# incident

plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:12:27 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:62026: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.14
country_id: 6252001
description:
205.169.39.14 - - [16/Jun/2026:17:12:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6777243&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DeS1taWNoaWhpcm9AbWVzLmNvLmpw&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781629960 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=eS1taWNoaWhpcm9AbWVzLmNvLmpw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.14


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:13:35 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:62027: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:13:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7107274&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZW5xdWlyaWVzQGdhcHVyYS5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781630032 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZW5xdWlyaWVzQGdhcHVyYS5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:17:13:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6777800&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYWhtYWRzYWlmdWRkaW5AZXZncm91cC5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781630035 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YWhtYWRzYWlmdWRkaW5AZXZncm91cC5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 1.234.75.81
country_id: 1835841
description:
Jun 16 17:14:04 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 1.234.75.81 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:14:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6670443&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZmFpekBnYXB1cmEuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781630074 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZmFpekBnYXB1cmEuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 134.195.83.16
country_id: 6252001
domain: sahamtg.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/sahamtg/public_html/.004496715395533.php||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:14:32 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:62030: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:17:14:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6801763&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYml6bmVzc0BsbXQubHY%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781630092 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Yml6bmVzc0BsbXQubHY=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 212.36.194.131
country_id: 272103
description:
Jun 16 17:15:41 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 212.36.194.131 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 88.203.220.178
country_id: 732800
description:
Jun 16 17:15:57 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 88.203.220.178 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.198.128.204
country_id: 1835841
description:
Jun 16 17:16:12 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.198.128.204 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.45
country_id: 6252001
description:
205.169.39.45 - - [16/Jun/2026:17:16:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9737575&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYWtpdGFfeXVrb0BtZXMuY28uanA%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781630176 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YWtpdGFfeXVrb0BtZXMuY28uanA=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.45


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.53.42.101
country_id: 3469034
description:
Jun 16 17:15:59 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.53.42.101 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:15:33 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:62036: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.252.93.59
country_id: 1269750
description:
Jun 16 17:16:55 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.252.93.59 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 194.44.78.64
country_id: 690791
description:
Jun 16 17:17:11 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 194.44.78.64 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:16:33 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:62046: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 223.171.94.75
country_id: 1835841
description:
Jun 16 17:17:18 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 223.171.94.75 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.161.178
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160405||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.74
country_id: 2635167
domain: test.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/hphhdcxi/public_html/.289594221041742.php||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:18:15 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:62054: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:17:18:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9802898&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781630298 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.198.128.204
country_id: 1835841
description:
Jun 16 17:18:00 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.198.128.204 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.133
country_id: 2635167
description:
[2026-06-16 17:18:02 +0000] info [cpaneld] 5.230.133.133 NEW hphhdcxi:soRwQAYx3ZV9aVVq address=5.230.133.133,app=cpaneld,creator=hphhdcxi,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:17:18:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7365526&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781630296 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 194.44.78.64
country_id: 690791
description:
Jun 16 17:17:24 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 194.44.78.64 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.212.95.19
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160504||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77142201
name: IM360 WAF: Possible enumeration of sensitive data (dirb)
abuser: 54.216.250.248
country_id: 2963597
domain: cfmi.tg
description:
IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||RSV:8.18||T:APACHE||MV:.env.swp||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.51
country_id: 6252001
description:
205.169.39.51 - - [16/Jun/2026:17:18:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119583&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbWF0dGhld190c2VuZ0Bicm9nZW50LmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781630302 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bWF0dGhld190c2VuZ0Bicm9nZW50LmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.51


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 59.98.41.27
country_id: 1269750
description:
Jun 16 17:18:29 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 59.98.41.27 has been locked due to Imunify RBL


plugin: modsec
rule: 77142201
name: IM360 WAF: Possible enumeration of sensitive data (dirb)
abuser: 54.216.250.248
country_id: 2963597
domain: cfmi.tg
description:
IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||RSV:8.18||T:APACHE||MV:phpinfo.php~||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 87.241.143.101
country_id: 174982
description:
2026-06-16 17:19:16 H=([0.0.0.0]) [87.241.143.101]:51168 F=<John@4452.com> rejected RCPT <info@soena.tg>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 125.141.193.42
country_id: 1835841
description:
Jun 16 17:18:28 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 125.141.193.42 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.200.6.38
country_id: 3469034
description:
Jun 16 17:18:38 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.200.6.38 has been locked due to Imunify RBL


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 40.65.89.181
country_id: 6252001
domain: www.cameg-togo.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 54.216.250.248
country_id: 2963597
domain: cfmi.tg
description:
IM360 WAF: Bad file extension||RSV:8.18||T:APACHE||MVN:REQUEST_FILENAME||MV:/phpinfo.php.bak||User:afdim||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.225
country_id: 2635167
domain: sahamtg.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/sahamtg/public_html/.181143841111517.php||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:17:19:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7247465&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYWtpdGFfeXVrb0BtZXMuY28uanA%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781630377 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YWtpdGFfeXVrb0BtZXMuY28uanA=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:20:09 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:62066: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:20:38 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:62070: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:21:43 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:60778: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:21:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10263699&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2FsZXNAbWFycXVpc29pbC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781630503 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2FsZXNAbWFycXVpc29pbC5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 145.223.46.158
country_id: 2635167
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:145.223.46.158||TA:145.223.46.158||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.109.172.230
country_id: 2017370
description:
[2026-06-16 17:23:02 +0000] info [cpaneld] 62.109.172.230 - expertsdefe "GET /login/?login_only=1&user=expertsdefe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expertsdefe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.122.102.12
country_id: 3017382
description:
[2026-06-16 17:23:19 +0000] info [cpaneld] 78.122.102.12 - exper "GET /login/?login_only=1&user=exper&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user exper (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.132.83.93
country_id: 3865483
description:
[2026-06-16 17:23:15 +0000] info [cpaneld] 186.132.83.93 - experts "GET /login/?login_only=1&user=experts&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user experts (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.251.163.77
country_id: 3469034
description:
[2026-06-16 17:23:17 +0000] info [cpaneld] 186.251.163.77 - experts "GET /login/?login_only=1&user=experts&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user experts (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.96.192.134
country_id: 2542007
description:
[2026-06-16 17:23:09 +0000] info [cpaneld] 102.96.192.134 - expertsde "GET /login/?login_only=1&user=expertsde&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expertsde (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.112.164.242
country_id: 2017370
description:
[2026-06-16 17:22:58 +0000] info [cpaneld] 176.112.164.242 - expertsdefe "GET /login/?login_only=1&user=expertsdefe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expertsdefe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.79.157.248
country_id: 6251999
description:
[2026-06-16 17:23:01 +0000] info [cpaneld] 70.79.157.248 - expertsdef "GET /login/?login_only=1&user=expertsdef&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expertsdef (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.187.78.146
country_id: 99237
description:
[2026-06-16 17:22:41 +0000] info [cpaneld] 185.187.78.146 - expertsdefense "GET /login/?login_only=1&user=expertsdefense&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expertsdefense (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 213.230.74.129
country_id: 1512440
description:
[2026-06-16 17:23:17 +0000] info [cpaneld] 213.230.74.129 - expert "GET /login/?login_only=1&user=expert&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expert (has_cpuser_file failed)


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 51.44.241.104
country_id: 3017382
domain: afrique-distribution.net
description:
IM360 WAF: Bad file extension||RSV:8.18||T:APACHE||MVN:REQUEST_FILENAME||MV:/phpinfo.php.bak||User:sadis||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.176.6.25
country_id: 3469034
description:
[2026-06-16 17:22:54 +0000] info [cpaneld] 200.176.6.25 - expertsdefens "GET /login/?login_only=1&user=expertsdefens&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expertsdefens (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:22:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6855267&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2FsZXNAY3RjZGV2ZWxvcG1lbnQuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781630541 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2FsZXNAY3RjZGV2ZWxvcG1lbnQuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.190.142.93
country_id: 3469034
description:
[2026-06-16 17:22:59 +0000] info [cpaneld] 45.190.142.93 - expertsdefen "GET /login/?login_only=1&user=expertsdefen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expertsdefen (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.252.238.198
country_id: 1210997
description:
[2026-06-16 17:23:10 +0000] info [cpaneld] 138.252.238.198 - expertsd "GET /login/?login_only=1&user=expertsd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expertsd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.137.45.182
country_id: 3469034
description:
[2026-06-16 17:23:14 +0000] info [cpaneld] 143.137.45.182 - expertsd "GET /login/?login_only=1&user=expertsd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expertsd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.31.235.166
country_id: 290557
description:
[2026-06-16 17:22:40 +0000] info [cpaneld] 5.31.235.166 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 87.64.250.187
country_id: 2802361
description:
[2026-06-16 17:23:21 +0000] info [cpaneld] 87.64.250.187 - expert "GET /login/?login_only=1&user=expert&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expert (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.211.82.61
country_id: 2921044
description:
[2026-06-16 17:23:23 +0000] info [cpaneld] 2.211.82.61 - exper "GET /login/?login_only=1&user=exper&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user exper (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.74.80.16
country_id: 3703430
description:
[2026-06-16 17:23:24 +0000] info [cpaneld] 186.74.80.16 - expe "GET /login/?login_only=1&user=expe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expe (has_cpuser_file failed)


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 51.44.241.104
country_id: 3017382
domain: afrique-distribution.net
description:
IM360 WAF: Bad file extension||RSV:8.18||T:APACHE||MVN:REQUEST_FILENAME||MV:/info.php.bak||User:sadis||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.159.221.99
country_id: 2542007
description:
[2026-06-16 17:23:25 +0000] info [cpaneld] 105.159.221.99 - expe "GET /login/?login_only=1&user=expe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user expe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.34.206.97
country_id: 285570
description:
[2026-06-16 17:23:29 +0000] info [cpaneld] 37.34.206.97 - exp "GET /login/?login_only=1&user=exp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user exp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 165.73.168.222
country_id: 953987
description:
[2026-06-16 17:23:30 +0000] info [cpaneld] 165.73.168.222 - exp "GET /login/?login_only=1&user=exp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user exp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.157.139.252
country_id: 2017370
description:
[2026-06-16 17:23:32 +0000] info [cpaneld] 178.157.139.252 - ex "GET /login/?login_only=1&user=ex&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ex (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.153.19.248
country_id: 3625428
description:
[2026-06-16 17:23:35 +0000] info [cpaneld] 190.153.19.248 - ex "GET /login/?login_only=1&user=ex&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ex (has_cpuser_file failed)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:17:24:33 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:17:24:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:17:24:36 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:17:24:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 140.99.202.141
country_id: 3017382
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:140.99.202.141||TA:140.99.202.141||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:25:48 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:61372: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 46.202.227.145
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:46.202.227.145||TA:46.202.227.145||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.212.41
country_id: 6251999
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.253.212.41||TA:104.253.212.41||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 151.245.207.142
country_id: 2635167
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:151.245.207.142||TA:151.245.207.142||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 92.113.129.158
country_id: 2077456
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:92.113.129.158||TA:92.113.129.158||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 64.188.100.223
country_id: 6251999
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:64.188.100.223||TA:64.188.100.223||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 150.107.202.152
country_id: 458258
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:150.107.202.152||TA:150.107.202.152||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 154.29.232.225
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:154.29.232.225||TA:154.29.232.225||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.250.204.217
country_id: 3144096
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.250.204.217||TA:104.250.204.217||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:27:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13266024&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYXRoaXJhQG1hcnF1aXNvaWwuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781630826 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YXRoaXJhQG1hcnF1aXNvaWwuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 217.26.178.22
country_id: 3175395
description:
Jun 16 17:26:31 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 217.26.178.22 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 216.173.120.28
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:216.173.120.28||TA:216.173.120.28||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:26:50 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:61376: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.187.206.126
country_id: 99237
description:
[2026-06-16 17:28:21 +0000] info [cpaneld] 185.187.206.126 - alloaci "GET /login/?login_only=1&user=alloaci&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alloaci (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.222.187.58
country_id: 2750405
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.222.187.58||TA:104.222.187.58||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:27:51 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:61382: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.62.144.54
country_id: 3439705
description:
[2026-06-16 17:28:10 +0000] info [cpaneld] 167.62.144.54 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.21.141.91
country_id: 3895114
description:
[2026-06-16 17:28:10 +0000] info [cpaneld] 190.21.141.91 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.131.115.213
country_id: 6252001
description:
[2026-06-16 17:28:24 +0000] info [cpaneld] 68.131.115.213 - alloa "GET /login/?login_only=1&user=alloa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alloa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.183.112.153
country_id: 3996063
description:
[2026-06-16 17:28:23 +0000] info [cpaneld] 189.183.112.153 - alloac "GET /login/?login_only=1&user=alloac&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alloac (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 31.129.134.231
country_id: 2017370
description:
[2026-06-16 17:28:34 +0000] info [cpaneld] 31.129.134.231 - all "GET /login/?login_only=1&user=all&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user all (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.115.101.13
country_id: 272103
description:
[2026-06-16 17:28:36 +0000] info [cpaneld] 185.115.101.13 - al "GET /login/?login_only=1&user=al&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user al (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 116.99.253.173
country_id: 1562822
description:
[2026-06-16 17:28:22 +0000] info [cpaneld] 116.99.253.173 - alloac "GET /login/?login_only=1&user=alloac&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alloac (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.47.190.66
country_id: 1522867
description:
[2026-06-16 17:28:31 +0000] info [cpaneld] 92.47.190.66 - allo "GET /login/?login_only=1&user=allo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user allo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.202.49.38
country_id: 289688
description:
[2026-06-16 17:28:39 +0000] info [cpaneld] 176.202.49.38 - al "GET /login/?login_only=1&user=al&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user al (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.57
country_id: 6252001
description:
205.169.39.57 - - [16/Jun/2026:17:29:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10197188&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaGVsbG9AZS5zd2ltc3VpdHNmb3JhbGwuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781630941 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aGVsbG9AZS5zd2ltc3VpdHNmb3JhbGwuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.57


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 216.26.254.15
country_id: 3017382
domain: wages.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:HEAD http:/wages.tg/ HTTP/1.0||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:30:58 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:61387: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:31:58 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:61388: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.46.76.99
country_id: 294640
description:
[2026-06-16 17:32:18 +0000] info [cpaneld] 185.46.76.99 - metaar "GET /login/?login_only=1&user=metaar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user metaar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.205.16.33
country_id: 290557
description:
[2026-06-16 17:31:29 +0000] info [cpaneld] 176.205.16.33 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 118.69.161.98
country_id: 1562822
description:
[2026-06-16 17:31:30 +0000] info [cpaneld] 118.69.161.98 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.41.188.24
country_id: 3625428
description:
[2026-06-16 17:31:41 +0000] info [cpaneld] 38.41.188.24 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 216.26.236.31
country_id: 6252001
domain: www.v2.arse.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.v2.arse.tg:80/wp-login.php HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.175.199.179
country_id: 3658394
description:
[2026-06-16 17:31:46 +0000] info [cpaneld] 181.175.199.179 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 213.230.116.33
country_id: 1512440
description:
[2026-06-16 17:32:15 +0000] info [cpaneld] 213.230.116.33 - metaarttg "GET /login/?login_only=1&user=metaarttg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user metaarttg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.139.159.158
country_id: 2017370
description:
[2026-06-16 17:31:32 +0000] info [cpaneld] 79.139.159.158 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.248.19.23
country_id: 6252001
description:
[2026-06-16 17:31:37 +0000] info [cpaneld] 172.248.19.23 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.233.67.150
country_id: 3686110
description:
[2026-06-16 17:31:44 +0000] info [cpaneld] 201.233.67.150 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.182.200.189
country_id: 1562822
description:
[2026-06-16 17:31:50 +0000] info [cpaneld] 14.182.200.189 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 93.170.96.107
country_id: 690791
description:
[2026-06-16 17:32:10 +0000] info [cpaneld] 93.170.96.107 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.89.25.229
country_id: 1210997
description:
[2026-06-16 17:32:09 +0000] info [cpaneld] 103.89.25.229 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.75.115.126
country_id: 2542007
description:
[2026-06-16 17:32:20 +0000] info [cpaneld] 196.75.115.126 - metaar "GET /login/?login_only=1&user=metaar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user metaar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.75.235.250
country_id: 1733045
description:
[2026-06-16 17:31:37 +0000] info [cpaneld] 180.75.235.250 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 31.130.4.227
country_id: 2017370
description:
[2026-06-16 17:31:43 +0000] info [cpaneld] 31.130.4.227 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 81.172.127.23
country_id: 2510769
description:
[2026-06-16 17:31:55 +0000] info [cpaneld] 81.172.127.23 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.220.51.225
country_id: 2017370
description:
[2026-06-16 17:32:12 +0000] info [cpaneld] 77.220.51.225 - metaart "GET /login/?login_only=1&user=metaart&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user metaart (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.129.33.175
country_id: 1210997
description:
[2026-06-16 17:32:13 +0000] info [cpaneld] 103.129.33.175 - metaart "GET /login/?login_only=1&user=metaart&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user metaart (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:17:32:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935203&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781631148 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 60.251.228.85
country_id: 1668284
description:
[2026-06-16 17:32:34 +0000] info [cpaneld] 60.251.228.85 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.124.110.244
country_id: 1210997
description:
[2026-06-16 17:32:23 +0000] info [cpaneld] 103.124.110.244 - metaa "GET /login/?login_only=1&user=metaa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user metaa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 27.147.242.211
country_id: 1210997
description:
[2026-06-16 17:32:28 +0000] info [cpaneld] 27.147.242.211 - meta "GET /login/?login_only=1&user=meta&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user meta (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:17:32:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6840936&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781631147 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 156.255.201.118
country_id: 3625428
description:
[2026-06-16 17:32:30 +0000] info [cpaneld] 156.255.201.118 - met "GET /login/?login_only=1&user=met&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user met (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.127.71.171
country_id: 3437598
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/02/df6de1950e305891ff620278356c38c6_L.webp 500w, http:/togodailynews.tg/wp-content/uploads/2026/02/df6de1950e305891ff620278356c38c6_L-300x172.webp 300w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:33:01 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:61392: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 88.230.121.113
country_id: 298795
description:
[2026-06-16 17:32:23 +0000] info [cpaneld] 88.230.121.113 - metaa "GET /login/?login_only=1&user=metaa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user metaa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 86.96.110.125
country_id: 290557
description:
[2026-06-16 17:32:37 +0000] info [cpaneld] 86.96.110.125 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:34:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6722458&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2FsbHkueW9uZ0BtdG1hcmluZS5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781631250 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2FsbHkueW9uZ0BtdG1hcmluZS5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.78
country_id: 2635167
description:
[2026-06-16 17:34:44 +0000] info [cpaneld] 5.230.133.78 NEW doufelg:zz3UrX9FIRV7FUMR address=5.230.133.78,app=cpaneld,creator=doufelg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:36:04 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:61395: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:17:35:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7182434&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaGVsbG9AZS5zd2ltc3VpdHNmb3JhbGwuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781631323 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aGVsbG9AZS5zd2ltc3VpdHNmb3JhbGwuY29t" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:17:35:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10197352&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbS5yYW1hZGFuQG5lYi5hZQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781631334 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bS5yYW1hZGFuQG5lYi5hZQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>toutes les quatre semaines de mondial, la fifa impose aux joueurs et aux s\xc3\xa9lectionneurs une s\xc3\xa9ance photo officielle. objectif : obtenir de beaux portraits de profil, des sourires corporate et des poses dynamiques pour les habillages t\xc3\xa9l\xc3\xa9vis\xc3\xa9s.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>mais c'\xc3\xa9tait sans compter sur le l\xc3\xa9gendaire et excentrique s\xc3\xa9lectionneur de l'uruguay, marcelo bielsa (surnomm\xc3\xa9 \xc3\xa0 juste titre <em>el loco</em>).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>lors de la s\xc3\xa9ance organis\xc3\xa9e \xc3\xa0 canc\xc3\xban juste avant le tournoi, le technicien de 70 ans a tout simplement refus\xc3\xa9 de regarder l'objectif. les photographes de l'agence getty ont eu beau tout essayer, bielsa est rest\xc3\xa9 fig\xc3\xa9 : les mains enfonc\xc3\xa9es profond\xc3\xa9ment dans les poches, le corps raide comme un piquet, les yeux obstin\xc3\xa9ment riv\xc3\xa9s vers le sol.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31006,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31006\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>le r\xc3\xa9sultat ? un portrait officiel absolument lunaire o\xc3\xb9 le s\xc3\xa9lectionneur de la celeste donne l'impression d'avoir \xc3\xa9t\xc3\xa9 pris en photo \xc3\xa0 son insu en pleine crise existentielle. l'image est instantan\xc3\xa9ment devenue la premi\xc3\xa8re image virale de la comp\xc3\xa9tition.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>la punchline : \xc2\xab je ne suis pas un mannequin \xc2\xbb</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>interrog\xc3\xa9 par les journalistes apr\xc3\xa8s le premier match de l'uruguay (un match nul 1-1 contre l'arabie saoudite le lundi 15 juin dernier), bielsa ne s'est pas d\xc3\xa9mont\xc3\xa9. au contraire, il a offert une conf\xc3\xa9rence de presse m\xc3\xa9morable :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab je ne suis pas un mannequin. je n'ai aucune explication \xc3\xa0 donner, la photo a \xc3\xa9t\xc3\xa9 prise comme elle a \xc3\xa9t\xc3\xa9 prise. est-ce que je dois aussi expliquer pourquoi je ne regarde pas les gens qui me parlent en ce moment m\xc3\xaame ? \xc2\xbb, </em>a-t-il laiss\xc3\xa9 entendre.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>lanc\xc3\xa9 dans son monologue, il a continu\xc3\xa9 \xc3\xa0 s'agacer sous les rires \xc3\xa9touff\xc3\xa9s de la salle :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab il y a une limite \xc3\xa0 ce que l'on doit expliquer. si je porte des lunettes, pourquoi je porte des lunettes ? il n'y a rien de mal \xc3\xa0 regarder par terre. \xc2\xbb, </em>soutient le technicien de 70 ans.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"576px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:576px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>notons que cette histoire off r\xc3\xa9sume parfaitement le personnage. on parle d'un coach qui, par le pass\xc3\xa9, s'asseyait sur une glaci\xc3\xa8re ou un seau en plastique au bord du terrain pour soulager son dos, et qui vient de transformer une obligation marketing de la fifa \xc3\xa0 plusieurs millions de dollars en un moment de solitude pure pour les photographes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pendant que ses joueurs encha\xc3\xaenaient les poses ultra-stylis\xc3\xa9es, le boss de l'\xc3\xa9quipe a d\xc3\xa9cid\xc3\xa9 de regarder ses chaussures. une l\xc3\xa9gende.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em> </em></strong><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:36:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9989316&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaGFmaXppQGVuZWdyb3VwLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781631407 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aGFmaXppQGVuZWdyb3VwLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:37:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10317159&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYXphaEBuYXZlZ2FjaW9uLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781631446 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YXphaEBuYXZlZ2FjaW9uLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:38:07 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:61401: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 47.5.158.100
country_id: 6252001
description:
2026-06-16 17:38:34 dovecot_plain authenticator failed for H=(g128a61wy0hwwwnwkfaskwggstp) [47.5.158.100]:37589: 535 Incorrect authentication data (set_id=admin@mesyscom.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.186.181.141
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/c7bcab HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 17:39:06 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:61402: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:39:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13147032&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcmFqYWFpc2hhQGVuZWdyb3VwLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781631547 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cmFqYWFpc2hhQGVuZWdyb3VwLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:17:39:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6526620&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Db3BlcmF0aW9uc0BkaXZlcmVzb3VyY2VzLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781631549 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=b3BlcmF0aW9uc0BkaXZlcmVzb3VyY2VzLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:40:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001000&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYWRtaW5AbW90b3JzaGlwY28uY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781631611 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YWRtaW5AbW90b3JzaGlwY28uY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:17:39:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051715&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbWNjaG9uZ0B0b3B3aWxsbXkuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781631571 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bWNjaG9uZ0B0b3B3aWxsbXkuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:17:40:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:17:40:32 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:17:40:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:17:40:34 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 56.155.39.194
country_id: 1861060
domain: togofeed.com
description:
IM360 WAF: Bad file extension||RSV:8.18||T:APACHE||MVN:REQUEST_FILENAME||MV:/phpinfo.php.bak||User:qledpnjw||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:46:51 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:64379: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 146.19.39.132
country_id: 6252001
domain: cafe.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.18||T:APACHE||MV:/wp-json/wp/v2/users||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:47:25 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:64409: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.4.81.106
country_id: 1562822
description:
Jun 16 17:47:32 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.4.81.106 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:17:47:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6385049&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632053 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.1
country_id: 6252001
description:
205.169.39.1 - - [16/Jun/2026:17:47:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12871785&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZGVsbF93YXJyYW50eV9leHBpcmF0aW9uQHdhcnJhbnR5cmVuZXdhbHMuZGVsbC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632066 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZGVsbF93YXJyYW50eV9leHBpcmF0aW9uQHdhcnJhbnR5cmVuZXdhbHMuZGVsbC5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.1


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 175.107.215.16
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/Seminaire-gouvernemental-le-Togo-trace-sa-trajectoire-vers-un-doublement-du-niveau-de-vie-a-lhorizon-2040-768x806.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/06/Seminaire-gouvernemental-le-Togo-trace-sa-trajectoire-vers-un-doublement-du-niveau-de-vie-a-lhorizon-2040-286x300.webp 286w, http:/togodailynews.tg/wp-content/uploads/2026/06/Seminaire-gouvernemental-le-Togo-trace-sa-trajectoire-vers-un-doublement-du-niveau-de-vie-a-lhorizon-2040.webp 800w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:47:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7314280&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYWRtaW4uY29tbXNidTJAcGxuYmF0YW0uY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632045 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YWRtaW4uY29tbXNidTJAcGxuYmF0YW0uY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:17:47:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6580638&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632052 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:49:13 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:64501: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:48:27 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:64461: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 16 17:49:00 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account adiel@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.0.69.111
country_id: 3508796
description:
[2026-06-16 17:50:05 +0000] info [cpaneld] 152.0.69.111 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.60.10.123
country_id: 102358
description:
[2026-06-16 17:50:15 +0000] info [cpaneld] 50.60.10.123 - wellcit "GET /login/?login_only=1&user=wellcit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wellcit (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.79.68.245
country_id: 2542007
description:
[2026-06-16 17:50:18 +0000] info [cpaneld] 105.79.68.245 - wellci "GET /login/?login_only=1&user=wellci&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wellci (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.186.119.85
country_id: 3469034
description:
[2026-06-16 17:50:10 +0000] info [cpaneld] 138.186.119.85 - wellcity "GET /login/?login_only=1&user=wellcity&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wellcity (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 27.34.68.13
country_id: 1282988
description:
[2026-06-16 17:50:11 +0000] info [cpaneld] 27.34.68.13 - wellcitytg "GET /login/?login_only=1&user=wellcitytg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wellcitytg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.56.195.253
country_id: 99237
description:
[2026-06-16 17:50:13 +0000] info [cpaneld] 185.56.195.253 - wellcitytg "GET /login/?login_only=1&user=wellcitytg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wellcitytg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.251.5.123
country_id: 1643084
description:
[2026-06-16 17:50:18 +0000] info [cpaneld] 45.251.5.123 - wellci "GET /login/?login_only=1&user=wellci&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wellci (has_cpuser_file failed)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 16 17:49:22 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account adiel@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:49:24 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:64511: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.227.45.235
country_id: 2017370
description:
[2026-06-16 17:50:04 +0000] info [cpaneld] 5.227.45.235 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.11
country_id: 6252001
description:
205.169.39.11 - - [16/Jun/2026:17:50:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7063964&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZ2Vyc2hvbi5jYXJhQHRyYWdzZW5naW5lZXJpbmcuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632257 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Z2Vyc2hvbi5jYXJhQHRyYWdzZW5naW5lZXJpbmcuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.11


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.74.226.178
country_id: 1733045
description:
[2026-06-16 17:50:22 +0000] info [cpaneld] 180.74.226.178 - wellc "GET /login/?login_only=1&user=wellc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wellc (has_cpuser_file failed)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 16 17:50:30 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account adiel@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.140.227.203
country_id: 2542007
description:
[2026-06-16 17:50:28 +0000] info [cpaneld] 41.140.227.203 - wel "GET /login/?login_only=1&user=wel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wel (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:17:51:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10197870&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZGVsbF93YXJyYW50eV9leHBpcmF0aW9uQHdhcnJhbnR5cmVuZXdhbHMuZGVsbC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632271 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZGVsbF93YXJyYW50eV9leHBpcmF0aW9uQHdhcnJhbnR5cmVuZXdhbHMuZGVsbC5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:50:21 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:64561: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.157.49.207
country_id: 3865483
description:
[2026-06-16 17:50:24 +0000] info [cpaneld] 186.157.49.207 - wellc "GET /login/?login_only=1&user=wellc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wellc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.137.139.79
country_id: 3686110
description:
[2026-06-16 17:50:26 +0000] info [cpaneld] 181.137.139.79 - well "GET /login/?login_only=1&user=well&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user well (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.251.160.63
country_id: 6252001
description:
[2026-06-16 17:50:32 +0000] info [cpaneld] 76.251.160.63 - we "GET /login/?login_only=1&user=we&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user we (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.176.17.138
country_id: 6252001
description:
[2026-06-16 17:50:32 +0000] info [cpaneld] 98.176.17.138 - we "GET /login/?login_only=1&user=we&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user we (has_cpuser_file failed)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 16 17:51:21 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account adiel@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:51:23 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:64608: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:51:57 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:64640: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.184
country_id: 6252001
description:
[2026-06-16 17:52:38 +0000] info [cpaneld] 64.44.59.184 NEW doufelg:hfiAsqsoOw98ezfY address=64.44.59.184,app=cpaneld,creator=doufelg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.179
country_id: 2635167
description:
[2026-06-16 17:52:40 +0000] info [cpaneld] 5.230.153.179 NEW wgqhqbem:ww8RVWDckmILsHxO address=5.230.153.179,app=cpaneld,creator=wgqhqbem,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:52:42 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:64696: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 16 17:52:29 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account adiel@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.254
country_id: 2635167
description:
[2026-06-16 17:52:35 +0000] info [cpaneld] 5.230.153.254 NEW sotragonet:cyQLg7YuXoky_A8p address=5.230.153.254,app=cpaneld,creator=sotragonet,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:53:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6933195&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdmluY2VudEBpbnRlZ3JpdHlsb2dpc3RpY3MuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632387 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dmluY2VudEBpbnRlZ3JpdHlsb2dpc3RpY3MuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:52:31 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:64673: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:53:29 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:64797: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.74
country_id: 2635167
domain: mftogo.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ttfuehop/public_html/.630942890035392.php||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 16 17:53:27 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account adiel@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:53:29 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:64796: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:53:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7052697&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYmQuZXhlY0BkaXZlcmVzb3VyY2VzLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632435 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YmQuZXhlY0BkaXZlcmVzb3VyY2VzLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.94
country_id: 2635167
domain: mftogo.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ttfuehop/public_html/.119612522056618.php||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 66.93.251.75
country_id: 1819730
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/09/WhatsApp-Image-2025-09-15-at-17.09.13-768x512.webp HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.33
country_id: 6252001
description:
[2026-06-16 17:54:00 +0000] info [cpaneld] 64.44.59.33 NEW ttfuehop:R2OwnsZa1Ne40kga address=64.44.59.33,app=cpaneld,creator=ttfuehop,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:54:40 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:65023: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:17:54:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9869166&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbS5qYWF0QG5lYi5hZQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632479 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bS5qYWF0QG5lYi5hZQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.180
country_id: 2635167
domain: delxia.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/zykoahbv/public_html/.140060537427122.php||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>la capitale togolaise vibre, depuis le 15 juin dernier, au rythme de la premi\xc3\xa8re convention et exposition africaines du transport a\xc3\xa9rien. c\xe2\x80\x99est le pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9, champion du march\xc3\xa9 unique du transport a\xc3\xa9rien africain (mutaa), qui a officiellement ouvert les travaux de cet \xc3\xa9v\xc3\xa9nement, qui r\xc3\xa9unit le gratin de l\xe2\x80\x99aviation civile mais \xc3\xa9galement plusieurs personnalit\xc3\xa9s de premier plan, telles que le pr\xc3\xa9sident rwandais paul kagam\xc3\xa9, l\xe2\x80\x99ancien pr\xc3\xa9sident nig\xc3\xa9rian olusegun obasanjo, les ministres des transports africains, sans oublier les repr\xc3\xa9sentants des instances continentales et internationales de l\xe2\x80\x99aviation civile.&nbsp;</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>retour, dans les lignes qui suivent, sur l\xe2\x80\x99essentiel du propos du champion de la mutaa.&nbsp;</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>\xc2\xab&nbsp;(\xe2\x80\xa6) honorables invit\xc3\xa9s,</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>distingu\xc3\xa9s participants.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>permettez-moi avant de prononcer mon discours, de renouveler mes remerciements au pr\xc3\xa9sident paul kagam\xc3\xa9, pour avoir accept\xc3\xa9 d'honorer de sa pr\xc3\xa9sence l'\xc3\xa9v\xc3\xa9nement que nous vivons aujourd'hui. le pr\xc3\xa9sident kagam\xc3\xa9 a assur\xc3\xa9 la pr\xc3\xa9sidence de la conf\xc3\xa9rence des chefs d'etat et de gouvernement de l'union africaine en 2018 et il a eu un mandat r\xc3\xa9ussi, un mandat fructueux, il a initi\xc3\xa9 beaucoup de r\xc3\xa9formes, il a ouvert beaucoup de chantiers et le mutaa est un des nombreux fruits de ses r\xc3\xa9formes ainsi que la zlecaf, etc.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31282,\"width\":\"611px\",\"height\":\"auto\",\"aspectratio\":\"1.2978610400270387\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/f401f844-47ba-4a70-8242-5d8fe594564c-1024x789.jpg\" alt=\"\" class=\"wp-image-31282\" style=\"aspect-ratio:1.2978610400270387;width:611px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong><em>mesdames et messieurs,</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>parler du ciel africain, ce n'est pas seulement parler de routes a\xc3\xa9riennes, de compagnies, d'a\xc3\xa9roports ou de r\xc3\xa9gulation. c'est parler de la mani\xc3\xa8re dont l'afrique se relie \xc3\xa0 elle-m\xc3\xaame. c'est donc parler de mobilit\xc3\xa9, de commerce, de comp\xc3\xa9titivit\xc3\xa9 et d'int\xc3\xa9gration.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>depuis plusieurs ann\xc3\xa9es, notre continent a fait un choix clair&nbsp;: celui de l'int\xc3\xa9gration. nous l'avons fait avec le march\xc3\xa9 unique du transport a\xc3\xa9rien africain, avec la zone de libre-\xc3\xa9change continentale africaine, avec l'agenda 2063.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>mais on l'a dit et r\xc3\xa9p\xc3\xa9t\xc3\xa9, l'int\xc3\xa9gration ne se mesure pas seulement aux textes adopt\xc3\xa9s. elle se mesure aux r\xc3\xa9sultats visibles&nbsp;: des routes ouvertes, des co\xc3\xbbts r\xc3\xa9duits, des d\xc3\xa9lais raccourcis, des \xc3\xa9changes facilit\xc3\xa9s.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>le th\xc3\xa8me retenu porte donc une ambition essentielle. mais il porte sur une exigence&nbsp;: faire du ciel africain un espace plus ouvert, plus accessible, plus comp\xc3\xa9titif et plus utile \xc3\xa0 la transformation de nos \xc3\xa9conomies.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>pour le togo, accueillir cette convention n'est pas seulement un honneur. c'est un engagement. car notre pays a fait le choix de se positionner comme une plateforme commerciale et logistique r\xc3\xa9gionale. cette ambition n'a de sens que si elle contribue \xc3\xa0 une ambition plus large&nbsp;: celle d'une afrique qui se relie davantage \xc3\xa0 elle-m\xc3\xaame pour mieux se transformer.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>c'est pourquoi je voudrais partager avec vous quatre convictions sur le sujet.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31306,\"width\":\"588px\",\"height\":\"auto\",\"aspectratio\":\"1.499330655957162\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/024389f4-36d5-478c-babe-6fe09c920d64-1024x683.jpg\" alt=\"\" class=\"wp-image-31306\" style=\"aspect-ratio:1.499330655957162;width:588px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong><em>la premi\xc3\xa8re conviction est que le ciel unique africain doit passer de l'engagement politique \xc3\xa0 la r\xc3\xa9alit\xc3\xa9 op\xc3\xa9rationnelle.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>l'afrique a donc fait le choix de l'int\xc3\xa9gration. ce choix se justifie, parce qu'aucun de nos pays, pris isol\xc3\xa9ment, ne dispose de toute la taille critique requise pour r\xc3\xa9pondre seul aux d\xc3\xa9fis de la transformation \xc3\xa9conomique.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>mais l'int\xc3\xa9gration ne devient r\xc3\xa9elle que lorsqu'elle produit des effets concrets&nbsp;: des villes mieux reli\xc3\xa9es, des routes plus nombreuses, des co\xc3\xbbts plus faibles et des \xc3\xa9changes plus fluides.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>on l'a dit aujourd'hui encore, m\xc3\xaame si c'est de moins en moins vrai, il reste parfois plus simple de relier une capitale africaine \xc3\xa0 une capitale ext\xc3\xa9rieure au continent que de relier deux capitales africaines entre elles. ce constat r\xc3\xa9v\xc3\xa8le une fragmentation profonde de notre espace \xc3\xa9conomique.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>le march\xc3\xa9 unique du transport a\xc3\xa9rien africain doit donc entrer dans une phase plus concr\xc3\xa8te. il faut aligner les accords de services a\xc3\xa9riens, faciliter l'ouverture effective des routes, mieux utiliser les droits de trafic et d\xc3\xa9velopper des corridors prioritaires.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>la connectivit\xc3\xa9 ne se d\xc3\xa9cr\xc3\xa8te pas. elle se construit par des d\xc3\xa9cisions pr\xc3\xa9cises, des engagements suivis mais aussi par une coordination r\xc3\xa9guli\xc3\xa8re entre les \xc3\x89tats, les r\xc3\xa9gulateurs, les compagnies, les a\xc3\xa9roports et les communaut\xc3\xa9s \xc3\xa9conomiques r\xc3\xa9gionales.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>ma deuxi\xc3\xa8me conviction est que la connectivit\xc3\xa9 a\xc3\xa9rienne ne sera utile que si elle devient plus accessible et plus comp\xc3\xa9titive.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>ouvrir le ciel africain est n\xc3\xa9cessaire. mais un ciel ouvert peut rester, dans les faits, difficile d'acc\xc3\xa8s si les billets d'avion demeurent trop chers, les formalit\xc3\xa9s restent trop lourdes, les visas sont trop complexes ; alors la connectivit\xc3\xa9 existe sur le papier, mais elle ne transforme pas suffisamment la r\xc3\xa9alit\xc3\xa9.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31281,\"width\":\"602px\",\"height\":\"auto\",\"aspectratio\":\"1.3438656134386562\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/06de7101-2b5e-44af-83e8-5c172b3cbb26-1024x762.jpg\" alt=\"\" class=\"wp-image-31281\" style=\"aspect-ratio:1.3438656134386562;width:602px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>un billet trop cher, on l'a dit, n'est pas seulement une contrainte pour le passager. c'est une barri\xc3\xa8re pour l'entrepreneur, pour le tourisme, pour les \xc3\xa9tudiants, pour les familles, pour les commer\xc3\xa7ants. c'est, au fond, une barri\xc3\xa8re \xc3\xa0 l'int\xc3\xa9gration africaine elle-m\xc3\xaame.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>nous devons donc trouver un meilleur \xc3\xa9quilibre entre la n\xc3\xa9cessit\xc3\xa9 de financer les infrastructures et l'objectif de d\xc3\xa9velopper le march\xc3\xa9.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>les exigences de s\xc3\xbbret\xc3\xa9, de s\xc3\xa9curit\xc3\xa9 et de qualit\xc3\xa9 doivent rester \xc3\xa9lev\xc3\xa9es. mais les taxes, frais et charges doivent \xc3\xaatre plus transparents, plus pr\xc3\xa9visibles et mieux pens\xc3\xa9s \xc3\xa0 l'\xc3\xa9chelle continentale.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>la m\xc3\xaame logique vaut pour la facilitation. les visas, les formalit\xc3\xa9s d'entr\xc3\xa9e, la digitalisation des proc\xc3\xa9dures, la gestion du fret et l'application des standards internationaux ne sont pas de simples sujets administratifs. ce sont des instruments d'int\xc3\xa9gration.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>ma troisi\xc3\xa8me conviction est que le transport a\xc3\xa9rien doit \xc3\xaatre mis au service de la transformation productive du continent.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>nous parlons souvent de l'aviation \xc3\xa0 travers le transport des passagers. mais l'aviation est aussi une infrastructure \xc3\xa9conomique. elle peut soutenir l'agriculture, l'industrie, la sant\xc3\xa9, le commerce num\xc3\xa9rique, les exportations \xc3\xa0 forte valeur ajout\xc3\xa9e et les cha\xc3\xaenes de valeur r\xc3\xa9gionales.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>le fret a\xc3\xa9rien doit donc occuper une place plus importante dans nos strat\xc3\xa9gies logistiques. c'est ici que le lien avec la zone de libre-\xc3\xa9change continentale africaine est essentiel.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>la zlecaf ne produira pas tous ses effets uniquement par la r\xc3\xa9duction des droits de douane. elle aura besoin de routes, de corridors, de plateformes logistiques, de proc\xc3\xa9dures efficaces et d'une capacit\xc3\xa9 r\xc3\xa9elle \xc3\xa0 faire circuler les biens entre nos \xc3\xa9conomies.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>le transport a\xc3\xa9rien doit donc \xc3\xaatre pens\xc3\xa9 comme une composante d'un syst\xc3\xa8me plus large. il ne s'agit pas d'opposer l'air, la route, la mer et le rail. il s'agit de les articuler autour de corridors \xc3\xa9conomiques coh\xc3\xa9rents. pour l'afrique, l'enjeu est donc de transformer la connectivit\xc3\xa9 en comp\xc3\xa9titivit\xc3\xa9.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>ma quatri\xc3\xa8me conviction est que l'afrique doit construire une base a\xc3\xa9ronautique plus solide, plus innovante et plus durable.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>une aviation africaine comp\xc3\xa9titive doit reposer sur un \xc3\xa9cosyst\xc3\xa8me robuste. elle suppose des a\xc3\xa9roports modernes, des compagnies solides, des capacit\xc3\xa9s de maintenance, des services d'assistance au sol efficaces, des syst\xc3\xa8mes num\xc3\xa9riques fiables et des cadres r\xc3\xa9glementaires clairs.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>nous devons regarder l'aviation comme une fili\xc3\xa8re productive. elle peut cr\xc3\xa9er des emplois qualifi\xc3\xa9s, d\xc3\xa9velopper des savoir-faire techniques, attirer des investissements et offrir \xc3\xa0 notre jeunesse des perspectives dans des m\xc3\xa9tiers d'avenir. la souverainet\xc3\xa9 a\xc3\xa9ronautique ne se construira pas seulement avec des infrastructures. elle se construira aussi avec des comp\xc3\xa9tences.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>cette ambition suppose de mieux pr\xc3\xa9parer les projets et d'anticiper \xc3\xa0 l'avance nos besoins futurs. elle suppose aussi d'int\xc3\xa9grer la durabilit\xc3\xa9 d\xc3\xa8s le d\xc3\xa9part&nbsp;: modernisation des op\xc3\xa9rations, r\xc3\xa9silience des infrastructures et exigences environnementales.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>la convention qui s'ouvre aujourd'hui \xc3\xa0 lom\xc3\xa9 doit \xc3\xaatre un moment d'acc\xc3\xa9l\xc3\xa9ration. elle doit permettre d'avancer sur le march\xc3\xa9 unique du transport a\xc3\xa9rien africain.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>au-del\xc3\xa0 des livrables techniques, cette rencontre doit porter un message politique clair&nbsp;: l'afrique doit mieux se relier \xc3\xa0 elle-m\xc3\xaame pour mieux se transformer. elle doit r\xc3\xa9duire les distances qui freinent l'int\xc3\xa9gration. elle doit donner \xc3\xa0 ses entreprises un march\xc3\xa9 plus accessible et \xc3\xa0 sa jeunesse un continent plus ouvert.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>un ciel africain unique n'est pas seulement un projet d'aviation. c'est un projet d'int\xc3\xa9gration, de d\xc3\xa9veloppement et de souverainet\xc3\xa9. c'est dans cet esprit que le togo est fier d'accueillir cette convention.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>je souhaite plein succ\xc3\xa8s \xc3\xa0 vos travaux. et je d\xc3\xa9clare ouverte la convention et exposition africaines du transport a\xc3\xa9rien 2026.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>je vous remercie de votre aimable attention.</em>&nbsp;\xc2\xbb</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 16 17:54:27 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account adiel@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:54:29 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:64992: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:54:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13278310&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2FsZXMuZXhlY0BkaXZlcmVzb3VyY2VzLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632497 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2FsZXMuZXhlY0BkaXZlcmVzb3VyY2VzLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:55:22 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:65161: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:55:33 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:65191: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 173.62.197.50
country_id: 6252001
description:
2026-06-16 17:56:18 dovecot_plain authenticator failed for H=pool-173-62-197-50.phlapa.fios.verizon.net (ey59n5ehpwvy3pxl3f) [173.62.197.50]:52915: 535 Incorrect authentication data (set_id=admin@togocarrierebetons.com)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 16 17:55:31 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account adiel@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:55:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000747&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYWxleC5rYW1AZGl2ZXJlc291cmNlcy5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632546 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YWxleC5rYW1AZGl2ZXJlc291cmNlcy5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>la capitale togolaise vibre, depuis le 15 juin dernier, au rythme de la premi\xc3\xa8re convention et exposition africaines du transport a\xc3\xa9rien. c\xe2\x80\x99est le pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9, champion du march\xc3\xa9 unique du transport a\xc3\xa9rien africain (mutaa), qui a officiellement ouvert les travaux de cet \xc3\xa9v\xc3\xa9nement, qui r\xc3\xa9unit le gratin de l\xe2\x80\x99aviation civile mais \xc3\xa9galement plusieurs personnalit\xc3\xa9s de premier plan, telles que le pr\xc3\xa9sident rwandais paul kagam\xc3\xa9, l\xe2\x80\x99ancien pr\xc3\xa9sident nig\xc3\xa9rian olusegun obasanjo, les ministres des transports africains, sans oublier les repr\xc3\xa9sentants des instances continentales et internationales de l\xe2\x80\x99aviation civile.&nbsp;</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>retour, dans les lignes qui suivent, sur l\xe2\x80\x99essentiel du propos du champion de la mutaa.&nbsp;</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>\xc2\xab&nbsp;(\xe2\x80\xa6) honorables invit\xc3\xa9s,</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>distingu\xc3\xa9s participants.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>permettez-moi avant de prononcer mon discours, de renouveler mes remerciements au pr\xc3\xa9sident paul kagam\xc3\xa9, pour avoir accept\xc3\xa9 d'honorer de sa pr\xc3\xa9sence l'\xc3\xa9v\xc3\xa9nement que nous vivons aujourd'hui. le pr\xc3\xa9sident kagam\xc3\xa9 a assur\xc3\xa9 la pr\xc3\xa9sidence de la conf\xc3\xa9rence des chefs d'etat et de gouvernement de l'union africaine en 2018 et il a eu un mandat r\xc3\xa9ussi, un mandat fructueux, il a initi\xc3\xa9 beaucoup de r\xc3\xa9formes, il a ouvert beaucoup de chantiers et le mutaa est un des nombreux fruits de ses r\xc3\xa9formes ainsi que la zlecaf, etc.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31282,\"width\":\"611px\",\"height\":\"auto\",\"aspectratio\":\"1.2978610400270387\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/f401f844-47ba-4a70-8242-5d8fe594564c-1024x789.jpg\" alt=\"\" class=\"wp-image-31282\" style=\"aspect-ratio:1.2978610400270387;width:611px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong><em>mesdames et messieurs,</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>parler du ciel africain, ce n'est pas seulement parler de routes a\xc3\xa9riennes, de compagnies, d'a\xc3\xa9roports ou de r\xc3\xa9gulation. c'est parler de la mani\xc3\xa8re dont l'afrique se relie \xc3\xa0 elle-m\xc3\xaame. c'est donc parler de mobilit\xc3\xa9, de commerce, de comp\xc3\xa9titivit\xc3\xa9 et d'int\xc3\xa9gration.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>depuis plusieurs ann\xc3\xa9es, notre continent a fait un choix clair&nbsp;: celui de l'int\xc3\xa9gration. nous l'avons fait avec le march\xc3\xa9 unique du transport a\xc3\xa9rien africain, avec la zone de libre-\xc3\xa9change continentale africaine, avec l'agenda 2063.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>mais on l'a dit et r\xc3\xa9p\xc3\xa9t\xc3\xa9, l'int\xc3\xa9gration ne se mesure pas seulement aux textes adopt\xc3\xa9s. elle se mesure aux r\xc3\xa9sultats visibles&nbsp;: des routes ouvertes, des co\xc3\xbbts r\xc3\xa9duits, des d\xc3\xa9lais raccourcis, des \xc3\xa9changes facilit\xc3\xa9s.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>le th\xc3\xa8me retenu porte donc une ambition essentielle. mais il porte sur une exigence&nbsp;: faire du ciel africain un espace plus ouvert, plus accessible, plus comp\xc3\xa9titif et plus utile \xc3\xa0 la transformation de nos \xc3\xa9conomies.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>pour le togo, accueillir cette convention n'est pas seulement un honneur. c'est un engagement. car notre pays a fait le choix de se positionner comme une plateforme commerciale et logistique r\xc3\xa9gionale. cette ambition n'a de sens que si elle contribue \xc3\xa0 une ambition plus large&nbsp;: celle d'une afrique qui se relie davantage \xc3\xa0 elle-m\xc3\xaame pour mieux se transformer.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>c'est pourquoi je voudrais partager avec vous quatre convictions sur le sujet.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31306,\"width\":\"588px\",\"height\":\"auto\",\"aspectratio\":\"1.499330655957162\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/024389f4-36d5-478c-babe-6fe09c920d64-1024x683.jpg\" alt=\"\" class=\"wp-image-31306\" style=\"aspect-ratio:1.499330655957162;width:588px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong><em>la premi\xc3\xa8re conviction est que le ciel unique africain doit passer de l'engagement politique \xc3\xa0 la r\xc3\xa9alit\xc3\xa9 op\xc3\xa9rationnelle.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>l'afrique a donc fait le choix de l'int\xc3\xa9gration. ce choix se justifie, parce qu'aucun de nos pays, pris isol\xc3\xa9ment, ne dispose de toute la taille critique requise pour r\xc3\xa9pondre seul aux d\xc3\xa9fis de la transformation \xc3\xa9conomique.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>mais l'int\xc3\xa9gration ne devient r\xc3\xa9elle que lorsqu'elle produit des effets concrets&nbsp;: des villes mieux reli\xc3\xa9es, des routes plus nombreuses, des co\xc3\xbbts plus faibles et des \xc3\xa9changes plus fluides.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>on l'a dit aujourd'hui encore, m\xc3\xaame si c'est de moins en moins vrai, il reste parfois plus simple de relier une capitale africaine \xc3\xa0 une capitale ext\xc3\xa9rieure au continent que de relier deux capitales africaines entre elles. ce constat r\xc3\xa9v\xc3\xa8le une fragmentation profonde de notre espace \xc3\xa9conomique.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>le march\xc3\xa9 unique du transport a\xc3\xa9rien africain doit donc entrer dans une phase plus concr\xc3\xa8te. il faut aligner les accords de services a\xc3\xa9riens, faciliter l'ouverture effective des routes, mieux utiliser les droits de trafic et d\xc3\xa9velopper des corridors prioritaires.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>la connectivit\xc3\xa9 ne se d\xc3\xa9cr\xc3\xa8te pas. elle se construit par des d\xc3\xa9cisions pr\xc3\xa9cises, des engagements suivis mais aussi par une coordination r\xc3\xa9guli\xc3\xa8re entre les \xc3\x89tats, les r\xc3\xa9gulateurs, les compagnies, les a\xc3\xa9roports et les communaut\xc3\xa9s \xc3\xa9conomiques r\xc3\xa9gionales.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>ma deuxi\xc3\xa8me conviction est que la connectivit\xc3\xa9 a\xc3\xa9rienne ne sera utile que si elle devient plus accessible et plus comp\xc3\xa9titive.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>ouvrir le ciel africain est n\xc3\xa9cessaire. mais un ciel ouvert peut rester, dans les faits, difficile d'acc\xc3\xa8s si les billets d'avion demeurent trop chers, les formalit\xc3\xa9s restent trop lourdes, les visas sont trop complexes ; alors la connectivit\xc3\xa9 existe sur le papier, mais elle ne transforme pas suffisamment la r\xc3\xa9alit\xc3\xa9.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31281,\"width\":\"602px\",\"height\":\"auto\",\"aspectratio\":\"1.3438656134386562\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/06de7101-2b5e-44af-83e8-5c172b3cbb26-1024x762.jpg\" alt=\"\" class=\"wp-image-31281\" style=\"aspect-ratio:1.3438656134386562;width:602px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>un billet trop cher, on l'a dit, n'est pas seulement une contrainte pour le passager. c'est une barri\xc3\xa8re pour l'entrepreneur, pour le tourisme, pour les \xc3\xa9tudiants, pour les familles, pour les commer\xc3\xa7ants. c'est, au fond, une barri\xc3\xa8re \xc3\xa0 l'int\xc3\xa9gration africaine elle-m\xc3\xaame.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>nous devons donc trouver un meilleur \xc3\xa9quilibre entre la n\xc3\xa9cessit\xc3\xa9 de financer les infrastructures et l'objectif de d\xc3\xa9velopper le march\xc3\xa9.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>les exigences de s\xc3\xbbret\xc3\xa9, de s\xc3\xa9curit\xc3\xa9 et de qualit\xc3\xa9 doivent rester \xc3\xa9lev\xc3\xa9es. mais les taxes, frais et charges doivent \xc3\xaatre plus transparents, plus pr\xc3\xa9visibles et mieux pens\xc3\xa9s \xc3\xa0 l'\xc3\xa9chelle continentale.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>la m\xc3\xaame logique vaut pour la facilitation. les visas, les formalit\xc3\xa9s d'entr\xc3\xa9e, la digitalisation des proc\xc3\xa9dures, la gestion du fret et l'application des standards internationaux ne sont pas de simples sujets administratifs. ce sont des instruments d'int\xc3\xa9gration.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>ma troisi\xc3\xa8me conviction est que le transport a\xc3\xa9rien doit \xc3\xaatre mis au service de la transformation productive du continent.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>nous parlons souvent de l'aviation \xc3\xa0 travers le transport des passagers. mais l'aviation est aussi une infrastructure \xc3\xa9conomique. elle peut soutenir l'agriculture, l'industrie, la sant\xc3\xa9, le commerce num\xc3\xa9rique, les exportations \xc3\xa0 forte valeur ajout\xc3\xa9e et les cha\xc3\xaenes de valeur r\xc3\xa9gionales.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>le fret a\xc3\xa9rien doit donc occuper une place plus importante dans nos strat\xc3\xa9gies logistiques. c'est ici que le lien avec la zone de libre-\xc3\xa9change continentale africaine est essentiel.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>la zlecaf ne produira pas tous ses effets uniquement par la r\xc3\xa9duction des droits de douane. elle aura besoin de routes, de corridors, de plateformes logistiques, de proc\xc3\xa9dures efficaces et d'une capacit\xc3\xa9 r\xc3\xa9elle \xc3\xa0 faire circuler les biens entre nos \xc3\xa9conomies.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>le transport a\xc3\xa9rien doit donc \xc3\xaatre pens\xc3\xa9 comme une composante d'un syst\xc3\xa8me plus large. il ne s'agit pas d'opposer l'air, la route, la mer et le rail. il s'agit de les articuler autour de corridors \xc3\xa9conomiques coh\xc3\xa9rents. pour l'afrique, l'enjeu est donc de transformer la connectivit\xc3\xa9 en comp\xc3\xa9titivit\xc3\xa9.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31307,\"width\":\"632px\",\"height\":\"auto\",\"aspectratio\":\"1.499330655957162\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/a8bf9a4d-1eb9-40d0-b1b3-d0ebb2766d76-1024x683.jpg\" alt=\"\" class=\"wp-image-31307\" style=\"aspect-ratio:1.499330655957162;width:632px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong><em>ma quatri\xc3\xa8me conviction est que l'afrique doit construire une base a\xc3\xa9ronautique plus solide, plus innovante et plus durable.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>une aviation africaine comp\xc3\xa9titive doit reposer sur un \xc3\xa9cosyst\xc3\xa8me robuste. elle suppose des a\xc3\xa9roports modernes, des compagnies solides, des capacit\xc3\xa9s de maintenance, des services d'assistance au sol efficaces, des syst\xc3\xa8mes num\xc3\xa9riques fiables et des cadres r\xc3\xa9glementaires clairs.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>nous devons regarder l'aviation comme une fili\xc3\xa8re productive. elle peut cr\xc3\xa9er des emplois qualifi\xc3\xa9s, d\xc3\xa9velopper des savoir-faire techniques, attirer des investissements et offrir \xc3\xa0 notre jeunesse des perspectives dans des m\xc3\xa9tiers d'avenir. la souverainet\xc3\xa9 a\xc3\xa9ronautique ne se construira pas seulement avec des infrastructures. elle se construira aussi avec des comp\xc3\xa9tences.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>cette ambition suppose de mieux pr\xc3\xa9parer les projets et d'anticiper \xc3\xa0 l'avance nos besoins futurs. elle suppose aussi d'int\xc3\xa9grer la durabilit\xc3\xa9 d\xc3\xa8s le d\xc3\xa9part&nbsp;: modernisation des op\xc3\xa9rations, r\xc3\xa9silience des infrastructures et exigences environnementales.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>la convention qui s'ouvre aujourd'hui \xc3\xa0 lom\xc3\xa9 doit \xc3\xaatre un moment d'acc\xc3\xa9l\xc3\xa9ration. elle doit permettre d'avancer sur le march\xc3\xa9 unique du transport a\xc3\xa9rien africain.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>au-del\xc3\xa0 des livrables techniques, cette rencontre doit porter un message politique clair&nbsp;: l'afrique doit mieux se relier \xc3\xa0 elle-m\xc3\xaame pour mieux se transformer. elle doit r\xc3\xa9duire les distances qui freinent l'int\xc3\xa9gration. elle doit donner \xc3\xa0 ses entreprises un march\xc3\xa9 plus accessible et \xc3\xa0 sa jeunesse un continent plus ouvert.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image -->\n<figure class=\"wp-block-image\"><img alt=\"\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>un ciel africain unique n'est pas seulement un projet d'aviation. c'est un projet d'int\xc3\xa9gration, de d\xc3\xa9veloppement et de souverainet\xc3\xa9. c'est dans cet esprit que le togo est fier d'accueillir cette convention.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>je souhaite plein succ\xc3\xa8s \xc3\xa0 vos travaux. et je d\xc3\xa9clare ouverte la convention et exposition africaines du transport a\xc3\xa9rien 2026.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>je vous remercie de votre aimable attention.</em>&nbsp;\xc2\xbb</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:56:33 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:65396: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:17:56:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:17:56:38 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-16 17:56:34 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:65391: 535 Incorrect authentication data (set_id=adiel@cafe.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.94
country_id: 2635167
description:
[2026-06-16 17:56:44 +0000] info [cpaneld] 5.230.153.94 NEW vejjghdd:VrA4ANJWZiCaasZZ address=5.230.153.94,app=cpaneld,creator=vejjghdd,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>la capitale togolaise vibre, depuis le 15 juin dernier, au rythme de la premi\xc3\xa8re convention et exposition africaines du transport a\xc3\xa9rien. c\xe2\x80\x99est le pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9, champion du march\xc3\xa9 unique du transport a\xc3\xa9rien africain (mutaa), qui a officiellement ouvert les travaux de cet \xc3\xa9v\xc3\xa9nement, qui r\xc3\xa9unit le gratin de l\xe2\x80\x99aviation civile mais \xc3\xa9galement plusieurs personnalit\xc3\xa9s de premier plan, telles que le pr\xc3\xa9sident rwandais paul kagam\xc3\xa9, l\xe2\x80\x99ancien pr\xc3\xa9sident nig\xc3\xa9rian olusegun obasanjo, les ministres des transports africains, sans oublier les repr\xc3\xa9sentants des instances continentales et internationales de l\xe2\x80\x99aviation civile.&nbsp;</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>retour, dans les lignes qui suivent, sur l\xe2\x80\x99essentiel du propos du champion de la mutaa.&nbsp;</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>\xc2\xab&nbsp;(\xe2\x80\xa6) honorables invit\xc3\xa9s,</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>distingu\xc3\xa9s participants.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>permettez-moi avant de prononcer mon discours, de renouveler mes remerciements au pr\xc3\xa9sident paul kagam\xc3\xa9, pour avoir accept\xc3\xa9 d'honorer de sa pr\xc3\xa9sence l'\xc3\xa9v\xc3\xa9nement que nous vivons aujourd'hui. le pr\xc3\xa9sident kagam\xc3\xa9 a assur\xc3\xa9 la pr\xc3\xa9sidence de la conf\xc3\xa9rence des chefs d'etat et de gouvernement de l'union africaine en 2018 et il a eu un mandat r\xc3\xa9ussi, un mandat fructueux, il a initi\xc3\xa9 beaucoup de r\xc3\xa9formes, il a ouvert beaucoup de chantiers et le mutaa est un des nombreux fruits de ses r\xc3\xa9formes ainsi que la zlecaf, etc.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31282,\"width\":\"611px\",\"height\":\"auto\",\"aspectratio\":\"1.2978610400270387\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/f401f844-47ba-4a70-8242-5d8fe594564c-1024x789.jpg\" alt=\"\" class=\"wp-image-31282\" style=\"aspect-ratio:1.2978610400270387;width:611px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong><em>mesdames et messieurs,</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>parler du ciel africain, ce n'est pas seulement parler de routes a\xc3\xa9riennes, de compagnies, d'a\xc3\xa9roports ou de r\xc3\xa9gulation. c'est parler de la mani\xc3\xa8re dont l'afrique se relie \xc3\xa0 elle-m\xc3\xaame. c'est donc parler de mobilit\xc3\xa9, de commerce, de comp\xc3\xa9titivit\xc3\xa9 et d'int\xc3\xa9gration.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>depuis plusieurs ann\xc3\xa9es, notre continent a fait un choix clair&nbsp;: celui de l'int\xc3\xa9gration. nous l'avons fait avec le march\xc3\xa9 unique du transport a\xc3\xa9rien africain, avec la zone de libre-\xc3\xa9change continentale africaine, avec l'agenda 2063.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>mais on l'a dit et r\xc3\xa9p\xc3\xa9t\xc3\xa9, l'int\xc3\xa9gration ne se mesure pas seulement aux textes adopt\xc3\xa9s. elle se mesure aux r\xc3\xa9sultats visibles&nbsp;: des routes ouvertes, des co\xc3\xbbts r\xc3\xa9duits, des d\xc3\xa9lais raccourcis, des \xc3\xa9changes facilit\xc3\xa9s.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>le th\xc3\xa8me retenu porte donc une ambition essentielle. mais il porte sur une exigence&nbsp;: faire du ciel africain un espace plus ouvert, plus accessible, plus comp\xc3\xa9titif et plus utile \xc3\xa0 la transformation de nos \xc3\xa9conomies.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>pour le togo, accueillir cette convention n'est pas seulement un honneur. c'est un engagement. car notre pays a fait le choix de se positionner comme une plateforme commerciale et logistique r\xc3\xa9gionale. cette ambition n'a de sens que si elle contribue \xc3\xa0 une ambition plus large&nbsp;: celle d'une afrique qui se relie davantage \xc3\xa0 elle-m\xc3\xaame pour mieux se transformer.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>c'est pourquoi je voudrais partager avec vous quatre convictions sur le sujet.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31306,\"width\":\"588px\",\"height\":\"auto\",\"aspectratio\":\"1.499330655957162\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/024389f4-36d5-478c-babe-6fe09c920d64-1024x683.jpg\" alt=\"\" class=\"wp-image-31306\" style=\"aspect-ratio:1.499330655957162;width:588px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong><em>la premi\xc3\xa8re conviction est que le ciel unique africain doit passer de l'engagement politique \xc3\xa0 la r\xc3\xa9alit\xc3\xa9 op\xc3\xa9rationnelle.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>l'afrique a donc fait le choix de l'int\xc3\xa9gration. ce choix se justifie, parce qu'aucun de nos pays, pris isol\xc3\xa9ment, ne dispose de toute la taille critique requise pour r\xc3\xa9pondre seul aux d\xc3\xa9fis de la transformation \xc3\xa9conomique.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>mais l'int\xc3\xa9gration ne devient r\xc3\xa9elle que lorsqu'elle produit des effets concrets&nbsp;: des villes mieux reli\xc3\xa9es, des routes plus nombreuses, des co\xc3\xbbts plus faibles et des \xc3\xa9changes plus fluides.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>on l'a dit aujourd'hui encore, m\xc3\xaame si c'est de moins en moins vrai, il reste parfois plus simple de relier une capitale africaine \xc3\xa0 une capitale ext\xc3\xa9rieure au continent que de relier deux capitales africaines entre elles. ce constat r\xc3\xa9v\xc3\xa8le une fragmentation profonde de notre espace \xc3\xa9conomique.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>le march\xc3\xa9 unique du transport a\xc3\xa9rien africain doit donc entrer dans une phase plus concr\xc3\xa8te. il faut aligner les accords de services a\xc3\xa9riens, faciliter l'ouverture effective des routes, mieux utiliser les droits de trafic et d\xc3\xa9velopper des corridors prioritaires.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>la connectivit\xc3\xa9 ne se d\xc3\xa9cr\xc3\xa8te pas. elle se construit par des d\xc3\xa9cisions pr\xc3\xa9cises, des engagements suivis mais aussi par une coordination r\xc3\xa9guli\xc3\xa8re entre les \xc3\x89tats, les r\xc3\xa9gulateurs, les compagnies, les a\xc3\xa9roports et les communaut\xc3\xa9s \xc3\xa9conomiques r\xc3\xa9gionales.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>ma deuxi\xc3\xa8me conviction est que la connectivit\xc3\xa9 a\xc3\xa9rienne ne sera utile que si elle devient plus accessible et plus comp\xc3\xa9titive.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>ouvrir le ciel africain est n\xc3\xa9cessaire. mais un ciel ouvert peut rester, dans les faits, difficile d'acc\xc3\xa8s si les billets d'avion demeurent trop chers, les formalit\xc3\xa9s restent trop lourdes, les visas sont trop complexes ; alors la connectivit\xc3\xa9 existe sur le papier, mais elle ne transforme pas suffisamment la r\xc3\xa9alit\xc3\xa9.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31281,\"width\":\"602px\",\"height\":\"auto\",\"aspectratio\":\"1.3438656134386562\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/06de7101-2b5e-44af-83e8-5c172b3cbb26-1024x762.jpg\" alt=\"\" class=\"wp-image-31281\" style=\"aspect-ratio:1.3438656134386562;width:602px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>un billet trop cher, on l'a dit, n'est pas seulement une contrainte pour le passager. c'est une barri\xc3\xa8re pour l'entrepreneur, pour le tourisme, pour les \xc3\xa9tudiants, pour les familles, pour les commer\xc3\xa7ants. c'est, au fond, une barri\xc3\xa8re \xc3\xa0 l'int\xc3\xa9gration africaine elle-m\xc3\xaame.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>nous devons donc trouver un meilleur \xc3\xa9quilibre entre la n\xc3\xa9cessit\xc3\xa9 de financer les infrastructures et l'objectif de d\xc3\xa9velopper le march\xc3\xa9.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>les exigences de s\xc3\xbbret\xc3\xa9, de s\xc3\xa9curit\xc3\xa9 et de qualit\xc3\xa9 doivent rester \xc3\xa9lev\xc3\xa9es. mais les taxes, frais et charges doivent \xc3\xaatre plus transparents, plus pr\xc3\xa9visibles et mieux pens\xc3\xa9s \xc3\xa0 l'\xc3\xa9chelle continentale.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>la m\xc3\xaame logique vaut pour la facilitation. les visas, les formalit\xc3\xa9s d'entr\xc3\xa9e, la digitalisation des proc\xc3\xa9dures, la gestion du fret et l'application des standards internationaux ne sont pas de simples sujets administratifs. ce sont des instruments d'int\xc3\xa9gration.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>ma troisi\xc3\xa8me conviction est que le transport a\xc3\xa9rien doit \xc3\xaatre mis au service de la transformation productive du continent.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>nous parlons souvent de l'aviation \xc3\xa0 travers le transport des passagers. mais l'aviation est aussi une infrastructure \xc3\xa9conomique. elle peut soutenir l'agriculture, l'industrie, la sant\xc3\xa9, le commerce num\xc3\xa9rique, les exportations \xc3\xa0 forte valeur ajout\xc3\xa9e et les cha\xc3\xaenes de valeur r\xc3\xa9gionales.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>le fret a\xc3\xa9rien doit donc occuper une place plus importante dans nos strat\xc3\xa9gies logistiques. c'est ici que le lien avec la zone de libre-\xc3\xa9change continentale africaine est essentiel.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>la zlecaf ne produira pas tous ses effets uniquement par la r\xc3\xa9duction des droits de douane. elle aura besoin de routes, de corridors, de plateformes logistiques, de proc\xc3\xa9dures efficaces et d'une capacit\xc3\xa9 r\xc3\xa9elle \xc3\xa0 faire circuler les biens entre nos \xc3\xa9conomies.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>le transport a\xc3\xa9rien doit donc \xc3\xaatre pens\xc3\xa9 comme une composante d'un syst\xc3\xa8me plus large. il ne s'agit pas d'opposer l'air, la route, la mer et le rail. il s'agit de les articuler autour de corridors \xc3\xa9conomiques coh\xc3\xa9rents. pour l'afrique, l'enjeu est donc de transformer la connectivit\xc3\xa9 en comp\xc3\xa9titivit\xc3\xa9.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31307,\"width\":\"632px\",\"height\":\"auto\",\"aspectratio\":\"1.499330655957162\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/a8bf9a4d-1eb9-40d0-b1b3-d0ebb2766d76-1024x683.jpg\" alt=\"\" class=\"wp-image-31307\" style=\"aspect-ratio:1.499330655957162;width:632px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong><em>ma quatri\xc3\xa8me conviction est que l'afrique doit construire une base a\xc3\xa9ronautique plus solide, plus innovante et plus durable.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>une aviation africaine comp\xc3\xa9titive doit reposer sur un \xc3\xa9cosyst\xc3\xa8me robuste. elle suppose des a\xc3\xa9roports modernes, des compagnies solides, des capacit\xc3\xa9s de maintenance, des services d'assistance au sol efficaces, des syst\xc3\xa8mes num\xc3\xa9riques fiables et des cadres r\xc3\xa9glementaires clairs.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>nous devons regarder l'aviation comme une fili\xc3\xa8re productive. elle peut cr\xc3\xa9er des emplois qualifi\xc3\xa9s, d\xc3\xa9velopper des savoir-faire techniques, attirer des investissements et offrir \xc3\xa0 notre jeunesse des perspectives dans des m\xc3\xa9tiers d'avenir. la souverainet\xc3\xa9 a\xc3\xa9ronautique ne se construira pas seulement avec des infrastructures. elle se construira aussi avec des comp\xc3\xa9tences.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>cette ambition suppose de mieux pr\xc3\xa9parer les projets et d'anticiper \xc3\xa0 l'avance nos besoins futurs. elle suppose aussi d'int\xc3\xa9grer la durabilit\xc3\xa9 d\xc3\xa8s le d\xc3\xa9part&nbsp;: modernisation des op\xc3\xa9rations, r\xc3\xa9silience des infrastructures et exigences environnementales.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>la convention qui s'ouvre aujourd'hui \xc3\xa0 lom\xc3\xa9 doit \xc3\xaatre un moment d'acc\xc3\xa9l\xc3\xa9ration. elle doit permettre d'avancer sur le march\xc3\xa9 unique du transport a\xc3\xa9rien africain.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>au-del\xc3\xa0 des livrables techniques, cette rencontre doit porter un message politique clair&nbsp;: l'afrique doit mieux se relier \xc3\xa0 elle-m\xc3\xaame pour mieux se transformer. elle doit r\xc3\xa9duire les distances qui freinent l'int\xc3\xa9gration. elle doit donner \xc3\xa0 ses entreprises un march\xc3\xa9 plus accessible et \xc3\xa0 sa jeunesse un continent plus ouvert.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31308,\"width\":\"603px\",\"height\":\"auto\",\"aspectratio\":\"1.2061383828412455\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/22c11431-3be6-4621-8cca-a58da8189a6d-1024x849.jpg\" alt=\"\" class=\"wp-image-31308\" style=\"aspect-ratio:1.2061383828412455;width:603px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>un ciel africain unique n'est pas seulement un projet d'aviation. c'est un projet d'int\xc3\xa9gration, de d\xc3\xa9veloppement et de souverainet\xc3\xa9. c'est dans cet esprit que le togo est fier d'accueillir cette convention.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>je souhaite plein succ\xc3\xa8s \xc3\xa0 vos travaux. et je d\xc3\xa9clare ouverte la convention et exposition africaines du transport a\xc3\xa9rien 2026.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>je vous remercie de votre aimable attention.</em>&nbsp;\xc2\xbb</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 16 17:56:31 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account adiel@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:17:56:36 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.245
country_id: 3017382
description:
[2026-06-16 17:56:44 +0000] info [cpaneld] 5.231.255.245 NEW newistm:_i2cAet3YQMgYonf address=5.231.255.245,app=cpaneld,creator=newistm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:17:56:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:57:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9859732&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY3MxQHVsdGltYXRlLW9jZWFuLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632626 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y3MxQHVsdGltYXRlLW9jZWFuLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:58:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10054804&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY3MxQHVsdGltYXRlLW9jZWFuLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632685 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y3MxQHVsdGltYXRlLW9jZWFuLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.84.48.190
country_id: 3017382
description:
[2026-06-16 17:57:29 +0000] info [cpaneld] 89.84.48.190 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.37.151.130
country_id: 3469034
description:
[2026-06-16 17:57:30 +0000] info [cpaneld] 191.37.151.130 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.0.235.23
country_id: 3865483
description:
[2026-06-16 17:57:35 +0000] info [cpaneld] 131.0.235.23 - digilixtg "GET /login/?login_only=1&user=digilixtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user digilixtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.187.114.132
country_id: 1562822
description:
[2026-06-16 17:57:39 +0000] info [cpaneld] 14.187.114.132 - digili "GET /login/?login_only=1&user=digili&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user digili (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.86.20.76
country_id: 3469034
description:
[2026-06-16 17:57:49 +0000] info [cpaneld] 177.86.20.76 - di "GET /login/?login_only=1&user=di&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user di (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.8.54.83
country_id: 3625428
description:
[2026-06-16 17:57:50 +0000] info [cpaneld] 200.8.54.83 - dig "GET /login/?login_only=1&user=dig&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dig (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.84.34.233
country_id: 3895114
description:
[2026-06-16 17:57:53 +0000] info [cpaneld] 138.84.34.233 - di "GET /login/?login_only=1&user=di&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user di (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 88.201.168.23
country_id: 2017370
description:
[2026-06-16 17:57:32 +0000] info [cpaneld] 88.201.168.23 - digilix "GET /login/?login_only=1&user=digilix&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user digilix (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.110.171.231
country_id: 953987
description:
[2026-06-16 17:57:44 +0000] info [cpaneld] 152.110.171.231 - digi "GET /login/?login_only=1&user=digi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user digi (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:17:57:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131864&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdmVua2F0ZXN3YXJhbi5yYUB0cmFnc2VuZ2luZWVyaW5nLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632676 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dmVua2F0ZXN3YXJhbi5yYUB0cmFnc2VuZ2luZWVyaW5nLmNvbQ==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.56
country_id: 2635167
domain: sahamtg.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/sahamtg/public_html/.913457005616430.php||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.89.140
country_id: 6252001
description:
[2026-06-16 17:58:48 +0000] info [cpaneld] 173.211.89.140 NEW doufelg:7ToBsGtQ6AyuXP4C address=173.211.89.140,app=cpaneld,creator=doufelg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.34
country_id: 2635167
description:
[2026-06-16 17:58:46 +0000] info [cpaneld] 5.230.153.34 NEW doufelg:gZ8iy3LZpdEGOjB_ address=5.230.153.34,app=cpaneld,creator=doufelg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.62.223
country_id: 6252001
description:
[2026-06-16 17:58:30 +0000] info [cpaneld] 64.44.62.223 NEW wwayrzpl:bXRsGSAz5cOXsFNZ address=64.44.62.223,app=cpaneld,creator=wwayrzpl,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:17:59:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816721&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaW5mb0ByZWcucnU%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632750 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aW5mb0ByZWcucnU=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.168
country_id: 3017382
description:
[2026-06-16 17:59:17 +0000] info [cpaneld] 5.231.64.168 NEW newistm:xN8UD5VC_ahEKOA4 address=5.231.64.168,app=cpaneld,creator=newistm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.20
country_id: 2635167
description:
[2026-06-16 17:58:30 +0000] info [cpaneld] 5.230.133.20 NEW wwayrzpl:jteBz63FLgbMf8eb address=5.230.133.20,app=cpaneld,creator=wwayrzpl,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 217.26.178.14
country_id: 3175395
description:
Jun 16 17:59:55 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 217.26.178.14 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.235.1.22
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/966A8666-Modifier-copie-768x512.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/06/966A8666-Modifier-copie-300x200.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/966A8666-Modifier-copie-1024x683.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/06/966A8666-Modifier-copie-1536x1024.webp 1536w, http:/togodailynews.tg/wp-content/uploads/2026/06/966A8666-Modifier-copie-2048x1366.webp 2048w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.240
country_id: 2635167
description:
[2026-06-16 18:01:04 +0000] info [cpaneld] 5.230.133.240 NEW mbyqtkiw:DPaWCt4fOxrnAplH address=5.230.133.240,app=cpaneld,creator=mbyqtkiw,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 107.175.5.140
country_id: 6252001
domain: anrtogo.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/lfzqsiwv/public_html/.403521286001453.php||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.25.80.3
country_id: 3932488
domain: www.wellcity.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.wellcity.tg/derou.tg/public/en HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 134.195.83.16
country_id: 6252001
domain: anrtogo.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/lfzqsiwv/public_html/.285769605713448.php||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 47.236.147.255
country_id: 1880251
description:
Jun 16 18:01:52 ns5 pure-ftpd[1207846]: (?@47.236.147.255) [INFO] New connection from 47.236.147.255


plugin: modsec
rule: 77350026
name: IM360 WAF: Track suspicious Spring Framework requests
abuser: 196.168.112.78
country_id: 2363686
domain: cfmi.tg
description:
IM360 WAF: Track suspicious Spring Framework requests||RSV:8.18||T:APACHE||MVN:ARGS:classe||MV:seconde||


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 47.236.147.255
country_id: 1880251
description:
Jun 16 18:01:57 ns5 pure-ftpd[1207846]: (?@47.236.147.255) [WARNING] Authentication failed for user [kisiniov@msn.com]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:18:01:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10314343&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dcml6YWxkeS5iQG5lYi5hZQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781632902 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cml6YWxkeS5iQG5lYi5hZQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.65.239.60
country_id: 3469034
description:
Jun 16 18:02:51 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.65.239.60 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:03:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9607021&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633027 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:03:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10121110&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633029 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.239.208.250
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/09/Photo-RRR-600x375-1.jpg 600w, http:/togodailynews.tg/wp-content/uploads/2024/09/Photo-RRR-600x375-1-300x188.jpg 300w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.11.191.142
country_id: 3469034
description:
Jun 16 18:04:49 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.11.191.142 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.58
country_id: 6252001
description:
205.169.39.58 - - [16/Jun/2026:18:04:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13066853&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc21leGhxYWRtaW5AYWxwaGFuZXR3b3Jrcy5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633093 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c21leGhxYWRtaW5AYWxwaGFuZXR3b3Jrcy5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.58


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.53
country_id: 6252001
description:
205.169.39.53 - - [16/Jun/2026:18:05:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7300503&pdata=http%253A%252F%252Fmisstogo.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633115 HTTP/1.1" 302 0 misstogo.tg "http://misstogo.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.53


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 172.59.211.144
country_id: 6252001
description:
2026-06-16 18:05:20 dovecot_plain authenticator failed for H=(ctkhad2asdelfqtdlzjspfclb0jp) [172.59.211.144]:45531: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.109.126.89
country_id: 3865483
description:
[2026-06-16 18:05:31 +0000] info [cpaneld] 190.109.126.89 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.196.88.210
country_id: 3658394
description:
[2026-06-16 18:05:37 +0000] info [cpaneld] 181.196.88.210 - belalitg "GET /login/?login_only=1&user=belalitg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user belalitg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.219.240.116
country_id: 3469034
description:
[2026-06-16 18:05:42 +0000] info [cpaneld] 138.219.240.116 - bela "GET /login/?login_only=1&user=bela&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bela (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.189.95.242
country_id: 3996063
description:
[2026-06-16 18:05:33 +0000] info [cpaneld] 187.189.95.242 - belali "GET /login/?login_only=1&user=belali&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user belali (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.253.102.31
country_id: 1210997
description:
[2026-06-16 18:05:52 +0000] info [cpaneld] 103.253.102.31 - be "GET /login/?login_only=1&user=be&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user be (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 213.204.219.147
country_id: 2661886
description:
[2026-06-16 18:05:49 +0000] info [cpaneld] 213.204.219.147 - be "GET /login/?login_only=1&user=be&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user be (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.119.252.12
country_id: 3996063
description:
[2026-06-16 18:05:38 +0000] info [cpaneld] 201.119.252.12 - belalitg "GET /login/?login_only=1&user=belalitg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user belalitg (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 18:05:42 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:51632: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.131.219.213
country_id: 3996063
description:
[2026-06-16 18:05:44 +0000] info [cpaneld] 187.131.219.213 - bela "GET /login/?login_only=1&user=bela&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bela (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.186.130.194
country_id: 1562822
description:
[2026-06-16 18:05:45 +0000] info [cpaneld] 14.186.130.194 - bel "GET /login/?login_only=1&user=bel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.26.155.3
country_id: 2017370
description:
[2026-06-16 18:05:47 +0000] info [cpaneld] 95.26.155.3 - bel "GET /login/?login_only=1&user=bel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 142.51.229.10
country_id: 6251999
description:
[2026-06-16 18:05:39 +0000] info [cpaneld] 142.51.229.10 - belal "GET /login/?login_only=1&user=belal&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user belal (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.78.232.5
country_id: 2017370
description:
[2026-06-16 18:05:41 +0000] info [cpaneld] 91.78.232.5 - belal "GET /login/?login_only=1&user=belal&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user belal (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:18:05:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6776984&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633155 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 18.194.232.106
country_id: 2921044
domain: fbafrica.com
description:
IM360 WAF: Bad file extension||RSV:8.18||T:APACHE||MVN:REQUEST_FILENAME||MV:/.env.backup||User:arsjawjaz||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 18.194.232.106
country_id: 2921044
domain: fbafrica.com
description:
IM360 WAF: Bad file extension||RSV:8.18||T:APACHE||MVN:REQUEST_FILENAME||MV:/phpinfo.php.bak||User:arsjawjaz||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 77.83.39.59
country_id: 690791
description:
2026-06-16 18:06:31 H=([77.83.39.59]) [77.83.39.59]:60935 F=<jgracia@microcreditoscehe.com> rejected RCPT <contact@sthandling-aero.tg>: The mail server could not deliver mail to contact@sthandling-aero.tg.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 51.20.254.252
country_id: 2661886
description:
2026-06-16 18:06:31 dovecot_plain authenticator failed for H=ec2-51-20-254-252.eu-north-1.compute.amazonaws.com (EC2AMAZ-D5OQTH4.eu-north-1.compute.internal) [51.20.254.252]:63629: 535 Incorrect authentication data (set_id=dossa.amoussou@arse.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.78
country_id: 3017382
description:
[2026-06-16 18:07:04 +0000] info [cpaneld] 5.231.255.78 NEW sahamtg:4IeySZ1WLI75XbFt address=5.231.255.78,app=cpaneld,creator=sahamtg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:06:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935973&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYXJkYWhhbi5kYW1hckB1cnNhc2hpcHlhcmQuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633188 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YXJkYWhhbi5kYW1hckB1cnNhc2hpcHlhcmQuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 71.241.154.145
country_id: 6252001
description:
2026-06-16 18:08:19 dovecot_plain authenticator failed for H=static-71-241-154-145.nycmny.fios.verizon.net (clstqa656zg2n3arklr7bywrig) [71.241.154.145]:4360: 535 Incorrect authentication data (set_id=mesys@mesyscom.com)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:07:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9856924&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2V5bWEuYnVydGVrQHVyc2FzaGlweWFyZC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633245 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2V5bWEuYnVydGVrQHVyc2FzaGlweWFyZC5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:18:08:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6853572&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbnVydWxpenphLnRhaGlyQGV4YWN0YW5hbHl0aWNhbC5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633279 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bnVydWxpenphLnRhaGlyQGV4YWN0YW5hbHl0aWNhbC5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:18:08:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9988199&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633287 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:08:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9725586&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633301 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:18:08:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6776681&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dcml6YWxkeS5iQG5lYi5hZQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633306 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cml6YWxkeS5iQG5lYi5hZQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:09:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10183527&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdXJldGltQGFyZXMuZ2xvYmFs&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633389 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dXJldGltQGFyZXMuZ2xvYmFs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:10:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9593710&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633398 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:18:09:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9922407&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633388 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:18:10:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10183829&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYV9la2VyQG9yZ2FuaWtraW15YS5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633402 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YV9la2VyQG9yZ2FuaWtraW15YS5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:18:11:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10393491&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Db3psZW0udGFtYW5AdXJzYXNoaXB5YXJkLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633467 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=b3psZW0udGFtYW5AdXJzYXNoaXB5YXJkLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.83.16
country_id: 6252001
description:
[2026-06-16 18:10:44 +0000] info [cpaneld] 134.195.83.16 NEW zykoahbv:3HTP_pkewLqlVmT4 address=134.195.83.16,app=cpaneld,creator=zykoahbv,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.215
country_id: 2635167
domain: delxia.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/zykoahbv/public_html/.926461333554564.php||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.37.146.138
country_id: 3508796
description:
[2026-06-16 18:11:24 +0000] info [cpaneld] 181.37.146.138 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.60.66.10
country_id: 3895114
description:
[2026-06-16 18:11:27 +0000] info [cpaneld] 179.60.66.10 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 121.121.56.40
country_id: 1733045
description:
[2026-06-16 18:11:27 +0000] info [cpaneld] 121.121.56.40 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.115.118.241
country_id: 2542007
description:
[2026-06-16 18:11:37 +0000] info [cpaneld] 196.115.118.241 - las "GET /login/?login_only=1&user=las&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user las (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.0.186.37
country_id: 3865483
description:
[2026-06-16 18:11:40 +0000] info [cpaneld] 168.0.186.37 - la "GET /login/?login_only=1&user=la&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user la (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.108.19.78
country_id: 2750405
description:
[2026-06-16 18:11:29 +0000] info [cpaneld] 62.108.19.78 - lasnb "GET /login/?login_only=1&user=lasnb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasnb (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.173.93.213
country_id: 2017370
description:
[2026-06-16 18:11:31 +0000] info [cpaneld] 79.173.93.213 - lasnbtg "GET /login/?login_only=1&user=lasnbtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasnbtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.100.109.122
country_id: 3658394
description:
[2026-06-16 18:11:34 +0000] info [cpaneld] 157.100.109.122 - lasn "GET /login/?login_only=1&user=lasn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.10.226.56
country_id: 3469034
description:
[2026-06-16 18:11:39 +0000] info [cpaneld] 177.10.226.56 - las "GET /login/?login_only=1&user=las&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user las (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.178.98.162
country_id: 2361809
description:
[2026-06-16 18:11:39 +0000] info [cpaneld] 102.178.98.162 - la "GET /login/?login_only=1&user=la&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user la (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.186.160.69
country_id: 1733045
description:
[2026-06-16 18:11:29 +0000] info [cpaneld] 103.186.160.69 - lasnb "GET /login/?login_only=1&user=lasnb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasnb (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 1.40.167.56
country_id: 2077456
description:
[2026-06-16 18:11:34 +0000] info [cpaneld] 1.40.167.56 - lasn "GET /login/?login_only=1&user=lasn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.219.146.197
country_id: 3469034
description:
[2026-06-16 18:11:33 +0000] info [cpaneld] 186.219.146.197 - lasnbtg "GET /login/?login_only=1&user=lasnbtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasnbtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.253.101.26
country_id: 2017370
description:
[2026-06-16 18:11:37 +0000] info [cpaneld] 185.253.101.26 - las "GET /login/?login_only=1&user=las&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user las (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.222.60.149
country_id: 99237
description:
[2026-06-16 18:11:38 +0000] info [cpaneld] 176.222.60.149 - las "GET /login/?login_only=1&user=las&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user las (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.82.150.43
country_id: 3625428
description:
[2026-06-16 18:11:30 +0000] info [cpaneld] 200.82.150.43 - lasnbcom "GET /login/?login_only=1&user=lasnbcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasnbcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.75.107.178
country_id: 3469034
description:
[2026-06-16 18:11:34 +0000] info [cpaneld] 177.75.107.178 - lasn "GET /login/?login_only=1&user=lasn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.71.225.99
country_id: 285570
description:
[2026-06-16 18:11:36 +0000] info [cpaneld] 188.71.225.99 - lasn "GET /login/?login_only=1&user=lasn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.121.8.10
country_id: 3437598
description:
[2026-06-16 18:11:42 +0000] info [cpaneld] 181.121.8.10 - la "GET /login/?login_only=1&user=la&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user la (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 18:12:53 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:57612: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:12:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9528514&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYV9lc21lckBvcmdhbmlra2lteWEuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633573 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YV9lc21lckBvcmdhbmlra2lteWEuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:18:13:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001050&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc21leGhxYWRtaW5AYWxwaGFuZXR3b3Jrcy5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633581 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c21leGhxYWRtaW5AYWxwaGFuZXR3b3Jrcy5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:13:45 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:13:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:13:46 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:13:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:18:14:52 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7182737&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaW5mb0BuZWIuYWU%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633691 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aW5mb0BuZWIuYWU=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.185
country_id: 2635167
description:
[2026-06-16 18:14:55 +0000] info [cpaneld] 5.230.153.185 - camaegdtomgo "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:15:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10262375&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaW5mb0BuZWIuYWU%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633711 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aW5mb0BuZWIuYWU=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.46
country_id: 2635167
description:
[2026-06-16 18:14:45 +0000] info [cpaneld] 5.230.153.46 - nadngfzn "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.158.203
country_id: 6252001
description:
2026-06-16 18:16:03 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.158.203]:63147: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:18:15:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10196371&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYWxleGxlZUBqbGFtYXJpbmUuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633755 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YWxleGxlZUBqbGFtYXJpbmUuY29t" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 193.29.139.143
country_id: 2750405
description:
2026-06-16 18:16:19 dovecot_plain authenticator failed for H=(mail.inger.tg) [193.29.139.143]:53534: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.11
country_id: 6252001
description:
205.169.39.11 - - [16/Jun/2026:18:15:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7248750&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdG9maWNpYWxAbWlsbGVubml1bWJpbS5jby5teg%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633732 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dG9maWNpYWxAbWlsbGVubml1bWJpbS5jby5teg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.11


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.116
country_id: 6252001
description:
2026-06-16 18:15:48 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.152.116]:60191: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 3.106.214.88
country_id: 2077456
description:
2026-06-16 18:17:05 dovecot_plain authenticator failed for H=ec2-3-106-214-88.ap-southeast-2.compute.amazonaws.com (mail.inger.tg) [3.106.214.88]:35252: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.163.209.12
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/pourquoi-la-rupture-entre-afreximbank-et-fitch-revele-un-fosse-plus-profond/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:16:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9923996&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaW5mb0BuZWIuYWU%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633788 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aW5mb0BuZWIuYWU=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.11
country_id: 6252001
description:
205.169.39.11 - - [16/Jun/2026:18:16:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9661794&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdG9maWNpYWxAbWlsbGVubml1bWJpbS5jby5teg%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633800 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dG9maWNpYWxAbWlsbGVubml1bWJpbS5jby5teg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.11


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 193.29.139.143
country_id: 2750405
description:
2026-06-16 18:16:25 dovecot_login authenticator failed for H=(mail.inger.tg) [193.29.139.143]:53534: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 116.97.106.137
country_id: 1562822
description:
116.97.106.137 - - [16/Jun/2026:18:17:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13157785&pdata=https%253A%252F%252Ftogodailynews.tg%252Fproduction-halieutique-plus-de-50-des-pecheurs-sollicitent-volontairement-leur-permis-de-peche%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633840 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/production-halieutique-plus-de-50-des-pecheurs-sollicitent-volontairement-leur-permis-de-peche/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:116.97.106.137


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.52
country_id: 1819730
description:
2026-06-16 18:17:23 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.163.52]:53592: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:17:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6865815&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZ3V2ZW5saWtAYXJlcy5jb20udHI%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633851 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Z3V2ZW5saWtAYXJlcy5jb20udHI=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.157.43
country_id: 1861060
description:
2026-06-16 18:17:44 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.157.43]:16780: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 51.254.128.106
country_id: 3017382
description:
2026-06-16 18:17:58 dovecot_plain authenticator failed for H=vps-88264150.vps.ovh.net (mail.inger.tg) [51.254.128.106]:37008: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.195.186
country_id: 6252001
description:
2026-06-16 18:19:12 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.195.186]:41119: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 35.183.126.173
country_id: 6251999
description:
2026-06-16 18:18:43 dovecot_plain authenticator failed for H=ec2-35-183-126-173.ca-central-1.compute.amazonaws.com (mail.inger.tg) [35.183.126.173]:51860: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:18:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13136030&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633933 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 31.76.82.3
country_id: 6252001
description:
2026-06-16 18:18:57 dovecot_plain authenticator failed for H=(mail.inger.tg) [31.76.82.3]:36174: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:18:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6579049&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633936 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.5.104.160
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/02/ouida-300x116.webp HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:19:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9857895&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZ3V2ZW5saWtAYXJlcy5jb20udHI%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633981 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Z3V2ZW5saWtAYXJlcy5jb20udHI=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 31.77.196.103
country_id: 6252001
description:
2026-06-16 18:19:56 dovecot_plain authenticator failed for H=(mail.inger.tg) [31.77.196.103]:40764: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.80.215.68
country_id: 3017382
description:
2026-06-16 18:20:08 dovecot_plain authenticator failed for H=(mail.inger.tg) [45.80.215.68]:44280: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.247.34.170
country_id: 953987
domain: www.arse.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.arse.tg/wp-content/uploads/2019/04/D\xc3\xa9cret_2019-021_Condition-Modalit\xc3\xa9s-Licence_EnR.pdf HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.165.131
country_id: 6252001
description:
2026-06-16 18:20:37 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.165.131]:11148: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 18.143.177.226
country_id: 1880251
description:
2026-06-16 18:20:52 dovecot_plain authenticator failed for H=ec2-18-143-177-226.ap-southeast-1.compute.amazonaws.com (mail.inger.tg) [18.143.177.226]:6116: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.161.22
country_id: 1861060
description:
2026-06-16 18:21:57 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.161.22]:35744: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 35.181.74.227
country_id: 3017382
description:
2026-06-16 18:22:11 dovecot_plain authenticator failed for H=ec2-35-181-74-227.eu-west-3.compute.amazonaws.com (mail.inger.tg) [35.181.74.227]:55704: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:21:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10250086&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcHVyY2hhc2VAc2luY29hdXRvbWF0aW9uLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634109 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cHVyY2hhc2VAc2luY29hdXRvbWF0aW9uLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.61.130.187
country_id: 6252001
description:
[2026-06-16 18:22:43 +0000] info [cpaneld] 45.61.130.187 - stephane "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user stephane (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.18.252
country_id: 6251999
description:
[2026-06-16 18:23:01 +0000] info [cpaneld] 195.63.18.252 - ucaouuttg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucaouuttg (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.100
country_id: 1880251
description:
2026-06-16 18:23:04 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.100]:16670: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:22:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816723&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.53
country_id: 6252001
description:
205.169.39.53 - - [16/Jun/2026:18:22:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9750425&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dbm9yZXBseUBtZXNzZWZyYW5rZnVydGNvbnRhY3QuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634154 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bm9yZXBseUBtZXNzZWZyYW5rZnVydGNvbnRhY3QuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.53


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 212.154.252.34
country_id: 1522867
description:
2026-06-16 18:22:46 H=([212.154.252.34]) [212.154.252.34]:54273 F=<John@4452.com> rejected RCPT <egnassingbe@golfe3.mairie.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 144.31.30.69
country_id: 2750405
description:
2026-06-16 18:23:17 dovecot_plain authenticator failed for H=(inger.tg) [144.31.30.69]:59540: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.165.131
country_id: 6252001
description:
2026-06-16 18:22:29 dovecot_plain authenticator failed for H=(inger.tg) [104.28.165.131]:50853: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:18:22:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7182237&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 89.232.193.249
country_id: 2017370
description:
Jun 16 18:23:58 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 89.232.193.249 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.158.97
country_id: 1861060
description:
2026-06-16 18:24:12 dovecot_plain authenticator failed for H=(inger.tg) [104.28.158.97]:38239: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 212.36.194.131
country_id: 272103
description:
Jun 16 18:23:45 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 212.36.194.131 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 13.231.185.74
country_id: 1861060
description:
2026-06-16 18:23:47 dovecot_plain authenticator failed for H=ec2-13-231-185-74.ap-northeast-1.compute.amazonaws.com (inger.tg) [13.231.185.74]:43294: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 89.232.193.249
country_id: 2017370
description:
2026-06-16 18:24:00 dovecot_plain authenticator failed for H=(jsj3alc6hhj4xe6w2r47c86mk5h87a) [89.232.193.249]:51183: 535 Incorrect authentication data (set_id=arse@arse.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 144.31.30.69
country_id: 2750405
description:
2026-06-16 18:23:23 dovecot_login authenticator failed for H=(inger.tg) [144.31.30.69]:59540: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 111.61.177.189
country_id: 1814991
description:
Jun 16 18:23:39 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 111.61.177.189 has been locked due to Imunify RBL


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 149.56.150.124
country_id: 6251999
domain: matosshop.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/?add-to-cart=2154||QS:add-to-cart=2154||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 72.56.59.200
country_id: 6252001
description:
2026-06-16 18:24:57 dovecot_plain authenticator failed for H=(inger.tg) [72.56.59.200]:41271: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 149.56.150.124
country_id: 6251999
domain: matosshop.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/?add-to-cart=2114||QS:add-to-cart=2114||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.137.228.58
country_id: 2921044
description:
2026-06-16 18:24:42 dovecot_plain authenticator failed for H=188-137-228-58.germany-1.vps.ac (inger.tg) [188.137.228.58]:59692: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 31.76.91.24
country_id: 1861060
description:
2026-06-16 18:26:17 dovecot_plain authenticator failed for H=(inger.tg) [31.76.91.24]:50678: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 51.44.16.107
country_id: 3017382
description:
2026-06-16 18:25:24 dovecot_plain authenticator failed for H=ec2-51-44-16-107.eu-west-3.compute.amazonaws.com (inger.tg) [51.44.16.107]:16830: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 153.121.73.175
country_id: 1861060
description:
2026-06-16 18:25:42 dovecot_plain authenticator failed for H=tk2-124-62421.vs.sakura.ne.jp (inger.tg) [153.121.73.175]:4644: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.213.195.198
country_id: 1269750
description:
Jun 16 18:26:11 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.213.195.198 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.156.250
country_id: 1835841
description:
2026-06-16 18:25:59 dovecot_plain authenticator failed for H=(inger.tg) [104.28.156.250]:17789: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 31.76.91.24
country_id: 1861060
description:
2026-06-16 18:26:25 dovecot_login authenticator failed for H=(inger.tg) [31.76.91.24]:50678: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 3.70.72.166
country_id: 2921044
description:
2026-06-16 18:26:46 dovecot_plain authenticator failed for H=ec2-3-70-72-166.eu-central-1.compute.amazonaws.com (inger.tg) [3.70.72.166]:36448: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 61.184.128.210
country_id: 1814991
description:
Jun 16 18:26:52 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 61.184.128.210 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 61.184.128.210
country_id: 1814991
description:
2026-06-16 18:26:54 dovecot_login authenticator failed for H=(OCI-160.154.84.190.aviso.ci) [61.184.128.210]:32975: 535 Incorrect authentication data (set_id=pascaljoseph.panassi@sodigaz.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.97.140
country_id: 99237
description:
2026-06-16 18:27:20 dovecot_plain authenticator failed for H=(inger.tg) [130.94.97.140]:31530: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.213.195.198
country_id: 1269750
description:
Jun 16 18:26:25 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.213.195.198 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.53.165.220
country_id: 3469034
description:
Jun 16 18:26:41 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.53.165.220 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 15.223.121.250
country_id: 6251999
description:
2026-06-16 18:26:58 dovecot_plain authenticator failed for H=ec2-15-223-121-250.ca-central-1.compute.amazonaws.com (inger.tg) [15.223.121.250]:44834: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 213.139.9.168
country_id: 3017382
description:
213.139.9.168 - - [16/Jun/2026:18:27:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816723&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148 HTTP/1.1" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:213.139.9.168


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.1
country_id: 6252001
description:
205.169.39.1 - - [16/Jun/2026:18:27:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10340504&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaGlyb3l1a2ktdGFuYWthQG1lcy5jby5qcA%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634444 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aGlyb3l1a2ktdGFuYWthQG1lcy5jby5qcA==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.1


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:27:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.97.140
country_id: 99237
description:
2026-06-16 18:27:27 dovecot_login authenticator failed for H=(inger.tg) [130.94.97.140]:31530: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:27:34 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 3.27.234.120
country_id: 2077456
description:
2026-06-16 18:27:39 dovecot_plain authenticator failed for H=ec2-3-27-234-120.ap-southeast-2.compute.amazonaws.com (inger.tg) [3.27.234.120]:14562: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:18:27:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6580883&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdG9maWNpYWxAbWlsbGVubml1bWJpbS5jby5teg%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634476 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dG9maWNpYWxAbWlsbGVubml1bWJpbS5jby5teg==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 198.105.123.142
country_id: 298795
description:
2026-06-16 18:28:11 dovecot_plain authenticator failed for H=(inger.tg) [198.105.123.142]:46340: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 170.64.252.169
country_id: 2077456
description:
170.64.252.169 - - [16/Jun/2026:18:28:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7182237&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148 HTTP/1.1" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.252.169


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:27:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:27:39 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:18:27:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9739207&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaGlyb3l1a2ktdGFuYWthQG1lcy5jby5qcA%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634471 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aGlyb3l1a2ktdGFuYWthQG1lcy5jby5qcA==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:28:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9988199&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633287 HTTP/2.0" 404 159 afrique-distribution.net "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 YaBrowser/25.12.3.655.10 YaApp_iOS/2512.3 YaApp_iOS_Browser/2512.3 Safari/604.1 SA/3 Version/18.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.165.54
country_id: 6252001
description:
2026-06-16 18:28:54 dovecot_plain authenticator failed for H=(inger.tg) [104.28.165.54]:18947: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 86.16.74.122
country_id: 2635167
description:
86.16.74.122 - - [16/Jun/2026:18:28:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9858202&pdata=http%253A%252F%252Fafrique-distribution.net%252Fau%252Fbto%252Fhsbc.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634535 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/au/bto/hsbc.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:86.16.74.122


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 91.134.43.151
country_id: 3017382
description:
91.134.43.151 - - [16/Jun/2026:18:28:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9725586&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633301 HTTP/1.1" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:91.134.43.151


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 170.64.252.169
country_id: 2077456
description:
170.64.252.169 - - [16/Jun/2026:18:28:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9725586&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633301 HTTP/1.1" 404 159 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.4 Safari/605.1.15" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.252.169


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 37.120.233.54
country_id: 2635167
description:
37.120.233.54 - - [16/Jun/2026:18:28:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7432553&pdata=https%253A%252F%252Fafrique-distribution.net%252Fpi%252Fbto%252Fhsbc.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634533 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/pi/bto/hsbc.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Brave/1 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.120.233.54


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.156.122
country_id: 1880251
description:
2026-06-16 18:28:24 dovecot_plain authenticator failed for H=(inger.tg) [104.28.156.122]:59262: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 132.145.80.230
country_id: 1835841
description:
2026-06-16 18:28:40 dovecot_plain authenticator failed for H=(inger.tg) [132.145.80.230]:40038: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 57.129.137.254
country_id: 2635167
description:
57.129.137.254 - - [16/Jun/2026:18:28:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12935831&pdata=https%253A%252F%252Fafrique-distribution.net%252Fch%252Fbto%252Fhsbc-otp.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634527 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/ch/bto/hsbc-otp.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:57.129.137.254


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 38.57.2.170
country_id: 6252001
description:
38.57.2.170 - - [16/Jun/2026:18:29:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051669&pdata=http%253A%252F%252Fafrique-distribution.net&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634536 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:38.57.2.170


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 193.36.118.233
country_id: 2635167
description:
193.36.118.233 - - [16/Jun/2026:18:28:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9804394&pdata=https%253A%252F%252Fafrique-distribution.net%252Fau%252Fbto%252Fhsbc-otp.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634532 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/au/bto/hsbc-otp.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:193.36.118.233


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 13.54.156.73
country_id: 2077456
description:
2026-06-16 18:29:10 dovecot_plain authenticator failed for H=ec2-13-54-156-73.ap-southeast-2.compute.amazonaws.com (inger.tg) [13.54.156.73]:64136: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 5.188.190.252
country_id: 298795
description:
2026-06-16 18:29:24 dovecot_plain authenticator failed for H=(inger.tg) [5.188.190.252]:44300: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 213.139.9.168
country_id: 3017382
description:
213.139.9.168 - - [16/Jun/2026:18:29:26 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816723&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:213.139.9.168


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 213.139.9.168
country_id: 3017382
description:
213.139.9.168 - - [16/Jun/2026:18:29:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816723&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:213.139.9.168


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 41.207.188.29
country_id: 2363686
description:
41.207.188.29 - - [16/Jun/2026:18:30:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6998118&pdata=https%253A%252F%252Frelanceinfo.tg%252F%253Fp%253D1871&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634608 HTTP/2.0" 302 0 relanceinfo.tg "https://relanceinfo.tg/?p=1871" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:41.207.188.29


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 79.127.224.14
country_id: 2802361
description:
Jun 16 18:30:21 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 79.127.224.14 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.157.14
country_id: 1861060
description:
2026-06-16 18:30:02 dovecot_plain authenticator failed for H=(inger.tg) [104.28.157.14]:32310: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 79.127.224.14
country_id: 2802361
description:
2026-06-16 18:30:16 dovecot_plain authenticator failed for H=(inger.tg) [79.127.224.14]:49672: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 78.148.66.96
country_id: 2635167
description:
78.148.66.96 - - [16/Jun/2026:18:30:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7236463&pdata=http%253A%252F%252Fafrique-distribution.net%252Fgh%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634637 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/gh/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:78.148.66.96


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 195.132.35.238
country_id: 3017382
description:
195.132.35.238 - - [16/Jun/2026:18:30:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6840977&pdata=https%253A%252F%252Fafrique-distribution.net%252Fpi%252Fbto%252Fhsbc.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634644 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/pi/bto/hsbc.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.132.35.238


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.170.114.148
country_id: 2363686
domain: vitrinenews.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.18||T:APACHE||MV:/wp-json/wp/v2/users/2?context=view&_fields=id%2Cname&_locale=user||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 93.71.103.137
country_id: 3175395
description:
93.71.103.137 - - [16/Jun/2026:18:31:18 +0000] "GET /favicon.ico HTTP/1.1" 415 587 afrique-distribution.net "http://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051669&pdata=http%253A%252F%252Fafrique-distribution.net&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634536" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:93.71.103.137


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 79.127.224.14
country_id: 2802361
description:
2026-06-16 18:30:23 dovecot_login authenticator failed for H=(inger.tg) [79.127.224.14]:49672: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:18:30:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10132329&pdata=https%253A%252F%252Fafrique-distribution.net%252Fch%252Fbto%252Fhsbc-otp.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634630 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/ch/bto/hsbc-otp.html" "Mozilla/5.0 (Linux; arm_64; Android 14; TECNO KL5n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7680.115 YaBrowser/26.4.4.115.00 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:18:30:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13002643&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DeWFtYWRhQG1zci5jby5qcA%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634652 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=eWFtYWRhQG1zci5jby5qcA==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 38.57.2.170
country_id: 6252001
description:
38.57.2.170 - - [16/Jun/2026:18:30:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051669&pdata=http%253A%252F%252Fafrique-distribution.net&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634536 HTTP/1.1" 404 159 afrique-distribution.net "http://afrique-distribution.net/" "Mozilla/5.0 (iPhone; CPU iPhone OS 6_0 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko)                     Version/6.0 Mobile/10A5376e Safari/8536.25" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:38.57.2.170


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 57.131.13.108
country_id: 3175395
description:
57.131.13.108 - - [16/Jun/2026:18:30:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10196841&pdata=http%253A%252F%252Fafrique-distribution.net%252Flite.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634624 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/lite.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:57.131.13.108


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 44.242.50.106
country_id: 6252001
description:
2026-06-16 18:30:31 dovecot_plain authenticator failed for H=ec2-44-242-50-106.us-west-2.compute.amazonaws.com (inger.tg) [44.242.50.106]:47626: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 37.120.233.54
country_id: 2635167
description:
37.120.233.54 - - [16/Jun/2026:18:30:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9881240&pdata=https%253A%252F%252Fafrique-distribution.net%252Fpi%252Fbto%252Fhsbc.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634641 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/pi/bto/hsbc.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Brave/1 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.120.233.54


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 86.16.74.122
country_id: 2635167
description:
86.16.74.122 - - [16/Jun/2026:18:30:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9858202&pdata=http%253A%252F%252Fafrique-distribution.net%252Fau%252Fbto%252Fhsbc.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634535 HTTP/1.1" 404 159 afrique-distribution.net "http://afrique-distribution.net/au/bto/hsbc.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 YaBrowser/26.3.7.341.10 SA/3 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:86.16.74.122


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 23.141.52.196
country_id: 6252001
description:
2026-06-16 18:31:01 dovecot_plain authenticator failed for H=(inger.tg) [23.141.52.196]:45620: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 93.71.103.137
country_id: 3175395
description:
93.71.103.137 - - [16/Jun/2026:18:31:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051669&pdata=http%253A%252F%252Fafrique-distribution.net&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634536 HTTP/1.1" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:93.71.103.137


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 57.129.137.254
country_id: 2635167
description:
57.129.137.254 - - [16/Jun/2026:18:30:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7181458&pdata=https%253A%252F%252Fafrique-distribution.net%252Fch%252Fbto%252Fhsbc-otp.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634633 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/ch/bto/hsbc-otp.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:57.129.137.254


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:18:31:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10132329&pdata=https%253A%252F%252Fafrique-distribution.net%252Fch%252Fbto%252Fhsbc-otp.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634630 HTTP/2.0" 404 159 afrique-distribution.net "https://afrique-distribution.net/ch/bto/hsbc-otp.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 Safari Line/26.6.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 89.223.95.63
country_id: 1819730
description:
2026-06-16 18:32:10 dovecot_plain authenticator failed for H=(inger.tg) [89.223.95.63]:54688: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.197.65.227
country_id: 6252001
description:
[2026-06-16 18:31:24 +0000] info [cpaneld] 68.197.65.227 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.56.194.77
country_id: 99237
description:
[2026-06-16 18:31:32 +0000] info [cpaneld] 185.56.194.77 - sprocatg "GET /login/?login_only=1&user=sprocatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sprocatg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.222.60.164
country_id: 99237
description:
[2026-06-16 18:31:37 +0000] info [cpaneld] 176.222.60.164 - sproc "GET /login/?login_only=1&user=sproc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sproc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.110.91.136
country_id: 690791
description:
[2026-06-16 18:31:44 +0000] info [cpaneld] 109.110.91.136 - spr "GET /login/?login_only=1&user=spr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user spr (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 195.132.35.238
country_id: 3017382
description:
195.132.35.238 - - [16/Jun/2026:18:32:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6840977&pdata=https%253A%252F%252Fafrique-distribution.net%252Fpi%252Fbto%252Fhsbc.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634644 HTTP/2.0" 404 159 afrique-distribution.net "https://afrique-distribution.net/pi/bto/hsbc.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 Safari Line/26.6.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.132.35.238


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.215.106.187
country_id: 1512440
description:
[2026-06-16 18:31:28 +0000] info [cpaneld] 82.215.106.187 - sproca "GET /login/?login_only=1&user=sproca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sproca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.27.213.23
country_id: 3865483
description:
[2026-06-16 18:31:47 +0000] info [cpaneld] 181.27.213.23 - sp "GET /login/?login_only=1&user=sp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sp (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 165.140.216.198
country_id: 6252001
description:
2026-06-16 18:31:49 dovecot_plain authenticator failed for H=(inger.tg) [165.140.216.198]:60964: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 57.131.13.108
country_id: 3175395
description:
57.131.13.108 - - [16/Jun/2026:18:31:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10196841&pdata=http%253A%252F%252Fafrique-distribution.net%252Flite.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634624 HTTP/1.1" 404 159 afrique-distribution.net "http://afrique-distribution.net/lite.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 YaBrowser/26.4.1.655.10 YaApp_iOS/2604.1 YaApp_iOS_Browser/2604.1 Safari/604.1 SA/3 Version/18.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:57.131.13.108


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.8
country_id: 6252001
description:
205.169.39.8 - - [16/Jun/2026:18:32:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9934954&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DanVsaWFrYW9AZXZlcmVzdC5jb20udHc%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634729 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=anVsaWFrYW9AZXZlcmVzdC5jb20udHc=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.8


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.189.57.231
country_id: 337996
description:
[2026-06-16 18:31:25 +0000] info [cpaneld] 196.189.57.231 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.154.171.169
country_id: 3658394
description:
[2026-06-16 18:31:33 +0000] info [cpaneld] 190.154.171.169 - sproc "GET /login/?login_only=1&user=sproc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sproc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.249.161.121
country_id: 3996063
description:
[2026-06-16 18:31:42 +0000] info [cpaneld] 177.249.161.121 - sp "GET /login/?login_only=1&user=sp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.253.1.248
country_id: 2017370
description:
[2026-06-16 18:31:41 +0000] info [cpaneld] 89.253.1.248 - spro "GET /login/?login_only=1&user=spro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user spro (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.203.200.71
country_id: 2215636
description:
2026-06-16 18:31:21 dovecot_plain authenticator failed for H=(inger.tg) [102.203.200.71]:47802: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:18:31:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6384746&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DeWFtYWRhQG1zci5jby5qcA%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634686 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=eWFtYWRhQG1zci5jby5qcA==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.203.37.18
country_id: 285570
description:
[2026-06-16 18:31:28 +0000] info [cpaneld] 89.203.37.18 - sproca "GET /login/?login_only=1&user=sproca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sproca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.30.146.72
country_id: 783754
description:
[2026-06-16 18:31:30 +0000] info [cpaneld] 185.30.146.72 - sprocatg "GET /login/?login_only=1&user=sprocatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sprocatg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.255.99.225
country_id: 3469034
description:
[2026-06-16 18:31:36 +0000] info [cpaneld] 143.255.99.225 - spro "GET /login/?login_only=1&user=spro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user spro (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.128
country_id: 6252001
description:
2026-06-16 18:33:08 dovecot_plain authenticator failed for H=(inger.tg) [104.28.152.128]:24145: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:33:08 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9988199&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633287" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:33:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9988199&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633287 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 78.148.66.96
country_id: 2635167
description:
78.148.66.96 - - [16/Jun/2026:18:32:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12805783&pdata=http%253A%252F%252Fafrique-distribution.net%252Fgh%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634625 HTTP/1.1" 404 159 afrique-distribution.net "http://afrique-distribution.net/gh/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15A372 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:78.148.66.96


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.3
country_id: 6252001
description:
205.169.39.3 - - [16/Jun/2026:18:32:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9751492&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2hyaXMuaHVhbmdAZXZlcmVzdC5jb20udHc%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634739 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2hyaXMuaHVhbmdAZXZlcmVzdC5jb20udHc=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.3


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 5.196.51.152
country_id: 3017382
description:
2026-06-16 18:32:55 dovecot_plain authenticator failed for H=ip152.ip-5-196-51.eu (inger.tg) [5.196.51.152]:48696: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 15.223.121.250
country_id: 6251999
description:
2026-06-16 18:34:10 dovecot_plain authenticator failed for H=ec2-15-223-121-250.ca-central-1.compute.amazonaws.com (inger.tg) [15.223.121.250]:16676: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 93.71.103.137
country_id: 3175395
description:
93.71.103.137 - - [16/Jun/2026:18:34:18 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816723&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:93.71.103.137


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:33:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051972&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634806 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 87.120.93.242
country_id: 2921044
description:
2026-06-16 18:33:42 dovecot_plain authenticator failed for H=(inger.tg) [87.120.93.242]:60266: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 170.64.252.169
country_id: 2077456
description:
170.64.252.169 - - [16/Jun/2026:18:33:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7182237&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.252.169


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 91.134.43.151
country_id: 3017382
description:
91.134.43.151 - - [16/Jun/2026:18:34:07 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9725586&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633301" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:91.134.43.151


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 93.71.103.137
country_id: 3175395
description:
93.71.103.137 - - [16/Jun/2026:18:34:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816723&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:93.71.103.137


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:33:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6985672&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634804 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 43.198.153.243
country_id: 1819730
description:
2026-06-16 18:33:29 dovecot_plain authenticator failed for H=ec2-43-198-153-243.ap-east-1.compute.amazonaws.com (inger.tg) [43.198.153.243]:40166: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 170.64.252.169
country_id: 2077456
description:
170.64.252.169 - - [16/Jun/2026:18:34:00 +0000] "GET /favicon.ico HTTP/1.1" 415 587 afrique-distribution.net "http://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7182237&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.252.169


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 91.134.43.151
country_id: 3017382
description:
91.134.43.151 - - [16/Jun/2026:18:34:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9725586&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633301 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:91.134.43.151


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 176.112.111.58
country_id: 2017370
description:
176.112.111.58 - - [16/Jun/2026:18:35:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9856667&pdata=https%253A%252F%252Fwebmail.stephane.free.netmaster.tg%252F%253Flocale%253Dnb&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634900 HTTP/2.0" 302 0 webmail.stephane.free.netmaster.tg "https://webmail.stephane.free.netmaster.tg/?locale=nb" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:176.112.111.58


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 213.139.9.168
country_id: 3017382
description:
213.139.9.168 - - [16/Jun/2026:18:35:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816723&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148 HTTP/2.0" 404 159 afrique-distribution.net "http://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816723&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 Safari Line/26.6.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:213.139.9.168


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - equipesmq@inger.tg [06/16/2026:18:36:10 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: equipesmq@inger.tg


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 93.71.103.137
country_id: 3175395
description:
93.71.103.137 - - [16/Jun/2026:18:35:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816723&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148 HTTP/1.1" 404 561 afrique-distribution.net "http://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816723&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:93.71.103.137


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 44.250.29.175
country_id: 6252001
domain: en.crepsad.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/68.0.3440.106 Safari/537.36||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 213.139.9.168
country_id: 3017382
description:
213.139.9.168 - - [16/Jun/2026:18:35:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816723&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148 HTTP/2.0" 404 159 afrique-distribution.net "http://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816723&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634148" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:213.139.9.168


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:35:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6593385&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbGltd2VpbHVuQHBsdHNjaWVudGlmaWMuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634927 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bGltd2VpbHVuQHBsdHNjaWVudGlmaWMuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:37:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131347&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYWNjQHVsdGltYXRlLW9jZWFuLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635021 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YWNjQHVsdGltYXRlLW9jZWFuLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:37:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6580588&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635033 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:18:36:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119571&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dbm9yZXBseUBtZXNzZWZyYW5rZnVydGNvbnRhY3QuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781634996 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bm9yZXBseUBtZXNzZWZyYW5rZnVydGNvbnRhY3QuY29t" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:37:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10262885&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbXVoc2luYS5rQHRlY2hvcmJpdC5uZXQ%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635047 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bXVoc2luYS5rQHRlY2hvcmJpdC5uZXQ=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:18:37:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7313299&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635042 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 37.159.23.70
country_id: 3175395
description:
37.159.23.70 - - [16/Jun/2026:18:39:06 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9725586&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633301" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.159.23.70


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.126.56
country_id: 2363686
description:
[2026-06-16 18:38:39 +0000] info [webmaild] 196.168.126.56 - kakue@togointerim.net "POST /cpsess5648906035/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.118.10] != Current IP Address [196.168.126.56]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:18:38:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9595285&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2hyaXMuaHVhbmdAZXZlcmVzdC5jb20udHc%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635124 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2hyaXMuaHVhbmdAZXZlcmVzdC5jb20udHc=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 37.159.23.70
country_id: 3175395
description:
37.159.23.70 - - [16/Jun/2026:18:39:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9725586&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633301 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.159.23.70


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 91.134.43.151
country_id: 3017382
description:
91.134.43.151 - - [16/Jun/2026:18:39:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9725586&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633301 HTTP/1.1" 404 561 afrique-distribution.net "http://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9725586&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781633301" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:91.134.43.151


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:18:40:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6920042&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZWRva3VtZW50aUBsbXQubHY%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635232 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZWRva3VtZW50aUBsbXQubHY=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.6.6.8
country_id: 3625428
description:
[2026-06-16 18:41:56 +0000] info [cpaneld] 190.6.6.8 - togocarrierebeton "GET /login/?login_only=1&user=togocarrierebeton&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierebeton (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 161.142.144.16
country_id: 1733045
description:
[2026-06-16 18:41:58 +0000] info [cpaneld] 161.142.144.16 - togocarrierebeto "GET /login/?login_only=1&user=togocarrierebeto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierebeto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.104.177.111
country_id: 2589581
description:
[2026-06-16 18:42:02 +0000] info [cpaneld] 105.104.177.111 - togoagro "GET /login/?login_only=1&user=togoagro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoagro (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.24.133.17
country_id: 3658394
description:
[2026-06-16 18:42:20 +0000] info [cpaneld] 200.24.133.17 - togocarr "GET /login/?login_only=1&user=togocarr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.231.159.159
country_id: 285570
description:
[2026-06-16 18:41:53 +0000] info [cpaneld] 37.231.159.159 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 148.227.87.89
country_id: 3469034
description:
[2026-06-16 18:42:00 +0000] info [cpaneld] 148.227.87.89 - togocarrieretsevi "GET /login/?login_only=1&user=togocarrieretsevi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsevi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.229.73.79
country_id: 3686110
description:
[2026-06-16 18:42:06 +0000] info [cpaneld] 45.229.73.79 - togofar "GET /login/?login_only=1&user=togofar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.117.160.180
country_id: 3865483
description:
[2026-06-16 18:42:13 +0000] info [cpaneld] 181.117.160.180 - togocarrier "GET /login/?login_only=1&user=togocarrier&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrier (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.136.148.70
country_id: 99237
description:
[2026-06-16 18:42:17 +0000] info [cpaneld] 185.136.148.70 - togoda "GET /login/?login_only=1&user=togoda&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoda (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.44.84.142
country_id: 1522867
description:
[2026-06-16 18:42:18 +0000] info [cpaneld] 185.44.84.142 - togoat "GET /login/?login_only=1&user=togoat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.223.58.124
country_id: 953987
description:
[2026-06-16 18:42:20 +0000] info [cpaneld] 102.223.58.124 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.112.239.70
country_id: 2921044
description:
[2026-06-16 18:41:51 +0000] info [cpaneld] 95.112.239.70 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.26.52.76
country_id: 2017370
description:
[2026-06-16 18:41:43 +0000] info [cpaneld] 95.26.52.76 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.49.174.78
country_id: 3469034
description:
[2026-06-16 18:41:50 +0000] info [cpaneld] 187.49.174.78 - togoathletismetg "GET /login/?login_only=1&user=togoathletismetg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoathletismetg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.244.12.105
country_id: 3996063
description:
[2026-06-16 18:42:00 +0000] info [cpaneld] 189.244.12.105 - togointerimnet "GET /login/?login_only=1&user=togointerimnet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointerimnet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.176.109.218
country_id: 3932488
description:
[2026-06-16 18:42:04 +0000] info [cpaneld] 181.176.109.218 - togofarmtg "GET /login/?login_only=1&user=togofarmtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofarmtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.137.72.193
country_id: 294640
description:
[2026-06-16 18:42:13 +0000] info [cpaneld] 77.137.72.193 - togocarrieret "GET /login/?login_only=1&user=togocarrieret&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieret (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.27.136.94
country_id: 2017370
description:
[2026-06-16 18:41:47 +0000] info [cpaneld] 95.27.136.94 - togoagropolestg "GET /login/?login_only=1&user=togoagropolestg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoagropolestg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.22.34.36
country_id: 1605651
description:
[2026-06-16 18:41:56 +0000] info [cpaneld] 184.22.34.36 - togofeed "GET /login/?login_only=1&user=togofeed&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofeed (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.53.236.68
country_id: 3508796
description:
[2026-06-16 18:42:12 +0000] info [cpaneld] 179.53.236.68 - togomedia "GET /login/?login_only=1&user=togomedia&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togomedia (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 130.250.229.115
country_id: 3686110
description:
[2026-06-16 18:41:45 +0000] info [cpaneld] 130.250.229.115 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.131.137.161
country_id: 3658394
description:
[2026-06-16 18:41:55 +0000] info [cpaneld] 190.131.137.161 - togofeed "GET /login/?login_only=1&user=togofeed&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofeed (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.115.26.0
country_id: 2542007
description:
[2026-06-16 18:42:00 +0000] info [cpaneld] 196.115.26.0 - togomedia24tg "GET /login/?login_only=1&user=togomedia24tg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togomedia24tg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.199.66.35
country_id: 3686110
description:
[2026-06-16 18:42:06 +0000] info [cpaneld] 38.199.66.35 - togofe "GET /login/?login_only=1&user=togofe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.106.53.28
country_id: 3469034
description:
[2026-06-16 18:42:20 +0000] info [cpaneld] 187.106.53.28 - togoint "GET /login/?login_only=1&user=togoint&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoint (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.140.103.14
country_id: 3996063
description:
[2026-06-16 18:41:44 +0000] info [cpaneld] 187.140.103.14 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.142.247.97
country_id: 3996063
description:
[2026-06-16 18:41:55 +0000] info [cpaneld] 189.142.247.97 - togocarrierebeton "GET /login/?login_only=1&user=togocarrierebeton&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierebeton (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.180.181.191
country_id: 2361809
description:
[2026-06-16 18:42:01 +0000] info [cpaneld] 102.180.181.191 - togofee "GET /login/?login_only=1&user=togofee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 213.139.40.17
country_id: 248816
description:
[2026-06-16 18:42:04 +0000] info [cpaneld] 213.139.40.17 - togocarrieretsev "GET /login/?login_only=1&user=togocarrieretsev&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsev (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.24.135.156
country_id: 3658394
description:
[2026-06-16 18:42:06 +0000] info [cpaneld] 200.24.135.156 - togodailyn "GET /login/?login_only=1&user=togodailyn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodailyn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 150.107.106.166
country_id: 1282988
description:
[2026-06-16 18:42:15 +0000] info [cpaneld] 150.107.106.166 - togof "GET /login/?login_only=1&user=togof&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togof (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.156.236.147
country_id: 3508796
description:
[2026-06-16 18:41:51 +0000] info [cpaneld] 38.156.236.147 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.114.236.149
country_id: 3895114
description:
[2026-06-16 18:41:52 +0000] info [cpaneld] 191.114.236.149 - togodailynews "GET /login/?login_only=1&user=togodailynews&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodailynews (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 123.28.96.185
country_id: 1562822
description:
[2026-06-16 18:41:55 +0000] info [cpaneld] 123.28.96.185 - togointerim "GET /login/?login_only=1&user=togointerim&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointerim (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.178.51.149
country_id: 3703430
description:
[2026-06-16 18:41:57 +0000] info [cpaneld] 181.178.51.149 - togofeedtg "GET /login/?login_only=1&user=togofeedtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofeedtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.66.1.0
country_id: 3469034
description:
[2026-06-16 18:42:14 +0000] info [cpaneld] 177.66.1.0 - togof "GET /login/?login_only=1&user=togof&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togof (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.236.171.72
country_id: 3686110
description:
[2026-06-16 18:42:15 +0000] info [cpaneld] 181.236.171.72 - togofe "GET /login/?login_only=1&user=togofe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.108.0.132
country_id: 3439705
description:
[2026-06-16 18:42:22 +0000] info [cpaneld] 190.108.0.132 - togocarrier "GET /login/?login_only=1&user=togocarrier&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrier (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.205.236.127
country_id: 290557
description:
[2026-06-16 18:41:44 +0000] info [cpaneld] 176.205.236.127 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 43.246.202.71
country_id: 1210997
description:
[2026-06-16 18:41:56 +0000] info [cpaneld] 43.246.202.71 - togoagropolestg "GET /login/?login_only=1&user=togoagropolestg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoagropolestg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 88.240.182.22
country_id: 298795
description:
[2026-06-16 18:42:18 +0000] info [cpaneld] 88.240.182.22 - togocarri "GET /login/?login_only=1&user=togocarri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.43.148.180
country_id: 3895114
description:
[2026-06-16 18:41:56 +0000] info [cpaneld] 181.43.148.180 - togocarrieretsevietg "GET /login/?login_only=1&user=togocarrieretsevietg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsevietg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 59.188.166.54
country_id: 1819730
description:
[2026-06-16 18:42:04 +0000] info [cpaneld] 59.188.166.54 - togoathlet "GET /login/?login_only=1&user=togoathlet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoathlet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.231.142.0
country_id: 3469034
description:
[2026-06-16 18:42:07 +0000] info [cpaneld] 170.231.142.0 - togof "GET /login/?login_only=1&user=togof&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togof (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.189.208.162
country_id: 3996063
description:
[2026-06-16 18:42:12 +0000] info [cpaneld] 187.189.208.162 - togocarrier "GET /login/?login_only=1&user=togocarrier&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrier (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 171.250.143.233
country_id: 1562822
description:
[2026-06-16 18:42:21 +0000] info [cpaneld] 171.250.143.233 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.99.123.123
country_id: 1522867
description:
[2026-06-16 18:41:48 +0000] info [cpaneld] 37.99.123.123 - togocarrierebetons "GET /login/?login_only=1&user=togocarrierebetons&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierebetons (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.102.73.170
country_id: 3686110
description:
[2026-06-16 18:41:50 +0000] info [cpaneld] 191.102.73.170 - togocarrieretsevie "GET /login/?login_only=1&user=togocarrieretsevie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsevie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.123.216.171
country_id: 3865483
description:
[2026-06-16 18:42:00 +0000] info [cpaneld] 186.123.216.171 - togoagropole "GET /login/?login_only=1&user=togoagropole&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoagropole (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.249.161.121
country_id: 3996063
description:
[2026-06-16 18:42:01 +0000] info [cpaneld] 177.249.161.121 - togocarrierebet "GET /login/?login_only=1&user=togocarrierebet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierebet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.46.69.10
country_id: 1512440
description:
[2026-06-16 18:42:10 +0000] info [cpaneld] 95.46.69.10 - togof "GET /login/?login_only=1&user=togof&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togof (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.181.210.68
country_id: 3865483
description:
[2026-06-16 18:42:12 +0000] info [cpaneld] 168.181.210.68 - togocarrieret "GET /login/?login_only=1&user=togocarrieret&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieret (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.232.199.11
country_id: 3865483
description:
[2026-06-16 18:42:13 +0000] info [cpaneld] 181.232.199.11 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.73.63.118
country_id: 290557
description:
[2026-06-16 18:41:55 +0000] info [cpaneld] 91.73.63.118 - togofarm "GET /login/?login_only=1&user=togofarm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofarm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.63.12.224
country_id: 290291
description:
[2026-06-16 18:42:03 +0000] info [cpaneld] 109.63.12.224 - togoagropol "GET /login/?login_only=1&user=togoagropol&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoagropol (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.159.97.103
country_id: 7626844
description:
[2026-06-16 18:42:07 +0000] info [cpaneld] 186.159.97.103 - togocarriereb "GET /login/?login_only=1&user=togocarriereb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarriereb (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 116.96.77.75
country_id: 1562822
description:
[2026-06-16 18:41:52 +0000] info [cpaneld] 116.96.77.75 - togocarrierebetonstg "GET /login/?login_only=1&user=togocarrierebetonstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierebetonstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.114.38.116
country_id: 3895114
description:
[2026-06-16 18:41:50 +0000] info [cpaneld] 190.114.38.116 - togoagropole "GET /login/?login_only=1&user=togoagropole&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoagropole (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.61.204.140
country_id: 3686110
description:
[2026-06-16 18:41:53 +0000] info [cpaneld] 181.61.204.140 - togoagropol "GET /login/?login_only=1&user=togoagropol&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoagropol (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.60.66.208
country_id: 3895114
description:
[2026-06-16 18:41:53 +0000] info [cpaneld] 179.60.66.208 - togodailynews "GET /login/?login_only=1&user=togodailynews&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodailynews (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.195.79.12
country_id: 3996063
description:
[2026-06-16 18:41:54 +0000] info [cpaneld] 45.195.79.12 - togoathletis "GET /login/?login_only=1&user=togoathletis&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoathletis (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.120.147
country_id: 3865483
description:
Jun 16 18:42:01 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.120.147 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.186.151.203
country_id: 3895114
description:
[2026-06-16 18:42:01 +0000] info [cpaneld] 45.186.151.203 - togodailyne "GET /login/?login_only=1&user=togodailyne&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodailyne (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.122.57.137
country_id: 3469034
description:
[2026-06-16 18:42:04 +0000] info [cpaneld] 138.122.57.137 - togoathle "GET /login/?login_only=1&user=togoathle&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoathle (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.185.93.226
country_id: 1562822
description:
[2026-06-16 18:41:56 +0000] info [cpaneld] 113.185.93.226 - togoagropo "GET /login/?login_only=1&user=togoagropo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoagropo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.187.30.218
country_id: 272103
description:
[2026-06-16 18:42:08 +0000] info [cpaneld] 94.187.30.218 - togocarrierets "GET /login/?login_only=1&user=togocarrierets&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierets (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 93.170.101.203
country_id: 2017370
description:
[2026-06-16 18:42:13 +0000] info [cpaneld] 93.170.101.203 - togodai "GET /login/?login_only=1&user=togodai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.60.67.0
country_id: 3895114
description:
[2026-06-16 18:42:15 +0000] info [cpaneld] 179.60.67.0 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.177.124.210
country_id: 1210997
description:
[2026-06-16 18:42:15 +0000] info [cpaneld] 103.177.124.210 - togoath "GET /login/?login_only=1&user=togoath&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoath (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.16.139.213
country_id: 6252001
description:
[2026-06-16 18:42:17 +0000] info [cpaneld] 73.16.139.213 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.104.58.206
country_id: 3895114
description:
[2026-06-16 18:42:17 +0000] info [cpaneld] 186.104.58.206 - togocarriere "GET /login/?login_only=1&user=togocarriere&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarriere (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.154.100.248
country_id: 3686110
description:
[2026-06-16 18:42:20 +0000] info [cpaneld] 186.154.100.248 - togocarr "GET /login/?login_only=1&user=togocarr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.174.9.60
country_id: 3686110
description:
[2026-06-16 18:41:45 +0000] info [cpaneld] 181.174.9.60 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.112.93.35
country_id: 3658394
description:
[2026-06-16 18:41:52 +0000] info [cpaneld] 181.112.93.35 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.69.11.196
country_id: 2215636
description:
[2026-06-16 18:42:00 +0000] info [cpaneld] 102.69.11.196 - togoathlet "GET /login/?login_only=1&user=togoathlet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoathlet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.78.197.97
country_id: 3658394
description:
[2026-06-16 18:42:01 +0000] info [cpaneld] 181.78.197.97 - togointeri "GET /login/?login_only=1&user=togointeri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointeri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.228.210.74
country_id: 298795
description:
[2026-06-16 18:42:15 +0000] info [cpaneld] 109.228.210.74 - togocarrie "GET /login/?login_only=1&user=togocarrie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 154.66.167.8
country_id: 2361809
description:
[2026-06-16 18:42:22 +0000] info [cpaneld] 154.66.167.8 - togocar "GET /login/?login_only=1&user=togocar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.7.212.85
country_id: 3469034
description:
[2026-06-16 18:41:57 +0000] info [cpaneld] 45.7.212.85 - togointerim "GET /login/?login_only=1&user=togointerim&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointerim (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.123.88.134
country_id: 3865483
description:
[2026-06-16 18:42:01 +0000] info [cpaneld] 190.123.88.134 - togofeedtg "GET /login/?login_only=1&user=togofeedtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofeedtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.225.142.97
country_id: 3996063
description:
[2026-06-16 18:42:09 +0000] info [cpaneld] 189.225.142.97 - togomedia "GET /login/?login_only=1&user=togomedia&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togomedia (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.250.218.100
country_id: 2921044
description:
[2026-06-16 18:41:49 +0000] info [cpaneld] 79.250.218.100 - togocarrierebetons "GET /login/?login_only=1&user=togocarrierebetons&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierebetons (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.236.199.233
country_id: 285570
description:
[2026-06-16 18:41:45 +0000] info [cpaneld] 188.236.199.233 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.209.140.134
country_id: 3469034
description:
[2026-06-16 18:41:56 +0000] info [cpaneld] 179.209.140.134 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.141.77.209
country_id: 2017370
description:
[2026-06-16 18:42:01 +0000] info [cpaneld] 185.141.77.209 - togocarrieretsev "GET /login/?login_only=1&user=togocarrieretsev&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsev (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.222.96.147
country_id: 2017370
description:
[2026-06-16 18:42:11 +0000] info [cpaneld] 77.222.96.147 - togofee "GET /login/?login_only=1&user=togofee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.231.133.229
country_id: 3469034
description:
[2026-06-16 18:41:50 +0000] info [cpaneld] 170.231.133.229 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.162.56.97
country_id: 1210997
description:
[2026-06-16 18:41:53 +0000] info [cpaneld] 103.162.56.97 - togocarrierebetonstg "GET /login/?login_only=1&user=togocarrierebetonstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierebetonstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.124.5.56
country_id: 3469034
description:
[2026-06-16 18:41:57 +0000] info [cpaneld] 177.124.5.56 - togoathleti "GET /login/?login_only=1&user=togoathleti&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoathleti (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.73.175.159
country_id: 1733045
description:
[2026-06-16 18:42:00 +0000] info [cpaneld] 180.73.175.159 - togofarmtg "GET /login/?login_only=1&user=togofarmtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofarmtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.237.120.117
country_id: 99237
description:
[2026-06-16 18:42:09 +0000] info [cpaneld] 212.237.120.117 - togofa "GET /login/?login_only=1&user=togofa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.99.58.105
country_id: 3658394
description:
[2026-06-16 18:42:12 +0000] info [cpaneld] 191.99.58.105 - togomedi "GET /login/?login_only=1&user=togomedi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togomedi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.12.254.23
country_id: 3469034
description:
[2026-06-16 18:41:51 +0000] info [cpaneld] 177.12.254.23 - togocarrieretsevie "GET /login/?login_only=1&user=togocarrieretsevie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsevie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.8.135.79
country_id: 3625428
description:
[2026-06-16 18:41:59 +0000] info [cpaneld] 200.8.135.79 - togoagrop "GET /login/?login_only=1&user=togoagrop&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoagrop (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.24.61.209
country_id: 99237
description:
[2026-06-16 18:42:01 +0000] info [cpaneld] 185.24.61.209 - togocarrieretsev "GET /login/?login_only=1&user=togocarrieretsev&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsev (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.210.214.27
country_id: 289688
description:
[2026-06-16 18:42:04 +0000] info [cpaneld] 37.210.214.27 - togocarrieretsev "GET /login/?login_only=1&user=togocarrieretsev&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsev (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.140.245.131
country_id: 2017370
description:
[2026-06-16 18:42:13 +0000] info [cpaneld] 94.140.245.131 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.166.154.24
country_id: 1562822
description:
[2026-06-16 18:42:17 +0000] info [cpaneld] 14.166.154.24 - togoa "GET /login/?login_only=1&user=togoa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.120.233.162
country_id: 3437598
description:
[2026-06-16 18:42:21 +0000] info [cpaneld] 181.120.233.162 - togom "GET /login/?login_only=1&user=togom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.93.3.72
country_id: 3624060
description:
[2026-06-16 18:41:47 +0000] info [cpaneld] 177.93.3.72 - togoathletisme "GET /login/?login_only=1&user=togoathletisme&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoathletisme (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.81.77.14
country_id: 3469034
description:
[2026-06-16 18:41:52 +0000] info [cpaneld] 177.81.77.14 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.217.231.33
country_id: 3469034
description:
[2026-06-16 18:42:11 +0000] info [cpaneld] 179.217.231.33 - togointer "GET /login/?login_only=1&user=togointer&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointer (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.92.78.228
country_id: 6252001
description:
[2026-06-16 18:42:11 +0000] info [cpaneld] 172.92.78.228 - togodail "GET /login/?login_only=1&user=togodail&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodail (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 84.120.116.207
country_id: 2510769
description:
[2026-06-16 18:41:55 +0000] info [cpaneld] 84.120.116.207 - togocarrieretseviecom "GET /login/?login_only=1&user=togocarrieretseviecom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretseviecom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.216.15.139
country_id: 2661886
description:
[2026-06-16 18:41:56 +0000] info [cpaneld] 80.216.15.139 - togoathletis "GET /login/?login_only=1&user=togoathletis&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoathletis (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.60.232.116
country_id: 2658434
description:
[2026-06-16 18:42:07 +0000] info [cpaneld] 188.60.232.116 - togoag "GET /login/?login_only=1&user=togoag&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoag (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.85.54.49
country_id: 3865483
description:
[2026-06-16 18:42:09 +0000] info [cpaneld] 191.85.54.49 - togofa "GET /login/?login_only=1&user=togofa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.167.67.134
country_id: 3508796
description:
[2026-06-16 18:41:58 +0000] info [cpaneld] 152.167.67.134 - togointerimnet "GET /login/?login_only=1&user=togointerimnet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointerimnet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.84.138.132
country_id: 3625428
description:
[2026-06-16 18:42:01 +0000] info [cpaneld] 170.84.138.132 - togomedia24 "GET /login/?login_only=1&user=togomedia24&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togomedia24 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.222.63.104
country_id: 99237
description:
[2026-06-16 18:42:08 +0000] info [cpaneld] 176.222.63.104 - togodaily "GET /login/?login_only=1&user=togodaily&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodaily (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.125.131.152
country_id: 3469034
description:
[2026-06-16 18:42:10 +0000] info [cpaneld] 179.125.131.152 - togoath "GET /login/?login_only=1&user=togoath&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoath (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.224.27.116
country_id: 99237
description:
[2026-06-16 18:42:00 +0000] info [cpaneld] 169.224.27.116 - togofee "GET /login/?login_only=1&user=togofee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 161.142.119.121
country_id: 1733045
description:
[2026-06-16 18:42:09 +0000] info [cpaneld] 161.142.119.121 - togocarrierets "GET /login/?login_only=1&user=togocarrierets&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierets (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.219.213.230
country_id: 2542007
description:
[2026-06-16 18:42:19 +0000] info [cpaneld] 45.219.213.230 - togoda "GET /login/?login_only=1&user=togoda&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoda (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.236.111.13
country_id: 285570
description:
[2026-06-16 18:42:21 +0000] info [cpaneld] 188.236.111.13 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 210.79.178.76
country_id: 1694008
description:
[2026-06-16 18:41:52 +0000] info [cpaneld] 210.79.178.76 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.58.223.128
country_id: 690791
description:
[2026-06-16 18:42:04 +0000] info [cpaneld] 5.58.223.128 - togofee "GET /login/?login_only=1&user=togofee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.49.39.159
country_id: 3658394
description:
[2026-06-16 18:42:05 +0000] info [cpaneld] 179.49.39.159 - togocarrierebe "GET /login/?login_only=1&user=togocarrierebe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierebe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.123.104.186
country_id: 630336
description:
[2026-06-16 18:42:09 +0000] info [cpaneld] 178.123.104.186 - togoa "GET /login/?login_only=1&user=togoa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.237.254.95
country_id: 2464461
description:
[2026-06-16 18:41:51 +0000] info [cpaneld] 196.237.254.95 - togocarrieretsevie "GET /login/?login_only=1&user=togocarrieretsevie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsevie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.211.214.222
country_id: 1733045
description:
[2026-06-16 18:41:54 +0000] info [cpaneld] 113.211.214.222 - togofeed "GET /login/?login_only=1&user=togofeed&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofeed (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.182.174.222
country_id: 1282988
description:
[2026-06-16 18:42:06 +0000] info [cpaneld] 103.182.174.222 - togocarrieretse "GET /login/?login_only=1&user=togocarrieretse&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretse (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.184.210.86
country_id: 2017370
description:
[2026-06-16 18:42:06 +0000] info [cpaneld] 109.184.210.86 - togocarrieretse "GET /login/?login_only=1&user=togocarrieretse&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretse (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.34.4.1
country_id: 1522867
description:
[2026-06-16 18:42:19 +0000] info [cpaneld] 5.34.4.1 - togoin "GET /login/?login_only=1&user=togoin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.154.150.158
country_id: 1643084
description:
[2026-06-16 18:41:56 +0000] info [cpaneld] 103.154.150.158 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.163.104.60
country_id: 1562822
description:
[2026-06-16 18:41:57 +0000] info [cpaneld] 113.163.104.60 - togocarrieretseviecom "GET /login/?login_only=1&user=togocarrieretseviecom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretseviecom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.230.45.206
country_id: 3996063
description:
[2026-06-16 18:42:21 +0000] info [cpaneld] 189.230.45.206 - togocarrier "GET /login/?login_only=1&user=togocarrier&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrier (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 39.34.142.38
country_id: 1168579
description:
[2026-06-16 18:42:00 +0000] info [cpaneld] 39.34.142.38 - togodailynew "GET /login/?login_only=1&user=togodailynew&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodailynew (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.50.177.79
country_id: 2635167
description:
[2026-06-16 18:42:14 +0000] info [cpaneld] 212.50.177.79 - togomed "GET /login/?login_only=1&user=togomed&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togomed (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.81.229.153
country_id: 3865483
description:
[2026-06-16 18:42:20 +0000] info [cpaneld] 170.81.229.153 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.79.161.249
country_id: 3895114
description:
[2026-06-16 18:41:54 +0000] info [cpaneld] 186.79.161.249 - togocarrieretsevietg "GET /login/?login_only=1&user=togocarrieretsevietg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsevietg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.37.206.104
country_id: 3865483
description:
[2026-06-16 18:42:00 +0000] info [cpaneld] 179.37.206.104 - togoathleti "GET /login/?login_only=1&user=togoathleti&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoathleti (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.148.122.141
country_id: 3996063
description:
[2026-06-16 18:42:06 +0000] info [cpaneld] 187.148.122.141 - togofeedcom "GET /login/?login_only=1&user=togofeedcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofeedcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.252.212.89
country_id: 3865483
description:
[2026-06-16 18:42:08 +0000] info [cpaneld] 201.252.212.89 - togomedia2 "GET /login/?login_only=1&user=togomedia2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togomedia2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.205.68.81
country_id: 6251999
description:
[2026-06-16 18:42:14 +0000] info [cpaneld] 104.205.68.81 - togocarrieret "GET /login/?login_only=1&user=togocarrieret&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieret (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.52.59.234
country_id: 2017370
description:
[2026-06-16 18:41:57 +0000] info [cpaneld] 176.52.59.234 - togocarrieretsevi "GET /login/?login_only=1&user=togocarrieretsevi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsevi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.140.105.130
country_id: 3469034
description:
[2026-06-16 18:42:08 +0000] info [cpaneld] 177.140.105.130 - togofe "GET /login/?login_only=1&user=togofe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.117.60.106
country_id: 1210997
description:
[2026-06-16 18:42:06 +0000] info [cpaneld] 45.117.60.106 - togointeri "GET /login/?login_only=1&user=togointeri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togointeri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.138.96.213
country_id: 294640
description:
[2026-06-16 18:42:10 +0000] info [cpaneld] 89.138.96.213 - togocarrierets "GET /login/?login_only=1&user=togocarrierets&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierets (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.189.13.194
country_id: 3469034
description:
[2026-06-16 18:42:03 +0000] info [cpaneld] 177.189.13.194 - togodailyne "GET /login/?login_only=1&user=togodailyne&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodailyne (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.180.147.178
country_id: 3469034
description:
[2026-06-16 18:42:04 +0000] info [cpaneld] 45.180.147.178 - togodailyn "GET /login/?login_only=1&user=togodailyn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodailyn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.188.140.26
country_id: 3996063
description:
[2026-06-16 18:42:11 +0000] info [cpaneld] 187.188.140.26 - togodail "GET /login/?login_only=1&user=togodail&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodail (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.12.25.184
country_id: 690791
description:
[2026-06-16 18:42:14 +0000] info [cpaneld] 45.12.25.184 - togomedi "GET /login/?login_only=1&user=togomedi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togomedi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.104.36.78
country_id: 3895114
description:
[2026-06-16 18:41:51 +0000] info [cpaneld] 186.104.36.78 - togoagropoles "GET /login/?login_only=1&user=togoagropoles&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoagropoles (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.117.246.208
country_id: 3469034
description:
[2026-06-16 18:42:11 +0000] info [cpaneld] 138.117.246.208 - togoagrop "GET /login/?login_only=1&user=togoagrop&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoagrop (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 112.202.105.26
country_id: 1694008
description:
[2026-06-16 18:42:12 +0000] info [cpaneld] 112.202.105.26 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.5.48.150
country_id: 6252001
description:
[2026-06-16 18:41:50 +0000] info [cpaneld] 73.5.48.150 - togoathletismetg "GET /login/?login_only=1&user=togoathletismetg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoathletismetg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.139.136.231
country_id: 3865483
description:
[2026-06-16 18:41:49 +0000] info [cpaneld] 190.139.136.231 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.127.199.56
country_id: 3895114
description:
[2026-06-16 18:42:35 +0000] info [cpaneld] 191.127.199.56 - togocar "GET /login/?login_only=1&user=togocar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.28.130.186
country_id: 3686110
description:
[2026-06-16 18:42:38 +0000] info [cpaneld] 186.28.130.186 - togoca "GET /login/?login_only=1&user=togoca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoca (has_cpuser_file failed)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:43:02 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.226.224.125
country_id: 3865483
description:
[2026-06-16 18:42:28 +0000] info [cpaneld] 45.226.224.125 - togocarri "GET /login/?login_only=1&user=togocarri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.115.75.176
country_id: 1210997
description:
[2026-06-16 18:42:26 +0000] info [cpaneld] 103.115.75.176 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.157.64.23
country_id: 2542007
description:
[2026-06-16 18:42:22 +0000] info [cpaneld] 105.157.64.23 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 88.169.96.188
country_id: 3017382
description:
[2026-06-16 18:42:26 +0000] info [cpaneld] 88.169.96.188 - togocarrie "GET /login/?login_only=1&user=togocarrie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.106.34.46
country_id: 2017370
description:
[2026-06-16 18:42:29 +0000] info [cpaneld] 212.106.34.46 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.90.39.114
country_id: 3469034
description:
[2026-06-16 18:42:37 +0000] info [cpaneld] 189.90.39.114 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 27.49.10.71
country_id: 1694008
description:
[2026-06-16 18:42:23 +0000] info [cpaneld] 27.49.10.71 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.167.18.98
country_id: 102358
description:
[2026-06-16 18:42:26 +0000] info [cpaneld] 82.167.18.98 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.151.190.155
country_id: 3585968
description:
[2026-06-16 18:42:24 +0000] info [cpaneld] 190.151.190.155 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.25.43.113
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/668811656 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 125.26.151.11
country_id: 1605651
description:
[2026-06-16 18:42:36 +0000] info [cpaneld] 125.26.151.11 - togocar "GET /login/?login_only=1&user=togocar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.0.51.37
country_id: 3469034
description:
[2026-06-16 18:42:47 +0000] info [cpaneld] 170.0.51.37 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.81.250.162
country_id: 3865483
description:
[2026-06-16 18:42:23 +0000] info [cpaneld] 181.81.250.162 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.127.38.119
country_id: 3469034
description:
[2026-06-16 18:42:28 +0000] info [cpaneld] 179.127.38.119 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.219.137.235
country_id: 3469034
description:
[2026-06-16 18:42:31 +0000] info [cpaneld] 186.219.137.235 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 39.61.168.71
country_id: 1168579
description:
[2026-06-16 18:42:37 +0000] info [cpaneld] 39.61.168.71 - togoca "GET /login/?login_only=1&user=togoca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.101.18.137
country_id: 6251999
description:
[2026-06-16 18:42:29 +0000] info [cpaneld] 50.101.18.137 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.55.178.130
country_id: 1522867
description:
[2026-06-16 18:42:23 +0000] info [cpaneld] 92.55.178.130 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.115.124.145
country_id: 2017370
description:
[2026-06-16 18:42:25 +0000] info [cpaneld] 176.115.124.145 - togoa "GET /login/?login_only=1&user=togoa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoa (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.20.218.5
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1661184691 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.231.218.218
country_id: 285570
description:
[2026-06-16 18:42:22 +0000] info [cpaneld] 37.231.218.218 - togoag "GET /login/?login_only=1&user=togoag&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoag (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 175.145.175.174
country_id: 1733045
description:
[2026-06-16 18:42:28 +0000] info [cpaneld] 175.145.175.174 - togoi "GET /login/?login_only=1&user=togoi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoi (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:43:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.191.148.91
country_id: 3996063
description:
[2026-06-16 18:42:23 +0000] info [cpaneld] 38.191.148.91 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 202.51.92.156
country_id: 1282988
description:
[2026-06-16 18:42:24 +0000] info [cpaneld] 202.51.92.156 - togocarrie "GET /login/?login_only=1&user=togocarrie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.19.16.57
country_id: 1643084
description:
[2026-06-16 18:42:29 +0000] info [cpaneld] 160.19.16.57 - togocarri "GET /login/?login_only=1&user=togocarri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarri (has_cpuser_file failed)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:43:03 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 101.51.126.75
country_id: 1605651
description:
[2026-06-16 18:42:23 +0000] info [cpaneld] 101.51.126.75 - togome "GET /login/?login_only=1&user=togome&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togome (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.191.99.32
country_id: 1210997
description:
[2026-06-16 18:42:24 +0000] info [cpaneld] 103.191.99.32 - togocarrier "GET /login/?login_only=1&user=togocarrier&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrier (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.62.40.233
country_id: 3865483
description:
[2026-06-16 18:42:22 +0000] info [cpaneld] 186.62.40.233 - togoi "GET /login/?login_only=1&user=togoi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.154.35.22
country_id: 3686110
description:
[2026-06-16 18:42:38 +0000] info [cpaneld] 186.154.35.22 - togoca "GET /login/?login_only=1&user=togoca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.179.252.6
country_id: 2542007
description:
[2026-06-16 18:42:51 +0000] info [cpaneld] 160.179.252.6 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.158.154.110
country_id: 2542007
description:
[2026-06-16 18:42:51 +0000] info [cpaneld] 105.158.154.110 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.238.130.145
country_id: 2464461
description:
[2026-06-16 18:42:23 +0000] info [cpaneld] 196.238.130.145 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.150.1.51
country_id: 1522867
description:
[2026-06-16 18:42:29 +0000] info [cpaneld] 37.150.1.51 - togocarri "GET /login/?login_only=1&user=togocarri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.13.211.206
country_id: 3865483
description:
[2026-06-16 18:42:33 +0000] info [cpaneld] 186.13.211.206 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.71.62.95
country_id: 6252001
description:
[2026-06-16 18:42:34 +0000] info [cpaneld] 74.71.62.95 - togocar "GET /login/?login_only=1&user=togocar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 87.250.204.11
country_id: 2017370
description:
[2026-06-16 18:42:24 +0000] info [cpaneld] 87.250.204.11 - togoca "GET /login/?login_only=1&user=togoca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.108.78.188
country_id: 3686110
description:
[2026-06-16 18:42:26 +0000] info [cpaneld] 190.108.78.188 - togocarrie "GET /login/?login_only=1&user=togocarrie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.117.85.28
country_id: 3686110
description:
[2026-06-16 18:42:33 +0000] info [cpaneld] 138.117.85.28 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.172.104.131
country_id: 1562822
description:
[2026-06-16 18:42:33 +0000] info [cpaneld] 113.172.104.131 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.231.229.51
country_id: 6252001
description:
[2026-06-16 18:42:38 +0000] info [cpaneld] 69.231.229.51 - togoc "GET /login/?login_only=1&user=togoc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.0.109.49
country_id: 3686110
description:
[2026-06-16 18:42:27 +0000] info [cpaneld] 167.0.109.49 - togoc "GET /login/?login_only=1&user=togoc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.245.177.135
country_id: 3996063
description:
[2026-06-16 18:42:31 +0000] info [cpaneld] 177.245.177.135 - togocarr "GET /login/?login_only=1&user=togocarr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.223.206.192
country_id: 3895114
description:
[2026-06-16 18:42:33 +0000] info [cpaneld] 201.223.206.192 - togocar "GET /login/?login_only=1&user=togocar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.56.109.113
country_id: 3595528
description:
[2026-06-16 18:42:42 +0000] info [cpaneld] 190.56.109.113 - togoc "GET /login/?login_only=1&user=togoc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 81.222.186.68
country_id: 2017370
description:
[2026-06-16 18:42:26 +0000] info [cpaneld] 81.222.186.68 - togom "GET /login/?login_only=1&user=togom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.26.180.50
country_id: 3865483
description:
[2026-06-16 18:42:29 +0000] info [cpaneld] 181.26.180.50 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.105.133.212
country_id: 2287781
description:
[2026-06-16 18:42:33 +0000] info [cpaneld] 143.105.133.212 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.18.96.236
country_id: 3865483
description:
[2026-06-16 18:42:49 +0000] info [cpaneld] 186.18.96.236 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 51.235.39.168
country_id: 102358
description:
[2026-06-16 18:42:54 +0000] info [cpaneld] 51.235.39.168 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:43:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.252.69.112
country_id: 2017370
description:
[2026-06-16 18:42:24 +0000] info [cpaneld] 109.252.69.112 - togoca "GET /login/?login_only=1&user=togoca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.33.87.178
country_id: 3469034
description:
[2026-06-16 18:42:28 +0000] info [cpaneld] 177.33.87.178 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.75.84.219
country_id: 290557
description:
[2026-06-16 18:42:29 +0000] info [cpaneld] 91.75.84.219 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.224.124.46
country_id: 99237
description:
[2026-06-16 18:42:34 +0000] info [cpaneld] 169.224.124.46 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.124.15.220
country_id: 1269750
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/le-mcc-fait-le-point-de-letat-davancement-de-la-mise-en-oeuvre-du-programme-seuil-au-togo/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 170.199.224.250
country_id: 6252001
domain: butodra.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:170.199.224.250||TA:170.199.224.250||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:18:45:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9739720&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbWluZHlAZXVyZXMuY29tLnNn&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635515 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bWluZHlAZXVyZXMuY29tLnNn" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.122.208.31
country_id: 2017370
description:
[2026-06-16 18:45:36 +0000] info [cpaneld] 62.122.208.31 - benatex "GET /login/?login_only=1&user=benatex&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benatex (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.129.164.162
country_id: 285570
description:
[2026-06-16 18:45:40 +0000] info [cpaneld] 94.129.164.162 - benatextg "GET /login/?login_only=1&user=benatextg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benatextg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 153.67.183.41
country_id: 3865483
description:
[2026-06-16 18:45:41 +0000] info [cpaneld] 153.67.183.41 - benatex "GET /login/?login_only=1&user=benatex&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benatex (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.131.139.132
country_id: 3469034
description:
[2026-06-16 18:45:45 +0000] info [cpaneld] 177.131.139.132 - benate "GET /login/?login_only=1&user=benate&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benate (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.160.218.217
country_id: 6252001
description:
[2026-06-16 18:45:53 +0000] info [cpaneld] 67.160.218.217 - benat "GET /login/?login_only=1&user=benat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.80.25.64
country_id: 102358
description:
[2026-06-16 18:45:45 +0000] info [cpaneld] 178.80.25.64 - benatextg "GET /login/?login_only=1&user=benatextg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benatextg (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:45:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10263663&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY3MyQGludGVncml0eWxvZ2lzdGljcy5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635547 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y3MyQGludGVncml0eWxvZ2lzdGljcy5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 194.247.22.154
country_id: 2017370
description:
[2026-06-16 18:45:56 +0000] info [cpaneld] 194.247.22.154 - be "GET /login/?login_only=1&user=be&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user be (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 151.77.95.245
country_id: 3175395
description:
[2026-06-16 18:45:55 +0000] info [cpaneld] 151.77.95.245 - bena "GET /login/?login_only=1&user=bena&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bena (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.73.116.230
country_id: 2017370
description:
[2026-06-16 18:45:34 +0000] info [cpaneld] 217.73.116.230 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.226.1.18
country_id: 3686110
description:
[2026-06-16 18:45:48 +0000] info [cpaneld] 38.226.1.18 - benat "GET /login/?login_only=1&user=benat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.226.149.31
country_id: 3932488
description:
[2026-06-16 18:46:02 +0000] info [cpaneld] 38.226.149.31 - be "GET /login/?login_only=1&user=be&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user be (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:18:46:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10052511&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbnByX3NpbmdhcG9yZUBucHIuY28uanA%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635563 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bnByX3NpbmdhcG9yZUBucHIuY28uanA=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.198.128.204
country_id: 1835841
description:
Jun 16 18:46:41 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.198.128.204 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:18:47:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051677&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcHJvY3VyZW1lbnQwMUBwbHRzY2llbnRpZmljLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635636 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cHJvY3VyZW1lbnQwMUBwbHRzY2llbnRpZmljLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 218.92.201.254
country_id: 1814991
description:
Jun 16 18:46:32 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 218.92.201.254 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:46:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515558&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdGFtQG5ld2FzaWEuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635596 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dGFtQG5ld2FzaWEuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.20.57.100
country_id: 1210997
description:
[2026-06-16 18:48:17 +0000] info [cpaneld] 157.20.57.100 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 123.113.175.30
country_id: 1814991
description:
Jun 16 18:48:18 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 123.113.175.30 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.41.136.239
country_id: 3865483
description:
[2026-06-16 18:48:18 +0000] info [cpaneld] 179.41.136.239 - mftogo "GET /login/?login_only=1&user=mftogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftogo (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 62.192.110.75
country_id: 1819730
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/12/IMG-20211230-WA0197-768x512.jpg HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:48:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6711657&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635694 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:48:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515353&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635695 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.113.175.30
country_id: 1814991
description:
2026-06-16 18:48:20 dovecot_plain authenticator failed for H=(vl2h6y0gwct86r48dzci2u8nu4) [123.113.175.30]:34212: 535 Incorrect authentication data (set_id=welldrive@confortis.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 213.171.0.184
country_id: 2017370
description:
[2026-06-16 18:48:29 +0000] info [cpaneld] 213.171.0.184 - mfto "GET /login/?login_only=1&user=mfto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mfto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.231.74.101
country_id: 3932488
description:
[2026-06-16 18:48:23 +0000] info [cpaneld] 45.231.74.101 - mftogotg "GET /login/?login_only=1&user=mftogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftogotg (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 192.42.116.116
country_id: 2750405
description:
192.42.116.116 - - [16/Jun/2026:18:48:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6790293&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdG9yZC5sdW5kc3Ryb21AdmlydHVhbHJvYWQub3Jn&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635700 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dG9yZC5sdW5kc3Ryb21AdmlydHVhbHJvYWQub3Jn" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:192.42.116.116


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.243.43.96
country_id: 2017370
description:
[2026-06-16 18:48:26 +0000] info [cpaneld] 94.243.43.96 - mftog "GET /login/?login_only=1&user=mftog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.130.109.225
country_id: 6252001
description:
[2026-06-16 18:48:32 +0000] info [cpaneld] 24.130.109.225 - mf "GET /login/?login_only=1&user=mf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.125.10.132
country_id: 298795
description:
[2026-06-16 18:48:37 +0000] info [cpaneld] 212.125.10.132 - mf "GET /login/?login_only=1&user=mf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.117.198.217
country_id: 2510769
description:
[2026-06-16 18:48:28 +0000] info [cpaneld] 79.117.198.217 - mfto "GET /login/?login_only=1&user=mfto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mfto (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 93.185.33.44
country_id: 174982
description:
2026-06-16 18:49:01 H=([93.185.33.44]) [93.185.33.44]:62270 F=<John@4452.com> rejected RCPT <info@cndh-togo.org>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.116.142.179
country_id: 3686110
description:
[2026-06-16 18:48:24 +0000] info [cpaneld] 186.116.142.179 - mftog "GET /login/?login_only=1&user=mftog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftog (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:50:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6451098&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2FsZXNAcmV4LWluc3RydW1lbnRzLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635816 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2FsZXNAcmV4LWluc3RydW1lbnRzLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:18:50:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10460008&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaGFydW1pLXlvc2hpbmFnYUBtZXMuY28uanA%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635833 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aGFydW1pLXlvc2hpbmFnYUBtZXMuY28uanA=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.34.240.56
country_id: 1168579
domain: www.mediatopnews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.mediatopnews.tghttp/www.mediatopnews.tg/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:18:52:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6973587&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYW5hQGFtY3NiLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635942 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YW5hQGFtY3NiLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:52:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119024&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2FuZHlAYWxhbWdyb3VwLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635944 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2FuZHlAYWxhbWdyb3VwLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.57
country_id: 6252001
description:
205.169.39.57 - - [16/Jun/2026:18:53:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7037296&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Da2F0c3Vub3JpLWthdG9AbWVzLmNvLmpw&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635990 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=a2F0c3Vub3JpLWthdG9AbWVzLmNvLmpw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.57


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.174.149.112
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/a4a1a0 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 138.121.10.183
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/presidence-de-la-boad-christian-adovelande-passe-la-main-a-serge-ekue/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.43.38.190
country_id: 3895114
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/can-total-egypte-2019-un-match-cele-par-le-sort/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:18:53:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7235784&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636022 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:53:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051887&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636022 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:54:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10196585&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2VwYW5nZ29sQHNwc2IuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636079 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2VwYW5nZ29sQHNwc2IuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.187.229.151
country_id: 1269750
description:
2026-06-16 18:55:38 dovecot_login authenticator failed for H=(nsg-corporate-151.229.187.122.airtel.in) [122.187.229.151]:51973: 535 Incorrect authentication data (set_id=sales@cameg-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.229.151
country_id: 1269750
description:
Jun 16 18:55:36 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.229.151 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.33.230
country_id: 6251999
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.239.33.230||TA:104.239.33.230||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 152.232.100.212
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:152.232.100.212||TA:152.232.100.212||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.35.145
country_id: 6251999
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.239.35.145||TA:104.239.35.145||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 67.227.112.173
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:67.227.112.173||TA:67.227.112.173||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.173.150.225
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:107.173.150.225||TA:107.173.150.225||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.33.127
country_id: 6251999
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.239.33.127||TA:104.239.33.127||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 206.206.69.231
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:206.206.69.231||TA:206.206.69.231||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.52.110.176
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/diplomatie-barros-bacar-banjai-nouveau-representant-permanent-de-la-cedeao-au-togo/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 108.165.218.86
country_id: 3469034
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:108.165.218.86||TA:108.165.218.86||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:59:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:59:17 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:59:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:59:16 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 45.144.212.221
country_id: 690791
description:
2026-06-16 19:00:15 H=([45.144.212.221]) [45.144.212.221]:64502 F=<dpr@priv8shop.com> rejected RCPT <ablacklion@hotmail.com>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 176.61.149.165
country_id: 2264397
description:
2026-06-16 18:59:34 dovecot_plain authenticator failed for H=(k79la5vjq8o6re35u) [176.61.149.165]:32776: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:02:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13211806&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYXppbS5hcmFobWFuQHlvbmdtaW5vZmZpY2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636527 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YXppbS5hcmFobWFuQHlvbmdtaW5vZmZpY2UuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 174.62.158.14
country_id: 6252001
description:
2026-06-16 19:01:39 dovecot_plain authenticator failed for H=c-174-62-158-14.hsd1.il.comcast.net (fcgubppolmto21asiigpeqjjx1nizc) [174.62.158.14]:39376: 535 Incorrect authentication data (set_id=admin@togocarrierebetons.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.161.55.7
country_id: 3996063
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-les-eleves-arrivent-ils-a-achever-le-cours-primaire/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:19:02:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6709404&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Da2F0c3Vub3JpLWthdG9AbWVzLmNvLmpw&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636551 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=a2F0c3Vub3JpLWthdG9AbWVzLmNvLmpw" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-16 19:03:41 +0000] info [webmaild] 196.171.46.177 - direction@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:03:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6921160&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcG9oY2hvb0BnZXdpcmFzaGlwcGluZy5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636626 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cG9oY2hvb0BnZXdpcmFzaGlwcGluZy5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:03:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10011590&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636638 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:04:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7379355&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636639 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:05:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10275224&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaGFmaXp1bEBnZXdpcmFzaGlwcGluZy5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636715 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aGFmaXp1bEBnZXdpcmFzaGlwcGluZy5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 19:04:27 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:37754: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:05:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10187414&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZXZhaW5lQHlvbmdtaW5vZmZpY2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636725 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZXZhaW5lQHlvbmdtaW5vZmZpY2UuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 8.210.147.41
country_id: 1819730
description:
Jun 16 19:06:07 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 8.210.147.41 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 123.17.15.28
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/4eme-reunion-du-bureau-de-la-ccr-uemoa-le-processus-de-developpement-de-leconomie-des-etats-de-lunion-au-coeur-des-travaux/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.209.18.106
country_id: 192950
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/campagne-nationale-de-reboisement-2023-la-presidence-dans-une-dynamique-de-mobilisation-2/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 186.238.242.194
country_id: 3469034
description:
2026-06-16 19:09:30 dovecot_login authenticator failed for H=(193.210.177.45.fronteirainternet.com.br) [186.238.242.194]:55424: 535 Incorrect authentication data (set_id=contact@cameg-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.46
country_id: 6252001
description:
205.169.39.46 - - [16/Jun/2026:19:09:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10055326&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2hhc2VAZW1haWwuY2hhc2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636976 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2hhc2VAZW1haWwuY2hhc2UuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.46


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.136.40
country_id: 3469034
description:
Jun 16 19:09:56 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.136.40 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:19:10:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119834&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZWRkaWV2c3ByaW1lc2VhZm9vZEBlLmVkZGlldi5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637005 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZWRkaWV2c3ByaW1lc2VhZm9vZEBlLmVkZGlldi5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:10:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6514844&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2hpcHBpbmdAdGFuc2lubGlhbi5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637013 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2hpcHBpbmdAdGFuc2lubGlhbi5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.238.242.194
country_id: 3469034
description:
Jun 16 19:09:28 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.238.242.194 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:19:10:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6450586&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637043 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:10:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7380381&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637046 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.216.214.226
country_id: 933860
description:
Jun 16 19:11:25 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.216.214.226 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.1.185.52
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/c7bcbd HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 170.254.163.179
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/tag/au-business-forum-du-commonwealth HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 19:12:45 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:46392: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:14:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:14:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:14:05 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 19:14:19 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:56458: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:14:07 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:19:14:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6450586&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637043 HTTP/1.1" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:15:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10196322&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZmFyYWhAYWNvbGl0ZS5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637311 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZmFyYWhAYWNvbGl0ZS5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 95.0.32.31
country_id: 298795
description:
Jun 16 19:15:14 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 95.0.32.31 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 170.64.241.20
country_id: 2077456
description:
170.64.241.20 - - [16/Jun/2026:19:14:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6450586&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637043 HTTP/1.1" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.241.20


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 170.64.241.20
country_id: 2077456
description:
170.64.241.20 - - [16/Jun/2026:19:15:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6450586&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637043 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.241.20


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 191.241.200.12
country_id: 3469034
description:
191.241.200.12 - - [16/Jun/2026:19:15:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7127916&pdata=https%253A%252F%252Ftogodailynews.tg%252Fnoel-2025-faure-gnassingbe-apporte-la-joie-et-le-reconfort-aux-enfants-de-lhopital-de-be%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637345 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/noel-2025-faure-gnassingbe-apporte-la-joie-et-le-reconfort-aux-enfants-de-lhopital-de-be/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.5056.1319 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:191.241.200.12


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.116.242.211
country_id: 1269750
description:
[2026-06-16 19:16:11 +0000] info [cpaneld] 66.116.242.211 - emt "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emt (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:19:16:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10076818&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2hhc2VAZW1haWwuY2hhc2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637372 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2hhc2VAZW1haWwuY2hhc2UuY29t" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:16:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9858201&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdnRtc0BzcHNiLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637384 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dnRtc0BzcHNiLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 35.254.209.97
country_id: 6252001
domain: ca-togo.org
description:
IM360 WAF: Bad file extension||RSV:8.18||T:APACHE||MVN:REQUEST_FILENAME||MV:/www.sanlam.com||User:egjvuiox||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:17:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13146471&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaW5mb0BzdGF0cy5nb3Yuc2E%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637430 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aW5mb0BzdGF0cy5nb3Yuc2E=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.61.130.187
country_id: 6252001
description:
[2026-06-16 19:17:52 +0000] info [cpaneld] 45.61.130.187 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 75.167.172.82
country_id: 6252001
description:
Jun 16 19:18:31 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 75.167.172.82 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 75.167.172.82
country_id: 6252001
description:
2026-06-16 19:18:33 dovecot_plain authenticator failed for H=(8ohf1yl8i7s88as4lbch) [75.167.172.82]:53243: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.156.118.140
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/ecobank-signale-une-hausse-de-194-des-prets-aux-entreprises-dirigees-par-des-femmes-les-programmes-axes-sur-legalite-des-sexes-stimulant-la-croissance-locale-a-travers-lafrique/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:19:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7037338&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637538 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:18:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6776984&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637537 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 71.172.154.91
country_id: 6252001
description:
Jun 16 19:18:24 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 71.172.154.91 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 71.172.154.91
country_id: 6252001
description:
2026-06-16 19:18:26 dovecot_plain authenticator failed for H=pool-71-172-154-91.nwrknj.fios.verizon.net (95u234a6tuwmxr9h1sgl20hdreogjb) [71.172.154.91]:48495: 535 Incorrect authentication data (set_id=david.ayivi@mesyscom.com)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 170.64.241.20
country_id: 2077456
description:
170.64.241.20 - - [16/Jun/2026:19:19:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6450586&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637043 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.241.20


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 170.64.241.20
country_id: 2077456
description:
170.64.241.20 - - [16/Jun/2026:19:19:51 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6450586&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637043" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.241.20


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.97.223
country_id: 3865483
description:
Jun 16 19:20:56 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.97.223 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.44
country_id: 6252001
description:
205.169.39.44 - - [16/Jun/2026:19:20:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7115412&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Da2luc3RvcmVtYW5hZ2Vyc0BtZWdhbWFydC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637644 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=a2luc3RvcmVtYW5hZ2Vyc0BtZWdhbWFydC5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.44


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:20:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13147291&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dcm9taW5hLnBpbnRvQGhvc3BpdGFscHJpdmFkb3NhLmNvbS5hcg%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637648 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cm9taW5hLnBpbnRvQGhvc3BpdGFscHJpdmFkb3NhLmNvbS5hcg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 123.6.49.12
country_id: 1814991
description:
123.6.49.12 - - [16/Jun/2026:19:21:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7365233&pdata=https%253A%252F%252Ftdn.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637693 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/" "Mozilla/5.0 (Linux; Android 11; CPH2185) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.12


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.175.5.84
country_id: 6252001
description:
[2026-06-16 19:21:44 +0000] info [cpaneld] 107.175.5.84 - camaegdtomgo "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:19:22:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6723434&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Da2luc3RvcmVtYW5hZ2Vyc0BtZWdhbWFydC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637729 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=a2luc3RvcmVtYW5hZ2Vyc0BtZWdhbWFydC5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.61.130.187
country_id: 6252001
description:
[2026-06-16 19:23:12 +0000] info [cpaneld] 45.61.130.187 - kwbcfbmo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kwbcfbmo (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:19:24:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7064218&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbmFtYnVAbWVzLmNvLmpw&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637843 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bmFtYnVAbWVzLmNvLmpw" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:24:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10393498&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2VjaWxpYS5nYXJyZXJhQGhvc3BpdGFscHJpdmFkb3NhLmNvbS5hcg%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637852 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2VjaWxpYS5nYXJyZXJhQGhvc3BpdGFscHJpdmFkb3NhLmNvbS5hcg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:25:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6843503&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYWdlbmN5LnNpbGxhbWFlQGV1cm9jaGVtLmVl&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637913 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YWdlbmN5LnNpbGxhbWFlQGV1cm9jaGVtLmVl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 195.132.35.238
country_id: 3017382
description:
195.132.35.238 - - [16/Jun/2026:19:25:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862 HTTP/1.1" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.132.35.238


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:24:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12804554&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637863 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:19:24:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.16
country_id: 6252001
description:
205.169.39.16 - - [16/Jun/2026:19:28:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000230&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYW1lcmlwcmlzZWZpbmFuY2lhbEBub3RpZnkuYW1lcmlwcmlzZS5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638124 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YW1lcmlwcmlzZWZpbmFuY2lhbEBub3RpZnkuYW1lcmlwcmlzZS5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.16


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.7
country_id: 6252001
description:
205.169.39.7 - - [16/Jun/2026:19:29:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000237&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZGlhQGUuZGlhLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638148 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZGlhQGUuZGlhLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.7


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 195.132.35.238
country_id: 3017382
description:
195.132.35.238 - - [16/Jun/2026:19:30:01 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.132.35.238


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 195.132.35.238
country_id: 3017382
description:
195.132.35.238 - - [16/Jun/2026:19:30:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.132.35.238


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:29:29 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.14
country_id: 6252001
description:
205.169.39.14 - - [16/Jun/2026:19:29:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6867044&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdGhlY2hpbGRyZW5zcGxhY2VAZW1haWwuY2hpbGRyZW5zcGxhY2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638160 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dGhlY2hpbGRyZW5zcGxhY2VAZW1haWwuY2hpbGRyZW5zcGxhY2UuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.14


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:29:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:29:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:29:32 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 109.206.121.185
country_id: 6290252
description:
Jun 16 19:31:09 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 109.206.121.185 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 109.206.121.185
country_id: 6290252
description:
Jun 16 19:31:22 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 109.206.121.185 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.217.140.140
country_id: 2635167
description:
[2026-06-16 19:31:22 +0000] info [whostmgrd] 2.217.140.140 - netmast "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.57
country_id: 6252001
description:
205.169.39.57 - - [16/Jun/2026:19:32:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9987737&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaHl1bmRhaV9tb3Rvcl9hbWVyaWNhQGh5dW5kYWkubXl2ZWhpY2xlLWVtYWlsLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638323 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aHl1bmRhaV9tb3Rvcl9hbWVyaWNhQGh5dW5kYWkubXl2ZWhpY2xlLWVtYWlsLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.57


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 154.73.250.106
country_id: 357994
domain: educplusmedia.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:154.73.250.106||TA:154.73.250.106||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:32:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10381156&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcG9zdG1hc3RlckBldnJhei5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638363 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cG9zdG1hc3RlckBldnJhei5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:34:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12949704&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638457 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:34:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9881201&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638458 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 37.159.23.70
country_id: 3175395
description:
37.159.23.70 - - [16/Jun/2026:19:35:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.159.23.70


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 37.159.23.70
country_id: 3175395
description:
37.159.23.70 - - [16/Jun/2026:19:35:10 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.159.23.70


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:19:34:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515093&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYW1lcmlwcmlzZWZpbmFuY2lhbEBub3RpZnkuYW1lcmlwcmlzZS5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638467 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YW1lcmlwcmlzZWZpbmFuY2lhbEBub3RpZnkuYW1lcmlwcmlzZS5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.100
country_id: 3469034
description:
2026-06-16 19:34:30 dovecot_plain authenticator failed for H=([192.168.15.9]) [104.28.152.100]:32910: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:19:34:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7129496&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2FyZGhvbGRlckBlLnN5bmNocm9ueWZpbmFuY2lhbC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638475 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2FyZGhvbGRlckBlLnN5bmNocm9ueWZpbmFuY2lhbC5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.181.141.115
country_id: 2635167
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:107.181.141.115||TA:107.181.141.115||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 103.114.59.142
country_id: 1269750
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:103.114.59.142||TA:103.114.59.142||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 209.242.201.243
country_id: 3190538
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:209.242.201.243||TA:209.242.201.243||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 195.132.35.238
country_id: 3017382
description:
195.132.35.238 - - [16/Jun/2026:19:35:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862 HTTP/1.1" 404 561 afrique-distribution.net "http://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.132.35.238


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - contact@ciieeinternational.org [06/16/2026:19:36:31 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: contact@ciieeinternational.org


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 94.176.212.123
country_id: 3175395
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:94.176.212.123||TA:94.176.212.123||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 92.113.119.229
country_id: 798544
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:92.113.119.229||TA:92.113.119.229||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:38:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9738132&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dbm9yaW50YW5Ac3BzYi5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638687 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bm9yaW50YW5Ac3BzYi5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:19:37:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10132377&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdGhlY2hpbGRyZW5zcGxhY2VAZW1haWwuY2hpbGRyZW5zcGxhY2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638647 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dGhlY2hpbGRyZW5zcGxhY2VAZW1haWwuY2hpbGRyZW5zcGxhY2UuY29t" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


