228.33.91
country_id: 798544
description:
Jun 29 11:27:58 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.228.33.91 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.171.104
country_id: 3175395
description:
Jun 29 11:29:05 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.171.104 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.89.246.29
country_id: 6252001
description:
47.89.246.29 - - [29/Jun/2026:11:29:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6723696&pdata=http%253A%252F%252Fwww.pub.soena.tg%253A2082%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782732587 HTTP/1.1" 302 0 www.pub.soena.tg "http://www.pub.soena.tg:2082/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.89.246.29


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.88.94.125
country_id: 6252001
description:
47.88.94.125 - - [29/Jun/2026:11:30:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9880940&pdata=http%253A%252F%252F154.70.82.249%253A2082%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782732598 HTTP/1.1" 302 0 154.70.82.249 "http://154.70.82.249:2082/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.88.94.125


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.141.165.248
country_id: 2542007
description:
[2026-06-29 11:30:44 +0000] info [cpaneld] 41.141.165.248 - zeeaxbnt "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zeeaxbnt (has_cpuser_file failed)


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 68.154.37.68
country_id: 6252001
domain: 154.70.82.246
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/.env.backup||User:root||


plugin: modsec
rule: 77350212
name: IM360 WAF: Information Disclosure Attempt in WordPress
abuser: 68.154.37.68
country_id: 6252001
domain: 154.70.82.246
description:
IM360 WAF: Information Disclosure Attempt in WordPress||MV:/wp-config.php.bak||RSV:8.21||T:APACHE||REQUEST_URI:/wp-config.php.bak||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.191.112.174
country_id: 1562822
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/togo-agbozoh-kwasi-mawusi-nouveau-directeur-radio-ephphatha/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.191.112.174
country_id: 1562822
domain: tdn.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tghttp/tdn.tg/togo-agbozoh-kwasi-mawusi-nouveau-directeur-radio-ephphatha/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.77.179.51
country_id: 6252001
description:
[2026-06-29 11:34:00 +0000] info [cpaneld] 38.77.179.51 - dgdntogo "GET /login/?login_only=1&user=dgdntogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.75.244
country_id: 6252001
description:
[2026-06-29 11:34:04 +0000] info [cpaneld] 172.59.75.244 - dgdntogotg "GET /login/?login_only=1&user=dgdntogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.86.6.88
country_id: 6252001
description:
[2026-06-29 11:34:10 +0000] info [cpaneld] 152.86.6.88 - dgdnto "GET /login/?login_only=1&user=dgdnto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.203.150.34
country_id: 6252001
description:
[2026-06-29 11:34:14 +0000] info [cpaneld] 71.203.150.34 - dgdnt "GET /login/?login_only=1&user=dgdnt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.13.193.235
country_id: 6252001
description:
[2026-06-29 11:34:16 +0000] info [cpaneld] 47.13.193.235 - dgdn "GET /login/?login_only=1&user=dgdn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.56.12.4
country_id: 6252001
description:
[2026-06-29 11:34:19 +0000] info [cpaneld] 68.56.12.4 - dgd "GET /login/?login_only=1&user=dgd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.59.166.226
country_id: 6252001
description:
[2026-06-29 11:33:58 +0000] info [cpaneld] 73.59.166.226 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.197.231.75
country_id: 6252001
description:
[2026-06-29 11:34:08 +0000] info [cpaneld] 73.197.231.75 - dgdntog "GET /login/?login_only=1&user=dgdntog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.38.210.8
country_id: 6252001
description:
[2026-06-29 11:34:22 +0000] info [cpaneld] 100.38.210.8 - dg "GET /login/?login_only=1&user=dg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 139.94.202.49
country_id: 6252001
description:
[2026-06-29 11:35:29 +0000] info [cpaneld] 139.94.202.49 - togoin "GET /login/?login_only=1&user=togoin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-29 11:35:10 +0000] info [webmaild] 160.242.195.10 - secretariat_ci@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 198.73.70.155
country_id: 6252001
description:
[2026-06-29 11:35:15 +0000] info [cpaneld] 198.73.70.155 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.227.103.43
country_id: 6252001
description:
[2026-06-29 11:35:18 +0000] info [cpaneld] 96.227.103.43 - togointerim "GET /login/?login_only=1&user=togointerim&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointerim (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.241.193.221
country_id: 6252001
description:
[2026-06-29 11:35:24 +0000] info [cpaneld] 216.241.193.221 - togointe "GET /login/?login_only=1&user=togointe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.188.53
country_id: 6252001
description:
[2026-06-29 11:35:20 +0000] info [cpaneld] 172.59.188.53 - togointerimnet "GET /login/?login_only=1&user=togointerimnet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointerimnet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.11.148.67
country_id: 6252001
description:
[2026-06-29 11:35:32 +0000] info [cpaneld] 66.11.148.67 - togoi "GET /login/?login_only=1&user=togoi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.16.78
country_id: 6252001
description:
[2026-06-29 11:35:37 +0000] info [cpaneld] 172.56.16.78 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.68.220.193
country_id: 6252001
description:
[2026-06-29 11:35:40 +0000] info [cpaneld] 66.68.220.193 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.124.104.10
country_id: 6252001
description:
[2026-06-29 11:35:27 +0000] info [cpaneld] 70.124.104.10 - togoint "GET /login/?login_only=1&user=togoint&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoint (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.197.54.152
country_id: 6252001
description:
[2026-06-29 11:35:34 +0000] info [cpaneld] 67.197.54.152 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.219.129.148
country_id: 6252001
description:
[2026-06-29 11:37:35 +0000] info [cpaneld] 73.219.129.148 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.175.217.228
country_id: 6252001
description:
[2026-06-29 11:37:52 +0000] info [cpaneld] 67.175.217.228 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 207.49.1.140
country_id: 6252001
description:
[2026-06-29 11:37:37 +0000] info [cpaneld] 207.49.1.140 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.148.70.99
country_id: 6252001
description:
[2026-06-29 11:37:44 +0000] info [cpaneld] 47.148.70.99 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.211.176.145
country_id: 6252001
description:
[2026-06-29 11:37:55 +0000] info [cpaneld] 24.211.176.145 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.104.188.60
country_id: 6252001
description:
[2026-06-29 11:37:49 +0000] info [cpaneld] 70.104.188.60 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.250.38
country_id: 6252001
description:
[2026-06-29 11:37:32 +0000] info [cpaneld] 172.58.250.38 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.51.75.6
country_id: 6252001
description:
[2026-06-29 11:37:42 +0000] info [cpaneld] 108.51.75.6 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 102.176.253.228
country_id: 2363686
description:
[2026-06-29 11:37:57 +0000] info [cpaneld] 102.176.253.228 NEW ucaouut:St0rw7EgGU1oAl7H address=102.176.253.228,app=cpaneld,creator=ucaouut,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.181.58.152
country_id: 6252001
description:
[2026-06-29 11:37:58 +0000] info [cpaneld] 24.181.58.152 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-29 11:39:51 +0000] info [webmaild] 160.242.195.10 - secretariat_ci@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.124.218.199
country_id: 3865483
description:
Jun 29 11:40:45 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.124.218.199 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.52.253.111
country_id: 6252001
description:
[2026-06-29 11:42:43 +0000] info [cpaneld] 64.52.253.111 - dgdntog "GET /login/?login_only=1&user=dgdntog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.0.158.64
country_id: 6252001
description:
[2026-06-29 11:42:45 +0000] info [cpaneld] 24.0.158.64 - dgdnto "GET /login/?login_only=1&user=dgdnto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.151.15.121
country_id: 6252001
description:
[2026-06-29 11:42:40 +0000] info [cpaneld] 47.151.15.121 - dgdntogotg "GET /login/?login_only=1&user=dgdntogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.25.0.225
country_id: 6252001
description:
[2026-06-29 11:42:51 +0000] info [cpaneld] 64.25.0.225 - dgdn "GET /login/?login_only=1&user=dgdn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.151.208.134
country_id: 6252001
description:
[2026-06-29 11:42:48 +0000] info [cpaneld] 97.151.208.134 - dgdnt "GET /login/?login_only=1&user=dgdnt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.121.203.185
country_id: 6252001
description:
[2026-06-29 11:42:38 +0000] info [cpaneld] 71.121.203.185 - dgdntogo "GET /login/?login_only=1&user=dgdntogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.177.137.229
country_id: 6252001
description:
[2026-06-29 11:42:54 +0000] info [cpaneld] 66.177.137.229 - dgd "GET /login/?login_only=1&user=dgd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 153.66.207.147
country_id: 6252001
description:
[2026-06-29 11:42:36 +0000] info [cpaneld] 153.66.207.147 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 149.120.33.202
country_id: 6252001
description:
[2026-06-29 11:42:56 +0000] info [cpaneld] 149.120.33.202 - dg "GET /login/?login_only=1&user=dg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dg (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.122.104
country_id: 1880251
description:
47.128.122.104 - - [29/Jun/2026:11:45:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6987207&pdata=https%253A%252F%252Ftogodailynews.tg%252Fbidc-en-deuil-lex-president-bashir-mamman-ifo-est-decede%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782733522 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/bidc-en-deuil-lex-president-bashir-mamman-ifo-est-decede/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.122.104


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.176.26.6
country_id: 1562822
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/events/3 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.112.251.117
country_id: 6252001
description:
[2026-06-29 11:49:49 +0000] info [cpaneld] 24.112.251.117 - dgdntogotg "GET /login/?login_only=1&user=dgdntogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.94.96.143
country_id: 6252001
description:
[2026-06-29 11:49:43 +0000] info [cpaneld] 97.94.96.143 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.124.50.51
country_id: 6252001
description:
[2026-06-29 11:49:52 +0000] info [cpaneld] 64.124.50.51 - dgdntog "GET /login/?login_only=1&user=dgdntog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntog (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.37.43.36
country_id: 1269750
domain: tps.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:52793.tps.tg||ServerName:tps.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:da0add3e3532cf0cf1c7b6984ed4e6ecf8883219||Title:0x8ddcb417||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.166.90.186
country_id: 6252001
description:
[2026-06-29 11:49:46 +0000] info [cpaneld] 174.166.90.186 - dgdntogo "GET /login/?login_only=1&user=dgdntogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.31.107.111
country_id: 6252001
description:
[2026-06-29 11:50:04 +0000] info [cpaneld] 108.31.107.111 - dgdn "GET /login/?login_only=1&user=dgdn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.52.98.45
country_id: 6252001
description:
[2026-06-29 11:50:07 +0000] info [cpaneld] 98.52.98.45 - dgd "GET /login/?login_only=1&user=dgd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.240.229.16
country_id: 6252001
description:
[2026-06-29 11:50:11 +0000] info [cpaneld] 24.240.229.16 - dg "GET /login/?login_only=1&user=dg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dg (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.170.66.202
country_id: 2363686
description:
[2026-06-29 11:50:29 +0000] info [webmaild] 196.170.66.202 - ndadia.ev@inger.tg "GET /cpsess3128556150/3rdparty/roundcube/?_task=mail HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.168.96.46] != Current IP Address [196.170.66.202]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.17.124.214
country_id: 690791
description:
Jun 29 11:50:14 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.17.124.214 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.114.50.137
country_id: 6252001
description:
[2026-06-29 11:49:58 +0000] info [cpaneld] 75.114.50.137 - dgdnto "GET /login/?login_only=1&user=dgdnto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.42.8.137
country_id: 6252001
description:
[2026-06-29 11:50:01 +0000] info [cpaneld] 68.42.8.137 - dgdnt "GET /login/?login_only=1&user=dgdnt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnt (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.23.203.138
country_id: 1269750
description:
2026-06-29 11:52:33 dovecot_login authenticator failed for H=([59.20.150.99]) [125.23.203.138]:59592: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 102.64.222.244
country_id: 2363686
description:
[2026-06-29 11:55:59 +0000] info [webmaild] 102.64.222.244 - abrebistondue@abttogo.com "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.109.138.170
country_id: 6252001
description:
[2026-06-29 11:57:49 +0000] info [cpaneld] 98.109.138.170 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 170.244.223.129
country_id: 3469034
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/event/lancement-djama-stout-porter HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.76.27.192
country_id: 6252001
description:
[2026-06-29 11:57:55 +0000] info [cpaneld] 173.76.27.192 - dgdntog "GET /login/?login_only=1&user=dgdntog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.224.199.81
country_id: 6252001
description:
[2026-06-29 11:57:57 +0000] info [cpaneld] 169.224.199.81 - dgdnto "GET /login/?login_only=1&user=dgdnto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.253.113.167
country_id: 6252001
description:
[2026-06-29 11:58:04 +0000] info [cpaneld] 38.253.113.167 - dgdn "GET /login/?login_only=1&user=dgdn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 153.66.241.243
country_id: 6252001
description:
[2026-06-29 11:58:08 +0000] info [cpaneld] 153.66.241.243 - dg "GET /login/?login_only=1&user=dg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.199.2.93
country_id: 6252001
description:
[2026-06-29 11:58:06 +0000] info [cpaneld] 68.199.2.93 - dgd "GET /login/?login_only=1&user=dgd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.15.139.233
country_id: 6252001
description:
[2026-06-29 11:58:01 +0000] info [cpaneld] 100.15.139.233 - dgdnt "GET /login/?login_only=1&user=dgdnt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.108.231.169
country_id: 2077456
description:
[2026-06-29 11:59:00 +0000] info [cpaneld] 103.108.231.169 - arsetg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 65.20.148.129
country_id: 99237
description:
Jun 29 12:02:47 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 65.20.148.129 has been locked due to Imunify RBL


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 152.32.252.94
country_id: 1819730
description:
Jun 29 12:02:29 ns5 pure-ftpd[1059894]: (?@152.32.252.94) [WARNING] Authentication failed for user [anonymous]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.50.143.78
country_id: 1814991
description:
2026-06-29 12:03:35 dovecot_login authenticator failed for H=(bb121-6-81-59.singnet.com.sg) [111.50.143.78]:23029: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.212.228.74
country_id: 1880251
description:
[2026-06-29 12:03:00 +0000] info [cpaneld] 129.212.228.74 - kwbcfbmo "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kwbcfbmo (has_cpuser_file failed)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 152.32.252.94
country_id: 1819730
description:
Jun 29 12:03:50 ns5 pure-ftpd[1060519]: (?@152.32.252.94) [WARNING] Authentication failed for user [anonymous]


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 152.32.252.94
country_id: 1819730
description:
Jun 29 12:04:31 ns5 pure-ftpd[1060871]: (?@152.32.252.94) [WARNING] Authentication failed for user [anonymous]


plugin: modsec
rule: 77277976
name: IM360 WAF: XMLRPC getUsersBlogs RBL infectors
abuser: 171.22.251.140
country_id: 3017382
domain: sia-togo.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL infectors||Username:Ajatovivi1994.sia-togo.tg||Method:wp.getUsersBlogs


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.175.36.152
country_id: 1562822
domain: www.ave2.mairie.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ave2.mairie.tg/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 103.143.207.18
country_id: 1562822
domain: cameg-togo.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/7?_fields=id,slug,roles||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.91.64.6
country_id: 2017370
description:
45.91.64.6 - - [29/Jun/2026:12:08:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13330278&pdata=https%253A%252F%252Fpnls.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782734896 HTTP/2.0" 302 0 pnls.tg "https://pnls.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.91.64.6


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 200.25.56.103
country_id: 3469034
description:
Denial of Service (DoS) attack was discovered from 200.25.56.103: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 200.25.91.181
country_id: 3469034
description:
Denial of Service (DoS) attack was discovered from 200.25.91.181: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 200.25.91.180
country_id: 3469034
description:
Denial of Service (DoS) attack was discovered from 200.25.91.180: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.138.190.132
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 34.138.190.132: 80 connections per 30 seconds to 443 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 175.100.79.112
country_id: 1831722
description:
[2026-06-29 12:15:37 +0000] info [whostmgrd] 175.100.79.112 - root "POST /json-api/create_user_session?api.version=1&user=root HTTP/1.1" FAILED LOGIN whostmgrd: login attempt to WHM with bad accesshash or API token


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 175.100.83.30
country_id: 1831722
description:
[2026-06-29 12:15:48 +0000] info [cpaneld] 175.100.83.30 - e.sanvee "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.sanvee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-29 12:16:02 +0000] info [cpaneld] 167.99.236.81 - admin "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 175.100.79.112
country_id: 1831722
description:
[2026-06-29 12:17:36 +0000] info [whostmgrd] 175.100.79.112 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.189.201.231
country_id: 3469034
description:
Jun 29 12:17:56 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.189.201.231 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.189.201.231
country_id: 3469034
description:
Jun 29 12:18:02 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.189.201.231 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-29 12:19:02 +0000] info [cpaneld] 167.99.236.81 - camaegdtomgo "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 175.100.83.30
country_id: 1831722
description:
[2026-06-29 12:21:30 +0000] info [cpaneld] 175.100.83.30 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: ossec
rule: 11019
name: WHM session loaded via API from external IP
abuser: 175.100.79.112
country_id: 1831722
description:
[2026-06-29 12:21:38 +0000] info [whostmgrd] 175.100.79.112 NEW root:b5WknKp8ugNp_OPJ address=175.100.79.112,app=whostmgrd,creator=root,method=handle_form_login,path=loadsession:root:u0GVizTue9wjx0zx:create_user_session,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.129.233.219
country_id: 6252001
description:
[2026-06-29 12:24:30 +0000] info [cpaneld] 97.129.233.219 - dgdntogotg "GET /login/?login_only=1&user=dgdntogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.35.95.145
country_id: 6252001
description:
[2026-06-29 12:24:25 +0000] info [cpaneld] 50.35.95.145 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.84.248.24
country_id: 6252001
description:
[2026-06-29 12:24:39 +0000] info [cpaneld] 138.84.248.24 - dgdnt "GET /login/?login_only=1&user=dgdnt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.58.109.146
country_id: 6252001
description:
[2026-06-29 12:24:49 +0000] info [cpaneld] 184.58.109.146 - dg "GET /login/?login_only=1&user=dg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.147.65.156
country_id: 6252001
description:
[2026-06-29 12:24:28 +0000] info [cpaneld] 216.147.65.156 - dgdntogo "GET /login/?login_only=1&user=dgdntogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.2.227.243
country_id: 6252001
description:
[2026-06-29 12:24:37 +0000] info [cpaneld] 38.2.227.243 - dgdnto "GET /login/?login_only=1&user=dgdnto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnto (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 198.7.56.120
country_id: 6252001
description:
2026-06-29 12:24:42 H=([198.7.56.120]) [198.7.56.120]:51086 F=<kcttehax@contempo.com> rejected RCPT <whiteway@white-ways.com>: The mail server could not deliver mail to whiteway@white-ways.com.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.8.0.222
country_id: 6252001
description:
[2026-06-29 12:24:34 +0000] info [cpaneld] 71.8.0.222 - dgdntog "GET /login/?login_only=1&user=dgdntog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.163.34.99
country_id: 6252001
description:
[2026-06-29 12:24:41 +0000] info [cpaneld] 71.163.34.99 - dgdn "GET /login/?login_only=1&user=dgdn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdn (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 137.184.153.6
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 137.184.153.6: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.64.162.100
country_id: 2363686
description:
[2026-06-29 12:28:12 +0000] info [whostmgrd] 102.64.162.100 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11009
name: WHM login success
abuser: 102.64.162.100
country_id: 2363686
description:
[2026-06-29 12:28:26 +0000] info [whostmgrd] 102.64.162.100 NEW root:5FECgElVOuEDY4Pm address=102.64.162.100,app=whostmgrd,creator=root,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 175.100.83.30
country_id: 1831722
description:
[2026-06-29 12:29:18 +0000] info [cpaneld] 175.100.83.30 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.184.229.61
country_id: 3865483
description:
Jun 29 12:30:08 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.184.229.61 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 159.48.89.9
country_id: 6252001
description:
[2026-06-29 12:32:19 +0000] info [cpaneld] 159.48.89.9 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.95.83.225
country_id: 6252001
description:
[2026-06-29 12:32:47 +0000] info [cpaneld] 73.95.83.225 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.110.58.221
country_id: 6252001
description:
[2026-06-29 12:32:22 +0000] info [cpaneld] 98.110.58.221 - mafisteel "GET /login/?login_only=1&user=mafisteel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafisteel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.218.182.180
country_id: 6252001
description:
[2026-06-29 12:32:26 +0000] info [cpaneld] 72.218.182.180 - mafisteeltg "GET /login/?login_only=1&user=mafisteeltg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafisteeltg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.252.195.71
country_id: 6252001
description:
[2026-06-29 12:32:28 +0000] info [cpaneld] 195.252.195.71 - mafistee "GET /login/?login_only=1&user=mafistee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafistee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.49.125.216
country_id: 6252001
description:
[2026-06-29 12:32:44 +0000] info [cpaneld] 174.49.125.216 - maf "GET /login/?login_only=1&user=maf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.163.244.186
country_id: 6252001
description:
[2026-06-29 12:32:32 +0000] info [cpaneld] 98.163.244.186 - mafiste "GET /login/?login_only=1&user=mafiste&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafiste (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.183.188.245
country_id: 6252001
description:
[2026-06-29 12:32:35 +0000] info [cpaneld] 75.183.188.245 - mafist "GET /login/?login_only=1&user=mafist&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafist (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.183.180.41
country_id: 6252001
description:
[2026-06-29 12:32:41 +0000] info [cpaneld] 98.183.180.41 - mafi "GET /login/?login_only=1&user=mafi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafi (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 102.64.167.156
country_id: 2363686
description:
[2026-06-29 12:33:21 +0000] info [cpaneld] 102.64.167.156 NEW uljcqiuy:03XVc7Yypj_Bow00 address=102.64.167.156,app=cpaneld,creator=root,method=handle_form_login,path=loadsession:uljcqiuy:cPBWySn4_V2EM8re:create_user_session,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.209.208.101
country_id: 6252001
description:
[2026-06-29 12:34:03 +0000] info [cpaneld] 64.209.208.101 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 65.78.121.39
country_id: 6252001
description:
[2026-06-29 12:34:08 +0000] info [cpaneld] 65.78.121.39 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.117.214
country_id: 6252001
description:
[2026-06-29 12:34:17 +0000] info [cpaneld] 172.59.117.214 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.13.164.63
country_id: 6252001
description:
[2026-06-29 12:34:23 +0000] info [cpaneld] 107.13.164.63 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.14.179.140
country_id: 6252001
description:
[2026-06-29 12:34:06 +0000] info [cpaneld] 100.14.179.140 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.99.87.136
country_id: 6252001
description:
[2026-06-29 12:34:19 +0000] info [cpaneld] 74.99.87.136 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.136.216.20
country_id: 6252001
description:
[2026-06-29 12:34:00 +0000] info [cpaneld] 76.136.216.20 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 47.253.90.63
country_id: 6252001
description:
2026-06-29 12:37:25 dovecot_login authenticator failed for H=(iZ0xi1dhkwkvg928tnolmgZ) [47.253.90.63]:52412: 535 Incorrect authentication data (set_id=ag@togointerim.net)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 31.134.9.107
country_id: 241170
domain: www.snb.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77141095r77142192||MV:12-41.31.134.9.107||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.163.111.193
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/sante/page/1894272450 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.5.217
country_id: 6252001
description:
[2026-06-29 12:43:16 +0000] info [cpaneld] 195.63.5.217 - cafeitadm "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-29 12:45:09 +0000] info [cpaneld] 167.99.236.81 - mpqypjjp "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mpqypjjp (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 183.227.191.113
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/sante/page/1208865513 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 207.90.244.11
country_id: 6252001
description:
Jun 29 12:56:45 ns5 pure-ftpd[1091319]: (?@207.90.244.11) [WARNING] Authentication failed for user [anonymous]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 134.22.248.25
country_id: 6252001
description:
[2026-06-29 12:57:21 +0000] info [cpaneld] 134.22.248.25 - mafiste "GET /login/?login_only=1&user=mafiste&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafiste (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.200.228.254
country_id: 6252001
description:
[2026-06-29 12:57:25 +0000] info [cpaneld] 98.200.228.254 - mafist "GET /login/?login_only=1&user=mafist&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafist (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.115.239.37
country_id: 6252001
description:
[2026-06-29 12:57:29 +0000] info [cpaneld] 98.115.239.37 - mafis "GET /login/?login_only=1&user=mafis&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafis (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.23.187.220
country_id: 6252001
description:
[2026-06-29 12:57:36 +0000] info [cpaneld] 173.23.187.220 - maf "GET /login/?login_only=1&user=maf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.7.7.145
country_id: 6252001
description:
[2026-06-29 12:57:11 +0000] info [cpaneld] 75.7.7.145 - mafisteel "GET /login/?login_only=1&user=mafisteel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafisteel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.196.205.220
country_id: 6252001
description:
[2026-06-29 12:57:15 +0000] info [cpaneld] 73.196.205.220 - mafisteeltg "GET /login/?login_only=1&user=mafisteeltg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafisteeltg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.107.171.177
country_id: 6252001
description:
[2026-06-29 12:57:18 +0000] info [cpaneld] 70.107.171.177 - mafistee "GET /login/?login_only=1&user=mafistee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafistee (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 46.161.50.108
country_id: 2017370
description:
46.161.50.108 - - [29/Jun/2026:13:00:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6986649&pdata=https%253A%252F%252Fpnls.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782738040 HTTP/2.0" 404 561 pnls.tg "https://pnls.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:46.161.50.108


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 95.215.0.144
country_id: 2017370
description:
95.215.0.144 - - [29/Jun/2026:13:00:43 +0000] "GET /favicon.ico HTTP/2.0" 415 587 pnls.tg "https://pnls.tg/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6986649&pdata=https%253A%252F%252Fpnls.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782738040" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:95.215.0.144


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.64.2.139
country_id: 6252001
description:
[2026-06-29 13:00:52 +0000] info [cpaneld] 173.64.2.139 - belali "GET /login/?login_only=1&user=belali&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user belali (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.235.180.181
country_id: 6252001
description:
[2026-06-29 13:00:59 +0000] info [cpaneld] 96.235.180.181 - belal "GET /login/?login_only=1&user=belal&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user belal (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 166.70.217.85
country_id: 6252001
description:
[2026-06-29 13:01:06 +0000] info [cpaneld] 166.70.217.85 - bel "GET /login/?login_only=1&user=bel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.4.57.93
country_id: 6252001
description:
[2026-06-29 13:01:02 +0000] info [cpaneld] 172.4.57.93 - bela "GET /login/?login_only=1&user=bela&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bela (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.161.246.192
country_id: 1562822
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/togo-le-senat-consolide-la-gouvernance-financiere/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.190.5.18
country_id: 6252001
description:
[2026-06-29 13:03:05 +0000] info [cpaneld] 71.190.5.18 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.161.246.192
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-le-senat-consolide-la-gouvernance-financiere/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.18.31.19
country_id: 6252001
description:
[2026-06-29 13:03:08 +0000] info [cpaneld] 173.18.31.19 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.212.228.74
country_id: 1880251
description:
[2026-06-29 13:03:39 +0000] info [cpaneld] 129.212.228.74 - crepsad "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.195.45.86
country_id: 6252001
description:
[2026-06-29 13:03:12 +0000] info [cpaneld] 47.195.45.86 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.1.64.116
country_id: 6252001
description:
[2026-06-29 13:03:25 +0000] info [cpaneld] 73.1.64.116 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.17.217.132
country_id: 6252001
description:
[2026-06-29 13:03:18 +0000] info [cpaneld] 73.17.217.132 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 153.66.147.102
country_id: 6252001
description:
[2026-06-29 13:03:28 +0000] info [cpaneld] 153.66.147.102 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 130.12.182.188
country_id: 3190538
description:
Jun 29 13:05:17 ns5 pure-ftpd[1095444]: (?@130.12.182.188) [INFO] New connection from 130.12.182.188


plugin: modsec
rule: 33331
name: IM360 WAF: Attempt to upload malware
abuser: 34.142.170.187
country_id: 1880251
domain: 24heureinfo.tg
description:
IM360 WAF: Attempt to upload malware||Action:||Scan duration:269513||Sizes:625||Combined size:625||User:he24djure||WPU:||Filename:0854rnab.zip||Scanned:/tmp//20260629-130833-akJuUShnCA0M8x-PiHukFgAAAA4-file-dhNxk8||SC:/home/he24djure/public_html/index.php||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.201.50.79
country_id: 6252001
description:
[2026-06-29 13:09:58 +0000] info [cpaneld] 69.201.50.79 - ifxmoxbf "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.212.228.74
country_id: 1880251
description:
[2026-06-29 13:12:18 +0000] info [cpaneld] 129.212.228.74 - enadamso "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user enadamso (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.205.67.33
country_id: 6252001
description:
[2026-06-29 13:13:30 +0000] info [cpaneld] 73.205.67.33 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.49.194.243
country_id: 6252001
description:
[2026-06-29 13:13:44 +0000] info [cpaneld] 68.49.194.243 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.173.164.61
country_id: 6252001
description:
[2026-06-29 13:13:48 +0000] info [cpaneld] 174.173.164.61 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.175.119.7
country_id: 6252001
description:
[2026-06-29 13:13:52 +0000] info [cpaneld] 174.175.119.7 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.110.130.120
country_id: 6252001
description:
[2026-06-29 13:13:37 +0000] info [cpaneld] 73.110.130.120 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 135.131.53.227
country_id: 6252001
description:
[2026-06-29 13:13:41 +0000] info [cpaneld] 135.131.53.227 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 109.88.203.38
country_id: 2802361
description:
Denial of Service (DoS) attack was discovered from 109.88.203.38: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 109.88.203.53
country_id: 2802361
description:
Denial of Service (DoS) attack was discovered from 109.88.203.53: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 109.88.203.55
country_id: 2802361
description:
Denial of Service (DoS) attack was discovered from 109.88.203.55: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 65.35.107.208
country_id: 6252001
description:
[2026-06-29 13:15:38 +0000] info [cpaneld] 65.35.107.208 - dgdntog "GET /login/?login_only=1&user=dgdntog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.173.167.78
country_id: 6252001
description:
[2026-06-29 13:15:51 +0000] info [cpaneld] 50.173.167.78 - dgd "GET /login/?login_only=1&user=dgd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.173.240.60
country_id: 6252001
description:
[2026-06-29 13:15:55 +0000] info [cpaneld] 70.173.240.60 - dg "GET /login/?login_only=1&user=dg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.0.157.161
country_id: 6252001
description:
[2026-06-29 13:15:26 +0000] info [cpaneld] 73.0.157.161 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.27.236.184
country_id: 6252001
description:
[2026-06-29 13:17:14 +0000] info [cpaneld] 64.27.236.184 - dgdntogo "GET /login/?login_only=1&user=dgdntogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.3.140
country_id: 6252001
description:
[2026-06-29 13:17:17 +0000] info [cpaneld] 172.58.3.140 - dgdntogotg "GET /login/?login_only=1&user=dgdntogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.169.27.56
country_id: 6252001
description:
[2026-06-29 13:17:21 +0000] info [cpaneld] 66.169.27.56 - dgdntog "GET /login/?login_only=1&user=dgdntog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.14.183.253
country_id: 6252001
description:
[2026-06-29 13:17:37 +0000] info [cpaneld] 24.14.183.253 - dgd "GET /login/?login_only=1&user=dgd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.63.217.33
country_id: 6252001
description:
[2026-06-29 13:17:42 +0000] info [cpaneld] 64.63.217.33 - dg "GET /login/?login_only=1&user=dg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.207.71.17
country_id: 6252001
description:
[2026-06-29 13:17:24 +0000] info [cpaneld] 98.207.71.17 - dgdnto "GET /login/?login_only=1&user=dgdnto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.130.190.45
country_id: 6252001
description:
[2026-06-29 13:17:28 +0000] info [cpaneld] 76.130.190.45 - dgdnt "GET /login/?login_only=1&user=dgdnt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdnt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.252.0.174
country_id: 6252001
description:
[2026-06-29 13:17:34 +0000] info [cpaneld] 73.252.0.174 - dgdn "GET /login/?login_only=1&user=dgdn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdn (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.38.136.211
country_id: 1814991
description:
2026-06-29 13:17:43 dovecot_login authenticator failed for H=([174.64.199.87]) [111.38.136.211]:59713: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 130.12.182.188
country_id: 3190538
description:
Jun 29 13:18:33 ns5 pure-ftpd[1101389]: (?@130.12.182.188) [INFO] New connection from 130.12.182.188


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 115.207.9.173
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/sante/page/1164631279 HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 152.202.194.220
country_id: 3686110
domain: cafe.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/cafe.tg/wp-json/wp/v2/users HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 152.202.194.220
country_id: 3686110
domain: cafe.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/cafe.tg/wp-login.php HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 123.170.248.79
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/10/2468aec31ca355764b92d9814d550e47_L.webp 600w, /wp-content/uploads/2025/10/2468aec31ca355764b92d9814d550e47_L-300x220.webp 300w HTTP/1.1||RSV:8.21||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 3.120.237.227
country_id: 2921044
description:
Denial of Service (DoS) attack was discovered from 3.120.237.227: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 137.255.175.181
country_id: 2395170
domain: cloud-et-racks.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/149.0.0.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 217.26.178.136
country_id: 3175395
description:
Jun 29 13:25:12 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 217.26.178.136 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 192.82.45.31
country_id: 6252001
description:
[2026-06-29 13:25:29 +0000] info [cpaneld] 192.82.45.31 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.174.98.63
country_id: 6252001
description:
[2026-06-29 13:25:32 +0000] info [cpaneld] 108.174.98.63 - mondeai "GET /login/?login_only=1&user=mondeai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mondeai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.12.128.23
country_id: 6252001
description:
[2026-06-29 13:25:56 +0000] info [cpaneld] 107.12.128.23 - mon "GET /login/?login_only=1&user=mon&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mon (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.127.133.81
country_id: 6252001
description:
[2026-06-29 13:25:48 +0000] info [cpaneld] 64.127.133.81 - monde "GET /login/?login_only=1&user=monde&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user monde (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.80.254.243
country_id: 6252001
description:
[2026-06-29 13:26:01 +0000] info [cpaneld] 72.80.254.243 - mo "GET /login/?login_only=1&user=mo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mo (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 213.32.21.59
country_id: 3017382
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:13-26.213.32.21.59||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.220.101.103
country_id: 2921044
description:
185.220.101.103 - lhqeyybr [29/Jun/2026:13:27:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6514583&pdata=https%253A%252F%252Flvdt.tg%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782739628 HTTP/2.0" 302 0 lvdt.tg "https://lvdt.tg:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.220.101.103


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.230.151.18
country_id: 2464461
description:
[2026-06-29 13:29:14 +0000] info [cpaneld] 41.230.151.18 - czqxxxnu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User czqxxxnu has their account suspended. Login blocked.


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 170.246.69.53
country_id: 3469034
description:
2026-06-29 13:30:12 dovecot_plain authenticator failed for H=([69.172.210.47]) [170.246.69.53]:23082: 535 Incorrect authentication data (set_id=admin@belali.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 223.207.230.82
country_id: 1605651
description:
2026-06-29 13:30:33 dovecot_plain authenticator failed for H=([69.172.210.47]) [223.207.230.82]:64440: 535 Incorrect authentication data (set_id=support@belali.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 177.192.220.152
country_id: 3469034
description:
2026-06-29 13:31:01 dovecot_plain authenticator failed for H=([69.172.210.47]) [177.192.220.152]:45160: 535 Incorrect authentication data (set_id=contact@belali.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.230.151.18
country_id: 2464461
description:
[2026-06-29 13:34:48 +0000] info [whostmgrd] 41.230.151.18 - anadebfreenetmas "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 176.103.1.39
country_id: 690791
description:
Jun 29 13:34:58 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 176.103.1.39 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.162.209.129
country_id: 1814991
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/03/35edae371e16e9f1c22e864ff37a5652_L.webp HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 213.32.21.59
country_id: 3017382
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:13-39.213.32.21.59||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 77.83.39.213
country_id: 690791
description:
2026-06-29 13:42:33 H=([77.83.39.213]) [77.83.39.213]:59352 X=TLS1.3:TLS_AES_256_GCM_SHA384:256 F=<contact@sthandling-aero.tg> rejected RCPT <contact@sthandling-aero.tg>: Sender verify failed


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.161.234.48
country_id: 192950
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/liste-des-pharmacies-de-garde-du-26-mai-au-02-juin-2025/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.161.234.48
country_id: 192950
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/liste-des-pharmacies-de-garde-du-26-mai-au-02-juin-2025/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 3.238.178.255
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 3.238.178.255: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 217.218.153.93
country_id: 130758
domain: www.snb.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:217.218.153.93||TA:217.218.153.93||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.234.56
country_id: 1269750
description:
Jun 29 13:50:53 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.234.56 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.213.193.49
country_id: 1269750
description:
Jun 29 13:52:15 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.213.193.49 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 194.180.232.188
country_id: 6252001
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:194.180.232.188||TA:194.180.232.188||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.134.30.170
country_id: 6252001
description:
[2026-06-29 13:55:36 +0000] info [cpaneld] 68.134.30.170 - togointerim "GET /login/?login_only=1&user=togointerim&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointerim (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.191.84.50
country_id: 6252001
description:
[2026-06-29 13:55:49 +0000] info [cpaneld] 67.191.84.50 - togoin "GET /login/?login_only=1&user=togoin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.20.160.158
country_id: 6252001
description:
[2026-06-29 13:55:53 +0000] info [cpaneld] 73.20.160.158 - togoi "GET /login/?login_only=1&user=togoi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.131.127.228
country_id: 6252001
description:
[2026-06-29 13:55:32 +0000] info [cpaneld] 73.131.127.228 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.4.86.135
country_id: 6252001
description:
[2026-06-29 13:55:38 +0000] info [cpaneld] 100.4.86.135 - togointerimnet "GET /login/?login_only=1&user=togointerimnet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointerimnet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.210.165.140
country_id: 6252001
description:
[2026-06-29 13:56:03 +0000] info [cpaneld] 75.210.165.140 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.180.160.97
country_id: 6252001
description:
[2026-06-29 13:55:56 +0000] info [cpaneld] 73.180.160.97 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 78.47.119.228
country_id: 2921044
description:
Denial of Service (DoS) attack was discovered from 78.47.119.228: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 111.119.49.218
country_id: 1282988
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-la-formation-de-courte-duree-une-reponse-rapide-a-lemploi-des-jeunes/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 111.119.49.218
country_id: 1282988
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/togo-la-formation-de-courte-duree-une-reponse-rapide-a-lemploi-des-jeunes/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 84.37.158.107
country_id: 3175395
description:
84.37.158.107 - - [29/Jun/2026:14:07:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7248276&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252Fet-la-rubeole%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782742019 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/tag/et-la-rubeole/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.1542.1319 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:84.37.158.107


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.219.104.193
country_id: 798544
description:
Jun 29 14:12:40 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.219.104.193 has been locked due to Imunify RBL


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.173.175.43
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/product-category/boissons-2/?add-to-cart=9762||QS:add-to-cart=9762||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.172.194.125
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/produit/signorina/?add-to-cart=8671||QS:add-to-cart=8671||RSV:8.21||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 72.56.97.163
country_id: 2750405
description:
2026-06-29 14:15:15 dovecot_plain authenticator failed for H=(nhdpypgdk5hnu6dvjfc050n1i0f2o) [72.56.97.163]:56714: 535 Incorrect authentication data (set_id=admin@togocarrierebetons.com)


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 155.212.213.91
country_id: 2017370
domain: belali.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:loradeg001264||Email:jamesmiller6025ahgm@d.blog-stuff.com||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 155.212.213.91
country_id: 2017370
domain: belali.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:14-16.155.212.213.91||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 123.6.49.50
country_id: 1814991
description:
123.6.49.50 - - [29/Jun/2026:14:19:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6449812&pdata=https%253A%252F%252Fwww.dagl.tg%252Fcommunes%252F6-commune-agoe-nyive-4&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782742788 HTTP/2.0" 302 0 www.dagl.tg "https://www.dagl.tg/communes/6-commune-agoe-nyive-4" "Mozilla/5.0 (Linux; Android 11; CPH2185) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.50


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 43.173.179.199
country_id: 1880251
description:
43.173.179.199 - - [29/Jun/2026:14:21:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9595548&pdata=http%253A%252F%252Fcafe.tg%252Falerte-krack-faille-securitaire-reseaux-wi-fi%252F%253Fshare%253Dfacebook&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782742871 HTTP/1.1" 404 561 cafe.tg "http://cafe.tg/alerte-krack-faille-securitaire-reseaux-wi-fi/?share=facebook" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.179.199


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.82.151
country_id: 3469034
description:
Jun 29 14:21:57 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.82.151 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.170.1.77
country_id: 2363686
description:
[2026-06-29 14:25:42 +0000] info [webmaild] 196.170.1.77 - info@matosshop.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 123.6.49.50
country_id: 1814991
description:
123.6.49.50 - - [29/Jun/2026:14:28:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13133715&pdata=https%253A%252F%252Fwww.dagl.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782743316 HTTP/2.0" 404 561 www.dagl.tg "https://www.dagl.tg/" "Mozilla/5.0 (Linux; Android 11; CPH2185) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.50


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 49.45.45.12
country_id: 1269750
description:
Denial of Service (DoS) attack was discovered from 49.45.45.12: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 27.115.124.101
country_id: 1814991
description:
27.115.124.101 - - [29/Jun/2026:14:28:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10051986&pdata=https%253A%252F%252Fwww.dagl.tg%252Faccueil%252F1-presentation&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782743315 HTTP/2.0" 302 0 www.dagl.tg "https://www.dagl.tg/accueil/1-presentation" "Mozilla/5.0 (Linux; Android 11; V2055A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.101


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 49.45.45.13
country_id: 1269750
description:
Denial of Service (DoS) attack was discovered from 49.45.45.13: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 49.45.45.14
country_id: 1269750
description:
Denial of Service (DoS) attack was discovered from 49.45.45.14: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.217.135.174
country_id: 6252001
description:
[2026-06-29 14:30:40 +0000] info [whostmgrd] 69.217.135.174 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.53.126.191
country_id: 6252001
description:
[2026-06-29 14:30:49 +0000] info [whostmgrd] 136.53.126.191 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.10.106.84
country_id: 6252001
description:
[2026-06-29 14:30:52 +0000] info [cpaneld] 71.10.106.84 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.241.172.101
country_id: 6252001
description:
[2026-06-29 14:30:55 +0000] info [cpaneld] 66.241.172.101 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.248.35.193
country_id: 6252001
description:
[2026-06-29 14:30:44 +0000] info [whostmgrd] 38.248.35.193 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-29 14:33:17 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:40198: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.173.180.241
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/shop/bouffe/wingsn-shake/pizza/margherita/?add-to-cart=1951||QS:add-to-cart=1951||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 181.13.110.15
country_id: 3865483
description:
Jun 29 14:34:30 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 181.13.110.15 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 198.37.116.189
country_id: 6252001
domain: www.arse.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:198.37.116.189||TA:198.37.116.189||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-29 14:35:10 +0000] info [cpaneld] 167.99.236.81 - cvajhehu "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cvajhehu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.212.228.74
country_id: 1880251
description:
[2026-06-29 14:36:48 +0000] info [cpaneld] 129.212.228.74 - rolle "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rolle (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 117.5.142.91
country_id: 1562822
domain: civilemagazine.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:14-37.117.5.142.91||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.165.170.41
country_id: 3895114
description:
Jun 29 14:39:49 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.165.170.41 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.66.56.231
country_id: 1643084
description:
[2026-06-29 14:40:26 +0000] info [cpaneld] 157.66.56.231 - a.mathey "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.mathey (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 185.244.153.6
country_id: 99237
description:
[2026-06-29 14:41:15 +0000] info [cpaneld] 185.244.153.6 NEW wcnyaruu:Vh8r6L3eggOybzNH address=185.244.153.6,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.66.56.231
country_id: 1643084
description:
[2026-06-29 14:42:54 +0000] info [cpaneld] 157.66.56.231 - k.eklou "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user k.eklou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.66.56.231
country_id: 1643084
description:
[2026-06-29 14:43:55 +0000] info [cpaneld] 157.66.56.231 - e.sanvee "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.sanvee (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.239.45.10
country_id: 1269750
description:
Jun 29 14:43:42 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.239.45.10 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.66.56.231
country_id: 1643084
description:
[2026-06-29 14:44:23 +0000] info [cpaneld] 157.66.56.231 - arsetg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.91.164.131
country_id: 3469034
description:
Jun 29 14:44:32 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.91.164.131 has been locked due to Imunify RBL


plugin: modsec
rule: 77350541
name: IM360 WAF: Possible SQL injection attack
abuser: 193.151.190.194
country_id: 6252001
domain: 24heureinfo.tg
description:
IM360 WAF: Possible SQL injection attack||MVN:ARGS_NAMES:gt;If you have any questions relating to where and how you can use ||MV:gt;If you have any questions relating to where and how you can use ||RSV:8.21||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.91.164.131
country_id: 3469034
description:
Jun 29 14:45:11 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.91.164.131 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.66.56.231
country_id: 1643084
description:
[2026-06-29 14:45:33 +0000] info [cpaneld] 157.66.56.231 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-29 14:46:05 +0000] info [webmaild] 196.171.46.177 - kekeli.alemawo@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 144.91.125.41
country_id: 3017382
description:
[2026-06-29 14:46:50 +0000] info [cpaneld] 144.91.125.41 - cafe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 80.209.229.158
country_id: 597427
description:
[2026-06-29 14:46:31 +0000] info [cpaneld] 80.209.229.158 NEW wcnyaruu:kO6VyOC4Wx6ELhzK address=80.209.229.158,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77896900
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 209.50.173.164
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:wpadminerlzp||User:glfmqhlj||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 93.123.109.167
country_id: 732800
domain: yanacom.tg
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/.env?_=ivnvauwr&v=xfiby||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.66.56.231
country_id: 1643084
description:
[2026-06-29 14:48:11 +0000] info [cpaneld] 157.66.56.231 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.239.45.10
country_id: 1269750
description:
Jun 29 14:48:42 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.239.45.10 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.239.45.10
country_id: 1269750
description:
Jun 29 14:49:22 ns5 auth[991507]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.239.45.10 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 23.236.225.152
country_id: 6251999
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:23.236.225.152||TA:23.236.225.152||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.63.21.38
country_id: 6252001
description:
[2026-06-29 14:53:27 +0000] info [cpaneld] 71.63.21.38 - togoin "GET /login/?login_only=1&user=togoin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.4.97.183
country_id: 6252001
description:
[2026-06-29 14:53:10 +0000] info [cpaneld] 108.4.97.183 - togointerim "GET /login/?login_only=1&user=togointerim&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointerim (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.4.164.31
country_id: 6252001
description:
[2026-06-29 14:53:31 +0000] info [cpaneld] 98.4.164.31 - togoi "GET /login/?login_only=1&user=togoi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.146.75.136
country_id: 6252001
description:
[2026-06-29 14:53:15 +0000] info [cpaneld] 97.146.75.136 - togointerimnet "GET /login/?login_only=1&user=togointerimnet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointerimnet (has_cpuser_file failed)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 85.12.5.197
country_id: 3996063
description:
Jun 29 14:53:02 ns5 pure-ftpd[1146408]: (?@85.12.5.197) [WARNING] Authentication failed for user [test1]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.215.73.196
country_id: 6252001
description:
[2026-06-29 14:53:18 +0000] info [cpaneld] 74.215.73.196 - togointe "GET /login/?login_only=1&user=togointe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 194.44.97.94
country_id: 690791
description:
[2026-06-29 14:59:35 +0000] info [cpaneld] 194.44.97.94 - pduusmyf "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.163.190.69
country_id: 298795
description:
[2026-06-29 15:00:47 +0000] info [cpaneld] 78.163.190.69 - ifxmoxbf "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77141095
name: IM360 WAF: Track spam in PrestaShop
abuser: 141.98.11.224
country_id: 597427
domain: ekeasarl.com
description:
IM360 WAF: Track spam in PrestaShop||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/wp-json/contact-form-7/v1/contact-forms/1286/feedback||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 181.188.161.113
country_id: 3923057
description:
181.188.161.113 - - [29/Jun/2026:15:03:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7456872&pdata=https%253A%252F%252Fcfpj.tg%252Fnwyj-3115jetid.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782745419 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/nwyj-3115jetid.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:181.188.161.113


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.57
country_id: 6252001
description:
205.169.39.57 - - [29/Jun/2026:15:04:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6984856&pdata=http%253A%252F%252Fcamilliens.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782745485 HTTP/1.1" 302 0 camilliens.tg "http://camilliens.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.57


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 142.181.2.192
country_id: 6251999
description:
142.181.2.192 - - [29/Jun/2026:15:07:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9793641&pdata=https%253A%252F%252Fwww.togosem.com%252F2025%252F02%252F11%252Fcassino-on-the-web-melhores-bonus-de-cassino-em-nosso-pais-2025%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782745658 HTTP/2.0" 302 0 www.togosem.com "https://www.togosem.com/2025/02/11/cassino-on-the-web-melhores-bonus-de-cassino-em-nosso-pais-2025/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:142.181.2.192


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-29 15:08:14 +0000] info [cpaneld] 167.99.236.81 - afdim "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 154.16.4.117
country_id: 2921044
domain: www.letabloid.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:15-09.154.16.4.117||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 154.16.4.117
country_id: 2921044
domain: www.letabloid.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:hsijorge84052||Email:okalym675756aga@sorok4.fun||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.212.224
country_id: 2363686
description:
[2026-06-29 15:08:58 +0000] info [webmaild] 196.168.212.224 - tlemou@caissederetraites.tg "POST /cpsess3748051686/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.168.151.167] != Current IP Address [196.168.212.224]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.74.73.62
country_id: 6252001
description:
[2026-06-29 15:10:17 +0000] info [cpaneld] 75.74.73.62 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 208.115.145.23
country_id: 6252001
description:
[2026-06-29 15:10:33 +0000] info [cpaneld] 208.115.145.23 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.251.98.90
country_id: 6252001
description:
[2026-06-29 15:10:41 +0000] info [cpaneld] 172.251.98.90 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.185.26.71
country_id: 6252001
description:
[2026-06-29 15:10:49 +0000] info [cpaneld] 24.185.26.71 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.51.218.2
country_id: 6252001
description:
[2026-06-29 15:10:25 +0000] info [cpaneld] 174.51.218.2 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.223.202
country_id: 6252001
description:
[2026-06-29 15:10:36 +0000] info [cpaneld] 172.59.223.202 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.47.117.163
country_id: 6252001
description:
[2026-06-29 15:11:55 +0000] info [cpaneld] 24.47.117.163 - dgdntogotg "GET /login/?login_only=1&user=dgdntogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-29 15:11:05 +0000] info [cpaneld] 167.99.236.81 - k.eklou "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user k.eklou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.130.156.235
country_id: 6252001
description:
[2026-06-29 15:11:47 +0000] info [cpaneld] 69.130.156.235 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.10.238.33
country_id: 6252001
description:
[2026-06-29 15:12:12 +0000] info [cpaneld] 173.10.238.33 - dgd "GET /login/?login_only=1&user=dgd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.138.32.140
country_id: 6252001
description:
[2026-06-29 15:12:08 +0000] info [cpaneld] 76.138.32.140 - dgdn "GET /login/?login_only=1&user=dgdn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.56.177.247
country_id: 6252001
description:
[2026-06-29 15:12:15 +0000] info [cpaneld] 98.56.177.247 - dg "GET /login/?login_only=1&user=dg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.199.47.138
country_id: 6252001
description:
[2026-06-29 15:11:58 +0000] info [cpaneld] 72.199.47.138 - dgdntog "GET /login/?login_only=1&user=dgdntog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dgdntog (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 176.76.130.150
country_id: 3190538
description:
176.76.130.150 - - [29/Jun/2026:15:13:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13135464&pdata=https%3A%2F%2Flacs1.mairie.tg%3A2083&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782745987 HTTP/1.1" 302 0 lacs1.mairie.tg "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 Edg/137.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:176.76.130.150


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.76.130.150
country_id: 3190538
description:
[2026-06-29 15:13:09 +0000] info [cpaneld] 176.76.130.150 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 200.71.127.100
country_id: 6251999
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:200.71.127.100||TA:200.71.127.100||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-29 15:18:19 +0000] info [cpaneld] 167.99.236.81 - stephane "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user stephane (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.99.236.81
country_id: 6252001
description:
[2026-06-29 15:19:49 +0000] info [cpaneld] 167.99.236.81 - rolle "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rolle (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 39.185.89.241
country_id: 1814991
description:
2026-06-29 15:19:03 dovecot_login authenticator failed for H=([212.132.64.89]) [39.185.89.241]:46977: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.170.45.140
country_id: 2363686
domain: wages.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/me?_fields=capabilities&context=edit&_locale=user||


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 112.82.200.28
country_id: 1814991
domain: cafe.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/index.php?add-to-cart=2330||QS:add-to-cart=2330||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 223.109.207.19
country_id: 1814991
domain: cafe.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/index.php?add-to-cart=2337||QS:add-to-cart=2337||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 51.83.4.64
country_id: 3017382
description:
[2026-06-29 15:24:20 +0000] info [cpaneld] 51.83.4.64 - kwbcfbmo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kwbcfbmo (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.206.92.156
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/actualites/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.33.72.120
country_id: 3686110
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/category/actualites/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77142108
name: IM360 WAF: Directory traversal via plugin for WordPress
abuser: 196.170.45.140
country_id: 2363686
domain: wages.tg
description:
IM360 WAF: Directory traversal via plugin for WordPress||RSV:8.21||T:APACHE||MV:{\"save_builder\":{\"action\":\"save_builder\",\"data\":{\"status\":\"publish\",\"elements\":[{\"id\":\"9e29545\",\"elType\":\"container\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"flex_direction\":\"row-reverse\",\"flex_gap\":{\"unit\":\"px\",\"size\":0,\"column\":\"0\",\"row\":\"0\"},\"margin\":{\"unit\":\"px\",\"top\":\"12\",\"right\":\"12\",\"bottom\":\"12\",\"left\":\"12\",\"isLinked\":true},\"border_width\":{\"unit\":\"px\",\"top\":\"2\",\"right\":\"2\",\"bottom\":\"2\",\"left\":\"2\",\"isLinked\":true},\"border_color\":\"#006633\",\"border_radius\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":true},\"presetTitle\":\"Conteneur\",\"presetIcon\":\"eicon-container\",\"flex_justify_content\":\"space-evenly\"},\"interactions\":{},\"elements\":[{\"id\":\"93bd5df\",\"elType\":\"container\",\"isInner\":true,\"isLocked\":false,\"settings\":{\"flex_direction\":\"column\",\"content_width\":\"full\",\"width\":{\"unit\":\"%\",\"size\":\"50\"},\"border_hover_border\":\"solid\",\"border_hover_width\":{\"unit\":\"px\",\"top\":\"2\",\"right\":\"2\",\"bottom\":\"2\",\"left\":\"2\",\"isLinked\":true}},\"interactions\":{},\"elements\":[{\"id\":\"6d8aa97\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"image\":{\"id\":1303,\"url\":\"https://wages.tg/wp-content/uploads/2026/04/image_fx-18-1.png\",\"alt\":\"\",\"source\":\"library\",\"size\":\"\"},\"ekit_all_conditions_list\":[{\"_id\":\"0a919c3\"}],\"ekit_adv_tooltip_content\":\"Tooltip Content.\",\"ekit_cursor_text_label\":\"Elementskit Cursor\",\"ekit_masking_image_position_laptop\":\"\",\"ekit_masking_image_position_x_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_masking_image_position_y_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_masking_image_repeat_laptop\":\"\",\"ekit_masking_image_size_laptop\":\"\",\"ekit_masking_image_custom_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"align\":\"left\",\"align_laptop\":\"\",\"align_tablet\":\"center\",\"width\":{\"unit\":\"%\",\"size\":100,\"sizes\":[]},\"width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"width_tablet\":{\"unit\":\"%\",\"size\":70,\"sizes\":[]},\"width_mobile\":{\"unit\":\"px\",\"size\":450,\"sizes\":[]},\"space_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"object-fit_laptop\":\"\",\"object-position_laptop\":\"\",\"image_border_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"image_border_radius_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"caption_align_laptop\":\"\",\"caption_typography_font_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"caption_typography_line_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"caption_typography_letter_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"caption_typography_word_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"caption_space_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_margin_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_padding_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_element_width_laptop\":\"\",\"_element_custom_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_grid_column_laptop\":\"\",\"_grid_column_custom_laptop\":\"\",\"_grid_row_laptop\":\"\",\"_grid_row_custom_laptop\":\"\",\"_flex_align_self_laptop\":\"\",\"_flex_order_laptop\":\"\",\"_flex_order_custom_laptop\":\"\",\"_flex_size_laptop\":\"\",\"_flex_grow_laptop\":\"\",\"_flex_shrink_laptop\":\"\",\"_element_vertical_align_laptop\":\"\",\"_offset_x_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_offset_x_end_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_offset_y_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_offset_y_end_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_z_index_laptop\":\"\",\"ekit_we_css_animation_laptop\":\"\",\"ekit_we_css_transform_fx_translate_x_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_translate_y_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_rotate_z_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_rotate_x_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_rotate_y_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_scale_x_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_scale_y_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_skew_x_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_skew_y_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_sticky_offset_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_sticky_on_laptop\":\"laptop\",\"ekit_sticky_effect_offset_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_font_font_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_font_line_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_font_letter_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_font_word_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_bg_color_stop_laptop\":{\"unit\":\"%\"},\"ekit_adv_tooltip_bg_color_b_stop_laptop\":{\"unit\":\"%\"},\"ekit_adv_tooltip_bg_gradient_angle_laptop\":{\"unit\":\"deg\"},\"ekit_adv_tooltip_bg_gradient_position_laptop\":\"\",\"ekit_adv_tooltip_bg_position_laptop\":\"\",\"ekit_adv_tooltip_bg_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_bg_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_bg_repeat_laptop\":\"\",\"ekit_adv_tooltip_bg_size_laptop\":\"\",\"ekit_adv_tooltip_bg_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_bg_slideshow_background_size_laptop\":\"\",\"ekit_adv_tooltip_bg_slideshow_background_position_laptop\":\"\",\"ekit_adv_tooltip_subcontent_font_font_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_subcontent_font_line_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_subcontent_font_letter_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_subcontent_font_word_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_border_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ppress_visibility\":\"everyone\",\"ppress_membership_plans\":\"\",\"ppress_user_roles\":\"\",\"ppress_alternate_content\":\"nothing\",\"ppress_custom_message\":\"This content is restricted!\",\"trp_language_restriction\":\"\",\"trp_language_restriction_automatic_translation\":\"\",\"trp_restricted_languages\":\"\",\"trp_exclude_handler\":\"\",\"trp_excluded_languages\":\"\",\"ekit_cursor_text_typography_font_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_typography_line_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_typography_letter_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_typography_word_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_background_color_stop_laptop\":{\"unit\":\"%\"},\"ekit_cursor_text_background_color_b_stop_laptop\":{\"unit\":\"%\"},\"ekit_cursor_text_background_gradient_angle_laptop\":{\"unit\":\"deg\"},\"ekit_cursor_text_background_gradient_position_laptop\":\"\",\"ekit_cursor_text_background_position_laptop\":\"\",\"ekit_cursor_text_background_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_background_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_background_repeat_laptop\":\"\",\"ekit_cursor_text_background_size_laptop\":\"\",\"ekit_cursor_text_background_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_background_slideshow_background_size_laptop\":\"\",\"ekit_cursor_text_background_slideshow_background_position_laptop\":\"\",\"ekit_cursor_text_border_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_text_radius_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_text_padding_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_image_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_image_border_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_image_radius_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_icons_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_icon_background_color_stop_laptop\":{\"unit\":\"%\"},\"ekit_cursor_icon_background_color_b_stop_laptop\":{\"unit\":\"%\"},\"ekit_cursor_icon_background_gradient_angle_laptop\":{\"unit\":\"deg\"},\"ekit_cursor_icon_background_gradient_position_laptop\":\"\",\"ekit_cursor_icon_background_position_laptop\":\"\",\"ekit_cursor_icon_background_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_icon_background_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_icon_background_repeat_laptop\":\"\",\"ekit_cursor_icon_background_size_laptop\":\"\",\"ekit_cursor_icon_background_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_icon_background_slideshow_background_size_laptop\":\"\",\"ekit_cursor_icon_background_slideshow_background_position_laptop\":\"\",\"ekit_cursor_icon_border_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_icon_radius_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_icon_padding_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_margin_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_animation_laptop\":\"\",\"_transform_rotateZ_effect_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_rotateX_effect_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_rotateY_effect_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_perspective_effect_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_translateX_effect_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_translateY_effect_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_scale_effect_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_scaleX_effect_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_scaleY_effect_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_skewX_effect_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_skewY_effect_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_rotateZ_effect_hover_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_rotateX_effect_hover_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_rotateY_effect_hover_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_perspective_effect_hover_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_translateX_effect_hover_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_translateY_effect_hover_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_scale_effect_hover_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_scaleX_effect_hover_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_scaleY_effect_hover_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_skewX_effect_hover_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_skewY_effect_hover_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"motion_fx_transform_x_anchor_point_laptop\":\"\",\"motion_fx_transform_y_anchor_point_laptop\":\"\",\"_background_color_stop_laptop\":{\"unit\":\"%\"},\"_background_color_b_stop_laptop\":{\"unit\":\"%\"},\"_background_gradient_angle_laptop\":{\"unit\":\"deg\"},\"_background_gradient_position_laptop\":\"\",\"_background_image_laptop\":{\"url\":\"\",\"id\":\"\",\"size\":\"\"},\"_background_position_laptop\":\"\",\"_background_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_background_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_background_repeat_laptop\":\"\",\"_background_size_laptop\":\"\",\"_background_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_background_slideshow_background_size_laptop\":\"\",\"_background_slideshow_background_position_laptop\":\"\",\"_background_hover_color_stop_laptop\":{\"unit\":\"%\"},\"_background_hover_color_b_stop_laptop\":{\"unit\":\"%\"},\"_background_hover_gradient_angle_laptop\":{\"unit\":\"deg\"},\"_background_hover_gradient_position_laptop\":\"\",\"_background_hover_image_laptop\":{\"url\":\"\",\"id\":\"\",\"size\":\"\"},\"_background_hover_position_laptop\":\"\",\"_background_hover_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_background_hover_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_background_hover_repeat_laptop\":\"\",\"_background_hover_size_laptop\":\"\",\"_background_hover_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_background_hover_slideshow_background_size_laptop\":\"\",\"_background_hover_slideshow_background_position_laptop\":\"\",\"_border_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_border_radius_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_border_hover_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_border_radius_hover_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_mask_size_laptop\":\"\",\"_mask_size_scale_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_mask_position_laptop\":\"\",\"_mask_position_x_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_mask_position_y_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_mask_repeat_laptop\":\"\",\"hide_laptop\":\"\"},\"interactions\":{},\"elements\":[],\"widgetType\":\"image\"}]},{\"id\":\"1bd397b\",\"elType\":\"container\",\"isInner\":true,\"isLocked\":false,\"settings\":{\"flex_direction\":\"column\",\"content_width\":\"full\",\"width\":{\"unit\":\"%\",\"size\":\"50\"},\"border_border\":\"none\",\"border_hover_border\":\"solid\"},\"interactions\":{},\"elements\":[{\"id\":\"a3d3262\",\"elType\":\"container\",\"isInner\":true,\"isLocked\":false,\"settings\":{\"_column_size\":\"33\",\"width\":{\"unit\":\"%\",\"size\":95.636},\"width_tablet\":{\"size\":47,\"unit\":\"%\"},\"padding_tablet\":{\"unit\":\"px\",\"top\":\"40\",\"right\":\"10\",\"bottom\":\"10\",\"left\":\"10\",\"isLinked\":\"\"},\"padding\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"10\",\"bottom\":\"10\",\"left\":\"10\",\"isLinked\":\"\"},\"flex_gap\":{\"size\":\"0\",\"column\":\"0\",\"row\":\"0\",\"unit\":\"px\",\"isLinked\":true},\"ekit_all_conditions_list\":[{\"_id\":\"bb9c8d1\"}],\"ekit_cursor_text_label\":\"Elementskit Cursor\",\"content_width\":\"full\",\"ekit_section_parallax_multi_items\":[],\"_flex_size\":\"none\",\"_element_width\":\"initial\"},\"interactions\":{},\"elements\":[{\"id\":\"c2101a4\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"ekit_heading_title\":\"Faite partie de notre \xc3\xa9qupe\",\"ekit_heading_focused_title\":\"\",\"ekit_heading_sub_title_show\":\"yes\",\"ekit_heading_sub_title\":\"\",\"ekit_heading_sub_title_position\":\"before_title\",\"ekit_heading_sub_title_tag\":\"span\",\"ekit_heading_section_extra_title_show\":\"yes\",\"ekit_heading_extra_title\":\"<p>Vous ne voyez pas d\xe2\x80\x99offres en cours ? Inscrivez-vous \xc3\xa0 notre infolettre pour \xc3\xaatre pr\xc3\xa9venu de nos prochains recrutements ou suivez-nous sur nos diff\xc3\xa9rents r\xc3\xa9seaux sociaux.</p>\",\"ekit_heading_show_seperator\":\"\",\"ekit_heading_title_typography_typography\":\"custom\",\"ekit_heading_title_typography_font_family\":\"Montserrat\",\"ekit_heading_title_typography_font_size\":{\"unit\":\"px\",\"size\":\"30\",\"sizes\":[]},\"ekit_heading_title_typography_font_weight\":\"800\",\"ekit_heading_title_typography_line_height\":{\"unit\":\"px\",\"size\":\"42\",\"sizes\":[]},\"ekit_heading_sub_title_color\":\"#ffb923\",\"ekit_heading_sub_title_typography_typography\":\"custom\",\"ekit_heading_sub_title_typography_font_family\":\"Open Sans\",\"ekit_heading_sub_title_typography_font_size\":{\"unit\":\"px\",\"size\":\"18\",\"sizes\":[]},\"ekit_heading_sub_title_typography_font_weight\":\"600\",\"ekit_heading_sub_title_margn\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":\"\"},\"ekit_heading_extra_title_color\":\"#101010\",\"ekit_heading_extra_title_typography_typography\":\"custom\",\"ekit_heading_extra_title_typography_font_family\":\"Open Sans\",\"ekit_heading_extra_title_typography_font_size\":{\"unit\":\"px\",\"size\":\"16\",\"sizes\":[]},\"ekit_heading_extra_title_typography_font_weight\":\"500\",\"ekit_heading_extra_title_typography_line_height\":{\"unit\":\"px\",\"size\":\"28\",\"sizes\":[]},\"ekit_heading_extra_title_margin\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":\"\"},\"_padding\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"35\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":\"\"},\"ekit_heading_seperator_width\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_color_stop\":{\"unit\":\"%\",\"size\":\"0\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_color_b_stop\":{\"unit\":\"%\",\"size\":\"100\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_gradient_angle\":{\"unit\":\"deg\",\"size\":\"180\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_xpos\":{\"unit\":\"px\",\"size\":\"0\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_xpos_tablet\":{\"unit\":\"px\",\"size\":\"0\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_xpos_mobile\":{\"unit\":\"px\",\"size\":\"0\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_ypos\":{\"unit\":\"px\",\"size\":\"0\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_ypos_tablet\":{\"unit\":\"px\",\"size\":\"0\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_ypos_mobile\":{\"unit\":\"px\",\"size\":\"0\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_bg_width\":{\"unit\":\"%\",\"size\":\"100\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_bg_width_tablet\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_bg_width_mobile\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_title_margin_tablet\":{\"unit\":\"px\",\"top\":\"5\",\"right\":\"0\",\"bottom\":\"10\",\"left\":\"0\",\"isLinked\":\"\"},\"ekit_heading_title_typography_font_size_mobile\":{\"unit\":\"px\",\"size\":\"30\",\"sizes\":[]},\"shadow_text_content\":\"bussiness\",\"ekit_all_conditions_list\":[{\"_id\":\"d82d939\"}],\"ekit_heading_seperator_image\":{\"id\":\"\",\"url\":\"https://wages.tg/wp-content/plugins/elementor/assets/images/placeholder.png\"},\"ekit_adv_tooltip_content\":\"Tooltip Content.\",\"ekit_cursor_text_label\":\"Elementskit Cursor\",\"title_float_left_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"desciption_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_title_align_laptop\":\"\",\"ekit_heading_title_color_laptop\":\"\",\"ekit_heading_title_color_hover_laptop\":\"\",\"ekit_heading_title_margin_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_heading_title_typography_font_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_title_typography_line_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_title_typography_letter_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_title_typography_word_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"title_left_border_color_color_stop_laptop\":{\"unit\":\"%\"},\"title_left_border_color_color_b_stop_laptop\":{\"unit\":\"%\"},\"title_left_border_color_gradient_angle_laptop\":{\"unit\":\"deg\"},\"title_left_border_color_gradient_position_laptop\":\"\",\"title_left_border_color_image_laptop\":{\"url\":\"\",\"id\":\"\",\"size\":\"\"},\"title_left_border_color_position_laptop\":\"\",\"title_left_border_color_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"title_left_border_color_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"title_left_border_color_repeat_laptop\":\"\",\"title_left_border_color_size_laptop\":\"\",\"title_left_border_color_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"title_left_border_color_slideshow_background_size_laptop\":\"\",\"title_left_border_color_slideshow_background_position_laptop\":\"\",\"ekit_heading_focused_title_color_laptop\":\"\",\"ekit_heading_focused_title_color_hover_laptop\":\"\",\"ekit_heading_focused_title_typography_font_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_focused_title_typography_line_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_focused_title_typography_letter_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_focused_title_typography_word_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_title_text_decoration_color_laptop\":\"\",\"ekit_heading_focused_title_secondary_spacing_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_heading_focused_title_secondary_bg_color_stop_laptop\":{\"unit\":\"%\"},\"ekit_heading_focused_title_secondary_bg_color_b_stop_laptop\":{\"unit\":\"%\"},\"ekit_heading_focused_title_secondary_bg_gradient_angle_laptop\":{\"unit\":\"deg\"},\"ekit_heading_focused_title_secondary_bg_gradient_position_laptop\":\"\",\"ekit_heading_focused_title_secondary_bg_image_laptop\":{\"url\":\"\",\"id\":\"\",\"size\":\"\"},\"ekit_heading_focused_title_secondary_bg_position_laptop\":\"\",\"ekit_heading_focused_title_secondary_bg_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_focused_title_secondary_bg_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_focused_title_secondary_bg_repeat_laptop\":\"\",\"ekit_heading_focused_title_secondary_bg_size_laptop\":\"\",\"ekit_heading_focused_title_secondary_bg_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_focused_title_secondary_bg_slideshow_background_size_laptop\":\"\",\"ekit_heading_focused_title_secondary_bg_slideshow_background_position_laptop\":\"\",\"ekit_heading_title_secondary_bg_color_stop_laptop\":{\"unit\":\"%\"},\"ekit_heading_title_secondary_bg_color_b_stop_laptop\":{\"unit\":\"%\"},\"ekit_heading_title_secondary_bg_gradient_angle_laptop\":{\"unit\":\"deg\"},\"ekit_heading_title_secondary_bg_gradient_position_laptop\":\"\",\"ekit_heading_title_secondary_bg_image_laptop\":{\"url\":\"\",\"id\":\"\",\"size\":\"\"},\"ekit_heading_title_secondary_bg_position_laptop\":\"\",\"ekit_heading_title_secondary_bg_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_title_secondary_bg_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_title_secondary_bg_repeat_laptop\":\"\",\"ekit_heading_title_secondary_bg_size_laptop\":\"\",\"ekit_heading_title_secondary_bg_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_title_secondary_bg_slideshow_background_size_laptop\":\"\",\"ekit_heading_title_secondary_bg_slideshow_background_position_laptop\":\"\",\"ekit_heading_sub_title_color_laptop\":\"\",\"ekit_heading_sub_title_typography_font_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_typography_line_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_typography_letter_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_typography_word_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_margn_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"subheading_padding_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_heading_sub_title_secondary_bg_color_stop_laptop\":{\"unit\":\"%\"},\"ekit_heading_sub_title_secondary_bg_color_b_stop_laptop\":{\"unit\":\"%\"},\"ekit_heading_sub_title_secondary_bg_gradient_angle_laptop\":{\"unit\":\"deg\"},\"ekit_heading_sub_title_secondary_bg_gradient_position_laptop\":\"\",\"ekit_heading_sub_title_secondary_bg_image_laptop\":{\"url\":\"\",\"id\":\"\",\"size\":\"\"},\"ekit_heading_sub_title_secondary_bg_position_laptop\":\"\",\"ekit_heading_sub_title_secondary_bg_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_secondary_bg_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_secondary_bg_repeat_laptop\":\"\",\"ekit_heading_sub_title_secondary_bg_size_laptop\":\"\",\"ekit_heading_sub_title_secondary_bg_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_secondary_bg_slideshow_background_size_laptop\":\"\",\"ekit_heading_sub_title_secondary_bg_slideshow_background_position_laptop\":\"\",\"ekit_heading_sub_title_border_color_left_color_stop_laptop\":{\"unit\":\"%\"},\"ekit_heading_sub_title_border_color_left_color_b_stop_laptop\":{\"unit\":\"%\"},\"ekit_heading_sub_title_border_color_left_gradient_angle_laptop\":{\"unit\":\"deg\"},\"ekit_heading_sub_title_border_color_left_gradient_position_laptop\":\"\",\"ekit_heading_sub_title_border_color_left_image_laptop\":{\"url\":\"\",\"id\":\"\",\"size\":\"\"},\"ekit_heading_sub_title_border_color_left_position_laptop\":\"\",\"ekit_heading_sub_title_border_color_left_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_left_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_left_repeat_laptop\":\"\",\"ekit_heading_sub_title_border_color_left_size_laptop\":\"\",\"ekit_heading_sub_title_border_color_left_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_left_slideshow_background_size_laptop\":\"\",\"ekit_heading_sub_title_border_color_left_slideshow_background_position_laptop\":\"\",\"ekit_heading_sub_title_border_left_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_border_heading_title_right_margin_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_heading_sub_title_border_color_right_color_stop_laptop\":{\"unit\":\"%\"},\"ekit_heading_sub_title_border_color_right_color_b_stop_laptop\":{\"unit\":\"%\"},\"ekit_heading_sub_title_border_color_right_gradient_angle_laptop\":{\"unit\":\"deg\"},\"ekit_heading_sub_title_border_color_right_gradient_position_laptop\":\"\",\"ekit_heading_sub_title_border_color_right_image_laptop\":{\"url\":\"\",\"id\":\"\",\"size\":\"\"},\"ekit_heading_sub_title_border_color_right_position_laptop\":\"\",\"ekit_heading_sub_title_border_color_right_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_right_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_right_repeat_laptop\":\"\",\"ekit_heading_sub_title_border_color_right_size_laptop\":\"\",\"ekit_heading_sub_title_border_color_right_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_border_color_right_slideshow_background_size_laptop\":\"\",\"ekit_heading_sub_title_border_color_right_slideshow_background_position_laptop\":\"\",\"ekit_heading_sub_title_border_right_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_border_heading_title_left_margin_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_heading_sub_title_border_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_sub_title_vertical_alignment_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"subheading_outline_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"subheading_outline_radius_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_heading_extra_title_color_laptop\":\"\",\"ekit_heading_extra_title_typography_font_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_extra_title_typography_line_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_extra_title_typography_letter_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_extra_title_typography_word_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_extra_title_margin_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_heading_seperator_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_seperator_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_heading_seperator_margin_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_heading_seperator_color_laptop\":\"\",\"shadow_text_position_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"shadow_text_typography_font_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"shadow_text_typography_line_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"shadow_text_typography_letter_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"shadow_text_typography_word_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"shadow_text_color_laptop\":\"\",\"shadow_text_border_color_laptop\":\"\",\"_margin_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_padding_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_element_width_laptop\":\"\",\"_element_custom_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_grid_column_laptop\":\"\",\"_grid_column_custom_laptop\":\"\",\"_grid_row_laptop\":\"\",\"_grid_row_custom_laptop\":\"\",\"_flex_align_self_laptop\":\"\",\"_flex_order_laptop\":\"\",\"_flex_order_custom_laptop\":\"\",\"_flex_size_laptop\":\"\",\"_flex_grow_laptop\":\"\",\"_flex_shrink_laptop\":\"\",\"_element_vertical_align_laptop\":\"\",\"_offset_x_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_offset_x_end_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_offset_y_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_offset_y_end_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_z_index_laptop\":\"\",\"ekit_we_css_animation_laptop\":\"\",\"ekit_we_css_transform_fx_translate_x_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_translate_y_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_rotate_z_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_rotate_x_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_rotate_y_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_scale_x_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_scale_y_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_skew_x_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_we_css_transform_fx_skew_y_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_sticky_offset_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_sticky_on_laptop\":\"laptop\",\"ekit_sticky_effect_offset_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_font_font_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_font_line_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_font_letter_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_font_word_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_bg_color_stop_laptop\":{\"unit\":\"%\"},\"ekit_adv_tooltip_bg_color_b_stop_laptop\":{\"unit\":\"%\"},\"ekit_adv_tooltip_bg_gradient_angle_laptop\":{\"unit\":\"deg\"},\"ekit_adv_tooltip_bg_gradient_position_laptop\":\"\",\"ekit_adv_tooltip_bg_position_laptop\":\"\",\"ekit_adv_tooltip_bg_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_bg_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_bg_repeat_laptop\":\"\",\"ekit_adv_tooltip_bg_size_laptop\":\"\",\"ekit_adv_tooltip_bg_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_bg_slideshow_background_size_laptop\":\"\",\"ekit_adv_tooltip_bg_slideshow_background_position_laptop\":\"\",\"ekit_adv_tooltip_subcontent_font_font_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_subcontent_font_line_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_subcontent_font_letter_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_subcontent_font_word_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_adv_tooltip_border_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ppress_visibility\":\"everyone\",\"ppress_membership_plans\":\"\",\"ppress_user_roles\":\"\",\"ppress_alternate_content\":\"nothing\",\"ppress_custom_message\":\"This content is restricted!\",\"trp_language_restriction\":\"\",\"trp_language_restriction_automatic_translation\":\"\",\"trp_restricted_languages\":\"\",\"trp_exclude_handler\":\"\",\"trp_excluded_languages\":\"\",\"ekit_cursor_text_typography_font_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_typography_line_height_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_typography_letter_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_typography_word_spacing_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_background_color_stop_laptop\":{\"unit\":\"%\"},\"ekit_cursor_text_background_color_b_stop_laptop\":{\"unit\":\"%\"},\"ekit_cursor_text_background_gradient_angle_laptop\":{\"unit\":\"deg\"},\"ekit_cursor_text_background_gradient_position_laptop\":\"\",\"ekit_cursor_text_background_position_laptop\":\"\",\"ekit_cursor_text_background_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_background_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_background_repeat_laptop\":\"\",\"ekit_cursor_text_background_size_laptop\":\"\",\"ekit_cursor_text_background_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_text_background_slideshow_background_size_laptop\":\"\",\"ekit_cursor_text_background_slideshow_background_position_laptop\":\"\",\"ekit_cursor_text_border_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_text_radius_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_text_padding_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_image_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_image_border_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_image_radius_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_icons_size_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_icon_background_color_stop_laptop\":{\"unit\":\"%\"},\"ekit_cursor_icon_background_color_b_stop_laptop\":{\"unit\":\"%\"},\"ekit_cursor_icon_background_gradient_angle_laptop\":{\"unit\":\"deg\"},\"ekit_cursor_icon_background_gradient_position_laptop\":\"\",\"ekit_cursor_icon_background_position_laptop\":\"\",\"ekit_cursor_icon_background_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_icon_background_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_icon_background_repeat_laptop\":\"\",\"ekit_cursor_icon_background_size_laptop\":\"\",\"ekit_cursor_icon_background_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_cursor_icon_background_slideshow_background_size_laptop\":\"\",\"ekit_cursor_icon_background_slideshow_background_position_laptop\":\"\",\"ekit_cursor_icon_border_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_icon_radius_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_icon_padding_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"ekit_cursor_margin_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_animation_laptop\":\"\",\"_transform_rotateZ_effect_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_rotateX_effect_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_rotateY_effect_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_perspective_effect_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_translateX_effect_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_translateY_effect_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_scale_effect_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_scaleX_effect_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_scaleY_effect_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_skewX_effect_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_skewY_effect_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_rotateZ_effect_hover_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_rotateX_effect_hover_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_rotateY_effect_hover_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_perspective_effect_hover_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_translateX_effect_hover_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_translateY_effect_hover_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_scale_effect_hover_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_scaleX_effect_hover_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_scaleY_effect_hover_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_transform_skewX_effect_hover_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"_transform_skewY_effect_hover_laptop\":{\"unit\":\"deg\",\"size\":\"\",\"sizes\":[]},\"motion_fx_transform_x_anchor_point_laptop\":\"\",\"motion_fx_transform_y_anchor_point_laptop\":\"\",\"_background_color_stop_laptop\":{\"unit\":\"%\"},\"_background_color_b_stop_laptop\":{\"unit\":\"%\"},\"_background_gradient_angle_laptop\":{\"unit\":\"deg\"},\"_background_gradient_position_laptop\":\"\",\"_background_image_laptop\":{\"url\":\"\",\"id\":\"\",\"size\":\"\"},\"_background_position_laptop\":\"\",\"_background_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_background_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_background_repeat_laptop\":\"\",\"_background_size_laptop\":\"\",\"_background_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_background_slideshow_background_size_laptop\":\"\",\"_background_slideshow_background_position_laptop\":\"\",\"_background_hover_color_stop_laptop\":{\"unit\":\"%\"},\"_background_hover_color_b_stop_laptop\":{\"unit\":\"%\"},\"_background_hover_gradient_angle_laptop\":{\"unit\":\"deg\"},\"_background_hover_gradient_position_laptop\":\"\",\"_background_hover_image_laptop\":{\"url\":\"\",\"id\":\"\",\"size\":\"\"},\"_background_hover_position_laptop\":\"\",\"_background_hover_xpos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_background_hover_ypos_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_background_hover_repeat_laptop\":\"\",\"_background_hover_size_laptop\":\"\",\"_background_hover_bg_width_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_background_hover_slideshow_background_size_laptop\":\"\",\"_background_hover_slideshow_background_position_laptop\":\"\",\"_border_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_border_radius_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_border_hover_width_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_border_radius_hover_laptop\":{\"unit\":\"px\",\"top\":\"\",\"right\":\"\",\"bottom\":\"\",\"left\":\"\",\"isLinked\":true},\"_mask_size_laptop\":\"\",\"_mask_size_scale_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_mask_position_laptop\":\"\",\"_mask_position_x_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_mask_position_y_laptop\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"_mask_repeat_laptop\":\"\",\"hide_laptop\":\"\"},\"interactions\":{},\"elements\":[],\"widgetType\":\"elementskit-heading\"},{\"id\":\"82b9704\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"title\":\"Souscrire maintenant\",\"title_color\":\"#084208\",\"typography_typography\":\"custom\",\"typography_font_family\":\"Lato\",\"typography_font_size\":{\"unit\":\"px\",\"size\":\"20\",\"sizes\":[]},\"typography_font_weight\":\"800\",\"typography_line_height\":{\"unit\":\"px\",\"size\":\"35\",\"sizes\":[]},\"_margin\":{\"unit\":\"px\",\"top\":\"2\",\"right\":\"0\",\"bottom\":\"12\",\"left\":\"0\",\"isLinked\":\"\"},\"ekit_all_conditions_list\":[{\"_id\":\"80e6a55\"}],\"ekit_adv_tooltip_content\":\"Tooltip Content.\",\"ekit_cursor_text_label\":\"Elementskit Cursor\"},\"interactions\":{},\"elements\":[],\"widgetType\":\"heading\"},{\"id\":\"1b6d989\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"editor\":\"<p>Ne manquez pas de nouvelle offre ! Souscrivez maintenant \xc3\xa0 notre newsletter !</p>\",\"text_color\":\"#111111\",\"typography_typography\":\"custom\",\"typography_font_family\":\"Lato\",\"typography_font_size\":{\"unit\":\"px\",\"size\":\"16\",\"sizes\":[]},\"typography_font_weight\":\"400\",\"typography_line_height\":{\"unit\":\"px\",\"size\":\"26\",\"sizes\":[]},\"ekit_all_conditions_list\":[{\"_id\":\"2f01208\"}],\"ekit_adv_tooltip_content\":\"Tooltip Content.\",\"ekit_cursor_text_label\":\"Elementskit Cursor\"},\"interactions\":{},\"elements\":[],\"widgetType\":\"text-editor\"},{\"id\":\"f56ef0a\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"ekit_mail_chimp_email_address_placeholder\":\"Your mail here\",\"ekit_mail_chimp_email_icon_show\":\"\",\"ekit_mail_chimp_submit\":\"Soumettre\",\"ekit_mail_chimp_submit_icons\":{\"value\":\"icon icon-message-1\",\"library\":\"ekiticons\"},\"ekit_mail_chimp_submit_icon_position\":\"after\",\"ekit_mail_chimp_success_message\":\"Successfully listed this email\",\"ekit_mail_chimp_input_style_radius\":{\"unit\":\"px\",\"top\":\"25\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"25\",\"isLinked\":\"\"},\"ekit_mail_chimp_input_style_border_border\":\"solid\",\"ekit_mail_chimp_input_style_border_width\":{\"unit\":\"px\",\"top\":\"1\",\"right\":\"1\",\"bottom\":\"1\",\"left\":\"1\",\"isLinked\":\"1\"},\"ekit_mail_chimp_input_style_border_color\":\"#084208\",\"ekit_mail_chimp_input_style_box_shadow_box_shadow\":{\"horizontal\":\"0\",\"vertical\":\"10\",\"blur\":\"20\",\"spread\":\"0\",\"color\":\"rgba(0, 0, 0, 0.07)\"},\"ekit_mail_chimp_input_style_padding\":{\"unit\":\"px\",\"top\":\"13\",\"right\":\"10\",\"bottom\":\"13\",\"left\":\"20\",\"isLinked\":\"\"},\"ekit_mail_chimp_input_style_width__switch\":\"yes\",\"ekit_mail_chimp_input_style_width\":{\"unit\":\"%\",\"size\":\"75\",\"sizes\":[]},\"ekit_mail_chimp_input_style_margin_right\":{\"unit\":\"px\",\"size\":\"-2\",\"sizes\":[]},\"ekit_mail_chimp_input_style_placeholder_color\":\"#084208\",\"ekit_mail_chimp_button_border_radius\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"25\",\"bottom\":\"25\",\"left\":\"0\",\"isLinked\":\"\"},\"ekit_mail_chimp_button_border_padding\":{\"unit\":\"px\",\"top\":\"13\",\"right\":\"10\",\"bottom\":\"13\",\"left\":\"10\",\"isLinked\":\"\"},\"ekit_mail_chimp_button_border_width\":{\"unit\":\"px\",\"top\":\"1\",\"right\":\"1\",\"bottom\":\"1\",\"left\":\"1\",\"isLinked\":\"1\"},\"ekit_mail_chimp_button_border_color\":\"#273171\",\"ekit_mail_chimp_button_style_margin\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":\"\"},\"ekit_mail_chimp_button_background_background\":\"classic\",\"ekit_mail_chimp_button_background_color\":\"#084208\",\"ekit_mail_chimp_button_background_hover_background\":\"classic\",\"ekit_mail_chimp_button_background_hover_color\":\"#FFFFFF\",\"ekit_mail_chimp_button_icon_padding_right\":{\"unit\":\"px\",\"size\":\"0\",\"sizes\":[]},\"ekit_mail_chimp_button_icon_padding_left\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"ekit_simple_tab_title_icon_size\":{\"unit\":\"px\",\"size\":\"20\",\"sizes\":[]},\"ekit_mail_chimp_input_icon_font_size\":{\"unit\":\"px\",\"size\":\"20\",\"sizes\":[]},\"ekit_all_conditions_list\":[{\"_id\":\"1cbbf56\"}],\"ekit_mail_chimp_opt_in_success_message\":\"Please check your mail and confirm subscribe\",\"ekit_adv_tooltip_content\":\"Tooltip Content.\",\"ekit_cursor_text_label\":\"Elementskit Cursor\",\"ekit_mail_chimp_input_label_color\":\"#006633\",\"ekit_mail_chimp_button_color_hover\":\"#006633\",\"ekit_mail_chimp_fields_repeater\":[{\"ekit_mail_chimp_field_type\":\"email\",\"ekit_mail_chimp_field_label\":\"Email Address\",\"ekit_mail_chimp_field_placeholder\":\"Email Address\",\"ekit_mail_chimp_field_name\":\"email\",\"ekit_mail_chimp_field_required\":\"yes\",\"ekit_mail_chimp_field_icon_show\":\"yes\",\"ekit_mail_chimp_field_icon\":{\"value\":\"icon icon-envelope\",\"library\":\"ekiticons\"},\"_id\":\"a21ad5d\"}],\"ekit_mail_chimp_double_opt_in\":\"\"},\"interactions\":{},\"elements\":[],\"widgetType\":\"elementskit-mail-chimp\"}]}]}]},{\"id\":\"7ee1a18\",\"elType\":\"container\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"flex_direction\":\"column\"},\"interactions\":{},\"elements\":[{\"id\":\"986e3de\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"text\":\"S\xc3\xa9parateur\"},\"interactions\":{},\"elements\":[],\"widgetType\":\"divider\"}]},{\"id\":\"b5ee171\",\"elType\":\"container\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"gap_columns_custom_mobile\":{\"unit\":\"px\",\"size\":143,\"sizes\":[]},\"custom_height\":{\"unit\":\"px\",\"size\":200,\"sizes\":[]},\"custom_height_tablet\":{\"unit\":\"px\",\"size\":250,\"sizes\":[]},\"custom_height_mobile\":{\"unit\":\"px\",\"size\":180,\"sizes\":[]},\"flex_align_items\":\"center\",\"structure\":\"20\",\"padding\":{\"unit\":\"px\",\"top\":\"11\",\"right\":\"24\",\"bottom\":\"100\",\"left\":\"24\",\"isLinked\":false},\"padding_tablet\":{\"unit\":\"px\",\"top\":\"80\",\"right\":\"16\",\"bottom\":\"80\",\"left\":\"16\",\"isLinked\":false},\"padding_mobile\":{\"unit\":\"px\",\"top\":\"48\",\"right\":\"16\",\"bottom\":\"48\",\"left\":\"16\",\"isLinked\":false},\"flex_direction\":\"column\",\"flex_gap\":{\"size\":48,\"unit\":\"px\",\"column\":\"48\",\"row\":\"048\"},\"boxed_width\":{\"unit\":\"px\",\"size\":1140,\"sizes\":[]},\"flex_gap_tablet\":{\"unit\":\"px\",\"size\":0,\"sizes\":[],\"row\":\"0\",\"column\":\"0\"},\"flex_gap_mobile\":{\"unit\":\"px\",\"size\":24,\"sizes\":[],\"row\":\"24\",\"column\":\"24\"},\"min_height_tablet\":{\"unit\":\"px\",\"size\":0,\"sizes\":[]},\"flex_align_items_tablet\":\"flex-start\",\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"premium_parallax_layers_list\":[],\"premium_gradient_colors_repeater\":[],\"premium_kenburns_repeater\":[],\"premium_lottie_repeater\":[],\"premium_blob_repeater\":[],\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"_title\":\"Employment and Internship Opportunities\",\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[{\"id\":\"2b2bf56\",\"elType\":\"container\",\"isInner\":true,\"isLocked\":false,\"settings\":{\"_column_size\":50,\"width\":{\"size\":100,\"unit\":\"%\"},\"padding_mobile\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":false},\"flex_justify_content_mobile\":\"center\",\"flex_gap\":{\"size\":16,\"unit\":\"px\"},\"flex_gap_tablet\":{\"size\":16,\"unit\":\"px\"},\"padding_tablet\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":false},\"content_width\":\"full\",\"padding\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":false},\"flex_gap_mobile\":{\"unit\":\"px\",\"size\":16,\"sizes\":[],\"column\":\"16\",\"row\":\"16\",\"isLinked\":true},\"flex_align_items\":\"center\",\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"premium_parallax_layers_list\":[],\"premium_gradient_colors_repeater\":[],\"premium_kenburns_repeater\":[],\"premium_lottie_repeater\":[],\"premium_blob_repeater\":[],\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}},\"border_border\":\"solid\",\"border_width\":{\"unit\":\"px\",\"top\":\"1\",\"right\":\"1\",\"bottom\":\"1\",\"left\":\"1\",\"isLinked\":true},\"border_radius\":{\"unit\":\"px\",\"top\":\"10\",\"right\":\"10\",\"bottom\":\"10\",\"left\":\"10\",\"isLinked\":true},\"presetTitle\":\"Conteneur\",\"presetIcon\":\"eicon-container\"},\"interactions\":{},\"elements\":[{\"id\":\"0f84327\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"title\":\"D\xc3\xa9couvrez les diff\xc3\xa9rentes offres de recrutement de Wages Togo.\",\"header_size\":\"h5\",\"title_color\":\"#000000\",\"typography_typography\":\"custom\",\"typography_font_family\":\"Open Sans\",\"typography_font_size\":{\"unit\":\"px\",\"size\":18,\"sizes\":[]},\"align\":\"center\",\"typography_font_size_tablet\":{\"unit\":\"px\",\"size\":18,\"sizes\":[]},\"typography_font_size_mobile\":{\"unit\":\"px\",\"size\":16,\"sizes\":[]},\"typography_text_transform\":\"none\",\"typography_font_style\":\"normal\",\"typography_text_decoration\":\"none\",\"typography_line_height\":{\"unit\":\"custom\",\"size\":\"140%\",\"sizes\":[]},\"typography_line_height_tablet\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"typography_line_height_mobile\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"typography_letter_spacing\":{\"unit\":\"px\",\"size\":0,\"sizes\":[]},\"typography_word_spacing\":{\"unit\":\"em\",\"size\":\"\",\"sizes\":[]},\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"premium_mscroll_repeater\":[],\"__globals__\":{\"typography_typography\":\"\"},\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[],\"widgetType\":\"heading\"},{\"id\":\"6ad4690\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"title\":\"Carri\xc3\xa8res\",\"title_color\":\"#006633\",\"typography_typography\":\"custom\",\"typography_font_size\":{\"unit\":\"px\",\"size\":48},\"align_mobile\":\"center\",\"typography_font_size_tablet\":{\"unit\":\"px\",\"size\":36},\"typography_font_size_mobile\":{\"unit\":\"px\",\"size\":32},\"typography_line_height_tablet\":{\"unit\":\"custom\",\"size\":\" \"},\"typography_font_family\":\"Poppins\",\"typography_line_height\":{\"unit\":\"custom\",\"size\":\"1.2\",\"sizes\":[]},\"typography_line_height_mobile\":{\"unit\":\"custom\",\"size\":\"\",\"sizes\":[]},\"align_tablet\":\"center\",\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"premium_mscroll_repeater\":[],\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[],\"widgetType\":\"heading\"},{\"id\":\"97f8222\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"editor\":\"<p>Vous avez l\xe2\x80\x99ambition de participer au d\xc3\xa9veloppement du Togo ?<br />Vous souhaitez \xc3\xa9voluer dans un environnement professionnel dynamique, au sein d\xe2\x80\x99une institution nationale, form\xc3\xa9e d\xe2\x80\x99une \xc3\xa9quipe s\xc3\xa9rieuse et ambitieuse ?</p><p>Vous \xc3\xaates passionn\xc3\xa9 et souhaitez \xc3\xa9voluer dans une entreprise orient\xc3\xa9e r\xc3\xa9sultats ? Vous souhaitez travailler \xc3\xa0 WAGES ?\xc2\xa0</p><p>Participer \xc3\xa0 nos offres de recrutement en postulant aux offres d\xe2\x80\x99emploi list\xc3\xa9es ci-dessous si vous correspondez aux crit\xc3\xa8res ou envoyez une candidature spontan\xc3\xa9e en remplissant\xc2\xa0<a href=\\\"../../carriere/index.html#spontanee\\\">ce formulaire</a>\xc2\xa0ci-dessous.</p>\",\"text_color\":\"#000000\",\"typography_typography\":\"custom\",\"typography_font_size\":{\"unit\":\"px\",\"size\":16},\"typography_line_height\":{\"unit\":\"custom\",\"size\":\"1.5\"},\"_margin\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"-10\",\"left\":\"0\",\"isLinked\":false},\"typography_font_family\":\"Poppins\",\"typography_font_size_mobile\":{\"unit\":\"px\",\"size\":16,\"sizes\":[]},\"typography_line_height_tablet\":{\"unit\":\"custom\",\"size\":\"1.5\",\"sizes\":[]},\"typography_line_height_mobile\":{\"unit\":\"custom\",\"size\":\"\",\"sizes\":[]},\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"premium_mscroll_repeater\":[],\"content_width\":\"full\",\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[],\"widgetType\":\"text-editor\"}]},{\"id\":\"4710e1a\",\"elType\":\"container\",\"isInner\":true,\"isLocked\":false,\"settings\":{\"_column_size\":50,\"width\":{\"size\":null,\"unit\":\"%\"},\"padding_mobile\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":false},\"flex_justify_content_mobile\":\"center\",\"flex_gap\":{\"size\":32,\"unit\":\"px\"},\"flex_gap_tablet\":{\"size\":16,\"unit\":\"px\"},\"padding_tablet\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":false},\"content_width\":\"full\",\"flex_gap_mobile\":{\"unit\":\"px\",\"size\":16,\"sizes\":[]},\"padding\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":false},\"flex_align_items\":\"center\",\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"premium_parallax_layers_list\":[],\"premium_gradient_colors_repeater\":[],\"premium_kenburns_repeater\":[],\"premium_lottie_repeater\":[],\"premium_blob_repeater\":[],\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[{\"id\":\"1e3eb72\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"items\":[{\"item_title\":\"Marketing Comptabilit\xc3\xa9\",\"_id\":\"7bc3930\"},{\"item_title\":\"Direction Des Op\xc3\xa9rations\",\"_id\":\"62948e2\"},{\"item_title\":\"Departement Syst\xc3\xa9me Informatique\",\"_id\":\"d61d7eb\"}],\"accordion_item_title_space_between\":{\"unit\":\"px\",\"size\":18,\"sizes\":[]},\"accordion_item_title_distance_from_content\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"accordion_background_normal_background\":\"classic\",\"accordion_border_normal_border\":\"solid\",\"title_typography_typography\":\"custom\",\"title_typography_font_family\":\"Poppins\",\"title_typography_font_size\":{\"unit\":\"px\",\"size\":18,\"sizes\":[]},\"title_typography_font_size_tablet\":{\"unit\":\"px\",\"size\":18,\"sizes\":[]},\"title_typography_font_size_mobile\":{\"unit\":\"px\",\"size\":16,\"sizes\":[]},\"title_typography_font_weight\":\"500\",\"title_typography_text_transform\":\"none\",\"title_typography_font_style\":\"normal\",\"title_typography_text_decoration\":\"none\",\"title_typography_line_height\":{\"unit\":\"custom\",\"size\":\"140%\",\"sizes\":[]},\"title_typography_line_height_tablet\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"title_typography_line_height_mobile\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"title_typography_letter_spacing\":{\"unit\":\"px\",\"size\":0,\"sizes\":[]},\"title_typography_word_spacing\":{\"unit\":\"em\",\"size\":\"\",\"sizes\":[]},\"normal_title_color\":\"#084208\",\"normal_icon_color\":\"#084208\",\"content_background_background\":\"classic\",\"content_border_border\":\"solid\",\"content_border_radius\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":true},\"content_padding\":{\"unit\":\"px\",\"top\":\"24\",\"right\":\"24\",\"bottom\":\"24\",\"left\":\"24\",\"isLinked\":true},\"content_padding_mobile\":{\"unit\":\"px\",\"top\":\"20\",\"right\":\"10\",\"bottom\":\"20\",\"left\":\"10\",\"isLinked\":false},\"_background_background\":\"classic\",\"__globals__\":{\"_background_color\":\"\",\"title_typography_typography\":\"\",\"normal_title_color\":\"\",\"normal_icon_color\":\"\",\"accordion_background_normal_color\":\"\",\"accordion_border_normal_color\":\"\",\"content_border_color\":\"\"},\"accordion_item_title_position_horizontal\":\"Details\",\"accordion_item_title_icon_position\":\"end\",\"accordion_item_title_icon\":{\"value\":\"fas fa-chevron-up\",\"library\":\"fa-solid\"},\"accordion_item_title_icon_active\":{\"value\":\"fas fa-chevron-down\",\"library\":\"fa-solid\"},\"content_width\":\"full\",\"accordion_border_normal_width\":{\"unit\":\"px\",\"top\":\"1\",\"right\":\"1\",\"bottom\":\"1\",\"left\":\"1\",\"isLinked\":true},\"accordion_border_normal_color\":\"#084208\",\"content_border_width\":{\"unit\":\"px\",\"top\":\"1\",\"right\":\"1\",\"bottom\":\"1\",\"left\":\"1\",\"isLinked\":true},\"content_border_color\":\"#084208\",\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"premium_mscroll_repeater\":[],\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"widgetType\":\"nested-accordion\",\"elements\":[{\"id\":\"5b37b50\",\"elType\":\"container\",\"isInner\":true,\"isLocked\":true,\"settings\":{\"_title\":\"item #1\",\"content_width\":\"full\",\"flex_gap\":{\"column\":\"32\",\"row\":\"32\",\"isLinked\":true,\"unit\":\"px\",\"size\":32},\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"premium_parallax_layers_list\":[],\"premium_gradient_colors_repeater\":[],\"premium_kenburns_repeater\":[],\"premium_lottie_repeater\":[],\"premium_blob_repeater\":[],\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[{\"id\":\"78e7838\",\"elType\":\"container\",\"isInner\":true,\"isLocked\":false,\"settings\":{\"content_width\":\"full\",\"flex_gap\":{\"column\":\"32\",\"row\":\"32\",\"isLinked\":true,\"unit\":\"px\",\"size\":32},\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"premium_parallax_layers_list\":[],\"premium_gradient_colors_repeater\":[],\"premium_kenburns_repeater\":[],\"premium_lottie_repeater\":[],\"premium_blob_repeater\":[],\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[{\"id\":\"af21aae\",\"elType\":\"container\",\"isInner\":true,\"isLocked\":false,\"settings\":{\"content_width\":\"full\",\"flex_direction\":\"row\",\"flex_direction_mobile\":\"row\",\"flex_align_items\":\"center\",\"flex_wrap_mobile\":\"nowrap\",\"padding\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":true},\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"premium_parallax_layers_list\":[],\"premium_gradient_colors_repeater\":[],\"premium_kenburns_repeater\":[],\"premium_lottie_repeater\":[],\"premium_blob_repeater\":[],\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[{\"id\":\"bb600af\",\"elType\":\"container\",\"isInner\":true,\"isLocked\":false,\"settings\":{\"content_width\":\"full\",\"width_mobile\":{\"unit\":\"%\",\"size\":48,\"sizes\":[]},\"padding\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":true},\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"premium_parallax_layers_list\":[],\"premium_gradient_colors_repeater\":[],\"premium_kenburns_repeater\":[],\"premium_lottie_repeater\":[],\"premium_blob_repeater\":[],\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[{\"id\":\"842a6af\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"title\":\"Digital Marketing\",\"title_color\":\"#084208\",\"typography_typography\":\"custom\",\"typography_font_family\":\"Poppins\",\"typography_font_size\":{\"unit\":\"px\",\"size\":18,\"sizes\":[]},\"typography_font_size_tablet\":{\"unit\":\"px\",\"size\":18,\"sizes\":[]},\"typography_font_size_mobile\":{\"unit\":\"px\",\"size\":16,\"sizes\":[]},\"typography_text_transform\":\"none\",\"typography_font_style\":\"normal\",\"typography_text_decoration\":\"none\",\"typography_line_height\":{\"unit\":\"custom\",\"size\":\"140%\",\"sizes\":[]},\"typography_line_height_tablet\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"typography_line_height_mobile\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"typography_letter_spacing\":{\"unit\":\"px\",\"size\":0,\"sizes\":[]},\"typography_word_spacing\":{\"unit\":\"em\",\"size\":\"\",\"sizes\":[]},\"_element_width_mobile\":\"initial\",\"_flex_align_self_mobile\":\"flex-start\",\"__globals__\":{\"title_color\":\"\",\"typography_typography\":\"\"},\"content_width\":\"full\",\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"premium_mscroll_repeater\":[],\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[],\"widgetType\":\"heading\"},{\"id\":\"0d001d8\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"title\":\"Cinkass\xc3\xa9\",\"title_color\":\"#1C244B\",\"typography_typography\":\"custom\",\"typography_font_family\":\"Poppins\",\"typography_font_size\":{\"unit\":\"px\",\"size\":16,\"sizes\":[]},\"typography_font_size_tablet\":{\"unit\":\"px\",\"size\":14,\"sizes\":[]},\"typography_text_transform\":\"none\",\"typography_font_style\":\"normal\",\"typography_text_decoration\":\"none\",\"typography_line_height\":{\"unit\":\"em\",\"size\":1.5,\"sizes\":[]},\"typography_letter_spacing\":{\"unit\":\"px\",\"size\":0,\"sizes\":[]},\"_margin\":{\"unit\":\"px\",\"top\":\"-16\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":false},\"_flex_align_self_mobile\":\"flex-start\",\"__globals__\":{\"title_color\":\"\",\"typography_typography\":\"\"},\"content_width\":\"full\",\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"premium_mscroll_repeater\":[],\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[],\"widgetType\":\"heading\"}]},{\"id\":\"6c4ad7c\",\"elType\":\"container\",\"isInner\":true,\"isLocked\":false,\"settings\":{\"content_width\":\"full\",\"width_mobile\":{\"unit\":\"%\",\"size\":48,\"sizes\":[]},\"padding\":{\"unit\":\"px\",\"top\":\"0\",\"right\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"isLinked\":true},\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"premium_parallax_layers_list\":[],\"premium_gradient_colors_repeater\":[],\"premium_kenburns_repeater\":[],\"premium_lottie_repeater\":[],\"premium_blob_repeater\":[],\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[{\"id\":\"b6a8268\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"ekit_btn_text\":\"POSTULER MAINTENANT\",\"ekit_btn_align\":\"right\",\"ekit_btn_typography_typography\":\"custom\",\"ekit_btn_typography_font_family\":\"Lato\",\"ekit_btn_typography_font_size\":{\"unit\":\"px\",\"size\":\"15\",\"sizes\":[]},\"ekit_btn_typography_font_weight\":\"700\",\"ekit_btn_typography_text_transform\":\"uppercase\",\"ekit_btn_text_color\":\"#FFF4F4\",\"ekit_btn_bg_color_background\":\"classic\",\"ekit_btn_bg_color_color\":\"#006633\",\"ekit_btn_bg_hover_color_background\":\"classic\",\"ekit_btn_bg_hover_color_color\":\"#FFFFFF\",\"ekit_btn_border_style\":\"solid\",\"ekit_btn_border_dimensions\":{\"unit\":\"px\",\"top\":\"3\",\"right\":\"3\",\"bottom\":\"3\",\"left\":\"3\",\"isLinked\":\"1\"},\"ekit_btn_border_color\":\"#FFFFFF\",\"ekit_btn_border_radius\":{\"unit\":\"px\",\"top\":\"49\",\"right\":\"49\",\"bottom\":\"49\",\"left\":\"49\",\"isLinked\":\"1\"},\"ekit_btn_align_mobile\":\"center\",\"ekit_btn_hover_color\":\"#006633\",\"ekit_btn_box_shadow_group_box_shadow_type\":\"yes\",\"ekit_btn_box_shadow_group_box_shadow\":{\"horizontal\":\"19\",\"vertical\":\"19\",\"blur\":\"40\",\"spread\":\"0\",\"color\":\"rgba(0,0,0,0.1)\"},\"ekit_btn_text_padding\":{\"unit\":\"px\",\"top\":\"22\",\"right\":\"54\",\"bottom\":\"22\",\"left\":\"45\",\"isLinked\":\"\"},\"ekit_all_conditions_list\":[{\"_id\":\"a37cfac\"}],\"ekit_adv_tooltip_content\":\"Tooltip Content.\",\"ekit_cursor_text_label\":\"Elementskit Cursor\",\"ekit_btn_icons\":{\"value\":\"fas fa-hand-point-right\",\"library\":\"fa-solid\"},\"ekit_btn_url\":{\"url\":\"\",\"is_external\":\"\",\"nofollow\":\"\",\"custom_attributes\":\"\"},\"ekit_btn_border_radius_h\":{\"unit\":\"px\",\"top\":\"29\",\"right\":\"29\",\"bottom\":\"29\",\"left\":\"29\",\"isLinked\":true},\"ekit_btn_normal_icon_font_size\":{\"unit\":\"px\",\"size\":18,\"sizes\":[]},\"ekit_btn_hover_border_color\":\"#084208\"},\"interactions\":{},\"elements\":[],\"widgetType\":\"elementskit-button\"}]}]},{\"id\":\"73b13de\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"editor\":\"<p>Le sp\xc3\xa9cialiste en marketing digital est charg\xc3\xa9 de d\xc3\xa9velopper la visibilit\xc3\xa9 en ligne d\xe2\x80\x99une entreprise, d\xe2\x80\x99attirer des clients potentiels et d\xe2\x80\x99augmenter les ventes \xc3\xa0 travers les canaux num\xc3\xa9riques.</p>\",\"text_color\":\"#000000\",\"typography_typography\":\"custom\",\"typography_font_family\":\"Poppins\",\"typography_font_size\":{\"unit\":\"px\",\"size\":16,\"sizes\":[]},\"typography_font_size_tablet\":{\"unit\":\"px\",\"size\":14,\"sizes\":[]},\"typography_text_transform\":\"none\",\"typography_font_style\":\"normal\",\"typography_text_decoration\":\"none\",\"typography_line_height\":{\"unit\":\"em\",\"size\":1.5,\"sizes\":[]},\"typography_letter_spacing\":{\"unit\":\"px\",\"size\":0,\"sizes\":[]},\"typography_word_spacing\":{\"unit\":\"em\",\"size\":\"\",\"sizes\":[]},\"__globals__\":{\"text_color\":\"\",\"typography_typography\":\"\"},\"content_width\":\"full\",\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"premium_mscroll_repeater\":[],\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}},\"align\":\"justify\"},\"interactions\":{},\"elements\":[],\"widgetType\":\"text-editor\"},{\"id\":\"9fb193b\",\"elType\":\"widget\",\"isInner\":false,\"isLocked\":false,\"settings\":{\"content_width\":\"full\",\"text\":\"---\",\"color\":\"#1C244B\",\"__globals__\":{\"color\":\"\"},\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"premium_mscroll_repeater\":[],\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[],\"widgetType\":\"divider\"}]}]},{\"id\":\"c024eca\",\"elType\":\"container\",\"isInner\":true,\"isLocked\":true,\"settings\":{\"_title\":\"item #1\",\"content_width\":\"full\",\"flex_gap\":{\"column\":\"32\",\"row\":\"32\",\"isLinked\":true,\"unit\":\"px\",\"size\":32},\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"premium_parallax_layers_list\":[],\"premium_gradient_colors_repeater\":[],\"premium_kenburns_repeater\":[],\"premium_lottie_repeater\":[],\"premium_blob_repeater\":[],\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[]},{\"id\":\"96e293a\",\"elType\":\"container\",\"isInner\":true,\"isLocked\":true,\"settings\":{\"_title\":\"item #1\",\"content_width\":\"full\",\"flex_gap\":{\"column\":\"32\",\"row\":\"32\",\"isLinked\":true,\"unit\":\"px\",\"size\":32},\"pa_condition_repeater\":[],\"premium_tooltip_text\":\"Hi, I'm a global tooltip.\",\"premium_tooltip_position\":\"top,bottom\",\"premium_parallax_layers_list\":[],\"premium_gradient_colors_repeater\":[],\"premium_kenburns_repeater\":[],\"premium_lottie_repeater\":[],\"premium_blob_repeater\":[],\"pa_cursor_ftext\":\"Premium Follow Text\",\"pa_badge_text\":\"New\",\"ai\":{\"generator\":\"textBasedLayoutGen\",\"baseTemplateId\":\"804\",\"blockId\":\"35975\",\"requestIds\":{\"editorSessionId\":\"editor-session-26ce6b7\",\"sessionId\":\"session-2614528\",\"generateId\":\"generate-d080686\",\"batchId\":\"batch-e82ab68\",\"requestId\":\"request-1cb140b\"}}},\"interactions\":{},\"elements\":[]}],\"supportRepeaterChildren\":true}]}]}],\"settings\":{\"template\":\"elementor_header_footer\",\"post_title\":\"Emploi &amp; Stages\",\"post_status\":\"publish\"}}}}||


