# incident

plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:13:29:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6788499&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781875768 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.234.139.225
country_id: 690791
description:
Jun 19 13:32:29 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.234.139.225 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.17.125.35
country_id: 690791
description:
Jun 19 13:32:57 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.17.125.35 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.38.154.211
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/857815460 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 138.255.44.133
country_id: 3469034
description:
Jun 19 13:33:57 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 138.255.44.133 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:13:34:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:13:34:41 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.12
country_id: 1880251
description:
47.128.96.12 - - [19/Jun/2026:13:35:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6986440&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fdiego-maradona%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781876132 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/diego-maradona/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.12


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:13:37:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7314841&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781876248 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 59.46.193.187
country_id: 1814991
description:
Jun 19 13:39:24 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 59.46.193.187 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 20.240.161.47
country_id: 2661886
description:
[2026-06-19 13:38:42 +0000] info [whostmgrd] 20.240.161.47 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 20.240.161.47
country_id: 2661886
description:
[2026-06-19 13:38:43 +0000] info [whostmgrd] 20.240.161.47 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 59.46.193.187
country_id: 1814991
description:
Jun 19 13:39:31 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 59.46.193.187 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 193.34.225.179
country_id: 1527747
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/8f8076 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.30.114.165
country_id: 3175395
description:
Jun 19 13:41:22 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.30.114.165 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 54.254.60.1
country_id: 1880251
description:
[2026-06-19 13:40:29 +0000] info [cpaneld] 54.254.60.1 - togoinrdceh "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.100
country_id: 3469034
description:
2026-06-19 13:42:23 dovecot_plain authenticator failed for H=([192.168.15.9]) [104.28.152.100]:57491: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.30.114.165
country_id: 3175395
description:
Jun 19 13:41:29 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.30.114.165 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.100
country_id: 3469034
description:
2026-06-19 13:42:29 dovecot_login authenticator failed for H=([192.168.15.9]) [104.28.152.100]:57491: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 2.27.22.15
country_id: 2921044
description:
2026-06-19 13:42:52 dovecot_plain authenticator failed for H=(li7paktxd5dgeu4rfiwqo) [2.27.22.15]:48173: 535 Incorrect authentication data (set_id=admin@togocarrierebetons.com)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:13:45:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10118556&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781876707 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.136.204
country_id: 3469034
description:
Jun 19 13:45:21 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.136.204 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 168.0.224.111
country_id: 3469034
description:
Jun 19 13:46:07 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 168.0.224.111 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.136.204
country_id: 3469034
description:
Jun 19 13:45:27 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.136.204 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.100
country_id: 3469034
description:
2026-06-19 13:45:27 dovecot_plain authenticator failed for H=([192.168.15.9]) [104.28.152.100]:56489: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 191.102.129.116
country_id: 6252001
domain: tdn.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:13-45.191.102.129.116||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 165.22.187.91
country_id: 6252001
domain: 24heureinfo.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.7103.25 Safari/537.36||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 152.237.148.214
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/926b58 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.130
country_id: 1880251
description:
47.128.96.130 - - [19/Jun/2026:13:48:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10261352&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fcitronnelle%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781876921 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/citronnelle/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.130


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 13:48:36 +0000] info [cpaneld] 185.55.240.13 - BEWELL "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user BEWELL (has_cpuser_file failed)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:13:50:47 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:13:50:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.100
country_id: 3469034
description:
2026-06-19 13:52:09 dovecot_plain authenticator failed for H=([192.168.15.9]) [104.28.152.100]:55698: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 189.56.252.115
country_id: 3469034
description:
Jun 19 13:52:26 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 189.56.252.115 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 95.68.148.0
country_id: 2017370
description:
Jun 19 13:51:58 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 95.68.148.0 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.238.50.166
country_id: 6252001
domain: dagl.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:104.238.50.166||TA:104.238.50.166||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 189.56.252.115
country_id: 3469034
description:
Jun 19 13:52:33 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 189.56.252.115 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 172.121.139.62
country_id: 6252001
domain: dagl.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:172.121.139.62||TA:172.121.139.62||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.100
country_id: 3469034
description:
2026-06-19 13:53:17 dovecot_plain authenticator failed for H=([192.168.15.9]) [104.28.152.100]:57518: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:13:53:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10120032&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781877179 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 103.114.59.230
country_id: 1269750
domain: dagl.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:103.114.59.230||TA:103.114.59.230||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 67.227.113.136
country_id: 6252001
domain: dagl.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:67.227.113.136||TA:67.227.113.136||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.9.99
country_id: 3469034
description:
Jun 19 13:54:20 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.9.99 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 190.237.22.87
country_id: 3932488
description:
190.237.22.87 - - [19/Jun/2026:13:54:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6852968&pdata=https%253A%252F%252Ftogodailynews.tg%252Ftransition-verte-energetique-et-numerique-ifc-et-lue-sassocient-pour-stimuler-lintegration-economique-dans-les-balkans-occidentaux&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781877257 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/transition-verte-energetique-et-numerique-ifc-et-lue-sassocient-pour-stimuler-lintegration-economique-dans-les-balkans-occidentaux" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:190.237.22.87


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.17.154
country_id: 3175395
domain: dagl.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:104.239.17.154||TA:104.239.17.154||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.9.99
country_id: 3469034
description:
Jun 19 13:54:27 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.9.99 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 188.133.2.68
country_id: 163843
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-un-nouveau-campus-universitaire-en-gestation-a-kara/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.232.67.40
country_id: 3469034
description:
Jun 19 13:54:54 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.232.67.40 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.225.133.135
country_id: 3996063
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/847061 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.100
country_id: 3469034
description:
2026-06-19 13:56:06 dovecot_plain authenticator failed for H=([192.168.15.9]) [104.28.152.100]:56075: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 160.238.109.252
country_id: 3469034
domain: bawasongroup.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:95015.bawasongroup.com||ServerName:bawasongroup.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7fd58c8cf78fc84bac5d185dd03531393ea35c04||Title:0x8715727c||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 168.167.84.162
country_id: 933860
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/412282463 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 160.153.189.18
country_id: 6252001
domain: drive2millions.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/drive2millions.com/pinfo.php HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 54.254.60.1
country_id: 1880251
description:
[2026-06-19 13:59:51 +0000] info [cpaneld] 54.254.60.1 - 2002281 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 168.194.140.223
country_id: 3865483
description:
Jun 19 14:01:15 ns5 pure-ftpd[3938801]: (?@168.194.140.223) [INFO] New connection from 168.194.140.223


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 14:01:49 +0000] info [cpaneld] 185.55.240.13 - dev03 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dev03 (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.89.140
country_id: 6252001
description:
[2026-06-19 14:03:04 +0000] info [cpaneld] 173.211.89.140 NEW formationfreenet:aE0oDmsXJm7KJY9v address=173.211.89.140,app=cpaneld,creator=formationfreenet,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:14:02:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9989271&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781877763 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:02:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7038052&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781877754 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.138.27.160
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/quest-ce-qui-fait-courir-satram-egca/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.161.70.48
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/faure-gnassingbe-salue-le-memoire-de-idriss-deby-itno HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 43.173.181.140
country_id: 1880251
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:request_uri||MV:togo-les-nouveaux-investissements-industriels-evalues-a-196-milliards-fcfa-a-fin-septembre-2024/||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.13.239.187
country_id: 2921044
description:
2026-06-19 14:05:17 dovecot_plain authenticator failed for H=([127.0.0.1]) [45.13.239.187]:62720: 535 Incorrect authentication data (set_id=supporthosting@cafe.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:07:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 151.243.174.37
country_id: 798544
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:14-07.151.243.174.37||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:07:34 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:09:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131092&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781878182 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 14:10:40 +0000] info [cpaneld] 185.55.240.13 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 113.211.212.223
country_id: 1733045
description:
113.211.212.223 - - [19/Jun/2026:14:10:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13082008&pdata=https%253A%252F%252Ftogodailynews.tg%252F%253Fp%253D13955&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781878182 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/?p=13955" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:113.211.212.223


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.52
country_id: 2635167
description:
[2026-06-19 14:11:18 +0000] info [cpaneld] 5.230.153.52 NEW formationfreenet:aEBCC35Km5cJJDqk address=5.230.153.52,app=cpaneld,creator=formationfreenet,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.212
country_id: 2635167
description:
[2026-06-19 14:12:19 +0000] info [cpaneld] 5.230.133.212 NEW frtwilql:nRvTIL4M0BGOYaG3 address=5.230.133.212,app=cpaneld,creator=frtwilql,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 82.199.221.101
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/10/Image-1-768x1024.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2024/10/Image-1-225x300.jpg 225w, http:/togodailynews.tg/wp-content/uploads/2024/10/Image-1.jpg 810w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 14:13:40 +0000] info [cpaneld] 185.55.240.13 - 92495610 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:14:14:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6931821&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781878485 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:14:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000492&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781878489 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.14.204
country_id: 6252001
description:
[2026-06-19 14:15:39 +0000] info [cpaneld] 195.63.14.204 - pnlpzmfv "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 217.26.179.61
country_id: 3175395
description:
Jun 19 14:17:22 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 217.26.179.61 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 217.26.179.61
country_id: 3175395
description:
Jun 19 14:17:28 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 217.26.179.61 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.127.8.121
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/digitalisation-des-services-publics-la-poste-et-le-commerce-main-dans-la-main/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 200.9.155.126
country_id: 3469034
description:
[2026-06-19 14:20:40 +0000] info [whostmgrd] 200.9.155.126 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.66.132.19
country_id: 2542007
domain: derou.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/derou.tg/fr/nos-projets/Service_Developpement HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 160.153.189.18
country_id: 6252001
domain: offroadcouplings.com.au
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/offroadcouplings.com.au/phpinfo.php HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.9.155.126
country_id: 3469034
description:
[2026-06-19 14:20:38 +0000] info [whostmgrd] 200.9.155.126 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:22:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:22:13 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: modsec
rule: 77317977
name: IM360 WAF: Sensitive Information Disclosure in OptinMonster plugin for WordPress (CVE-2021-39341)
abuser: 196.168.158.231
country_id: 2363686
domain: mo2.mairie.tg
description:
IM360 WAF: Sensitive Information Disclosure in OptinMonster plugin for WordPress (CVE-2021-39341)||RSV:8.19||T:APACHE||User:tqbcalqt||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.168.158.231
country_id: 2363686
domain: mo2.mairie.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/wp-json/wp/v2/users?context=view&who=authors&per_page=50&_fields=id%2Cname&_locale=user||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:24:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9870492&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781879071 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 217.60.195.72
country_id: 290557
description:
2026-06-19 14:25:39 H=([217.60.195.72]) [217.60.195.72]:49727 F=<sales@artistrelatedgroup.com> rejected RCPT <whiteway@white-ways.com>: The mail server could not deliver mail to whiteway@white-ways.com.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 79.106.228.54
country_id: 783754
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2022/01/IMG-20220128-WA0041.jpg 1008w, http:/togodailynews.tg/wp-content/uploads/2022/01/IMG-20220128-WA0041-300x225.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2022/01/IMG-20220128-WA0041-768x576.jpg 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.168.158.231
country_id: 2363686
domain: mo2.mairie.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/wp-json/wp/v2/users/17?context=view&_fields=id%2Cname&_locale=user||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 14:27:55 +0000] info [cpaneld] 185.55.240.13 - wgqhqbem "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:14:30:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9684374&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781879428 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:30:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6840986&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781879427 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.168
country_id: 3017382
description:
[2026-06-19 14:31:41 +0000] info [cpaneld] 5.231.64.168 NEW wwayrzpl:L0xzSdSXEeEPyrUQ address=5.231.64.168,app=cpaneld,creator=wwayrzpl,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:35:24 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:58718: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 61.2.44.54
country_id: 1269750
description:
Jun 19 14:34:35 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 61.2.44.54 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.172.23.22
country_id: 1643084
description:
103.172.23.22 - - [19/Jun/2026:14:35:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10328473&pdata=https%253A%252F%252Fbelali.tg%252Flycee%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781879725 HTTP/2.0" 302 0 belali.tg "https://belali.tg/lycee/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.172.23.22


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:36:00 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:58746: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:35:29 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:58724: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:36:28 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:58771: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:36:57 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:58792: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:68204.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:33dddfc55eae8942b2306b67f64d02a1483dd25b||Title:0xca6e0543||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:37:03 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:37:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 19 14:37:27 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account agstogo@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:37:29 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:58806: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 19 14:38:26 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account agstogo@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:38:28 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:58848: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 160.242.192.72
country_id: 2363686
description:
2026-06-19 14:39:09 dovecot_login authenticator failed for H=(DESKTOP7MG38UM) [160.242.192.72]:49211: 535 Incorrect authentication data (set_id=k.lielo@cfmi.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:38:36 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:58855: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:544f5aa559625e1c6c4e06daaf0ef3cab6f67d20||Title:0x34b3c85c||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.120.72.223
country_id: 3469034
description:
Jun 19 14:38:59 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.120.72.223 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 160.242.192.72
country_id: 2363686
description:
2026-06-19 14:39:28 dovecot_login authenticator failed for H=(DESKTOP7MG38UM) [160.242.192.72]:49213: 535 Incorrect authentication data (set_id=k.lielo@cfmi.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 19 14:39:29 ns5 auth[3886068]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account agstogo@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:39:28 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:58888: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:40:16 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:58915: 435 Unable to authenticate at present: authentication socket read error or premature eof


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:39:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9870698&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781879986 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:9e3af4f7b6a9cc3164b9bf3cea46552dd7045d2f||Title:0xbd6f2641||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 19 14:40:32 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account agstogo@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 102.176.253.226
country_id: 2363686
description:
[2026-06-19 14:40:48 +0000] info [webmaild] 102.176.253.226 - dapr@ucao-uut.tg "GET /cpsess3590490190/3rdparty/roundcube/?_task=mail&_mbox=INBOX HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:41:02 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:58965: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:40:28 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:58920: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:143032d9d6e233dfc9bdbb22a59115c6ddd91b46||Title:0xeff511ed||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:41:34 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:59036: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 19 14:41:32 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account agstogo@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:41:49 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:59059: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ef4de3190b0445c7f805fedcd4b3ac0016288e19||Title:0x2e5edab7||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:42:34 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:59192: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:188b79607a3486e3f90fe4fe1ec0a69e273b4ab1||Title:0x133256b2||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:42:29 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:59164: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 5.127.24.188
country_id: 130758
description:
2026-06-19 14:43:17 H=([5.127.24.188]) [5.127.24.188]:50731 F=<prakash@white-ways.com> rejected RCPT <prakash@white-ways.com>: Sender verify failed


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 19 14:42:27 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account agstogo@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:44:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7116181&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781880240 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:43:31 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:59368: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b5907738584d3eccd0a3ecbb5b6388f7d0f6eb83||Title:0xd7877f74||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 19 14:43:29 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account agstogo@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:43:31 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:59369: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:14:43:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131612&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781880233 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 175.107.235.71
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/afreximbank-soutient-les-partenaires-angolais-en-vue-de-stimuler-lindustrialisation-et-de-renforcer-la-securite-alimentaire HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:44:27 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:59557: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 19 14:44:35 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account agstogo@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:44:42 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:59615: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:4d2a2753a662555fe1ff85e54187a91b64327c05||Title:0x413a210c||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 19 14:45:31 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account agstogo@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 160.242.192.72
country_id: 2363686
description:
2026-06-19 14:45:34 dovecot_login authenticator failed for H=(DESKTOP7MG38UM) [160.242.192.72]:49214: 535 Incorrect authentication data (set_id=k.lielo@cfmi.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:45:28 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:59752: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:45:28 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:59751: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0b1a3bbb3be1120e2b0fe13240c3437a50c39721||Title:0x1a408f52||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:46:28 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:60351: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d02cbe01a0192a1ee896b6982a26ba4c73dc3f7d||Title:0xa5412a8c||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 143.0.83.225
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/insertion-socioeconomique-la-jeunesse-au-coeur-des-actions HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 19 14:46:32 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account agstogo@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:46:40 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:60378: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 130.94.88.77
country_id: 2017370
description:
Jun 19 14:47:27 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account agstogo@cafe.tg has been locked for the attacker IP 130.94.88.77


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:47:29 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:60593: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 130.94.88.77
country_id: 2017370
description:
2026-06-19 14:47:34 dovecot_plain authenticator failed for H=([130.94.88.77]) [130.94.88.77]:60587: 535 Incorrect authentication data (set_id=agstogo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a8557f3305cbf9e21b294b3946b4d015dc664a23||Title:0x83a211cf||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.133.112.198
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/education/page/1028836391 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.125.221.87
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/727415023 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.34.163.145
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/ecobank-au-dessus-des-2-milliards-de-dollars-de-revenus-en-2023 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 14:49:01 +0000] info [cpaneld] 185.55.240.13 - hini89 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user hini89 (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.207.191.101
country_id: 192950
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/rapport-business-ready-les-performances-du-togo-dans-plusieurs-domaines-sont-encourageantes-selon-la-bm HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.118
country_id: 1880251
description:
47.128.121.118 - - [19/Jun/2026:14:50:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6844831&pdata=https%253A%252F%252Fdirect7.tg%252Ftag%252Fmouvement-tigre-revolution%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781880600 HTTP/2.0" 302 0 direct7.tg "https://direct7.tg/tag/mouvement-tigre-revolution/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.118


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.189.89.25
country_id: 3895114
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/urbanisme-durable-la-recette-togolaise-marche HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.190.28.240
country_id: 3996063
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/les-entreprises-libanaises-ont-realise-pres-de-154-milliards-de-fcfa-et-cree-8723-emplois-en-2022-au-togo HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 172.83.255.174
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:172.83.255.174||TA:172.83.255.174||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7e14a804a8a81a7acafe2c1124fe75d137a231f9||Title:0x7fc9a7f7||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:95109cc19a23b788fa6ecae954e2c312af0bab7c||Title:0x9ee28c46||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0936bcfc86bf213878c0cb230ac1baf09f0181eb||Title:0xfddf173b||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.62.145.132
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/education/page/99b2c2 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:54:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:54:14 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b9067b0e680898a53cd1ff682d9288823d52d137||Title:0xc8c7b912||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.3.55.123
country_id: 2921044
domain: cafe.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/cafe.tg/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.3.55.123
country_id: 2921044
domain: www.networkwebcams.co.uk
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.networkwebcams.co.uk/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:55:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119282&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781880955 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.3.55.123
country_id: 2921044
domain: zohraa.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:POST http:/zohraa.com/captchafill.cfm HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 23.129.64.144
country_id: 6252001
description:
2026-06-19 14:55:44 dovecot_plain authenticator failed for H=(8jhi6umqmgyuiqn027qhcg5e3iml8) [23.129.64.144]:30553: 535 Incorrect authentication data (set_id=tps@tps.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:79e8ca2d961283cd51f77c2ccab679d1d46b18cc||Title:0x87c07f7c||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:57:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10130328&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781881037 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 14:56:49 +0000] info [cpaneld] 185.55.240.13 - czqxxxnu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User czqxxxnu has their account suspended. Login blocked.


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f5ea607af9af862d93dc7f0785de2f2083d51371||Title:0x1b14df7f||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f44d49a2e1256c9be5d5157a4116a1b5c3a30b48||Title:0xcc745620||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 94.249.2.238
country_id: 248816
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/982840804 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:14:57:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13133154&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781881047 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:14:57:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6920140&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781881052 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:c7073991bbb3d9deb676e80cadcd4dfdb493d951||Title:0xb6a2d3b6||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 150.228.105.25
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/gestion-des-refugies-au-togo-le-hcr-felicite-le-president-du-conseil HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.121.99.255
country_id: 2589581
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/le-mont-agou-lune-des-attractions-naturelles-les-plus-emblematiques-du-togo/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 14:58:28 +0000] info [cpaneld] 185.55.240.13 - bighostingsnbd "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:bfd10d927b5f722a024f434e69b1f27c598cd110||Title:0x5d3f49e7||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-19 14:59:30 +0000] info [webmaild] 160.242.195.10 - kahare@caissederetraites.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:84dd2ccc2fd58b833a0ce2d121a0eae58091a9dd||Title:0x72b345be||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:af6aaaabe03424072f0e68b762ede445048c28c5||Title:0xb2aa0f9b||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 194.125.121.231
country_id: 2963597
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2022/01/IMG-20220113-WA0000.jpg 1080w, http:/togodailynews.tg/wp-content/uploads/2022/01/IMG-20220113-WA0000-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2022/01/IMG-20220113-WA0000-768x511.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2022/01/IMG-20220113-WA0000-1024x682.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2022/01/IMG-20220113-WA0000-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.92.247.73
country_id: 3469034
description:
Jun 19 15:02:21 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.92.247.73 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:082af3121ba50ae6c8d34cc061aea3ab2dc48255||Title:0x053236e1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.92.247.73
country_id: 3469034
description:
Jun 19 15:02:27 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.92.247.73 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7e658c95ec16b9daaa34efeadbbdbc4a5c1105f5||Title:0xbd9b4f85||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.213.138
country_id: 2363686
description:
[2026-06-19 15:03:33 +0000] info [webmaild] 196.168.213.138 - ldaro@caissederetraites.tg "POST /cpsess4594194562/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [160.242.195.10] != Current IP Address [196.168.213.138]


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 173.211.89.138
country_id: 6252001
domain: cinema.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/cinemafreenetmas/public_html/.896992121887200.php||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.117
country_id: 2635167
description:
[2026-06-19 15:04:03 +0000] info [cpaneld] 5.230.133.117 NEW cinemafreenetmas:_yZhb8zQMYOo5Z4J address=5.230.133.117,app=cpaneld,creator=cinemafreenetmas,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 192.162.210.158
country_id: 690791
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/education/page/66473450 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.211.89.151
country_id: 6252001
description:
[2026-06-19 15:03:31 +0000] info [cpaneld] 173.211.89.151 - qfaclpeg "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 131.100.254.58
country_id: 3469034
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:it-team.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:cdfefbbc1194359470a18d676c77ee0b1c6a4e68||Title:0x106dfbe8||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.169.6.121
country_id: 2363686
description:
[2026-06-19 15:05:01 +0000] info [webmaild] 196.169.6.121 - ssabi@caissederetraites.tg "POST /cpsess8792904192/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [160.242.195.10] != Current IP Address [196.169.6.121]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.186.174.35
country_id: 1269750
description:
2026-06-19 15:06:15 dovecot_login authenticator failed for H=([122.186.174.35]) [122.186.174.35]:44356: 535 Incorrect authentication data (set_id=finance@white-ways.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-19 15:06:19 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:34410: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 119.152.228.169
country_id: 1168579
domain: www.certlogisticstogo.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.certlogisticstogo.com/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 42.200.60.186
country_id: 1819730
description:
Jun 19 15:05:50 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 42.200.60.186 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 49.146.238.172
country_id: 1694008
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-m-abdoulaye-yaya-recoit-lonction-du-bureau-de-lassemblee-nationale HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 144.48.151.177
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/controles-routiers-12-275-usagers-verbalises-de-janvier-a-juin-2023 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 45.137.212.23
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-08.45.137.212.23||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.186.174.35
country_id: 1269750
description:
Jun 19 15:07:54 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.186.174.35 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.122.162
country_id: 2363686
description:
2026-06-19 15:08:11 dovecot_login authenticator failed for H=(SCRPMKD) [196.170.122.162]:63279: 535 Incorrect authentication data


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.74.50.204
country_id: 933860
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/education/page/808398196 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.249
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:61161.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a73beaeb209d24ad189793b9d43a84796622f6be||Title:0x4d01a6cf||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:08:29 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:08:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:10:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9750168&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781881814 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:e783a170a1e73a30c598206f3f1f75d6f7cbb30f||Title:0x2e512651||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.201.125.85
country_id: 1814991
description:
2026-06-19 15:11:24 dovecot_plain authenticator failed for H=(9vw4v7a2ieqc3azx44yw9ll1bj) [111.201.125.85]:41310: 535 Incorrect authentication data (set_id=welldrive@confortis.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 102.64.152.216
country_id: 2363686
domain: lepoint-actu.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:102.64.152.216||TA:102.64.152.216||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 78.173.36.21
country_id: 298795
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2022/02/VTK1.jpeg 720w, http:/togodailynews.tg/wp-content/uploads/2022/02/VTK1-225x300.jpeg 225w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:12:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9540550&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781881917 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-19 15:12:12 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:58324: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:15:12:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10447974&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781881920 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.164.19.193
country_id: 1269750
description:
Jun 19 15:12:36 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.164.19.193 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.228.227.190
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/4e5458 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.226.1.154
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/category/education/page/2106982769 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:4e5d8c0e8fdf9dc5302fd74f3c68777464e8a368||Title:0x67055063||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7ce76f4f168cb8b1caa07c9291ad474e48dda6dc||Title:0x5f561d17||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ffac2a30d8422bb6b060cf3d8197bfc810f20b61||Title:0x2ff269a5||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.71.85
country_id: 3469034
description:
Jun 19 15:15:23 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.71.85 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 218.27.205.159
country_id: 1814991
description:
Jun 19 15:15:24 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 218.27.205.159 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.190.51.37
country_id: 337996
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/developpement-socioeconomique-des-partenaires-prives-font-confiance-au-gouvernement-et-se-mobilisent HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.251.73
country_id: 1269750
description:
Jun 19 15:15:56 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.251.73 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 15:16:25 +0000] info [cpaneld] 185.55.240.13 - wifizoneuser "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wifizoneuser (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.71.85
country_id: 3469034
description:
Jun 19 15:15:30 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.71.85 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:03ea32a1ff810ee885812ae7de16f50a996d4233||Title:0x47f579d4||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.120.181.117
country_id: 3437598
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/07/59f111e0097f1a884941f85e0dabc33f_L.jpg 499w, http:/togodailynews.tg/wp-content/uploads/2021/07/59f111e0097f1a884941f85e0dabc33f_L-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2021/07/59f111e0097f1a884941f85e0dabc33f_L-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:34ef87c2a4197ddfcc25f81f233f42c81cd4f9b1||Title:0xafeded65||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.55.146.14
country_id: 1210997
description:
[2026-06-19 15:16:44 +0000] info [cpaneld] 103.55.146.14 - togoinrdceh "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11004
name: Possible breaking attempt on cpanel service
abuser: 103.55.146.14
country_id: 1210997
description:
[2026-06-19 15:16:44 +0000] info [cpaneld] 103.55.146.14 - wifizoneuser "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wifizoneuser (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:17:49 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:44240: 535 Incorrect authentication data (set_id=mm)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:3e49d6ece61fd101c5128b2fc04741e73da334de||Title:0xf598aeac||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:17:53 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:64708: 535 Incorrect authentication data (set_id=returnurl)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:17:59 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:55384: 535 Incorrect authentication data (set_id=dmitriy)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:17:50 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:21596: 535 Incorrect authentication data (set_id=na)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:18:01 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:46464: 535 Incorrect authentication data (set_id=lucky1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:18:09 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:42856: 535 Incorrect authentication data (set_id=ryleigh)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:81794523b0eef59ad09264c90c1fb5619a9c9fe7||Title:0x8c1a2fb5||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:18:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:61896: 535 Incorrect authentication data (set_id=wekan)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:18:43 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:31326: 535 Incorrect authentication data (set_id=soccer)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:18:51 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:55664: 535 Incorrect authentication data (set_id=basildonian)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:18:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:26688: 535 Incorrect authentication data (set_id=lucky1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.29.181.78
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2023/09/e713792b71be1feadc66712070def539_XL.jpg 602w, http:/togodailynews.tg/wp-content/uploads/2023/09/e713792b71be1feadc66712070def539_XL-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2023/09/e713792b71be1feadc66712070def539_XL-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:18:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:40372: 535 Incorrect authentication data (set_id=abel)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:18:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:20380: 535 Incorrect authentication data (set_id=learning)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:19:44 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:59120: 535 Incorrect authentication data (set_id=kerberos)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 189.56.252.115
country_id: 3469034
description:
Jun 19 15:20:11 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 189.56.252.115 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:19:29 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:37790: 535 Incorrect authentication data (set_id=persik)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:19:47 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:34256: 535 Incorrect authentication data (set_id=ipfixe)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 60.211.244.218
country_id: 1814991
description:
Jun 19 15:19:47 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 60.211.244.218 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.21.78
country_id: 2921044
description:
[2026-06-19 15:20:03 +0000] info [cpaneld] 195.63.21.78 - ljrwwgxg "POST /execute/Fileman/save_file_content?dir=public_html&path=public_html&from_charset=UTF-8&content=%3C%3Fphp+%24s+%3D+%22false%22%3Bif+%28mail%28%24_COOKIE%5B%22email_send_id%22%5D%2C%22Shell+Send+%23%22.%24_COOKIE%5B%22it_id%22%5D%2C%22Cp+Send+Working+..+%23%22.%24_COOKIE%5B%22it_id%22%5D.%22%5CnHash%3A+%22.md5%28time%28%29.uniqid%28%29%29%29%29+%7B%24s+%3D+%22true%22%3B%7Decho+%24s%3B%3F%3E&file=test123Cp.php&file_name=test123Cp.php HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:19:32 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:3804: 535 Incorrect authentication data (set_id=alessand)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:19:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:7164: 535 Incorrect authentication data (set_id=rakuten)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 201.63.138.70
country_id: 3469034
description:
Jun 19 15:19:47 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 201.63.138.70 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:19:41 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:63552: 535 Incorrect authentication data (set_id=test002)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:6ff9d0dac7358e0c42a4af09214165eca1b4c04b||Title:0xee000c85||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.112.223.34
country_id: 1814991
description:
2026-06-19 15:19:51 dovecot_plain authenticator failed for H=(pxoogpr2rpw1e2kkx) [123.112.223.34]:34392: 535 Incorrect authentication data (set_id=visite@cloud-et-racks.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 15:21:22 +0000] info [cpaneld] 185.55.240.13 - 2002281 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:20:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:43426: 535 Incorrect authentication data (set_id=upt)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:20:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:27788: 535 Incorrect authentication data (set_id=\303\234bereinstimmungen)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 118.172.43.114
country_id: 1605651
description:
Jun 19 15:20:38 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 118.172.43.114 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:c4c46e0487402af513b5528665e0b4ea654b416e||Title:0xc625f577||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:20:58 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:8966: 535 Incorrect authentication data (set_id=weboffice)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:20:57 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:53488: 535 Incorrect authentication data (set_id=weboffice)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:20:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:6254: 535 Incorrect authentication data (set_id=sys003)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:20:40 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:28020: 535 Incorrect authentication data (set_id=media1)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 60.211.244.218
country_id: 1814991
description:
Jun 19 15:20:53 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 60.211.244.218 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:20:29 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:34792: 535 Incorrect authentication data (set_id=rsi)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:21:49 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:60522: 535 Incorrect authentication data (set_id=milk123)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:21:59 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:63770: 535 Incorrect authentication data (set_id=den)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 15:22:03 +0000] info [cpaneld] 185.55.240.13 - wifizoneuser "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wifizoneuser (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:22:03 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:23390: 535 Incorrect authentication data (set_id=workflow)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1b10ee629065c73e6d6e70a1e9d8bbcac8bbb110||Title:0x6d246117||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:21:40 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:8222: 535 Incorrect authentication data (set_id=adress)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:21:41 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:53804: 535 Incorrect authentication data (set_id=imprime)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:21:44 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:29272: 535 Incorrect authentication data (set_id=deva)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.184.85.167
country_id: 3469034
description:
Jun 19 15:21:55 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.184.85.167 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:22:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:25056: 535 Incorrect authentication data (set_id=hodakov)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:22:37 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:36876: 535 Incorrect authentication data (set_id=isdn)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:22:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:48982: 535 Incorrect authentication data (set_id=hitech)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:22:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:36986: 535 Incorrect authentication data (set_id=andi)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:22:38 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:39804: 535 Incorrect authentication data (set_id=newstatus)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 160.242.192.72
country_id: 2363686
description:
2026-06-19 15:22:47 dovecot_login authenticator failed for H=(DESKTOP7MG38UM) [160.242.192.72]:49217: 535 Incorrect authentication data (set_id=k.lielo@cfmi.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 113.211.212.189
country_id: 1733045
description:
113.211.212.189 - - [19/Jun/2026:15:22:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6840983&pdata=https%253A%252F%252F24heureinfo.tg%252Fwp-json%252Fwp%252Fv2%252Ftags%252F25249&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781882573 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/wp-json/wp/v2/tags/25249" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:113.211.212.189


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:22:57 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:63676: 535 Incorrect authentication data (set_id=holding)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:24:17 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:36808: 535 Incorrect authentication data (set_id=mmail)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:23:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:60914: 535 Incorrect authentication data (set_id=kariya)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:23:38 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:43968: 535 Incorrect authentication data (set_id=s24)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:23:58 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:41012: 535 Incorrect authentication data (set_id=senior1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:23:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:15774: 535 Incorrect authentication data (set_id=berta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:23:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:13174: 535 Incorrect authentication data (set_id=hirschmann)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:23:41 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:2504: 535 Incorrect authentication data (set_id=certificados)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:24:47 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:16776: 535 Incorrect authentication data (set_id=merchant)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:24:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10186343&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781882698 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:24:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:52226: 535 Incorrect authentication data (set_id=accountant)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:24:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:21850: 535 Incorrect authentication data (set_id=mmail)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:24:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:50280: 535 Incorrect authentication data (set_id=vpntest1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:24:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:42906: 535 Incorrect authentication data (set_id=tj)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:24:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:20330: 535 Incorrect authentication data (set_id=mini)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:25:16 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:25:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:25:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:39976: 535 Incorrect authentication data (set_id=scom)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:25:48 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:53186: 535 Incorrect authentication data (set_id=ers)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:25:32 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:57008: 535 Incorrect authentication data (set_id=badgirl)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:25:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:14730: 535 Incorrect authentication data (set_id=academics)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:25:55 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:37620: 535 Incorrect authentication data (set_id=margot)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:25:55 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:8100: 535 Incorrect authentication data (set_id=inspection)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 15:26:30 +0000] info [cpaneld] 185.55.240.13 - whmcsadmin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user whmcsadmin (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:3e893f898ffa3506da65b706d4f8ceaf51bb1dc2||Title:0x71fab3cd||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:26:43 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:14172: 535 Incorrect authentication data (set_id=danilov)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:26:46 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:48616: 535 Incorrect authentication data (set_id=connect)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:27:02 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:53006: 535 Incorrect authentication data (set_id=driver)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:15:26:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10055020&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781882792 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:26:41 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:9900: 535 Incorrect authentication data (set_id=sabrina)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:26:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6907286&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781882794 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:26:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:47588: 535 Incorrect authentication data (set_id=k4)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:26:58 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:34822: 535 Incorrect authentication data (set_id=ld)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:27:50 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:47472: 535 Incorrect authentication data (set_id=approver)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:27:55 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:48802: 535 Incorrect authentication data (set_id=sakura)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:27:29 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:24654: 535 Incorrect authentication data (set_id=boot)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:27:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:50744: 535 Incorrect authentication data (set_id=badin)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a8a46f4e27fd54ddfb925c32a3e2e761fa77da0d||Title:0x02382269||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:27:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:54544: 535 Incorrect authentication data (set_id=xhtml)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:27:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:23766: 535 Incorrect authentication data (set_id=priyanka)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:27:37 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:54906: 535 Incorrect authentication data (set_id=badin)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-19 15:29:13 +0000] info [cpaneld] 102.54.238.57 - e.sanvee "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.sanvee (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:28:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:53500: 535 Incorrect authentication data (set_id=bigpoppa)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:28:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:60448: 535 Incorrect authentication data (set_id=memorial)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:28:32 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:24538: 535 Incorrect authentication data (set_id=test19)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:28:36 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:50714: 535 Incorrect authentication data (set_id=test8)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-19 15:28:57 +0000] info [webmaild] 196.171.46.177 - sandra.amana@togointerim.net "GET /cpsess7593460014/3rdparty/roundcube/?_task=mail&_mbox=INBOX.Sent HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:28:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:43748: 535 Incorrect authentication data (set_id=insite)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:28:43 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:21260: 535 Incorrect authentication data (set_id=freezer)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:29:50 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:16874: 535 Incorrect authentication data (set_id=oka)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:30:09 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:40296: 535 Incorrect authentication data (set_id=theta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:29:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:26418: 535 Incorrect authentication data (set_id=tempuser)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:29:32 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:61666: 535 Incorrect authentication data (set_id=sysop)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:29:37 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:24734: 535 Incorrect authentication data (set_id=test23)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:727ca3ece7cbc5de38089fc42be1e73f5117a12d||Title:0x98ff7686||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:29:43 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:44414: 535 Incorrect authentication data (set_id=nicky)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:30:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:29870: 535 Incorrect authentication data (set_id=tara)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:30:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:57488: 535 Incorrect authentication data (set_id=romulus)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:30:53 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:60540: 535 Incorrect authentication data (set_id=recorder)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:30:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:65402: 535 Incorrect authentication data (set_id=progress)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:30:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:20830: 535 Incorrect authentication data (set_id=radojicic)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 15:30:53 +0000] info [cpaneld] 185.55.240.13 - mpqypjjp "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mpqypjjp (has_cpuser_file failed)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:31:00 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:15994: 535 Incorrect authentication data (set_id=recorder)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:31:06 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:42386: 535 Incorrect authentication data (set_id=ales)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:31:49 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:18198: 535 Incorrect authentication data (set_id=elens)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 193.106.155.11
country_id: 798544
description:
Jun 19 15:32:06 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 193.106.155.11 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.146
country_id: 1880251
description:
47.128.96.146 - - [19/Jun/2026:15:32:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9868392&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fcas-du-nouveau-variant-omicron-au-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781883142 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/cas-du-nouveau-variant-omicron-au-togo/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.146


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:31:29 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:23630: 535 Incorrect authentication data (set_id=algerine)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:31:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:36320: 535 Incorrect authentication data (set_id=tele2)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:31:49 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:29796: 535 Incorrect authentication data (set_id=liranher)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d47d6e1fbb0d6b895dd0e1f7cc6ddbbea1aa3018||Title:0x04a92b50||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:31:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:53770: 535 Incorrect authentication data (set_id=bigpoppa)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:31:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:33466: 535 Incorrect authentication data (set_id=zenoss)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:32:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:21022: 535 Incorrect authentication data (set_id=ecg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:32:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:58420: 535 Incorrect authentication data (set_id=alpina)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:32:43 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:14390: 535 Incorrect authentication data (set_id=auction)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:32:32 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:52630: 535 Incorrect authentication data (set_id=persik)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:188749863d7ce07f96099832389faac86626a324||Title:0x59a10501||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:32:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:6020: 535 Incorrect authentication data (set_id=groupname)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:32:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:14658: 535 Incorrect authentication data (set_id=strona)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:33:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:55276: 535 Incorrect authentication data (set_id=zh)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:33:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:34728: 535 Incorrect authentication data (set_id=escaner)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:cd6ae58f65b9e0d25becc857ba3714fd8642346e||Title:0xf5695c05||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:33:46 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:25804: 535 Incorrect authentication data (set_id=teco)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:33:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:55322: 535 Incorrect authentication data (set_id=nitzanger)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:33:49 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:45836: 535 Incorrect authentication data (set_id=davidm)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:34:05 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:21704: 535 Incorrect authentication data (set_id=teco)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:33:52 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:27550: 535 Incorrect authentication data (set_id=lukas)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:34:36 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:3132: 535 Incorrect authentication data (set_id=tome)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:34:39 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:2966: 535 Incorrect authentication data (set_id=ramona)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:34:56 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:50044: 535 Incorrect authentication data (set_id=francesouth1-a)


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 194.165.16.163
country_id: 2993457
description:
Jun 19 15:34:37 ns5 pure-ftpd[4007555]: (?@194.165.16.163) [INFO] New connection from 194.165.16.163


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:34:39 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:1692: 535 Incorrect authentication data (set_id=itw)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7b1256febd425ade0ed2bba4d489d03f83794ab6||Title:0x0a109c11||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.223.247.240
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/950313959 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:34:40 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:6706: 535 Incorrect authentication data (set_id=abc12345)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 91.75.85.90
country_id: 290557
description:
91.75.85.90 - - [19/Jun/2026:15:34:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6975898&pdata=https%253A%252F%252Ftogodailynews.tg%252Fwp-json%252Fwp%252Fv2%252Ftags%252F201&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781883278 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/wp-json/wp/v2/tags/201" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:91.75.85.90


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:34:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:57884: 535 Incorrect authentication data (set_id=ginger)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.120.102
country_id: 3469034
description:
Jun 19 15:36:15 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.120.102 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:35:38 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:39620: 535 Incorrect authentication data (set_id=c7)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:35:44 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:48694: 535 Incorrect authentication data (set_id=lele)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:35:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:54322: 535 Incorrect authentication data (set_id=boletines)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:35:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:25724: 535 Incorrect authentication data (set_id=ebed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:35:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:63048: 535 Incorrect authentication data (set_id=irodriguez)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:35:37 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:37996: 535 Incorrect authentication data (set_id=cardinal)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:36:49 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:58624: 535 Incorrect authentication data (set_id=minecraft)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:51db90b507dcb7e3d19742018e16da86f8ef48ee||Title:0xf0e70bee||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:37:21 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:54274: 535 Incorrect authentication data (set_id=ute)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:36:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:3916: 535 Incorrect authentication data (set_id=custom)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:36:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:13872: 535 Incorrect authentication data (set_id=rdw)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 105.209.179.124
country_id: 953987
description:
105.209.179.124 - - [19/Jun/2026:15:36:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6644887&pdata=https%253A%252F%252Fcfpj.tg%252Feedo-82210mitems%252Feti.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781883409 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/eedo-82210mitems/eti.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:105.209.179.124


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:36:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:13868: 535 Incorrect authentication data (set_id=larin)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:36:29 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:24892: 535 Incorrect authentication data (set_id=guest3)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:36:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:1496: 535 Incorrect authentication data (set_id=tid)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:37:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:27408: 535 Incorrect authentication data (set_id=promo)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:c69d0eb34658181bee3532b4509205983de399b2||Title:0x7b960cbd||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:37:39 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:54344: 535 Incorrect authentication data (set_id=contabilidad)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.122.162
country_id: 2363686
description:
2026-06-19 15:37:56 dovecot_login authenticator failed for H=(SCRPMKD) [196.170.122.162]:53706: 535 Incorrect authentication data


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:37:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:39304: 535 Incorrect authentication data (set_id=ute)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:37:39 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:36420: 535 Incorrect authentication data (set_id=mtc)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:37:43 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:34210: 535 Incorrect authentication data (set_id=gmuser)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:37:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:63074: 535 Incorrect authentication data (set_id=tm)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:38:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:10104: 535 Incorrect authentication data (set_id=satoh)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:38:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6776686&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781883505 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.251
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:2a22a807ed22f82fb965c80b7a6c1eb68cf08206||Title:0xdd281a7d||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.241
country_id: 130758
description:
2026-06-19 15:38:35 dovecot_login authenticator failed for H=(localhost) [62.60.130.241]:49982: 535 Incorrect authentication data (set_id=root)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:2dbd0683d97bbf83b158f72829ff87222bdf1c1a||Title:0xc181631e||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:38:55 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:30224: 535 Incorrect authentication data (set_id=cps)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:38:29 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:10066: 535 Incorrect authentication data (set_id=srvc13)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:38:29 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:12482: 535 Incorrect authentication data (set_id=box)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:38:44 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:18186: 535 Incorrect authentication data (set_id=assistance)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:38:41 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:6102: 535 Incorrect authentication data (set_id=cyclone)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:39:38 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:37368: 535 Incorrect authentication data (set_id=technics)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 181.225.195.91
country_id: 3865483
description:
Jun 19 15:39:51 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 181.225.195.91 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:39:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:39:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:46514: 535 Incorrect authentication data (set_id=anzen)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:39:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:59002: 535 Incorrect authentication data (set_id=kashmir)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:39:44 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:54780: 535 Incorrect authentication data (set_id=weston)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:39:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:46674: 535 Incorrect authentication data (set_id=transparencia)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:6533ec1fe205a1e8cbc86b84199f92a4f238802f||Title:0x6b6d5395||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:39:48 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:45512: 535 Incorrect authentication data (set_id=webroot)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:39:52 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.124.239.254
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/8a837a HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:40:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:8022: 535 Incorrect authentication data (set_id=abas)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:40:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:13378: 535 Incorrect authentication data (set_id=ftpusr)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:40:32 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:15336: 535 Incorrect authentication data (set_id=abas)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:40:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:65262: 535 Incorrect authentication data (set_id=conferences)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:15:41:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6722928&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781883676 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-19 15:40:32 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:9250: 535 Incorrect authentication data (set_id=weston)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:40:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:2416: 535 Incorrect authentication data (set_id=authsmtp)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:40:57 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:11660: 535 Incorrect authentication data (set_id=dylan)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.122.206.250
country_id: 1210997
domain: cfpj.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ksoaadmin.cfpj.tg||ServerName:cfpj.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:54b5aa3ecf1f4ef410077fb900d3766a10428274||Title:0xa2aa54b7||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:41:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9869921&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781883681 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-19 15:41:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:45922: 535 Incorrect authentication data (set_id=frontier)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-19 15:41:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:49502: 535 Incorrect authentication data (set_id=coupon)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-19 15:41:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:42888: 535 Incorrect authentication data (set_id=zl)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 41.78.138.33
country_id: 2363686
domain: togodailynews.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/wp-json/wp/v2/users/1?context=view&_fields=id%2Cname&_locale=user||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.172.114.249
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/7b8d62 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-19 15:41:46 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:52368: 535 Incorrect authentication data (set_id=contest)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 188.114.89.9
country_id: 798544
description:
Jun 19 15:42:15 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 188.114.89.9 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-19 15:41:45 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:39986: 535 Incorrect authentication data (set_id=quotation)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 188.114.89.9
country_id: 798544
description:
Jun 19 15:42:28 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 188.114.89.9 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 34.27.42.6
country_id: 6252001
description:
[2026-06-19 15:43:28 +0000] info [cpaneld] 34.27.42.6 - cafe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 41.78.138.33
country_id: 2363686
domain: togodailynews.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/wp-json/wp/v2/users?context=view&search=gmail.com&_locale=user||


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 43.172.195.87
country_id: 1880251
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:request_uri||MV:remaniement-ministeriel-au-togo-nouvelles-tetes-et-nouveaux-defis-pour-lexecutif/||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.121.135.161
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/2768b8 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.168.26.122
country_id: 2363686
description:
[2026-06-19 15:44:41 +0000] info [cpaneld] 196.168.26.122 - centif "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 193.188.123.183
country_id: 290291
description:
193.188.123.183 - - [19/Jun/2026:15:44:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13015447&pdata=https%253A%252F%252F24heureinfo.tg%252Fsocial%252Fneuf-fumeurs-sur-dix-commencent-a-fumer-avant-davoir-18-ans-avertit-loms&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781883812 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/social/neuf-fumeurs-sur-dix-commencent-a-fumer-avant-davoir-18-ans-avertit-loms" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:193.188.123.183


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 15:45:27 +0000] info [cpaneld] 185.55.240.13 - tqttxcvn "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tqttxcvn (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 103.114.58.253
country_id: 1269750
domain: lacs1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:103.114.58.253||TA:103.114.58.253||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 196.168.26.122
country_id: 2363686
description:
[2026-06-19 15:47:56 +0000] info [cpaneld] 196.168.26.122 NEW centif:hrIsYkHydfSMEo3A address=196.168.26.122,app=cpaneld,creator=centif,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>le d\xc3\xa9veloppement des activit\xc3\xa9s maritimes et portuaires offre de nouvelles perspectives \xc3\xa0 l\xe2\x80\x99\xc3\xa9conomie togolaise. il rend \xc3\xa9galement n\xc3\xa9cessaire l\xe2\x80\x99adaptation continue du cadre juridique en mati\xc3\xa8re de pr\xc3\xa9vention et de gestion des risques de pollution maritime.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99est dans ce contexte que la deuxi\xc3\xa8me chambre du parlement, r\xc3\xa9unie en s\xc3\xa9ance pl\xc3\xa9ni\xc3\xa8re sous la pr\xc3\xa9sidence de monsieur barry moussa barqu\xc3\xa9, pr\xc3\xa9sident du s\xc3\xa9nat, a adopt\xc3\xa9 \xc3\xa0 l\xe2\x80\x99unanimit\xc3\xa9 deux projets de loi autorisant l\xe2\x80\x99adh\xc3\xa9sion du togo \xc3\xa0 la convention internationale de 1992 portant cr\xc3\xa9ation du fonds international d\xe2\x80\x99indemnisation pour les dommages dus \xc3\xa0 la pollution par les hydrocarbures (fipol) et au protocole de 2000 sur la pr\xc3\xa9paration, la lutte et la coop\xc3\xa9ration contre les \xc3\xa9v\xc3\xa9nements de pollution par les substances nocives et potentiellement dangereuses (oprc-hns 2000).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31402,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_bandeau-renseignements.jpg\" alt=\"\" class=\"wp-image-31402\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>ces deux projets de loi visent \xc3\xa0 renforcer le cadre national de pr\xc3\xa9vention, de gestion et de r\xc3\xa9paration des dommages li\xc3\xa9s aux pollutions maritimes. alors que le protocole oprc-hns permettra au pays de d\xc3\xa9velopper davantage ses capacit\xc3\xa9s de pr\xc3\xa9paration et d\xe2\x80\x99intervention face aux risques de pollution impliquant des substances dangereuses, la convention fipol offre un m\xc3\xa9canisme compl\xc3\xa9mentaire d\xe2\x80\x99indemnisation des victimes en cas de dommages caus\xc3\xa9s par les hydrocarbures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>selon les pr\xc3\xa9sidents des groupes parlementaires unir, apr et c5, ces deux projets de loi permettront au togo de mieux anticiper les risques li\xc3\xa9s \xc3\xa0 la pollution maritime tout en renfor\xc3\xa7ant les m\xc3\xa9canismes de pr\xc3\xa9vention et d'indemnisation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour sa part, edem kokou tengu\xc3\xa9, ministre d\xc3\xa9l\xc3\xa9gu\xc3\xa9 charg\xc3\xa9 de l'\xc3\xa9conomie maritime, a rappel\xc3\xa9 que le m\xc3\xa9canisme fipol offre une garantie suppl\xc3\xa9mentaire aux victimes de pollutions maritimes tout en \xc3\xa9vitant que le co\xc3\xbbt d'une catastrophe environnementale ne repose exclusivement sur les finances publiques. il a \xc3\xa9galement soulign\xc3\xa9 que le protocole oprc-hns permettra au pays de disposer de plans d'urgence, d'\xc3\xa9quipements sp\xc3\xa9cialis\xc3\xa9s et de m\xc3\xa9canismes de coop\xc3\xa9ration internationale pour faire face aux incidents impliquant des substances dangereuses.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cl\xc3\xb4turant son intervention, le ministre a exprim\xc3\xa9 le souhait que <em>\xc2\xab cette \xc5\x93uvre serve durablement la protection de nos c\xc3\xb4tes, la dignit\xc3\xa9 de ceux qui vivent de la mer et le rayonnement de notre pays au sein de la communaut\xc3\xa9 maritime internationale pour notre g\xc3\xa9n\xc3\xa9ration comme pour celles qui nous suivront \xc2\xbb.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>enfin, le pr\xc3\xa9sident du s\xc3\xa9nat a salu\xc3\xa9 l'unanimit\xc3\xa9 ayant marqu\xc3\xa9 le vote des deux textes. estimant que le togo est <em>\xc2\xab une porte ouverte sur le monde \xc2\xbb,</em> il a soulign\xc3\xa9 que cette ouverture impose \xc3\xa9galement un devoir de vigilance. selon lui, l'adh\xc3\xa9sion aux deux textes permettra au pays de se doter d'un v\xc3\xa9ritable <em>\xc2\xab bouclier contre l'impr\xc3\xa9visible \xc2\xbb</em> et de renforcer la protection de son espace maritime.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"622px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:622px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>adopt\xc3\xa9s en premi\xc3\xa8re lecture par l\xe2\x80\x99assembl\xc3\xa9e nationale avant leur transmission au s\xc3\xa9nat, les deux projets de loi seront renvoy\xc3\xa9s \xc3\xa0 la premi\xc3\xa8re chambre pour leur adoption d\xc3\xa9finitive, conform\xc3\xa9ment \xc3\xa0 la proc\xc3\xa9dure de navette parlementaire. cette \xc3\xa9tape permettra ensuite au gouvernement de proc\xc3\xa9der au d\xc3\xa9p\xc3\xb4t des instruments d\xe2\x80\x99adh\xc3\xa9sion aupr\xc3\xa8s de l\xe2\x80\x99organisation maritime internationale et de poursuivre l\xe2\x80\x99adaptation du dispositif juridique national.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>rappelons qu\xe2\x80\x99au cours de cette s\xc3\xa9ance pl\xc3\xa9ni\xc3\xa8re, m. makimore manou maki, suppl\xc3\xa9ant de feu s\xc3\xa9nateur yagninim bitokotipou a officiellement pris fonction au s\xc3\xa9nat conform\xc3\xa9ment aux dispositions l\xc3\xa9gislatives et pratiques en mati\xc3\xa8re parlementaire.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>an</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 119.155.161.92
country_id: 1168579
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/actualite/detail/assemblee-generale-ordinaire-et-budgetaire-du-cat-04-mars-2025 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 92.241.36.62
country_id: 248816
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/actualite/detail/seance-de-restitution-de-la-mission-dimmersion-du-cat-a-lasa-ci HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:52:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9934446&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781884345 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 94.143.198.59
country_id: 1527747
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/financement-des-jeunes-entrepreneurs-togolais-ecobank-togo-a-injecte-1-790-929-983-fcfa-en-deux-ans/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.159.97.229
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/une-soiree-hommage-pour-eugene-atigan-le-1er-juillet-prochain HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 213.230.86.115
country_id: 1512440
description:
2026-06-19 15:53:34 H=([213.230.86.115]) [213.230.86.115]:33250 F=<John@4452.com> rejected RCPT <kumar@white-ways.com>: Sender verify failed


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:54:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:54:16 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-19 15:55:14 +0000] info [webmaild] 196.171.46.177 - matthieu.awide@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 128.199.123.37
country_id: 1880251
description:
[2026-06-19 15:56:23 +0000] info [cpaneld] 128.199.123.37 - mesyscom "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.13.18.36
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/2065522255 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.226.63.206
country_id: 3895114
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1931964823 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.177.142.95
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/nouvelle-strategie-du-togo-pour-le-sahel-stabilite-et-cooperation-au-coeur-des-priorites HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:15:56:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13394890&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781884595 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>la saison des pluies est souvent synonyme de fra\xc3\xaecheur, mais dans nos villes, elle rime trop fr\xc3\xa9quemment avec parcours du combattant. alors que l\xe2\x80\x99\xc3\xa9tat de nos routes, dans les quartiers, laisse d\xc3\xa9j\xc3\xa0 \xc3\xa0 d\xc3\xa9sirer, un ph\xc3\xa9nom\xc3\xa8ne vient aggraver la situation : l\xe2\x80\x99incivisme des riverains. entre l\xe2\x80\x99obstruction des voies devant les concessions et le manque de civisme collectif, circuler devient un enfer.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>d\xc3\xa8s les premi\xc3\xa8res gouttes de pluie, le constat est le m\xc3\xaame. les nids-de-poule se transforment en v\xc3\xa9ritables marres d'eau, le bitume s'\xc3\xa9clipse sous les eaux et les voies non bitum\xc3\xa9es deviennent de gigantesques bourbiers. la d\xc3\xa9gradation des routes en saison des pluies, aggrav\xc3\xa9e par les gros camions, est un d\xc3\xa9fi majeur pour les municipalit\xc3\xa9s.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cependant, la nature n'est pas la seule responsable. le manque d\xe2\x80\x99infrastructures de drainage adapt\xc3\xa9es et le d\xc3\xa9faut d\xe2\x80\x99entretien transforment rapidement le r\xc3\xa9seau routier en pi\xc3\xa8ge pour les automobilistes et les motocyclistes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31402,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_bandeau-renseignements.jpg\" alt=\"\" class=\"wp-image-31402\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>a cet \xc3\xa9tat d\xc3\xa9fectueux de nos routes, s\xe2\x80\x99ajoute un ph\xc3\xa9nom\xc3\xa8ne des plus incompris&nbsp;: le blocage des routes devant les concessions, en plein c\xc5\x93ur des quartiers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99est ici que le b\xc3\xa2t blesse. pour prot\xc3\xa9ger leur propre concession des inondations ou de la boue, certains riverains n\xe2\x80\x99h\xc3\xa9sitent pas \xc3\xa0 \xc3\xa9riger des barri\xc3\xa8res de fortune. d\xc3\xa9p\xc3\xb4ts sauvages de sable \xc3\xa0 leur devanture, installation de pneus, de grosses pierres ou de troncs d'arbre pour d\xc3\xa9vier les v\xc3\xa9hicules, ou les plus dingues qui creusent des tranch\xc3\xa9es artisanales non signal\xc3\xa9es\xe2\x80\xa6 et le r\xc3\xa9sultat est sans appel&nbsp;: la route d\xc3\xa9j\xc3\xa0 difficilement praticable, devient partiellement ou totalement bloqu\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"650px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:650px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>cet incivisme routier force les usagers \xc3\xa0 faire de longs d\xc3\xa9tours, cr\xc3\xa9e des embouteillages monstres dans les ruelles secondaires et augmente consid\xc3\xa9rablement le risque d'accidents.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l\xe2\x80\x99autre visage de cet incivisme en saison des pluies est la gestion des d\xc3\xa9chets. pour beaucoup, la pluie est une \"opportunit\xc3\xa9\" pour vider les poubelles dans les eaux de ruissellement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ces d\xc3\xa9chets finissent par obstruer les caniveaux et les buses d'\xc3\xa9vacuation. et comme cons\xc3\xa9quence directe, l'eau sort de son lit, envahit la chauss\xc3\xa9e, stagne devant les concessions et acc\xc3\xa9l\xc3\xa8re la destruction du r\xc3\xa9seau routier. c\xe2\x80\x99est un cercle vicieux o\xc3\xb9 tout le monde est perdant.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que pour retrouver des routes praticables, m\xc3\xaame en pleine saison des pluies, plusieurs leviers doivent \xc3\xaatre activ\xc3\xa9s. d\xe2\x80\x99abord, le bon sens par la sensibilisation de proximit\xc3\xa9 qui devra rappeler aux uns et aux autres que la route est un espace public. <strong>bloquer une voie pour prot\xc3\xa9ger son pas de porte d\xc3\xa9place simplement le probl\xc3\xa8me chez le voisin.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'on devrait solliciter l\xe2\x80\x99action des autorit\xc3\xa9s locales, notamment les municipalit\xc3\xa9s qui doivent faire appliquer la loi de mani\xc3\xa8re stricte&nbsp;; amendes pour occupation anarchique ou d\xc3\xa9gradation de la voie publique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>enfin, organiser des travaux communautaires tels que des op\xc3\xa9rations de curage des caniveaux avant et pendant la saison des pluies pour faciliter l'\xc3\xa9vacuation des eaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>m\xc3\xaame si le fait est que la saison des pluies met \xc3\xa0 rude \xc3\xa9preuve nos infrastructures routi\xc3\xa8res, rejeter syst\xc3\xa9matiquement la faute sur l'\xc3\x89tat ou la m\xc3\xa9t\xc3\xa9o ne r\xc3\xa9soudra rien si, \xc3\xa0 notre \xc3\xa9chelle, nous bloquons les voies de passage. le civisme commence au pas de notre porte. pour le bien de tous, lib\xc3\xa9rons les routes !</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>la r\xc3\xa9daction</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.36.228.103
country_id: 286963
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-les-grandes-decisions-du-conseil-des-ministres-du-lundi-17-octobre-2022 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 15:57:23 +0000] info [cpaneld] 185.55.240.13 - einguval "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user einguval (has_cpuser_file failed)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>la saison des pluies est souvent synonyme de fra\xc3\xaecheur, mais dans nos villes, elle rime trop fr\xc3\xa9quemment avec parcours du combattant. alors que l\xe2\x80\x99\xc3\xa9tat de nos routes, dans les quartiers, laisse d\xc3\xa9j\xc3\xa0 \xc3\xa0 d\xc3\xa9sirer, un ph\xc3\xa9nom\xc3\xa8ne vient aggraver la situation : l\xe2\x80\x99incivisme des riverains. entre l\xe2\x80\x99obstruction des voies devant les concessions et le manque de civisme collectif, circuler devient un enfer.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>d\xc3\xa8s les premi\xc3\xa8res gouttes de pluie, le constat est le m\xc3\xaame. les nids-de-poule se transforment en v\xc3\xa9ritables marres d'eau, le bitume s'\xc3\xa9clipse sous les eaux et les voies non bitum\xc3\xa9es deviennent de gigantesques bourbiers. la d\xc3\xa9gradation des routes en saison des pluies, aggrav\xc3\xa9e par les gros camions, est un d\xc3\xa9fi majeur pour les municipalit\xc3\xa9s.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cependant, la nature n'est pas la seule responsable. le manque d\xe2\x80\x99infrastructures de drainage adapt\xc3\xa9es et le d\xc3\xa9faut d\xe2\x80\x99entretien transforment rapidement le r\xc3\xa9seau routier en pi\xc3\xa8ge pour les automobilistes et les motocyclistes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31402,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_bandeau-renseignements.jpg\" alt=\"\" class=\"wp-image-31402\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>a cet \xc3\xa9tat d\xc3\xa9fectueux de nos routes, s\xe2\x80\x99ajoute un ph\xc3\xa9nom\xc3\xa8ne des plus incompris&nbsp;: le blocage des routes devant les concessions, en plein c\xc5\x93ur des quartiers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99est ici que le b\xc3\xa2t blesse. pour prot\xc3\xa9ger leur propre concession des inondations ou de la boue, certains riverains n\xe2\x80\x99h\xc3\xa9sitent pas \xc3\xa0 \xc3\xa9riger des barri\xc3\xa8res de fortune. d\xc3\xa9p\xc3\xb4ts sauvages de sable \xc3\xa0 leur devanture, installation de pneus, de grosses pierres ou de troncs d'arbre pour d\xc3\xa9vier les v\xc3\xa9hicules, ou les plus dingues qui creusent des tranch\xc3\xa9es artisanales non signal\xc3\xa9es\xe2\x80\xa6 et le r\xc3\xa9sultat est sans appel&nbsp;: la route d\xc3\xa9j\xc3\xa0 difficilement praticable, devient partiellement ou totalement bloqu\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cet incivisme routier force les usagers \xc3\xa0 faire de longs d\xc3\xa9tours, cr\xc3\xa9e des embouteillages monstres dans les ruelles secondaires et augmente consid\xc3\xa9rablement le risque d'accidents.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l\xe2\x80\x99autre visage de cet incivisme en saison des pluies est la gestion des d\xc3\xa9chets. pour beaucoup, la pluie est une \"opportunit\xc3\xa9\" pour vider les poubelles dans les eaux de ruissellement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ces d\xc3\xa9chets finissent par obstruer les caniveaux et les buses d'\xc3\xa9vacuation. et comme cons\xc3\xa9quence directe, l'eau sort de son lit, envahit la chauss\xc3\xa9e, stagne devant les concessions et acc\xc3\xa9l\xc3\xa8re la destruction du r\xc3\xa9seau routier. c\xe2\x80\x99est un cercle vicieux o\xc3\xb9 tout le monde est perdant.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que pour retrouver des routes praticables, m\xc3\xaame en pleine saison des pluies, plusieurs leviers doivent \xc3\xaatre activ\xc3\xa9s. d\xe2\x80\x99abord, le bon sens par la sensibilisation de proximit\xc3\xa9 qui devra rappeler aux uns et aux autres que la route est un espace public. <strong>bloquer une voie pour prot\xc3\xa9ger son pas de porte d\xc3\xa9place simplement le probl\xc3\xa8me chez le voisin.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'on devrait solliciter l\xe2\x80\x99action des autorit\xc3\xa9s locales, notamment les municipalit\xc3\xa9s qui doivent faire appliquer la loi de mani\xc3\xa8re stricte&nbsp;; amendes pour occupation anarchique ou d\xc3\xa9gradation de la voie publique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"650px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:650px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>enfin, organiser des travaux communautaires tels que des op\xc3\xa9rations de curage des caniveaux avant et pendant la saison des pluies pour faciliter l'\xc3\xa9vacuation des eaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>m\xc3\xaame si le fait est que la saison des pluies met \xc3\xa0 rude \xc3\xa9preuve nos infrastructures routi\xc3\xa8res, rejeter syst\xc3\xa9matiquement la faute sur l'\xc3\x89tat ou la m\xc3\xa9t\xc3\xa9o ne r\xc3\xa9soudra rien si, \xc3\xa0 notre \xc3\xa9chelle, nous bloquons les voies de passage. le civisme commence au pas de notre porte. pour le bien de tous, lib\xc3\xa9rons les routes !</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>la r\xc3\xa9daction</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.169.219
country_id: 3175395
description:
Jun 19 15:59:05 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.169.219 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 15:59:14 +0000] info [cpaneld] 185.55.240.13 - benoit21112@gmail.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.58.124
country_id: 2363686
description:
[2026-06-19 16:00:15 +0000] info [webmaild] 196.171.58.124 - info@matosshop.tg "GET /cpsess2610794873/3rdparty/roundcube/?_task=mail&_mbox=INBOX HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.188.93.161
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/896289136 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.58.124
country_id: 2363686
description:
[2026-06-19 16:00:38 +0000] info [webmaild] 196.171.58.124 - info@matosshop.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 47.11.16.236
country_id: 1269750
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-le-gouvernement-recadre-les-prix-des-produits-de-premiere-necessite HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.73.123.216
country_id: 2453866
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/climat-des-affaires-la-ceet-rend-gratuit-les-frais-de-raccordement-de-120-a-150-kva-aux-pme-pmi HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.209.92.163
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/18eme-fil-le-pal-presente-les-mesures-de-facilitation-des-echanges-aux-usagers HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.41.63.47
country_id: 286963
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/8d998f HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.186.23.118
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/umoa-titres-le-togo-mobilise-110-milliards-fcfa HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 91.223.133.134
country_id: 6252001
domain: tdn.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:16-02.91.223.133.134||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.149.174.112
country_id: 2782113
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-usa-faure-gnassingbe-et-florizelle-liser-renforcent-le-partenariat-economique/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - e.senahounvo@davakconsulting.com [06/19/2026:16:04:33 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: e.senahounvo@davakconsulting.com


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-19 16:04:30 +0000] info [webmaild] 196.171.46.177 - gilbert.kakabiti@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.179.76.91
country_id: 3624060
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/covid-19-7-nouveaux-patients-testes-positifs-et-2-nouveaux-deces-enregistres/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.10.91
country_id: 3469034
description:
Jun 19 16:05:33 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.10.91 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.253.159.94
country_id: 732800
description:
Jun 19 16:05:30 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.253.159.94 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 16:05:32 +0000] info [cpaneld] 185.55.240.13 - hcbcmrio "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User hcbcmrio has their account suspended. Login blocked.


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 47.236.201.89
country_id: 1880251
description:
Jun 19 16:06:20 ns5 pure-ftpd[4030835]: (?@47.236.201.89) [WARNING] Authentication failed for user [admin]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.55.146.14
country_id: 1210997
description:
[2026-06-19 16:07:25 +0000] info [cpaneld] 103.55.146.14 - bighostingsnbd "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:16:06:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12885151&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781885190 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.153.164
country_id: 2363686
description:
[2026-06-19 16:08:20 +0000] info [cpaneld] 196.168.153.164 - zephyradmin "GET /cpsess0744996410/3rdparty/wpt/index.php?action=/list-plugins HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [102.64.175.119] != Current IP Address [196.168.153.164]


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 35.165.215.140
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:16:09:24 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:16:09:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - e.senahounvo@davakconsulting.com [06/19/2026:16:09:28 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: e.senahounvo@davakconsulting.com


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.169.251.246
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/operations-foraines-detablissement-de-nationalites-robert-dussey-cible-quatre-pays HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:16:09:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7171483&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781885380 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.137.237.141
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/10/f5b77b1c4081df526254513b48fb7b76_XL.jpg 605w, http:/togodailynews.tg/wp-content/uploads/2024/10/f5b77b1c4081df526254513b48fb7b76_XL-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2024/10/f5b77b1c4081df526254513b48fb7b76_XL-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 176.103.6.174
country_id: 690791
description:
Jun 19 16:11:09 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 176.103.6.174 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.221.133.142
country_id: 690791
description:
Jun 19 16:15:16 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.221.133.142 has been locked due to Imunify RBL


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 157.15.40.6
country_id: 1643084
domain: cinema.free.netmaster.tg
description:
IM360 WAF: Bad file extension||RSV:8.19||T:APACHE||MVN:REQUEST_FILENAME||MV:/storage/logs/laravel.log||User:cinemafreenetmas||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.241
country_id: 130758
description:
2026-06-19 16:16:01 dovecot_login authenticator failed for H=(localhost) [62.60.130.241]:58030: 535 Incorrect authentication data (set_id=root)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 167.249.126.81
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-la-justice-togolaise-a-lere-du-numerique HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 104.28.163.71
country_id: 2510769
description:
[2026-06-19 16:16:49 +0000] info [whostmgrd] 104.28.163.71 - root "GET / HTTP/1.1" DEFERRED LOGIN whostmgrd: cookie ip check: IP address has changed: IP Address [104.28.162.223] != Current IP Address [104.28.163.71]


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.24.61.231
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/807a7c HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.28.163.71
country_id: 2510769
description:
104.28.163.71 - - [19/Jun/2026:16:16:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9737323&pdata=https%253A%252F%252Fns5.netmaster.tg%253A2087%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781885807 HTTP/2.0" 302 0 ns5.netmaster.tg "https://ns5.netmaster.tg:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.28.163.71


plugin: ossec
rule: 11009
name: WHM login success
abuser: 104.28.163.71
country_id: 2510769
description:
[2026-06-19 16:16:52 +0000] info [whostmgrd] 104.28.163.71 NEW root:CSEQgHJQtFukQnlN address=104.28.163.71,app=whostmgrd,creator=root,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11011
name: WHM SSO login failed
abuser: 104.28.163.71
country_id: 2510769
description:
[2026-06-19 16:16:49 +0000] info [whostmgrd] 104.28.163.71 PURGE root:F0I3wOIiPfFg9ziT badpass [cookie ip check: IP address has changed: IP Address [104.28.162.223] != Current IP Address [104.28.163.71]]


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 45.159.12.129
country_id: 2661886
domain: prod.pnls.tg
description:
IM360 WAF: Bad file extension||RSV:8.19||T:APACHE||MVN:REQUEST_FILENAME||MV:/language/en-GB/en-GB.com_jce.ini||User:pnls||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:16:21:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9596306&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781886081 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.248.64.198
country_id: 2363686
description:
[2026-06-19 16:22:41 +0000] info [cpaneld] 80.248.64.198 - emupgdkn "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emupgdkn (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:16:24:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10064328&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781886255 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 11004
name: Possible breaking attempt on cpanel service
abuser: 80.248.64.198
country_id: 2363686
description:
[2026-06-19 16:24:19 +0000] info [cpaneld] 80.248.64.198 - emupgdkn "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emupgdkn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 16:24:10 +0000] info [cpaneld] 185.55.240.13 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.248.64.198
country_id: 2363686
description:
[2026-06-19 16:24:18 +0000] info [cpaneld] 80.248.64.198 - emupgdkn "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emupgdkn (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.10.25
country_id: 2300660
description:
Jun 19 16:24:16 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.10.25 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 95.104.22.69
country_id: 614540
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/773518579 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.10.25
country_id: 2300660
description:
Jun 19 16:24:31 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.10.25 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:16:24:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.87
country_id: 2077456
description:
103.108.92.87 - - [19/Jun/2026:16:24:39 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 14.192.214.72
country_id: 1733045
description:
14.192.214.72 - - [19/Jun/2026:16:26:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9804954&pdata=https%253A%252F%252F24heureinfo.tg%252Feducation%252Ftogo-le-ministre-hodin-constate-le-demarrage-effectif-de-lexamen-du-cfa%252Ffeed&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781886361 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/education/togo-le-ministre-hodin-constate-le-demarrage-effectif-de-lexamen-du-cfa/feed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:14.192.214.72


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.238.29.59
country_id: 130758
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/10/2c538c8f63a83e01bdc7778f40f54af9_L.jpg 500w, http:/togodailynews.tg/wp-content/uploads/2021/10/2c538c8f63a83e01bdc7778f40f54af9_L-300x199.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2021/10/2c538c8f63a83e01bdc7778f40f54af9_L-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.9.144
country_id: 3175395
description:
Jun 19 16:29:25 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.9.144 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.24.61.4
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/2054353079 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.183.141.189
country_id: 1605651
description:
2026-06-19 16:29:56 dovecot_plain authenticator failed for H=clnhost1959.thaidata.cloud (y72zcajr25g87hdek) [202.183.141.189]:42010: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 193.187.114.121
country_id: 597427
domain: haplucia-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:193.187.114.121||TA:193.187.114.121||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.28.166.140
country_id: 953987
description:
104.28.166.140 - - [19/Jun/2026:16:30:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6919111&pdata=https%253A%252F%252Ftogodailynews.tg%252Fconseil-national-du-credit-badanam-patoki-banques-tp&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781886621 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/conseil-national-du-credit-badanam-patoki-banques-tp" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.28.166.140


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.9.144
country_id: 3175395
description:
Jun 19 16:29:31 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.9.144 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 202.183.141.189
country_id: 1605651
description:
Jun 19 16:29:54 ns5 auth[3966673]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 202.183.141.189 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 198.202.171.156
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:16-31.198.202.171.156||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.17.19
country_id: 6251999
description:
[2026-06-19 16:30:37 +0000] info [whostmgrd] 195.63.17.19 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 16:31:49 +0000] info [cpaneld] 185.55.240.13 - heroes "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user heroes (has_cpuser_file failed)


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 205.210.31.215
country_id: 6252001
description:
Jun 19 16:33:49 ns5 pure-ftpd[4052505]: (?@205.210.31.215) [INFO] New connection from 205.210.31.215


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 198.202.171.156
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:198.202.171.156||TA:198.202.171.156||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.112.41
country_id: 1880251
description:
47.128.112.41 - - [19/Jun/2026:16:34:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10262678&pdata=https%253A%252F%252Fwww.snb.tg%252Fhistory&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781886892 HTTP/2.0" 302 0 www.snb.tg "https://www.snb.tg/history" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.112.41


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.17.124.26
country_id: 690791
description:
Jun 19 16:35:49 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.17.124.26 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.191.55.51
country_id: 3996063
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/bdafa7 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.143
country_id: 1880251
description:
47.128.96.143 - - [19/Jun/2026:16:42:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13210723&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Frmo-job-center-recrute%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781887334 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/rmo-job-center-recrute/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.143


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 16:43:25 +0000] info [cpaneld] 185.55.240.13 - ANANI "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ANANI (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.191.80.118
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/11/WhatsApp-Image-2024-11-05-at-21.38.00.jpeg 1600w, http:/togodailynews.tg/wp-content/uploads/2024/11/WhatsApp-Image-2024-11-05-at-21.38.00-300x200.jpeg 300w, http:/togodailynews.tg/wp-content/uploads/2024/11/WhatsApp-Image-2024-11-05-at-21.38.00-1024x682.jpeg 1024w, http:/togodailynews.tg/wp-content/uploads/2024/11/WhatsApp-Image-2024-11-05-at-21.38.00-768x512.jpeg 768w, http:/togodailynews.tg/wp-content/uploads/2024/11/WhatsApp-Image-2024-11-05-at-21.38.00-1536x1023.jpeg 1536w, http:/togodailynews.tg/wp-content/uploads/2024/11/WhatsApp-Image-2024-11-05-at-21.38.00-272x182.jpeg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.18
country_id: 6252001
description:
205.169.39.18 - - [19/Jun/2026:16:44:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13157318&pdata=http%253A%252F%252Fconfortis.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781887438 HTTP/1.1" 302 0 confortis.tg "http://confortis.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.18


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 196.0.124.2
country_id: 226074
description:
Jun 19 16:43:31 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 196.0.124.2 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.190.63.110
country_id: 337996
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/le-volontariat-togolais-un-moteur-de-croissance-inclusive-et-durable/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 83.97.118.250
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:16-44.83.97.118.250||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.190.63.110
country_id: 337996
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/le-volontariat-togolais-un-moteur-de-croissance-inclusive-et-durable/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 31.134.0.48
country_id: 241170
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:16-45.31.134.0.48||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 140.235.168.249
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:16-44.140.235.168.249||RSV:8.19||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 176.126.111.139
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:176.126.111.139||TA:176.126.111.139||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 16:45:31 +0000] info [cpaneld] 185.55.240.13 - kavznjyb "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kavznjyb (has_cpuser_file failed)


plugin: modsec
rule: 77316904
name: IM360 WAF: Track IP which is in the web-spammers RBL
abuser: 176.126.111.139
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Track IP which is in the web-spammers RBL||Rules:r33309||MV:16-45.176.126.111.139||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 16:46:56 +0000] info [cpaneld] 185.55.240.13 - einguval "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user einguval (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 80.248.64.198
country_id: 2363686
description:
80.248.64.198 - - [19/Jun/2026:16:47:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6855830&pdata=https%253A%252F%252Fns5.netmaster.tg%253A2083%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781887635 HTTP/2.0" 302 0 ns5.netmaster.tg "https://ns5.netmaster.tg:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:80.248.64.198


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 197.46.84.30
country_id: 357994
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/7eme-edition-du-forum-international-afrique-developpement-les-atouts-economiques-du-togo-mis-en-avant/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 168.0.227.99
country_id: 3469034
description:
Jun 19 16:48:03 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 168.0.227.99 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 216.26.244.12
country_id: 2635167
domain: tilitulab.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tilitulab.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.84.193.110
country_id: 226074
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/749204006 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.9.29
country_id: 3175395
description:
Jun 19 16:47:33 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.9.29 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 16:48:01 +0000] info [cpaneld] 185.55.240.13 - Turbolte "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user Turbolte (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.71.228
country_id: 3469034
description:
Jun 19 16:48:06 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.71.228 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 82.194.51.78
country_id: 290291
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:HEAD http:/togodailynews.tg/wp-content/uploads/2026/06/725803952_1346336050758625_8537351566847766639_n-300x183.webp HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 144.124.192.119
country_id: 1512440
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/480503031 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.35.161.83
country_id: 3469034
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/actualite/detail/seance-de-restitution-de-la-mission-dimmersion-du-cat-a-lasa-ci HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.249.79.75
country_id: 1562822
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/actualite/detail/deuxieme-edition-de-la-journee-du-cat HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.77.51.31
country_id: 99237
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/actualite/detail/prix-jean-julien-codjovi HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.216.58.204
country_id: 1835841
description:
Jun 19 16:51:55 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.216.58.204 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.67.155.206
country_id: 298795
description:
Jun 19 16:51:27 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.67.155.206 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.216.58.204
country_id: 1835841
description:
Jun 19 16:53:17 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.216.58.204 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 202.162.204.223
country_id: 1643084
description:
202.162.204.223 - - [19/Jun/2026:16:53:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7115629&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Farcep-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781887989 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/arcep-togo/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:202.162.204.223


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.168.56.34
country_id: 3469034
description:
Jun 19 16:53:24 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.168.56.34 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.238.122.158
country_id: 2921044
description:
[2026-06-19 16:53:50 +0000] info [webmaild] 195.238.122.158 - papson.fiatuwo@mesyscom.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password hash is missing from system (user probably does not exist)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.216.58.204
country_id: 1835841
description:
Jun 19 16:53:48 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.216.58.204 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:16:53:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10405784&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781888028 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.168.56.34
country_id: 3469034
description:
Jun 19 16:53:29 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.168.56.34 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.71.228
country_id: 3469034
description:
Jun 19 16:53:29 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.71.228 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 16:54:35 +0000] info [cpaneld] 185.55.240.13 - sprocaadmin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.201
country_id: 1880251
description:
47.128.96.201 - - [19/Jun/2026:16:57:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10250695&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fdr-ayigan-oscar-dalmeida%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781888276 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/dr-ayigan-oscar-dalmeida/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.201


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-19 16:58:17 +0000] info [webmaild] 196.171.46.177 - gilbert.kakabiti@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 43.173.175.50
country_id: 1880251
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:request_uri||MV:736-de-taux-dexecution-physique-a-fin-decembre-2023/||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.176.94.222
country_id: 1643084
description:
103.176.94.222 - - [19/Jun/2026:16:59:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9934489&pdata=https%253A%252F%252Fwww.fomda.tg%252Fcontact&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781888376 HTTP/2.0" 302 0 www.fomda.tg "https://www.fomda.tg/contact" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.176.94.222


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.226.33.125
country_id: 3865483
description:
Jun 19 16:59:57 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.226.33.125 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 41.207.186.41
country_id: 2363686
description:
[2026-06-19 17:00:32 +0000] info [cpaneld] 41.207.186.41 NEW emupgdkn:GyHRTh_eAhbYCi76 address=41.207.186.41,app=cpaneld,creator=emupgdkn,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 81.162.244.170
country_id: 690791
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/d5c9ba HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.130
country_id: 1880251
description:
47.128.96.130 - - [19/Jun/2026:17:01:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13016427&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fetudes-anglophones-en-afrique%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781888487 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/etudes-anglophones-en-afrique/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.130


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.12
country_id: 1880251
description:
47.128.96.12 - - [19/Jun/2026:17:02:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10052721&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fcas-du-nouveau-variant-omicron-au-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781888525 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/cas-du-nouveau-variant-omicron-au-togo/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.12


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.234.11.124
country_id: 3469034
description:
45.234.11.124 - - [19/Jun/2026:17:03:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6842776&pdata=https%253A%252F%252Fmacite.tg%252F2023%252F11%252F10%252Fsommet-afrique-arabie-saoudite-le-chef-de-letat-togolais-faure-gnassingbe-a-riyad-prend-part-aux-travaux-ce-vendredi%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781888591 HTTP/2.0" 302 0 macite.tg "https://macite.tg/2023/11/10/sommet-afrique-arabie-saoudite-le-chef-de-letat-togolais-faure-gnassingbe-a-riyad-prend-part-aux-travaux-ce-vendredi/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.4804.1277 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.234.11.124


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.71.98
country_id: 3469034
description:
Jun 19 17:02:27 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.71.98 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.92.247.136
country_id: 3469034
description:
Jun 19 17:02:43 ns5 auth[4050127]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.92.247.136 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 160.179.1.143
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-json/wp/v2/posts/13568 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 129.222.147.208
country_id: 192950
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/8e878f HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.8.19.229
country_id: 6252001
description:
[2026-06-19 17:07:02 +0000] info [cpaneld] 45.8.19.229 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:17:08:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6855573&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781888883 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 170.246.249.71
country_id: 3469034
domain: fbafrica.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:16693.fbafrica.com||ServerName:fbafrica.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:9daa3e80f8eb9438ce8cc41c1e2c286a50b67103||Title:0x53ef6603||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-19 17:08:21 +0000] info [cpaneld] 102.54.238.57 - k.eklou "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user k.eklou (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 197.42.23.67
country_id: 357994
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/60678c HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.190.209.171
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/finab-solution-idoine-pour-la-visibilite-et-le-financement-des-artistes-et-createurs-beninois HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 180.148.214.136
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/74858c HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-19 17:10:23 +0000] info [webmaild] 160.242.195.10 - fkossivi@caissederetraites.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 129.150.53.35
country_id: 1880251
description:
2026-06-19 17:11:23 dovecot_plain authenticator failed for H=(tq4bko35v039ek3jg9msuio) [129.150.53.35]:42750: 535 Incorrect authentication data (set_id=hilaire.mensah@mesyscom.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 17:11:10 +0000] info [cpaneld] 185.55.240.13 - einguval "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user einguval (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.18.166.75
country_id: 1269750
description:
Jun 19 17:11:50 ns5 auth[4075686]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.18.166.75 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.136.191
country_id: 3469034
description:
Jun 19 17:12:06 ns5 auth[4075686]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.136.191 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.65.104.165
country_id: 3932488
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/partenaire HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 184.174.57.184
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:17-14.184.174.57.184||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 154.21.38.119
country_id: 6251999
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:17-14.154.21.38.119||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 154.6.81.46
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:17-14.154.6.81.46||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 82.21.238.134
country_id: 3624060
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:17-14.82.21.238.134||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 45.148.10.15
country_id: 2750405
domain: api.butodra.tg
description:
IM360 WAF: Bad file extension||RSV:8.19||T:APACHE||MVN:REQUEST_FILENAME||MV:/.env.backup||User:vefzejhd||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 104.253.75.209
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:17-14.104.253.75.209||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 82.27.242.89
country_id: 3190538
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:17-14.82.27.242.89||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 161.123.54.25
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:17-14.161.123.54.25||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.27.134.37
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/93b7c6 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.142.30.215
country_id: 2400553
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/lutte-contre-le-vih-le-togo-fait-des-progres/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.189.236.106
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/03/d4d8b45b601b7384b5d17b2f5cb6c5cc_L.webp 500w, http:/togodailynews.tg/wp-content/uploads/2025/03/d4d8b45b601b7384b5d17b2f5cb6c5cc_L-300x225.webp 300w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 102.129.62.45
country_id: 953987
description:
Jun 19 17:16:50 ns5 auth[4083928]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 102.129.62.45 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>le pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9, a, dans le cadre des festivit\xc3\xa9s comm\xc3\xa9moratives des 66ans d\xe2\x80\x99ind\xc3\xa9pendance du togo, livr\xc3\xa9 un message pognant dont voici l\xe2\x80\x99int\xc3\xa9gralit\xc3\xa9.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>discours de son excellence monsieur faure \xc3\x89ssozimna gnassingb\xc3\x89, pr\xc3\xa9sident du conseil de la r\xc3\xa9publique togolaise, \xc3\xa0 l\xe2\x80\x99occasion du 66\xc3\xa8me anniversaire de l\xe2\x80\x99ind\xc3\xa9pendance de la r\xc3\xa9publique togolaise</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\xc2\xab&nbsp;togolaises, togolais.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en ce 27 avril, notre nation se rassemble. elle se souvient. elle honore. elle c\xc3\xa9l\xc3\xa8bre. elle c\xc3\xa9l\xc3\xa8bre un moment fondateur. un moment de courage. un moment de dignit\xc3\xa9. l\xe2\x80\x99ind\xc3\xa9pendance du togo. il y a 66 ans, le togo faisait un choix d\xc3\xa9cisif. le choix de la libert\xc3\xa9. le choix de la souverainet\xc3\xa9. le choix de la dignit\xc3\xa9. ce f\xc3\xbbt un combat port\xc3\xa9 par des femmes et des hommes d\xc3\xa9termin\xc3\xa9s. un combat pour la ma\xc3\xaetrise de leur destin. un combat pour notre avenir.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":29832,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/04/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-29832\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>aujourd\xe2\x80\x99hui, au-del\xc3\xa0 du souvenir et de la c\xc3\xa9l\xc3\xa9bration de ce combat, nous devons aussi nous en inspirer pour regarder devant nous. car l\xe2\x80\x99ind\xc3\xa9pendance n\xe2\x80\x99est pas un h\xc3\xa9ritage. c\xe2\x80\x99est une responsabilit\xc3\xa9. une responsabilit\xc3\xa9 vis-\xc3\xa0-vis de notre histoire. une responsabilit\xc3\xa9 vis-\xc3\xa0-vis de notre pr\xc3\xa9sent. et surtout, une responsabilit\xc3\xa9 vis-\xc3\xa0-vis de notre avenir.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans un monde plus incertain, plus instable, plus exigeant, les d\xc3\xa9fis sont nombreux : sommes-nous capables de faire vivre cette ind\xc3\xa9pendance ? sommes-nous capables de la renforcer ? sommes-nous capables de la traduire en progr\xc3\xa8s concret pour chaque togolaise et chaque togolais ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99est \xc3\xa0 ces questions que nous devons r\xc3\xa9pondre. et c\xe2\x80\x99est dans cet esprit que je voudrais partager avec vous cinq convictions essentielles pour notre avenir collectif.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>mon premier message est que l\xe2\x80\x99ind\xc3\xa9pendance n\xe2\x80\x99est pas un acquis. c\xe2\x80\x99est une responsabilit\xc3\xa9 permanente. l\xe2\x80\x99ind\xc3\xa9pendance ne se r\xc3\xa9sume pas \xc3\xa0 une date. elle ne se r\xc3\xa9sume pas \xc3\xa0 un symbole. elle est une exigence de tous les jours.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\xc3\x8atre ind\xc3\xa9pendant aujourd\xe2\x80\x99hui, ce n\xe2\x80\x99est pas seulement \xc3\xaatre souverain en droit. c\xe2\x80\x99est se donner les moyens d\xe2\x80\x99agir concr\xc3\xa8tement. c\xe2\x80\x99est \xc3\xaatre capable de d\xc3\xa9cider par nous-m\xc3\xaames, de produire par nous-m\xc3\xaames, de prot\xc3\xa9ger notre pays et notre population, et enfin de ma\xc3\xaetriser notre destin collectif.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l\xe2\x80\x99ind\xc3\xa9pendance r\xc3\xa9elle, elle se mesure. elle se mesure \xc3\xa0 la solidit\xc3\xa9 de nos institutions, \xc3\xa0 la vitalit\xc3\xa9 de notre \xc3\xa9conomie et \xc3\xa0 la coh\xc3\xa9sion de notre soci\xc3\xa9t\xc3\xa9. elle se mesure \xc3\xa0 notre capacit\xc3\xa9 \xc3\xa0 faire des choix et \xc3\xa0 les assumer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99est cette ind\xc3\xa9pendance-l\xc3\xa0 que nous devons continuer \xc3\xa0 construire. une ind\xc3\xa9pendance concr\xc3\xa8te. une ind\xc3\xa9pendance exigeante. une ind\xc3\xa9pendance responsable. une ind\xc3\xa9pendance qui ne se proclame pas, mais qui se d\xc3\xa9montre tous les jours.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>mon deuxi\xc3\xa8me message est que, dans le monde d\xe2\x80\x99aujourd\xe2\x80\x99hui, la souverainet\xc3\xa9 et la r\xc3\xa9silience sont des conditions de notre ind\xc3\xa9pendance. le monde a chang\xc3\xa9. il est plus incertain, plus fragment\xc3\xa9 et aussi plus dangereux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans notre r\xc3\xa9gion, les d\xc3\xa9fis s\xc3\xa9curitaires persistent. au niveau mondial, les tensions se multiplient. les \xc3\xa9quilibres se fragilisent. les financements deviennent plus rares. dans ce contexte, nous devons \xc3\xaatre lucides. nous devons \xc3\xaatre surtout solides.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la souverainet\xc3\xa9 n\xe2\x80\x99est plus un principe abstrait. elle est une n\xc3\xa9cessit\xc3\xa9. elle signifie r\xc3\xa9duire nos d\xc3\xa9pendances, s\xc3\xa9curiser ce qui est essentiel, \xc3\xaatre en mesure de faire face aux chocs. la souverainet\xc3\xa9 ne signifie pas se fermer. elle ne signifie pas s\xe2\x80\x99isoler. au contraire. elle suppose d\xe2\x80\x99\xc3\xaatre ouverts. mais d\xe2\x80\x99\xc3\xaatre ouverts avec lucidit\xc3\xa9. elle suppose des partenariats \xc3\xa9quilibr\xc3\xa9s, une diplomatie active et un engagement r\xc3\xa9gional fort.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>mon troisi\xc3\xa8me message est que pour c\xc3\xa9l\xc3\xa9brer l\xe2\x80\x99ind\xc3\xa9pendance, il faut d\xe2\x80\x99abord r\xc3\xa9pondre aux attentes de la population.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l\xe2\x80\x99ind\xc3\xa9pendance ne prend tout son sens que si elle am\xc3\xa9liore la vie quotidienne. les attentes de nos concitoyens sont connues. elles sont l\xc3\xa9gitimes. elles concernent l\xe2\x80\x99emploi, en particulier pour les jeunes. elles concernent l\xe2\x80\x99acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau, \xc3\xa0 l\xe2\x80\x99\xc3\xa9lectricit\xc3\xa9, \xc3\xa0 la sant\xc3\xa9, \xc3\xa0 l\xe2\x80\x99\xc3\xa9ducation. elles concernent aussi les conditions de vie et la dignit\xc3\xa9. elles concernent aussi l\xe2\x80\x99\xc3\xa9quit\xc3\xa9 entre les territoires et entre les populations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>face \xc3\xa0 ces attentes, la responsabilit\xc3\xa9 de l\xe2\x80\x99\xc3\x89tat est claire. apporter des r\xc3\xa9ponses concr\xc3\xa8tes. des r\xc3\xa9sultats. pas des promesses. des actions visibles. et c\xe2\x80\x99est dans cet esprit que le gouvernement agit. et c\xe2\x80\x99est dans cet esprit que nous pr\xc3\xa9parons aujourd\xe2\x80\x99hui la prochaine \xc3\xa9tape de notre action collective.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>mon quatri\xc3\xa8me message concerne cette prochaine \xc3\xa9tape : pour consolider notre ind\xc3\xa9pendance, nous devons pr\xc3\xa9parer l\xe2\x80\x99avenir.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":30044,\"width\":\"712px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/04/otr_sam.jpg\" alt=\"\" class=\"wp-image-30044\" style=\"width:712px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99est tout l\xe2\x80\x99enjeu de notre feuille de route pour les 6 prochaines ann\xc3\xa9es. cette feuille de route s\xe2\x80\x99inscrit dans la continuit\xc3\xa9 de nos efforts. nous avons engag\xc3\xa9 des r\xc3\xa9formes. nous avons obtenu des r\xc3\xa9sultats. nous avons pos\xc3\xa9 des bases. nous devons maintenant aller beaucoup plus loin avec plus de discipline, plus de clart\xc3\xa9 mais plus d\xe2\x80\x99impact. cette nouvelle \xc3\xa9tape repose sur trois exigences qui s\xe2\x80\x99imposent \xc3\xa0 l\xe2\x80\x99action du gouvernement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ces trois exigences, je les ai d\xc3\xa9j\xc3\xa0 pr\xc3\xa9sent\xc3\xa9es devant vous, dans mon discours de fin d\xe2\x80\x99ann\xc3\xa9e : <strong><em>prot\xc3\xa9ger, rassembler, transformer</em></strong>. ce ne sont pas des slogans. ce ne sont pas juste des mots. ce sont v\xc3\xa9ritablement les principes qui guideront l\xe2\x80\x99action du gouvernement dans les ann\xc3\xa9es \xc3\xa0 venir. des principes concrets, des principes op\xc3\xa9rationnels, des principes qui vont se traduire dans votre vie quotidienne. c\xe2\x80\x99est pourquoi je veux prendre un moment pour revenir sur leur sens.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>prot\xc3\xa9ger c\xe2\x80\x99est d\xe2\x80\x99abord s\xc3\xa9curiser les fondations de la r\xc3\xa9publique.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>prot\xc3\xa9ger notre territoire, c\xe2\x80\x99est garantir la paix et la s\xc3\xa9curit\xc3\xa9. c\xe2\x80\x99est assurer la pr\xc3\xa9sence de l\xe2\x80\x99\xc3\x89tat partout, y compris dans les zones les plus expos\xc3\xa9es notamment au nord de notre pays.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>prot\xc3\xa9ger notre population, c\xe2\x80\x99est garantir aussi les conditions d\xe2\x80\x99une vie digne. c\xe2\x80\x99est faire en sorte qu\xe2\x80\x99un village ait acc\xc3\xa8s \xc3\xa0 l\xe2\x80\x99eau, qu\xe2\x80\x99un quartier ait de l\xe2\x80\x99\xc3\xa9lectricit\xc3\xa9, qu\xe2\x80\x99une famille puisse se soigner, qu\xe2\x80\x99un enfant puisse aller \xc3\xa0 l\xe2\x80\x99\xc3\xa9cole.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>prot\xc3\xa9ger notre pays enfin, c\xe2\x80\x99est aussi pr\xc3\xa9parer l\xe2\x80\x99avenir, c\xe2\x80\x99est \xc3\xaatre capable de faire face aux chocs notamment climatiques, c\xe2\x80\x99est r\xc3\xa9duire nos d\xc3\xa9pendances, c\xe2\x80\x99est s\xe2\x80\x99assurer que nous avons les r\xc3\xa9serves de nourriture, d\xe2\x80\x99eau, d\xe2\x80\x99\xc3\xa9nergie dont nous avons besoin. prot\xc3\xa9ger, c\xe2\x80\x99est donc le socle fondamental sans lequel aucune autre politique publique ne peut tenir.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>rassembler : rassembler, c\xe2\x80\x99est assurer notre coh\xc3\xa9sion nationale. c\xe2\x80\x99est rassembler notre territoire et r\xc3\xa9duire les in\xc3\xa9galit\xc3\xa9s entre r\xc3\xa9gions. c\xe2\x80\x99est faire en sorte que le d\xc3\xa9veloppement soit mieux r\xc3\xa9parti. c\xe2\x80\x99est donner aux collectivit\xc3\xa9s les moyens d\xe2\x80\x99agir.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>rassembler notre population, c\xe2\x80\x99est ensuite lutter contre la pauvret\xc3\xa9 et contre les in\xc3\xa9galit\xc3\xa9s. c\xe2\x80\x99est permettre \xc3\xa0 chacun de trouver sa place dans la soci\xc3\xa9t\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>rassembler notre pays, c\xe2\x80\x99est aussi renforcer le lien entre l\xe2\x80\x99\xc3\x89tat et les citoyens, par le dialogue et la transparence. c\xe2\x80\x99est construire la confiance dans des institutions efficaces et dans une justice fiable.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>rassembler, c\xe2\x80\x99est donc garantir l\xe2\x80\x99\xc3\xa9quilibre.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>transformer enfin, c\xe2\x80\x99est changer durablement notre \xc3\xa9conomie. c\xe2\x80\x99est transformer notre territoire et moderniser notre agriculture. produire mieux, transformer localement et cr\xc3\xa9er plus de valeur ici pour nos concitoyens.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":29925,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/04/zio-lodge.jpg\" alt=\"\" class=\"wp-image-29925\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>transformer, c\xe2\x80\x99est aussi investir dans les bonnes comp\xc3\xa9tences pour notre population. c\xe2\x80\x99est former nos jeunes aux m\xc3\xa9tiers dont notre \xc3\xa9conomie a besoin et faire grandir les talents. c\xe2\x80\x99est faire en sorte que chaque formation m\xc3\xa8ne \xc3\xa0 un emploi d\xc3\xa9cent et durable dans l\xe2\x80\x99agriculture, dans l\xe2\x80\x99industrie et dans les services.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>transformer notre pays enfin, c\xe2\x80\x99est aussi renforcer nos infrastructures logistiques et notre capacit\xc3\xa9 industrielle. des routes qui relient nos march\xc3\xa9s entre eux, et qui permettent d\xe2\x80\x99acheminer nos productions vers les march\xc3\xa9s de nos voisins. un port performant qui facilite les \xc3\xa9changes dans l\xe2\x80\x99ensemble de la sous-r\xc3\xa9gion. des zones industrielles o\xc3\xb9 nos entreprises peuvent investir, produire, se d\xc3\xa9velopper. c\xe2\x80\x99est faire en sorte que davantage de richesses soient produites ici, au togo. transformer, c\xe2\x80\x99est donc la dynamique. prot\xc3\xa9ger. rassembler.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>transformer</strong>. un socle, un \xc3\xa9quilibre, une dynamique. ces trois exigences forment un tout au service de notre population, de notre territoire, de notre pays.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour finir, mon cinqui\xc3\xa8me et dernier message est que l\xe2\x80\x99avenir du togo se construira avec tous les togolais. une strat\xc3\xa9gie, aussi bonne soit-elle, ne r\xc3\xa9ussit pas seule. elle ne r\xc3\xa9ussit que si elle est port\xc3\xa9e, partag\xc3\xa9e, appropri\xc3\xa9e. la ve r\xc3\xa9publique nous engage \xc3\xa0 changer notre mani\xc3\xa8re de faire. je souhaite une action publique plus ouverte, plus concert\xc3\xa9e, plus responsable.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans les prochaines semaines, une phase d\xe2\x80\x99\xc3\xa9changes sera engag\xc3\xa9e, avec les institutions, avec le secteur priv\xc3\xa9, avec la soci\xc3\xa9t\xc3\xa9 civile, avec nos partenaires, pour enrichir la r\xc3\xa9flexion du gouvernement autour de l\xe2\x80\x99\xc3\xa9laboration de cette feuille de route. pour la partager. pour la parfaire. pour la faire vivre. car cette strat\xc3\xa9gie ne peut r\xc3\xa9ussir que si elle vous appartient \xc3\xa0 tous.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mes chers compatriotes,</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l\xe2\x80\x99ind\xc3\xa9pendance n\xe2\x80\x99est pas un souvenir. c\xe2\x80\x99est un projet. un projet exigeant. un projet collectif. un projet pour l\xe2\x80\x99avenir. un projet qui nous oblige aussi mais surtout qui nous rassemble.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99est ensemble que nous devons continuer \xc3\xa0 construire un togo plus souverain, plus r\xc3\xa9silient, plus juste, et plus prosp\xc3\xa8re. que dieu b\xc3\xa9nisse notre pays le togo. vive la r\xc3\xa9publique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>vive le togo.&nbsp;\xc2\xbb</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.203.50.35
country_id: 2963597
description:
Jun 19 17:20:31 ns5 auth[4083928]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.203.50.35 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.170.45.140
country_id: 2363686
description:
[2026-06-19 17:21:54 +0000] info [webmaild] 196.170.45.140 - wages@wages.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:17:23:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10405277&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781889815 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 186.219.48.27
country_id: 3658394
description:
186.219.48.27 - - [19/Jun/2026:17:23:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9673068&pdata=https%253A%252F%252Ftdn.tg%252Ftogo-casier-judiciaire-informatise-etapes%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781889826 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/togo-casier-judiciaire-informatise-etapes/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.6479.1632 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:186.219.48.27


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.96.172
country_id: 3469034
description:
Jun 19 17:24:35 ns5 auth[4083928]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.96.172 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 14.192.212.100
country_id: 1733045
description:
14.192.212.100 - - [19/Jun/2026:17:25:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7052651&pdata=http%253A%252F%252Ftogodailynews.tg%252Fle-prof-robert-dussey-dresse-le-bilan-2023-de-la-diplomatie-togolaise&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781889910 HTTP/1.1" 302 0 togodailynews.tg "http://togodailynews.tg/le-prof-robert-dussey-dresse-le-bilan-2023-de-la-diplomatie-togolaise" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:14.192.212.100


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 66.76.106.13
country_id: 6252001
description:
Jun 19 17:25:23 ns5 auth[4083928]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 66.76.106.13 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 154.6.81.46
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:17-25.154.6.81.46||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.234.138.14
country_id: 690791
description:
Jun 19 17:26:16 ns5 auth[4083928]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.234.138.14 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 66.76.106.13
country_id: 6252001
description:
Jun 19 17:25:30 ns5 auth[4083928]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 66.76.106.13 has been locked due to Imunify RBL


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 45.38.16.60
country_id: 6252001
description:
Jun 19 17:27:43 ns5 pure-ftpd[4092069]: (?@45.38.16.60) [WARNING] Authentication failed for user [einguval]


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 45.38.16.60
country_id: 6252001
description:
Jun 19 17:29:19 ns5 pure-ftpd[4093083]: (?@45.38.16.60) [WARNING] Authentication failed for user [whmcsadmin]


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.3.47.156
country_id: 3017382
domain: anamek.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/anamek.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.8.254
country_id: 3175395
description:
Jun 19 17:31:23 ns5 auth[4083928]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.8.254 has been locked due to Imunify RBL


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 104.28.161.77
country_id: 3469034
domain: cafe.tg
description:
IM360 WAF: Bad file extension||RSV:8.19||T:APACHE||MVN:REQUEST_FILENAME||MV:/.env.backup||User:cafetg||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.8.254
country_id: 3175395
description:
Jun 19 17:31:29 ns5 auth[4083928]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.8.254 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 194.126.182.139
country_id: 690791
description:
Jun 19 17:33:08 ns5 auth[4083928]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 194.126.182.139 has been locked due to Imunify RBL


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 45.132.184.150
country_id: 2017370
domain: dany2.mairie.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:password123.dany2.mairie.tg||Method:wp.getUsersBlogs


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.255.75.218
country_id: 1269750
description:
Jun 19 17:33:26 ns5 auth[4083928]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.255.75.218 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.156.164.84
country_id: 1643084
description:
103.156.164.84 - - [19/Jun/2026:17:33:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13332115&pdata=https%253A%252F%252Ftdn.tg%252Fcategory%252Fsport%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781890409 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/category/sport/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_8 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.156.164.84


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.255.75.218
country_id: 1269750
description:
Jun 19 17:33:33 ns5 auth[4083928]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.255.75.218 has been locked due to Imunify RBL


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 130.49.114.155
country_id: 3017382
domain: dany2.mairie.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:wara.awadi@gmail.com.dany2.mairie.tg||Method:blogger.getUsersBlogs


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.191.38.186
country_id: 3996063
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/traitements-de-masse-des-medicaments-utiles-au-coeur-de-loffensive-sanitaire/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.191.38.186
country_id: 3996063
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/traitements-de-masse-des-medicaments-utiles-au-coeur-de-loffensive-sanitaire/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 46.101.217.74
country_id: 2921044
domain: togodailynews.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/wp-json/wp/v2/users/9?_fields=id,slug,roles||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.40.31.154
country_id: 3865483
description:
Jun 19 17:36:42 ns5 auth[4083928]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.40.31.154 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.92.128.32
country_id: 3469034
description:
Jun 19 17:36:43 ns5 auth[4083928]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.92.128.32 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.212.191.16
country_id: 1861060
description:
2026-06-19 17:37:53 dovecot_login authenticator failed for H=st0848.nas811.p-aichi.nttpc.ne.jp ([45.178.70.3]) [202.212.191.16]:45928: 535 Incorrect authentication data (set_id=collectetvabackend@otr.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 17:38:09 +0000] info [cpaneld] 185.55.240.13 - LWS-547091 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user LWS-547091 (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 117.5.142.91
country_id: 1562822
domain: civilemagazine.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:17-38.117.5.142.91||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.135.19.129
country_id: 272103
domain: fbafrica.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/fbafrica.com/business-fashion-blogging-revenue-sources-expansion-businesses/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 177.181.4.186
country_id: 3469034
description:
177.181.4.186 - - [19/Jun/2026:17:40:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10130324&pdata=https%253A%252F%252Ftogodailynews.tg%252Ffinancement-ohada-lome-carrefour-de-lintegration-africaine%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781890818 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/financement-ohada-lome-carrefour-de-lintegration-africaine/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.7038.1183 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:177.181.4.186


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:17:40:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7369073&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781890822 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 205.210.31.249
country_id: 6252001
description:
Jun 19 17:40:42 ns5 pure-ftpd[4103402]: (?@205.210.31.249) [INFO] New connection from 205.210.31.249


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.54.72.45
country_id: 1512440
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/246804405 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 184.178.172.14
country_id: 6252001
description:
Jun 19 17:41:34 ns5 auth[4103053]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 184.178.172.14 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.246.212.10
country_id: 798544
description:
Jun 19 17:41:39 ns5 auth[4103053]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.246.212.10 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.214.166.139
country_id: 2215636
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/03/b.jpg 1386w, http:/togodailynews.tg/wp-content/uploads/2024/03/b-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2024/03/b-1024x682.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2024/03/b-768x511.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2024/03/b-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 51.37.52.103
country_id: 2963597
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/a79d8b HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.227.16.141
country_id: 3469034
description:
Jun 19 17:45:31 ns5 auth[4104969]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.227.16.141 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.40.73
country_id: 3469034
description:
Jun 19 17:46:29 ns5 auth[4108207]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.40.73 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>&nbsp;\xc2\xab&nbsp;le togo est et sera toujours du c\xc3\xb4t\xc3\xa9 des fr\xc3\xa8res et s\xc5\x93urs des pays du sahel&nbsp;\xc2\xbb, a martel\xc3\xa9 ce samedi 18 avril 2026 \xc3\xa0 lom\xc3\xa9, la pr\xc3\xa9sentation de la nouvelle strat\xc3\xa9gie pour le sahel (2026\xe2\x80\x932028) a \xc3\xa9t\xc3\xa9 effective ce samedi \xc3\xa0 lom\xc3\xa9 lors d\xe2\x80\x99une c\xc3\xa9r\xc3\xa9monie.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ont pris part \xc3\xa0 cette r\xc3\xa9union de haut niveau&nbsp;: les repr\xc3\xa9sentants du gouvernement togolais, les repr\xc3\xa9sentants des gouvernements des \xc3\x89tats du sahel, les envoy\xc3\xa9s sp\xc3\xa9ciaux pour le sahel, les repr\xc3\xa9sentants des organisations sous-r\xc3\xa9gionales, r\xc3\xa9gionales et internationales, notamment des nations unies et de la soci\xc3\xa9t\xc3\xa9 civile.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>robert dussey, le chef de la diplomatie togolaise a au cours de son intervention \xc3\xa9t\xc3\xa9 pr\xc3\xa9cis et concis&nbsp;: <em>\xc2\xab&nbsp;la position du togo est claire. le togo est et sera toujours du c\xc3\xb4t\xc3\xa9 des fr\xc3\xa8res et s\xc5\x93urs des pays du sam. c'est notre position. elle est assum\xc3\xa9e par le pr\xc3\xa9sident du conseil&nbsp;\xc2\xbb.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":29832,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/04/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-29832\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>selon robert dussey, <em>\xc2\xab\xc2\xa0pour le togo, le mali, le burkina faso et le niger ne sont pas des partenaires de circonstances, mais des membres \xc3\xa0 part enti\xc3\xa8re de notre famille ouest-africaine\xc2\xa0\xc2\xbb</em>, a-t-il pr\xc3\xa9cis\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>le choix de la proximit\xc3\xa9 avec les trois pays de l\xe2\x80\x99aes</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab&nbsp;notre strat\xc3\xa9gie assume ce choix de la proximit\xc3\xa9 avec les trois pays. nous persistons dans notre volont\xc3\xa9 de b\xc3\xa2tir des ponts l\xc3\xa0 o\xc3\xb9 d'autres \xc3\xa9rigent des murs, car la paix au sahel ne saurait \xc3\xaatre p\xc3\xa9renne sans l'inclusion de tous ses acteurs&nbsp;\xc2\xbb,</em> a d\xc3\xa9clar\xc3\xa9 le ministre robert dussey\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il faut pr\xc3\xa9ciser que la \"nouvelle strat\xc3\xa9gie\" s\xe2\x80\x99inscrit dans la continuit\xc3\xa9 de l\xe2\x80\x99engagement du togo au sahel et vient se substituer \xc3\xa0 l\xe2\x80\x99ancienne strat\xc3\xa9gie de 2021, qui a servi de cadre \xc3\xa0 l\xe2\x80\x99action du pays au sahel durant les quatre derni\xc3\xa8res ann\xc3\xa9es.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons qu\xe2\x80\x99au sahel, la menace terroriste perdure et s\xe2\x80\x99\xc3\xa9tend progressivement vers les \xc3\x89tats du littoral du golfe de guin\xc3\xa9e. une recomposition g\xc3\xa9opolitique est intervenue dans la r\xc3\xa9gion de l\xe2\x80\x99afrique de l\xe2\x80\x99ouest avec la sortie du burkina faso, du mali et du niger de la communaut\xc3\xa9 \xc3\xa9conomique des \xc3\x89tats de l\xe2\x80\x99afrique de l\xe2\x80\x99ouest (c\xc3\xa9d\xc3\xa9ao) et la cr\xc3\xa9ation de l\xe2\x80\x99alliance des \xc3\x89tats du sahel (aes). le d\xc3\xa9fi d\xe2\x80\x99agir davantage dans l\xe2\x80\x99int\xc3\xa9r\xc3\xaat de la stabilit\xc3\xa9 r\xc3\xa9gionale demeure une priorit\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99est dans ce contexte que le togo a \xc3\xa9labor\xc3\xa9 une nouvelle strat\xc3\xa9gie pour le sahel (2026\xe2\x80\x932028) visant \xc3\xa0 adapter son engagement au sahel aux r\xc3\xa9alit\xc3\xa9s \xc3\xa9mergentes, tout en renfor\xc3\xa7ant sa contribution \xc3\xa0 la stabilit\xc3\xa9 r\xc3\xa9gionale et \xc3\xa0 la coop\xc3\xa9ration entre les pays du sahel et ceux du golfe de guin\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":29925,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/04/zio-lodge.jpg\" alt=\"\" class=\"wp-image-29925\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>&nbsp;<strong>une main tendue et un cadre de collaboration formel</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>&nbsp;\xc2\xab&nbsp;la nouvelle strat\xc3\xa9gie du togo pour le sahel n'est pas un simple document d'orientation, mais une main tendue et un cadre de collaboration formel. le togo est pr\xc3\xaat \xc3\xa0 mettre son expertise en m\xc3\xa9diation et son ancrage r\xc3\xa9gional au service de la stabilit\xc3\xa9 pour servir de pont entre le sahel et l'ensemble de la communaut\xc3\xa9 internationale&nbsp;\xc2\xbb,</em> a soulign\xc3\xa9 m. dussey.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab&nbsp;je voudrais une fois de plus vous prier \xc3\xa0 \xc3\xaatre du c\xc3\xb4t\xc3\xa9 de cette vision qui est celle de construire un pont entre les pays du sahel et toute la communaut\xc3\xa9 internationale repr\xc3\xa9sent\xc3\xa9e ici par le biais de nos partenaires entre un pont \xc3\xaatre un pont entre les pays du sahel et tous nos partenaires sous r\xc3\xa9gionaux ouest africain&nbsp;\xc2\xbb,</em> a ajout\xc3\xa9 le ministre togolais.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>plusieurs autres interventions ont meubl\xc3\xa9 cette r\xc3\xa9union notamment celles des ministres des affaires \xc3\xa9trang\xc3\xa8res des trois pays de l\xe2\x80\x99alliance des \xc3\x89tats du sahel (aes)&nbsp;: niger, mali, burkina.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>le mali se r\xc3\xa9jouit de sa pr\xc3\xa9sence \xc3\xa0 la c\xc3\xa9r\xc3\xa9monie</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab&nbsp;le mali se r\xc3\xa9jouit de participer \xc3\xa0 la pr\xc3\xa9sente c\xc3\xa9r\xc3\xa9monie consacr\xc3\xa9e au lancement de la strat\xc3\xa9gie togo-sahel qui illustre une nouvelle fois la volont\xc3\xa9 du pays fr\xc3\xa8re le togo d'adapter son engagement aux nouvelles r\xc3\xa9alit\xc3\xa9s g\xc3\xa9opolitiques et s\xc3\xa9curitaires en vue de renforcer la stabilit\xc3\xa9 r\xc3\xa9gionale, mais aussi la coop\xc3\xa9ration entre les etats du sahel et ceux du golfe de guin\xc3\xa9e&nbsp;\xc2\xbb,</em> a salu\xc3\xa9 abdoulaye diop, ministre malien des affaires \xc3\xa9trang\xc3\xa8res et de la coop\xc3\xa9ration internationale.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":29936,\"width\":\"662px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/04/progammez-votre-voyage-depuis-chez-vous.jpg\" alt=\"\" class=\"wp-image-29936\" style=\"width:662px;height:auto\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab&nbsp;dans la d\xc3\xa9marche, il est heureux que les autorit\xc3\xa9s togolaises aient fait le choix de l'inclusivit\xc3\xa9 en associant les parties prenantes, particuli\xc3\xa8rement les etats concern\xc3\xa9s \xc3\xa0 titre principal, non seulement \xc3\xa0 la pr\xc3\xa9sente c\xc3\xa9r\xc3\xa9monie de lancement de la strat\xc3\xa9gie togo-sahel, mais aussi \xc3\xa0 sa mise en \xc5\x93uvre. comme le dit un adage bien connu chez nous,  on ne peut pas raser la t\xc3\xaate de quelqu'un en son absence &nbsp;\xc2\xbb,</em> a-t-il relev\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>selon les autorit\xc3\xa9s togolaises, la paix et la s\xc3\xa9curit\xc3\xa9 r\xc3\xa9gionales ne peuvent \xc3\xaatre fragment\xc3\xa9es&nbsp;: <em>\xc2\xab si l\xe2\x80\x99aes vacille aujourd\xe2\x80\x99hui, c\xe2\x80\x99est toute la r\xc3\xa9gion qui sera menac\xc3\xa9e&nbsp;\xc2\xbb.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>(in le medium n\xc2\xb0699 du 21 au 27 avril 2026)</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.231.121.99
country_id: 798544
description:
Jun 19 17:47:45 ns5 auth[4110016]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.231.121.99 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.168.159.97
country_id: 2363686
description:
[2026-06-19 17:49:18 +0000] info [webmaild] 196.168.159.97 - kzodji@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.168.159.97
country_id: 2363686
description:
[2026-06-19 17:49:49 +0000] info [webmaild] 196.168.159.97 - kzodji@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.124.218.199
country_id: 3865483
description:
Jun 19 17:49:54 ns5 auth[4110016]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.124.218.199 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.168.159.97
country_id: 2363686
description:
[2026-06-19 17:50:30 +0000] info [webmaild] 196.168.159.97 - kzodji@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.219.210.90
country_id: 192950
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/655.png HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:17:53:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7106451&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781891595 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.191.18.105
country_id: 1562822
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/134.png HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 17:52:54 +0000] info [cpaneld] 185.55.240.13 - kidsedunetmaster "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kidsedunetmaster (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.34.32.9
country_id: 3469034
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/30.png HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 156.38.81.84
country_id: 2363686
description:
[2026-06-19 17:54:27 +0000] info [cpaneld] 156.38.81.84 NEW zephyradmin:zB7xz3p8hO5vbJBl address=156.38.81.84,app=cpaneld,creator=zephyradmin,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 45.38.16.60
country_id: 6252001
description:
Jun 19 17:55:09 ns5 pure-ftpd[4115880]: (?@45.38.16.60) [WARNING] Authentication failed for user [waywcbyw]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.232.65.181
country_id: 3469034
description:
Jun 19 17:58:29 ns5 auth[4110016]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.232.65.181 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 17:58:38 +0000] info [cpaneld] 185.55.240.13 - .SAPHYRTOUR "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: modsec
rule: 77350257
name: IM360 WAF: Subscriber and Arbitrary Shortcode Execution in WordPress < 6.3.2
abuser: 102.64.170.217
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Subscriber and Arbitrary Shortcode Execution in WordPress < 6.3.2||MVN:ARGS:shortcode||MV:[embed]https://youtu.be/xVD52OVlXyo[/embed]||WPU:direct7tv||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.170.86.127
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160504||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.96.129
country_id: 3469034
description:
Jun 19 18:00:48 ns5 auth[4110016]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.96.129 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 18:03:16 +0000] info [cpaneld] 185.55.240.13 - enadamso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user enadamso (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.36.152.22
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/749497954 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.177.85.223
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/?p=790 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.6.148.141
country_id: 272103
description:
185.6.148.141 - - [19/Jun/2026:18:05:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10066891&pdata=https%253A%252F%252F24heureinfo.tg%252Ftag%252Fclarisse-agbenyinou&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781892349 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/tag/clarisse-agbenyinou" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.6.148.141


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.169.24.26
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160502||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-19 18:06:54 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:45120: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:18:07:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10274505&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781892449 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.241
country_id: 130758
description:
Jun 19 18:07:47 ns5 auth[4110016]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.241 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.241
country_id: 130758
description:
2026-06-19 18:07:49 dovecot_login authenticator failed for H=(localhost) [62.60.130.241]:53112: 535 Incorrect authentication data (set_id=root)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 170.199.224.250
country_id: 6252001
domain: butodra.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:170.199.224.250||TA:170.199.224.250||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 185.182.193.109
country_id: 2750405
description:
[2026-06-19 18:10:10 +0000] info [cpaneld] 185.182.193.109 NEW ucaouut:sG45asLa8JIsxTNs address=185.182.193.109,app=cpaneld,creator=ucaouut,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.169.6.106
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160507||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.114.154.246
country_id: 587116
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/premier-conseil-des-ministres-de-la-veme-republique/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 18:15:00 +0000] info [cpaneld] 185.55.240.13 - yvwaocrr "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yvwaocrr (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.18.166.85
country_id: 1269750
description:
Jun 19 18:17:55 ns5 auth[4110016]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.18.166.85 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.69.220.6
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/06/NTC2-1024x682-1.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2024/06/NTC2-1024x682-1-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2024/06/NTC2-1024x682-1-768x512.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2024/06/NTC2-1024x682-1-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 62.60.130.223
country_id: 130758
domain: direct7.tg
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.19||T:APACHE||MV:/images/images/cache.php||SC:/home/nrzector/public_html/images||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.148
country_id: 1880251
description:
47.128.96.148 - - [19/Jun/2026:18:20:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10314645&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fconference-interafricaine-des-marches-dassurances-recrute%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781893254 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/conference-interafricaine-des-marches-dassurances-recrute/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.148


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 45.66.211.174
country_id: 2017370
domain: cfpj.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:damienxp@yahoo.fr.cfpj.tg||Method:blogger.getUsersBlogs


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.83.97.156
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/03/Premier-seminaire-gouvernemental-de-lannee-2024-necessite-du-lien-entre-les-politiques-publiques-et-le-vecu-des-populations.jpg 800w, http:/togodailynews.tg/wp-content/uploads/2024/03/Premier-seminaire-gouvernemental-de-lannee-2024-necessite-du-lien-entre-les-politiques-publiques-et-le-vecu-des-populations-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2024/03/Premier-seminaire-gouvernemental-de-lannee-2024-necessite-du-lien-entre-les-politiques-publiques-et-le-vecu-des-populations-768x512.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2024/03/Premier-seminaire-gouvernemental-de-lannee-2024-necessite-du-lien-entre-les-politiques-publiques-et-le-vecu-des-populations-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:18:21:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9859229&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781893312 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 146.185.35.213
country_id: 272103
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/03/TogodayliNews@4x-1-1024x95.png 1024w, http:/togodailynews.tg/wp-content/uploads/2025/03/TogodayliNews@4x-1-300x28.png 300w, http:/togodailynews.tg/wp-content/uploads/2025/03/TogodayliNews@4x-1-768x71.png 768w, http:/togodailynews.tg/wp-content/uploads/2025/03/TogodayliNews@4x-1-1536x143.png 1536w, http:/togodailynews.tg/wp-content/uploads/2025/03/TogodayliNews@4x-1-2048x190.png 2048w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.30.81.25
country_id: 1269750
description:
Jun 19 18:24:23 ns5 auth[4133142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.30.81.25 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.30.81.25
country_id: 1269750
description:
Jun 19 18:24:29 ns5 auth[4133142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.30.81.25 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.211.4.233
country_id: 2300660
description:
Jun 19 18:26:17 ns5 auth[4133142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.211.4.233 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 41.207.189.253
country_id: 2363686
description:
[2026-06-19 18:26:44 +0000] info [webmaild] 41.207.189.253 - kakue@togointerim.net "GET /cpsess7537012358/3rdparty/roundcube/?_task=mail&_mbox=INBOX HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.118.10] != Current IP Address [41.207.189.253]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.211.4.233
country_id: 2300660
description:
Jun 19 18:26:30 ns5 auth[4133142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.211.4.233 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 196.0.40.130
country_id: 226074
description:
Jun 19 18:28:29 ns5 auth[4133142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 196.0.40.130 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 94.154.106.27
country_id: 6290252
description:
Jun 19 18:28:40 ns5 auth[4133142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 94.154.106.27 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.177
country_id: 2635167
description:
[2026-06-19 18:29:31 +0000] info [cpaneld] 5.230.133.177 NEW wwayrzpl:ikr64vmcPKugfJrq address=5.230.133.177,app=cpaneld,creator=wwayrzpl,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.54.238.57
country_id: 2542007
description:
[2026-06-19 18:32:42 +0000] info [cpaneld] 102.54.238.57 - a.mathey "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.mathey (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 18:35:55 +0000] info [cpaneld] 185.55.240.13 - pyllprbc "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user pyllprbc (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:18:36:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10382540&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781894209 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 199.91.162.55
country_id: 3579143
description:
Jun 19 18:37:44 ns5 auth[4146865]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 199.91.162.55 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 5.107.201.173
country_id: 290557
description:
5.107.201.173 - - [19/Jun/2026:18:38:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13147289&pdata=https%253A%252F%252Fcpanel.devtech.free.netmaster.tg%252F%253Flocale%253Dms&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781894331 HTTP/2.0" 302 0 cpanel.devtech.free.netmaster.tg "https://cpanel.devtech.free.netmaster.tg/?locale=ms" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:5.107.201.173


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.50.80.144
country_id: 102358
description:
[2026-06-19 18:40:15 +0000] info [cpaneld] 188.50.80.144 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.241
country_id: 130758
description:
2026-06-19 18:39:55 dovecot_login authenticator failed for H=(localhost) [62.60.130.241]:60561: 535 Incorrect authentication data (set_id=test007)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.241
country_id: 130758
description:
Jun 19 18:39:53 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.241 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 102.176.253.228
country_id: 2363686
description:
[2026-06-19 18:42:30 +0000] info [cpaneld] 102.176.253.228 NEW ucaouut:3iljycIgP4VOCkQV address=102.176.253.228,app=cpaneld,creator=ucaouut,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-19 18:44:47 +0000] info [webmaild] 196.171.46.177 - kekeli.alemawo@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.158.200.251
country_id: 3437598
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/loi-des-finances-exercice-2023-kpowbie-tchasso-akaya-echange-avec-les-osc-et-le-secteur-prive HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 18:48:13 +0000] info [cpaneld] 185.55.240.13 - aogodmm "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 138.97.247.115
country_id: 3469034
description:
Jun 19 18:48:58 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 138.97.247.115 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>nagode transfert a franchi un nouveau cap. le g\xc3\xa9ant des transports interurbain a officiellement lanc\xc3\xa9, le samedi 18 avril dernier \xc3\xa0 lom\xc3\xa9, de nouveaux services. ceci gr\xc3\xa2ce \xc3\xa0 l\xe2\x80\x99acquisition d\xe2\x80\x99une nouvelle flotte de 60 nouveaux bus de marque yutong, qui viennent renforcer le parc autos existant de plus de 120 bus. d\xc3\xa9sormais, c\xe2\x80\x99est une r\xc3\xa9volution, qui est enclench\xc3\xa9e, avec de nouvelles lignes sous r\xc3\xa9gionales, notamment vers cotonou (b\xc3\xa9nin) et ouagadougou (burkina faso), apr\xc3\xa8s les lignes lom\xc3\xa9-abidjan, en c\xc3\xb4te d\xe2\x80\x99ivoire, et lom\xc3\xa9-accra, au ghana.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>samedi 18 avril dernier, l\xe2\x80\x99h\xc3\xb4tel 2 f\xc3\xa9vrier \xc3\xa9tait drap\xc3\xa9 aux couleurs de nagode, pour marquer ce grand \xc3\xa9v\xc3\xa9nement&nbsp;: le lancement officiel de nouveaux services, qui viennent renforcer les acquis de plus d\xe2\x80\x99une d\xc3\xa9cennie d\xe2\x80\x99audace d\xe2\x80\x99une \xc3\xa9quipe dynamique avec \xc3\xa0 sa t\xc3\xaate de laquelle le pdg morou aminou yara. une nouvelle vision, celle de titiller les standards internationaux en mati\xc3\xa8re de voyages interurbains et r\xc3\xa9gionaux, et valoriser le m\xc3\xa9tier de transporteurs.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab&nbsp;aujourd\xe2\x80\x99hui, nous ne c\xc3\xa9l\xc3\xa9brons pas seulement la r\xc3\xa9ception de nouveaux autocars et le lancement de nos nouveaux services. nous c\xc3\xa9l\xc3\xa9brons une vision (\xe2\x80\xa6) une ambition, (\xe2\x80\xa6) un engagement. un engagement envers nos populations, envers nos partenaires, et envers notre pays&nbsp;\xc2\xbb,</em> a martel\xc3\xa9 le pdg de nagode transfert, qui entend faire du m\xc3\xa9tier de transporteur, un m\xc3\xa9tier noble au service de l\xe2\x80\x99int\xc3\xa9gration des communaut\xc3\xa9s.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\xc2\xab<em>&nbsp;depuis sa cr\xc3\xa9ation, nagode transfert s\xe2\x80\x99est construit autour d\xe2\x80\x99une id\xc3\xa9e simple mais essentielle : faciliter la mobilit\xc3\xa9 des personnes, rapprocher les communaut\xc3\xa9s et soutenir les activit\xc3\xa9s \xc3\xa9conomiques&nbsp;\xc2\xbb, </em>a-t-il soulign\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une ambition mesur\xc3\xa9e et r\xc3\xa9aliste\xe2\x80\xa6</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour concr\xc3\xa9tiser son ambition, celle de <em>\xc2\xab&nbsp;rapprocher les communaut\xc3\xa9s et soutenir les activit\xc3\xa9s \xc3\xa9conomiques&nbsp;\xc2\xbb,</em> nagode transfert ne fait pas dans la dentelle. gr\xc3\xa2ce \xc3\xa0 sa collaboration strat\xc3\xa9gique avec heavymat industry et le constructeur chinois yutong, une flotte de 60 autocars vient renforcer la logistique, int\xc3\xa9grant les standards de confort et de s\xc3\xa9curit\xc3\xa9 \xc3\xa9lev\xc3\xa9s. une mani\xc3\xa8re <em>\xc2\xab&nbsp;d\xe2\x80\x99offrir aux passagers une exp\xc3\xa9rience de voyage plus humaine et moins \xc3\xa9prouvante&nbsp;\xc2\xbb,</em> selon henry du, directeur g\xc3\xa9n\xc3\xa9ral de yutong.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":29890,\"width\":\"832px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/04/assistance.jpg\" alt=\"\" class=\"wp-image-29890\" style=\"width:832px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>et le parrain, nassim ouro-bang\xe2\x80\x99na d\xe2\x80\x99inviter les fils et filles du pays \xc3\xa0 oser, et \xc3\xa0 croire en leur r\xc3\xaave tout en se donnant les moyens de les r\xc3\xa9aliser. <em>\xc2\xab&nbsp;j\xe2\x80\x99ai \xc3\xa9t\xc3\xa9 t\xc3\xa9moin des premiers pas, des moments de doute, des sacrifices silencieux, des efforts constants. et surtout, j\xe2\x80\x99ai \xc3\xa9t\xc3\xa9 t\xc3\xa9moin d\xe2\x80\x99une d\xc3\xa9termination rare. celle d\xe2\x80\x99un jeune homme parti de presque rien, mais anim\xc3\xa9 par une conviction in\xc3\xa9branlable : r\xc3\xa9ussir, b\xc3\xa2tir, et servir.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>(\xe2\x80\xa6) le voir franchir, \xc3\xa9tape apr\xc3\xa8s \xc3\xa9tape, les paliers de la r\xc3\xa9ussite, n\xe2\x80\x99est pas seulement une satisfaction personnelle&nbsp;; c\xe2\x80\x99est une immense fiert\xc3\xa9. une fiert\xc3\xa9 de p\xc3\xa8re&nbsp;\xc2\xbb, </em>a-t-il insist\xc3\xa9. et de poursuivre : <em>\xc2\xab&nbsp;(\xe2\x80\xa6) au-del\xc3\xa0 de cette dimension humaine, ce parcours porte un message puissant. il est la preuve vivante que, dans notre pays, tout jeune peut entreprendre et r\xc3\xa9ussir (\xe2\x80\xa6) le togo d\xe2\x80\x99aujourd\xe2\x80\x99hui offre des opportunit\xc3\xa9s r\xc3\xa9elles, un cadre stable et un environnement propice \xc3\xa0 l\xe2\x80\x99initiative priv\xc3\xa9e&nbsp;\xc2\xbb,</em> a-il-soutenu.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>les innovations majeures</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>au-del\xc3\xa0 du nombre de v\xc3\xa9hicules, nagode transfert mise sur une digitalisation accrue et des services diversifi\xc3\xa9s, notamment&nbsp;:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul class=\"wp-block-list\"><!-- wp:list-item -->\n<li><strong>des lignes express :</strong> des liaisons directes pour gagner du temps sur les trajets phares.</li>\n<!-- /wp:list-item -->\n\n<!-- wp:list-item -->\n<li><strong>des r\xc3\xa9servations via l\xe2\x80\x99application \"nagod\xc3\xa9 bus\" :</strong> un service modernis\xc3\xa9 pour acheter ses billets depuis son smartphone, \xc3\xa9viter les files d'attente et choisir son si\xc3\xa8ge.</li>\n<!-- /wp:list-item -->\n\n<!-- wp:list-item -->\n<li><strong>un confort \xc3\xa0 bord :</strong> climatisation optimis\xc3\xa9e, si\xc3\xa8ges ergonomiques et s\xc3\xa9curit\xc3\xa9 renforc\xc3\xa9e.</li>\n<!-- /wp:list-item -->\n\n<!-- wp:list-item -->\n<li><strong>une logistique int\xc3\xa9gr\xc3\xa9e :</strong> une meilleure structuration pour le transport de colis et de marchandises, connectant plus efficacement le nord et le sud du togo.</li>\n<!-- /wp:list-item --></ul>\n<!-- /wp:list -->\n\n<!-- wp:image {\"id\":29832,\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/04/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-29832\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>nagode transfert, une ambition sans fronti\xc3\xa8res</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>si nagode transfert renforce sa pr\xc3\xa9sence au plan national, notamment de lom\xc3\xa9 \xc3\xa0 dapaong, l'entreprise ne cache plus ses ambitions panafricaines.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le d\xc3\xa9ploiement de 60 autocars suppl\xc3\xa9mentaires marque ainsi le coup d'envoi d'une expansion r\xc3\xa9gionale majeure, avec l\xe2\x80\x99ouverture \xc3\xa0 l\xe2\x80\x99internationale, notamment une ligne vers cotonou, au b\xc3\xa9nin et une autre vers ouagadougou, au burkina faso. celles-ci viennent s\xe2\x80\x99ajouter aux pr\xc3\xa9c\xc3\xa9dentes lignes (lom\xc3\xa9-abidjan, en c\xc3\xb4te d\xe2\x80\x99ivoire, et lom\xc3\xa9-accra, au ghana).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il est m\xc3\xaame pr\xc3\xa9vu, une ligne express lom\xc3\xa9-abidjan d\xe2\x80\x99ailleurs en \xc3\xa9tude, selon les indiscr\xc3\xa9tions. \xc2\xab&nbsp;<em>ces autocars ne sont pas de simples v\xc3\xa9hicules. ils incarnent une nouvelle mani\xc3\xa8re de concevoir le transport&nbsp;\xc2\xbb, </em>a indiqu\xc3\xa9 morou amidou yara, directeur g\xc3\xa9n\xc3\xa9ral de nagode transfert.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cet investissement massif de nagode transfert, il faut le souligner, vient en appoint \xc3\xa0 l\xe2\x80\x99investissement au plus haut sommet de l\xe2\x80\x99etat, qui souhaite faire du togo un hub logistique de r\xc3\xa9f\xc3\xa9rence en afrique de l\xe2\x80\x99ouest. ainsi, cette nouvelle flotte de nagode va contribuer \xc3\xa0 fluidifier et faciliter les \xc3\xa9changes sans oublier la cr\xc3\xa9ation d'emplois directs et indirects dans le secteur du transport. en plus du confort (v\xc3\xa9hicule neuf et une maintenance de pointe), de la s\xc3\xa9curit\xc3\xa9 (les bus sont \xc3\xa9quip\xc3\xa9s de cam\xc3\xa9ras et balises de limitation de vitesse), les paiements digitaux sont approuv\xc3\xa9s, \xe2\x80\xa6</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>jpb</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.92.27.46
country_id: 2921044
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/uploads/2024/08/77234155-56028114-768x509.jpg HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.93.135.210
country_id: 3508796
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:POST http:/togodailynews.tg:80/wp-admin/admin-ajax.php HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.247.67.129
country_id: 290557
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/?wmcAction=wmcTrack&action_name=Archives des ENVIRONNEMENT | Page 8 sur 16 | TOGODAILYNEWS&siteId=1&rec=1&rand=667434&h=2&m=49&s=53&url=http:/togodailynews.tg/category/environnement/page/8/&uid=0&pid=0&visitorId=8c0bd39964fa7cb9&fvts=1781894993&vc=1&idn=0&refts=0&lvts=1781894993&fullRef=undefined&send_image=1&cookie=1&res=375x812&gtms=4294&pvId=zd64qI&browser=Chrome_40&os=Android_8.0&device=Mobile HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.91.113.30
country_id: 3469034
description:
Jun 19 18:50:56 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.91.113.30 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.95.121.15
country_id: 587116
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/uploads/2026/06/IMG-20260618-WA0068-300x160.webp HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.244.65.156
country_id: 1880251
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/uploads/2023/12/afdb-20231202113-768x316.webp HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:18:52:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7106665&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781895129 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.81
country_id: 1880251
description:
47.128.121.81 - - [19/Jun/2026:18:52:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9672045&pdata=http%253A%252F%252Ftogodailynews.tg%252Fconseil-national-du-credit-badanam-patoki-banques-tpme%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781895170 HTTP/1.1" 302 0 togodailynews.tg "http://togodailynews.tg/conseil-national-du-credit-badanam-patoki-banques-tpme/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.81


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.85.104.155
country_id: 3469034
description:
Jun 19 18:52:34 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.85.104.155 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 14.165.242.11
country_id: 1562822
description:
14.165.242.11 - - [19/Jun/2026:18:54:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935305&pdata=https%253A%252F%252Ftogodailynews.tg%252Fcategory%252Fenvironnement%252Fpage%252F12%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781895262 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/category/environnement/page/12/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.5999.1822 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:14.165.242.11


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-19 18:53:30 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:48070: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.133.30
country_id: 3469034
description:
Jun 19 18:53:38 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.133.30 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.96.150.175
country_id: 3469034
description:
Jun 19 18:54:53 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.96.150.175 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.9.155.126
country_id: 3469034
description:
[2026-06-19 18:59:04 +0000] info [cpaneld] 200.9.155.126 - - "GET /openid_connect/cpanelid HTTP/1.1" FAILED LOGIN cpaneld: openid connect: 'cpaneld' provider 'cpanelid' encountered an error: (XID 7rcnu7) The [asis,OpenID Connect] provider “cPanelID” is disabled on the service “cpaneld”.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 181.192.106.240
country_id: 3469034
description:
Jun 19 18:59:12 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 181.192.106.240 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 201.216.109.159
country_id: 3469034
domain: hotel-yabisso.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:40256.hotel-yabisso.com||ServerName:hotel-yabisso.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:173fdc5a1a6e2aef393828476b7be58600f31bc8||Title:0xc6a21e37||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 181.192.106.240
country_id: 3469034
description:
Jun 19 18:59:28 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 181.192.106.240 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.228.33.17
country_id: 798544
description:
Jun 19 19:04:01 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.228.33.17 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 19:05:39 +0000] info [cpaneld] 185.55.240.13 - iyfttuec "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user iyfttuec (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 143.105.209.143
country_id: 2300660
description:
[2026-06-19 19:06:20 +0000] info [webmaild] 143.105.209.143 - contact@ave2.mairie.tg "POST /cpsess7472165953/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [41.207.181.198] != Current IP Address [143.105.209.143]


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.114.55.60
country_id: 3608932
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/forum-maritimafrica-week-les-acteurs-maritimes-en-conclave-a-lome/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.189.127.219
country_id: 337996
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/politique-nationale-de-la-qualite-un-moyen-dinciter-les-prestataires-a-privilegier-la-qualite/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.160.213.205
country_id: 1643084
description:
[2026-06-19 19:07:28 +0000] info [cpaneld] 103.160.213.205 - e.sanvee "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.sanvee (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:19:08:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515300&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781896124 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 194.44.140.205
country_id: 690791
description:
Jun 19 19:09:55 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 194.44.140.205 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.18.166.85
country_id: 1269750
description:
Jun 19 19:09:29 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.18.166.85 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 128.127.94.17
country_id: 798544
description:
Jun 19 19:09:38 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 128.127.94.17 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.211.4.227
country_id: 2300660
description:
Jun 19 19:09:57 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.211.4.227 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 197.239.9.110
country_id: 226074
description:
[2026-06-19 19:11:17 +0000] info [cpaneld] 197.239.9.110 - pnls "GET /cpsess7275231917/3rdparty/phpMyAdmin/index.php?route=/ HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [105.21.66.86] != Current IP Address [197.239.9.110]


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 102.165.53.235
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-11.102.165.53.235||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 223.29.254.158
country_id: 1814991
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-11.223.29.254.158||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 154.16.69.58
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-11.154.16.69.58||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 196.198.13.152
country_id: 241170
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-11.196.198.13.152||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 102.165.54.227
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-11.102.165.54.227||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.95.57
country_id: 2635167
description:
[2026-06-19 19:12:51 +0000] info [whostmgrd] 217.181.95.57 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.165
country_id: 3469034
description:
Jun 19 19:18:22 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.165 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 196.0.87.82
country_id: 226074
description:
Jun 19 19:17:29 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 196.0.87.82 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.165
country_id: 3469034
description:
Jun 19 19:18:30 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.165 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.219.100.217
country_id: 798544
description:
Jun 19 19:19:58 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.219.100.217 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.228.33.174
country_id: 798544
description:
Jun 19 19:22:28 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.228.33.174 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:19:23:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12742809&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781897035 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 194.180.158.84
country_id: 2635167
description:
2026-06-19 19:25:18 dovecot_plain authenticator failed for H=(gv2n8d82qzprip1tzmv0) [194.180.158.84]:56993: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 165.22.99.172
country_id: 1880251
description:
[2026-06-19 19:32:25 +0000] info [cpaneld] 165.22.99.172 - admin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 165.22.99.172
country_id: 1880251
description:
[2026-06-19 19:33:42 +0000] info [cpaneld] 165.22.99.172 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 19:33:38 +0000] info [cpaneld] 185.55.240.13 - kwbcfbmo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kwbcfbmo (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 94.137.187.211
country_id: 614540
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2023/01/FoPAT-Ts\xc3\xa9vi\xc3\xa9-accueille-l\xe2\x80\x99\xc3\xa9v\xc3\xa9nement.jpg 600w, http:/togodailynews.tg/wp-content/uploads/2023/01/FoPAT-Ts\xc3\xa9vi\xc3\xa9-accueille-l\xe2\x80\x99\xc3\xa9v\xc3\xa9nement-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2023/01/FoPAT-Ts\xc3\xa9vi\xc3\xa9-accueille-l\xe2\x80\x99\xc3\xa9v\xc3\xa9nement-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.230.8.186
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/603446870 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.11.109
country_id: 3469034
description:
Jun 19 19:37:35 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.11.109 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 19:37:40 +0000] info [cpaneld] 185.55.240.13 - togoinrdceh "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:19:40:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9924247&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781898007 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.187.78.29
country_id: 99237
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/31.jpeg HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 193.32.68.155
country_id: 690791
description:
Jun 19 19:40:33 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 193.32.68.155 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 106.111.216.238
country_id: 1814991
description:
Jun 19 19:41:26 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 106.111.216.238 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 106.111.216.238
country_id: 1814991
description:
2026-06-19 19:41:28 dovecot_plain authenticator failed for H=(nlzzts260ue3xure) [106.111.216.238]:39940: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.177.200.247
country_id: 3865483
description:
Jun 19 19:43:45 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.177.200.247 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 95.68.148.0
country_id: 2017370
description:
Jun 19 19:45:16 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 95.68.148.0 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 200.237.93.36
country_id: 3469034
description:
Jun 19 19:47:21 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 200.237.93.36 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 200.237.93.36
country_id: 3469034
description:
Jun 19 19:47:29 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 200.237.93.36 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 82.139.195.194
country_id: 2589581
description:
82.139.195.194 - - [19/Jun/2026:19:51:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13079707&pdata=http%253A%252F%252Fwww.istm.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781898668 HTTP/1.1" 302 0 www.istm.tg "http://www.istm.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:82.139.195.194


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:19:53:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10066328&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781898809 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.250.232.178
country_id: 3996063
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/938885 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.118.34.213
country_id: 1269750
description:
Jun 19 19:56:04 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.118.34.213 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.84.155.145
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/01/VOEUX-A-LATOP.jpg.webp 1280w, http:/togodailynews.tg/wp-content/uploads/2026/01/VOEUX-A-LATOP.jpg-300x200.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/01/VOEUX-A-LATOP.jpg-1024x682.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/01/VOEUX-A-LATOP.jpg-768x512.webp 768w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.169.4.139
country_id: 2363686
description:
[2026-06-19 19:58:27 +0000] info [webmaild] 196.169.4.139 - guillaume.saguintaah@togointerim.net "GET /cpsess5848172852/3rdparty/roundcube/?_task=mail&_mbox=INBOX HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.168.220.246] != Current IP Address [196.169.4.139]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.97
country_id: 3469034
description:
Jun 19 19:58:10 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.97 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 93.170.11.19
country_id: 1512440
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/04/IMG-20210422-WA0129.jpg 720w, http:/togodailynews.tg/wp-content/uploads/2021/04/IMG-20210422-WA0129-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2021/04/IMG-20210422-WA0129-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.210.30.22
country_id: 192950
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211125-WA0083.jpg 1080w, http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211125-WA0083-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211125-WA0083-768x512.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211125-WA0083-1024x683.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211125-WA0083-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 213.153.174.25
country_id: 298795
description:
Jun 19 20:03:16 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 213.153.174.25 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 213.153.174.25
country_id: 298795
description:
Jun 19 20:03:29 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 213.153.174.25 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 184.174.57.184
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:20-05.184.174.57.184||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 82.21.238.134
country_id: 3624060
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:20-05.82.21.238.134||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 200.229.253.227
country_id: 3865483
description:
Jun 19 20:05:11 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 200.229.253.227 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 154.6.81.46
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:20-05.154.6.81.46||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 31.59.24.133
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:20-05.31.59.24.133||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 104.253.75.209
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:20-05.104.253.75.209||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.9.155.126
country_id: 3469034
description:
[2026-06-19 20:04:28 +0000] info [webmaild] 200.9.155.126 - - "GET /openid_connect/cpanelid HTTP/1.1" FAILED LOGIN webmaild: openid connect: 'webmaild' provider 'cpanelid' encountered an error: (XID feapwj) The [asis,OpenID Connect] provider “cPanelID” is disabled on the service “webmaild”.


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 200.229.253.227
country_id: 3865483
description:
Jun 19 20:05:25 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 200.229.253.227 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.19.85
country_id: 3469034
description:
Jun 19 20:06:14 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.19.85 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.19.85
country_id: 3469034
description:
Jun 19 20:06:29 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.19.85 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>d\xc3\xa9marr\xc3\xa9e le 11 juin dernier \xc3\xa0 mexico, la premi\xc3\xa8re journ\xc3\xa9e de la phase de groupe de la coupe du monde 2026 de football, a pris fin le mercredi dernier, avec des fortunes diverses pour les diff\xc3\xa9rents repr\xc3\xa9sentants africains. cette \xc3\xa9dition sp\xc3\xa9ciale \xc3\xa0 48 \xc3\xa9quipes est co-organis\xc3\xa9e par le mexique, le canada et les \xc3\x89tats-unis.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les pays africains sont en \"4-4-2\" pour le moment en coupe du monde 2026. au terme de leurs premiers matchs, le continent africain a r\xc3\xa9colt\xc3\xa9 4 d\xc3\xa9faites, 4 nuls et 2 victoires.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>quatre d\xc3\xa9culott\xc3\xa9es, 4 d\xc3\xa9faites cuisantes...</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>tout a d\xc3\xa9j\xc3\xa0 commenc\xc3\xa9 ce 11 juin \xc3\xa0 mexico. match d'ouverture entre l'un des pays organisateurs, le mexique justement face \xc3\xa0 l'afrique du sud. les bafana-bafana ont courb\xc3\xa9 l'\xc3\xa9chine 2-0. les poulains d'hugo broos n'ont pas \xc3\xa9t\xc3\xa9 au rendez-vous de l'attente. entre pr\xc3\xa9cipitation et impr\xc3\xa9cisions techniques, l'\xc3\xa9quipe sud-africaine a \xc3\xa9t\xc3\xa9 logiquement domin\xc3\xa9e 2 buts au rien.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31436,\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"right\"} -->\n<figure class=\"wp-block-image alignright size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-54.png\" alt=\"\" class=\"wp-image-31436\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>pour sa deuxi\xc3\xa8me sortie dans le groupe a, l'afrique du sud a accroch\xc3\xa9 le point du nul (1-1/t. mokoena sur p\xc3\xa9nalty) face \xc3\xa0 la tch\xc3\xa9quie. en deux matchs, l'afrique du sud compte 01pt et joue sa qualification face \xc3\xa0 la cor\xc3\xa9e du sud lors de la troisi\xc3\xa8me journ\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>parlant des d\xc3\xa9ceptions, ce sont aussi les revers du s\xc3\xa9n\xc3\xa9gal, de l'alg\xc3\xa9rie et de la tunisie. log\xc3\xa9e dans le groupe f aux c\xc3\xb4t\xc3\xa9s des pays-bas, du japon et de la su\xc3\xa8de, la tunisie a \xc3\xa9t\xc3\xa9 douch\xc3\xa9e pour son premier match. face \xc3\xa0 la su\xc3\xa8de justement, les aigles du carthage ont \xc3\xa9t\xc3\xa9 d\xc3\xa9plum\xc3\xa9s par la su\xc3\xa8de, 5-1.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ce r\xc3\xa9sultat a m\xc3\xaame engendr\xc3\xa9 le limogeage de sabri lamoushi remplac\xc3\xa9 par herv\xc3\xa9 renard. l'ancien technicien de l'arabie saoudite va poursuivre la comp\xc3\xa9tition avec des aigles priv\xc3\xa9 de leurs ailes lors de leur premi\xc3\xa8re sortie. appel\xc3\xa9 \xc3\xa0 la rescousse, h. renard r\xc3\xa9ussira-t-il \xc3\xa0 redresser la barre, la question reste pos\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les fennecs d'alg\xc3\xa9rie, dans la poule j, ont \xc3\xa9t\xc3\xa9 battus s\xc3\xa8chement par l'argentine, port\xc3\xa9e lionel messi auteur d'un tripl\xc3\xa9. on se disait que l'alg\xc3\xa9rie est une \xc3\xa9quipe qui ne d\xc3\xa9\xc3\xa7oit pas en phase finale de coupe du monde, mais la premi\xc3\xa8re sortie des verts n'a pas \xc3\xa9t\xc3\xa9 convaincante.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le laxisme des joueurs alg\xc3\xa9riens a \xc3\xa9t\xc3\xa9 pr\xc3\xa9judiciable. le lutin argentin, a inscrit pour la premi\xc3\xa8re fois un tripl\xc3\xa9 en coupe du monde. l'ancien barcelonais a \xc3\xa9gal\xc3\xa9 miroslav klose au rang du meilleur buteur de l'histoire de cette comp\xc3\xa9tition avec 16 r\xc3\xa9alisations. l'alg\xc3\xa9rie doit se relever face \xc3\xa0 la jordanie qui avait \xc3\xa9galement perdu face l'autriche.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31437,\"width\":\"441px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"left\"} -->\n<figure class=\"wp-block-image alignleft size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-55.png\" alt=\"\" class=\"wp-image-31437\" style=\"width:441px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>dans la poule i, le s\xc3\xa9n\xc3\xa9gal a d\xc3\xa9\xc3\xa7u tant dans l'organisation tactique que les prestations individuelles et collectives. c'est logiquement les lions de la teranga ont perdu, 3-1, face aux bleus de la france plus r\xc3\xa9alistes dans le petit rectangle vert. l\xc3\xa0 \xc3\xa9galement, kylian mbapp\xc3\xa9 auteur d'un doubl\xc3\xa9, devient \xc3\xa0 lui seul meilleur buteur de la s\xc3\xa9lection fran\xc3\xa7aise. la t\xc3\xa2che s'annonce difficile pour sadio man\xc3\xa9 et ses co\xc3\xa9quipiers, qui vont affronter la norv\xc3\xa8ge du cyborg erling haaland (3pts) avant de terminer avec l'irak.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans le syst\xc3\xa8me de \"4-4-2\", ce sont les quatre de la ligne d\xc3\xa9fensive. on s'attaque aux quatre milieux de terrain...</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>quatre matchs nuls convaincants...</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\xc3\x80 part le maroc qui pourrait avoir un petit regret de n'avoir pas assomm\xc3\xa9 son adversaire le br\xc3\xa9sil, le cap-vert, l'\xc3\x89gypte et la rdc ont \xc3\xa9t\xc3\xa9 h\xc3\xa9ro\xc3\xafques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les lions de l'atlas, auteurs d'une prestation solide face \xc3\xa0 la sele\xc3\xa7ao br\xc3\xa9silienne, ont \xc3\xa9t\xc3\xa9 contraints au partage des points, z\xc3\xa9ro but partout. saibari a ouvert le score pour le maroc avant l'\xc3\xa9galisation br\xc3\xa9silienne, sign\xc3\xa9e vinicius jr. au prochain match les co\xc3\xa9quipiers de brahim diaz seront face \xc3\xa0 l'\xc3\x89cosse, tombeur du ha\xc3\xafti. un match \xc3\xa0 prendre au s\xc3\xa9rieux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le cap-vert et la rdc ont enregistr\xc3\xa9 leurs premiers points dans l'histoire de la coupe du monde. les requins bleus ont tenu en \xc3\xa9chec l'orge espagnol, 0-0, avec une bonne prestation du portier capverdien vozinha. pour sa deuxi\xc3\xa8me sortie le cap-vert joue face \xc3\xa0 l'uruguay. pour son premier match dans l'histoire du mondial, le cap-vert a fait bonne impression.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la rdc a tir\xc3\xa9 les poils dans les narines de la sele\xc3\xa7ao portugaise. men\xc3\xa9s tr\xc3\xa8s t\xc3\xb4t (6e) par un but de jo\xc3\xa0o neves la rdc a r\xc3\xa9tabli la parit\xc3\xa9 par yoane wisa \xc3\xa9galement marquant sur un coup de t\xc3\xaate avant la pause. c. ronaldo et les siens n'ont pas pu faire la diff\xc3\xa9rence. ce r\xc3\xa9sultat (1-1) permet aux l\xc3\xa9opards d'engranger leur premier point de l'histoire. la rdc sera face \xc3\xa0 la colombie au prochain match.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31438,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-56.png\" alt=\"\" class=\"wp-image-31438\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>les pharaons d'\xc3\x89gypte et leur capitaine mo sahah sont pass\xc3\xa9s tout pr\xc3\xa8s d'une victoire. oppos\xc3\xa9s aux diables rouges de la belgique, les pharaons ont fait la course en t\xc3\xaate avec l'ouverture du score sur un encha\xc3\xaenement de emma ashour (19e) avant de voir son d\xc3\xa9fenseur mohamed hany, sous la pr\xc3\xa9sidence de romelu lukaku marquer contre son camp. ce point permet \xc3\xa0 l'\xc3\x89gypte de bien entamer le tournoi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>deux victoires au forceps, 1-0....</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la c\xc3\xb4te d'ivoire et le ghana ont sauv\xc3\xa9 l'honneur pour l'afrique en termes de victoire pour la premi\xc3\xa8re journ\xc3\xa9e. les deux nations ont battu respectivement l'\xc3\x89quateur et le panama sur le m\xc3\xaame score d'un but \xc3\xa0 z\xc3\xa9ro. les \xc3\x89l\xc3\xa9phants de la c\xc3\xb4te d'ivoire, par le biais de l'ailier de manchester united, amad diallo a \xc3\xa9pingl\xc3\xa9 l'\xc3\x89quateur, et s'offre ainsi une victoire de prestige d\xc3\xa9terminante dans la course \xc3\xa0 la qualification.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans la m\xc3\xaame poule, l'allemagne a \xc3\xa9parpill\xc3\xa9 le cura\xc3\xa7ao 7 buts \xc3\xa0 1. le choc de la deuxi\xc3\xa8me journ\xc3\xa9e du groupe oppose la c\xc3\xb4te d'ivoire \xc3\xa0 l'allemagne.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les black stars du ghana ont tenu devant le panama. ce dernier a domin\xc3\xa9 les d\xc3\xa9bats mais l'essentiel a \xc3\xa9t\xc3\xa9 fait par caleb yerenkyi en toute fin de rencontre. avant d'affronter les deux autres grosses nations du groupe le ghana peut avancer calmement \xc3\xa0 la recherche d'un point pour se placer parmi les qualifi\xc3\xa9s. le ghana joue face \xc3\xa0 l'angleterre pour la prochaine sortie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les nations africaines n'ont obtenu que le tiers des points mis en jeu pour la premi\xc3\xa8re journ\xc3\xa9e. pour la premi\xc3\xa8re fois l'afrique compte 10 repr\xc3\xa9sentants. il va falloir rectifier le tir afin d'obtenir le plus de poings pour voir plusieurs pays du continent au tour suivant.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>delanov a.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em> </em></strong><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>d\xc3\xa9marr\xc3\xa9e le 11 juin dernier \xc3\xa0 mexico, la premi\xc3\xa8re journ\xc3\xa9e de la phase de groupe de la coupe du monde 2026 de football, a pris fin le mercredi dernier, avec des fortunes diverses pour les diff\xc3\xa9rents repr\xc3\xa9sentants africains. cette \xc3\xa9dition sp\xc3\xa9ciale \xc3\xa0 48 \xc3\xa9quipes est co-organis\xc3\xa9e par le mexique, le canada et les \xc3\x89tats-unis.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les pays africains sont en \"4-4-2\" pour le moment en coupe du monde 2026. au terme de leurs premiers matchs, le continent africain a r\xc3\xa9colt\xc3\xa9 4 d\xc3\xa9faites, 4 nuls et 2 victoires.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>quatre d\xc3\xa9culott\xc3\xa9es, 4 d\xc3\xa9faites cuisantes...</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>tout a d\xc3\xa9j\xc3\xa0 commenc\xc3\xa9 ce 11 juin \xc3\xa0 mexico. match d'ouverture entre l'un des pays organisateurs, le mexique justement face \xc3\xa0 l'afrique du sud. les bafana-bafana ont courb\xc3\xa9 l'\xc3\xa9chine 2-0. les poulains d'hugo broos n'ont pas \xc3\xa9t\xc3\xa9 au rendez-vous de l'attente. entre pr\xc3\xa9cipitation et impr\xc3\xa9cisions techniques, l'\xc3\xa9quipe sud-africaine a \xc3\xa9t\xc3\xa9 logiquement domin\xc3\xa9e 2 buts au rien.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31436,\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"right\"} -->\n<figure class=\"wp-block-image alignright size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-54.png\" alt=\"\" class=\"wp-image-31436\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>pour sa deuxi\xc3\xa8me sortie dans le groupe a, l'afrique du sud a accroch\xc3\xa9 le point du nul (1-1/t. mokoena sur p\xc3\xa9nalty) face \xc3\xa0 la tch\xc3\xa9quie. en deux matchs, l'afrique du sud compte 01pt et joue sa qualification face \xc3\xa0 la cor\xc3\xa9e du sud lors de la troisi\xc3\xa8me journ\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>parlant des d\xc3\xa9ceptions, ce sont aussi les revers du s\xc3\xa9n\xc3\xa9gal, de l'alg\xc3\xa9rie et de la tunisie. log\xc3\xa9e dans le groupe f aux c\xc3\xb4t\xc3\xa9s des pays-bas, du japon et de la su\xc3\xa8de, la tunisie a \xc3\xa9t\xc3\xa9 douch\xc3\xa9e pour son premier match. face \xc3\xa0 la su\xc3\xa8de justement, les aigles du carthage ont \xc3\xa9t\xc3\xa9 d\xc3\xa9plum\xc3\xa9s par la su\xc3\xa8de, 5-1.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ce r\xc3\xa9sultat a m\xc3\xaame engendr\xc3\xa9 le limogeage de sabri lamoushi remplac\xc3\xa9 par herv\xc3\xa9 renard. l'ancien technicien de l'arabie saoudite va poursuivre la comp\xc3\xa9tition avec des aigles priv\xc3\xa9 de leurs ailes lors de leur premi\xc3\xa8re sortie. appel\xc3\xa9 \xc3\xa0 la rescousse, h. renard r\xc3\xa9ussira-t-il \xc3\xa0 redresser la barre, la question reste pos\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les fennecs d'alg\xc3\xa9rie, dans la poule j, ont \xc3\xa9t\xc3\xa9 battus s\xc3\xa8chement par l'argentine, port\xc3\xa9e lionel messi auteur d'un tripl\xc3\xa9. on se disait que l'alg\xc3\xa9rie est une \xc3\xa9quipe qui ne d\xc3\xa9\xc3\xa7oit pas en phase finale de coupe du monde, mais la premi\xc3\xa8re sortie des verts n'a pas \xc3\xa9t\xc3\xa9 convaincante.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le laxisme des joueurs alg\xc3\xa9riens a \xc3\xa9t\xc3\xa9 pr\xc3\xa9judiciable. le lutin argentin, a inscrit pour la premi\xc3\xa8re fois un tripl\xc3\xa9 en coupe du monde. l'ancien barcelonais a \xc3\xa9gal\xc3\xa9 miroslav klose au rang du meilleur buteur de l'histoire de cette comp\xc3\xa9tition avec 16 r\xc3\xa9alisations. l'alg\xc3\xa9rie doit se relever face \xc3\xa0 la jordanie qui avait \xc3\xa9galement perdu face l'autriche.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31437,\"width\":\"441px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"left\"} -->\n<figure class=\"wp-block-image alignleft size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-55.png\" alt=\"\" class=\"wp-image-31437\" style=\"width:441px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>dans la poule i, le s\xc3\xa9n\xc3\xa9gal a d\xc3\xa9\xc3\xa7u tant dans l'organisation tactique que les prestations individuelles et collectives. c'est logiquement les lions de la teranga ont perdu, 3-1, face aux bleus de la france plus r\xc3\xa9alistes dans le petit rectangle vert. l\xc3\xa0 \xc3\xa9galement, kylian mbapp\xc3\xa9 auteur d'un doubl\xc3\xa9, devient \xc3\xa0 lui seul meilleur buteur de la s\xc3\xa9lection fran\xc3\xa7aise. la t\xc3\xa2che s'annonce difficile pour sadio man\xc3\xa9 et ses co\xc3\xa9quipiers, qui vont affronter la norv\xc3\xa8ge du cyborg erling haaland (3pts) avant de terminer avec l'irak.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans le syst\xc3\xa8me de \"4-4-2\", ce sont les quatre de la ligne d\xc3\xa9fensive. on s'attaque aux quatre milieux de terrain...</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>quatre matchs nuls convaincants...</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\xc3\x80 part le maroc qui pourrait avoir un petit regret de n'avoir pas assomm\xc3\xa9 son adversaire le br\xc3\xa9sil, le cap-vert, l'\xc3\x89gypte et la rdc ont \xc3\xa9t\xc3\xa9 h\xc3\xa9ro\xc3\xafques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les lions de l'atlas, auteurs d'une prestation solide face \xc3\xa0 la sele\xc3\xa7ao br\xc3\xa9silienne, ont \xc3\xa9t\xc3\xa9 contraints au partage des points, z\xc3\xa9ro but partout. saibari a ouvert le score pour le maroc avant l'\xc3\xa9galisation br\xc3\xa9silienne, sign\xc3\xa9e vinicius jr. au prochain match les co\xc3\xa9quipiers de brahim diaz seront face \xc3\xa0 l'\xc3\x89cosse, tombeur du ha\xc3\xafti. un match \xc3\xa0 prendre au s\xc3\xa9rieux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le cap-vert et la rdc ont enregistr\xc3\xa9 leurs premiers points dans l'histoire de la coupe du monde. les requins bleus ont tenu en \xc3\xa9chec l'orge espagnol, 0-0, avec une bonne prestation du portier capverdien vozinha. pour sa deuxi\xc3\xa8me sortie le cap-vert joue face \xc3\xa0 l'uruguay. pour son premier match dans l'histoire du mondial, le cap-vert a fait bonne impression.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31438,\"width\":\"456px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"right\"} -->\n<figure class=\"wp-block-image alignright size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-56.png\" alt=\"\" class=\"wp-image-31438\" style=\"width:456px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>la rdc a tir\xc3\xa9 les poils dans les narines de la sele\xc3\xa7ao portugaise. men\xc3\xa9s tr\xc3\xa8s t\xc3\xb4t (6e) par un but de jo\xc3\xa0o neves la rdc a r\xc3\xa9tabli la parit\xc3\xa9 par yoane wisa \xc3\xa9galement marquant sur un coup de t\xc3\xaate avant la pause. c. ronaldo et les siens n'ont pas pu faire la diff\xc3\xa9rence. ce r\xc3\xa9sultat (1-1) permet aux l\xc3\xa9opards d'engranger leur premier point de l'histoire. la rdc sera face \xc3\xa0 la colombie au prochain match.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les pharaons d'\xc3\x89gypte et leur capitaine mo sahah sont pass\xc3\xa9s tout pr\xc3\xa8s d'une victoire. oppos\xc3\xa9s aux diables rouges de la belgique, les pharaons ont fait la course en t\xc3\xaate avec l'ouverture du score sur un encha\xc3\xaenement de emma ashour (19e) avant de voir son d\xc3\xa9fenseur mohamed hany, sous la pr\xc3\xa9sidence de romelu lukaku marquer contre son camp. ce point permet \xc3\xa0 l'\xc3\x89gypte de bien entamer le tournoi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>deux victoires au forceps, 1-0....</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la c\xc3\xb4te d'ivoire et le ghana ont sauv\xc3\xa9 l'honneur pour l'afrique en termes de victoire pour la premi\xc3\xa8re journ\xc3\xa9e. les deux nations ont battu respectivement l'\xc3\x89quateur et le panama sur le m\xc3\xaame score d'un but \xc3\xa0 z\xc3\xa9ro. les \xc3\x89l\xc3\xa9phants de la c\xc3\xb4te d'ivoire, par le biais de l'ailier de manchester united, amad diallo a \xc3\xa9pingl\xc3\xa9 l'\xc3\x89quateur, et s'offre ainsi une victoire de prestige d\xc3\xa9terminante dans la course \xc3\xa0 la qualification.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans la m\xc3\xaame poule, l'allemagne a \xc3\xa9parpill\xc3\xa9 le cura\xc3\xa7ao 7 buts \xc3\xa0 1. le choc de la deuxi\xc3\xa8me journ\xc3\xa9e du groupe oppose la c\xc3\xb4te d'ivoire \xc3\xa0 l'allemagne.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les black stars du ghana ont tenu devant le panama. ce dernier a domin\xc3\xa9 les d\xc3\xa9bats mais l'essentiel a \xc3\xa9t\xc3\xa9 fait par caleb yerenkyi en toute fin de rencontre. avant d'affronter les deux autres grosses nations du groupe le ghana peut avancer calmement \xc3\xa0 la recherche d'un point pour se placer parmi les qualifi\xc3\xa9s. le ghana joue face \xc3\xa0 l'angleterre pour la prochaine sortie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les nations africaines n'ont obtenu que le tiers des points mis en jeu pour la premi\xc3\xa8re journ\xc3\xa9e. pour la premi\xc3\xa8re fois l'afrique compte 10 repr\xc3\xa9sentants. il va falloir rectifier le tir afin d'obtenir le plus de poings pour voir plusieurs pays du continent au tour suivant.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>delanov a.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em> </em></strong><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:20:08:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7117931&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781899716 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>d\xc3\xa9marr\xc3\xa9e le 11 juin dernier \xc3\xa0 mexico, la premi\xc3\xa8re journ\xc3\xa9e de la phase de groupe de la coupe du monde 2026 de football, a pris fin le mercredi dernier, avec des fortunes diverses pour les diff\xc3\xa9rents repr\xc3\xa9sentants africains. cette \xc3\xa9dition sp\xc3\xa9ciale \xc3\xa0 48 \xc3\xa9quipes est co-organis\xc3\xa9e par le mexique, le canada et les \xc3\x89tats-unis.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les pays africains sont en \"4-4-2\" pour le moment en coupe du monde 2026. au terme de leurs premiers matchs, le continent africain a r\xc3\xa9colt\xc3\xa9 4 d\xc3\xa9faites, 4 nuls et 2 victoires.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>quatre d\xc3\xa9culott\xc3\xa9es, 4 d\xc3\xa9faites cuisantes...</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>tout a d\xc3\xa9j\xc3\xa0 commenc\xc3\xa9 ce 11 juin \xc3\xa0 mexico. match d'ouverture entre l'un des pays organisateurs, le mexique justement face \xc3\xa0 l'afrique du sud. les bafana-bafana ont courb\xc3\xa9 l'\xc3\xa9chine 2-0. les poulains d'hugo broos n'ont pas \xc3\xa9t\xc3\xa9 au rendez-vous de l'attente. entre pr\xc3\xa9cipitation et impr\xc3\xa9cisions techniques, l'\xc3\xa9quipe sud-africaine a \xc3\xa9t\xc3\xa9 logiquement domin\xc3\xa9e 2 buts au rien.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31436,\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"right\"} -->\n<figure class=\"wp-block-image alignright size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-54.png\" alt=\"\" class=\"wp-image-31436\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>pour sa deuxi\xc3\xa8me sortie dans le groupe a, l'afrique du sud a accroch\xc3\xa9 le point du nul (1-1/t. mokoena sur p\xc3\xa9nalty) face \xc3\xa0 la tch\xc3\xa9quie. en deux matchs, l'afrique du sud compte 01pt et joue sa qualification face \xc3\xa0 la cor\xc3\xa9e du sud lors de la troisi\xc3\xa8me journ\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>parlant des d\xc3\xa9ceptions, ce sont aussi les revers du s\xc3\xa9n\xc3\xa9gal, de l'alg\xc3\xa9rie et de la tunisie. log\xc3\xa9e dans le groupe f aux c\xc3\xb4t\xc3\xa9s des pays-bas, du japon et de la su\xc3\xa8de, la tunisie a \xc3\xa9t\xc3\xa9 douch\xc3\xa9e pour son premier match. face \xc3\xa0 la su\xc3\xa8de justement, les aigles du carthage ont \xc3\xa9t\xc3\xa9 d\xc3\xa9plum\xc3\xa9s par la su\xc3\xa8de, 5-1.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ce r\xc3\xa9sultat a m\xc3\xaame engendr\xc3\xa9 le limogeage de sabri lamoushi remplac\xc3\xa9 par herv\xc3\xa9 renard. l'ancien technicien de l'arabie saoudite va poursuivre la comp\xc3\xa9tition avec des aigles priv\xc3\xa9 de leurs ailes lors de leur premi\xc3\xa8re sortie. appel\xc3\xa9 \xc3\xa0 la rescousse, h. renard r\xc3\xa9ussira-t-il \xc3\xa0 redresser la barre, la question reste pos\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les fennecs d'alg\xc3\xa9rie, dans la poule j, ont \xc3\xa9t\xc3\xa9 battus s\xc3\xa8chement par l'argentine, port\xc3\xa9e lionel messi auteur d'un tripl\xc3\xa9. on se disait que l'alg\xc3\xa9rie est une \xc3\xa9quipe qui ne d\xc3\xa9\xc3\xa7oit pas en phase finale de coupe du monde, mais la premi\xc3\xa8re sortie des verts n'a pas \xc3\xa9t\xc3\xa9 convaincante.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le laxisme des joueurs alg\xc3\xa9riens a \xc3\xa9t\xc3\xa9 pr\xc3\xa9judiciable. le lutin argentin, a inscrit pour la premi\xc3\xa8re fois un tripl\xc3\xa9 en coupe du monde. l'ancien barcelonais a \xc3\xa9gal\xc3\xa9 miroslav klose au rang du meilleur buteur de l'histoire de cette comp\xc3\xa9tition avec 16 r\xc3\xa9alisations. l'alg\xc3\xa9rie doit se relever face \xc3\xa0 la jordanie qui avait \xc3\xa9galement perdu face l'autriche.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31437,\"width\":\"441px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"left\"} -->\n<figure class=\"wp-block-image alignleft size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-55.png\" alt=\"\" class=\"wp-image-31437\" style=\"width:441px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>dans la poule i, le s\xc3\xa9n\xc3\xa9gal a d\xc3\xa9\xc3\xa7u tant dans l'organisation tactique que les prestations individuelles et collectives. c'est logiquement les lions de la teranga ont perdu, 3-1, face aux bleus de la france plus r\xc3\xa9alistes dans le petit rectangle vert. l\xc3\xa0 \xc3\xa9galement, kylian mbapp\xc3\xa9 auteur d'un doubl\xc3\xa9, devient \xc3\xa0 lui seul meilleur buteur de la s\xc3\xa9lection fran\xc3\xa7aise. la t\xc3\xa2che s'annonce difficile pour sadio man\xc3\xa9 et ses co\xc3\xa9quipiers, qui vont affronter la norv\xc3\xa8ge du cyborg erling haaland (3pts) avant de terminer avec l'irak.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans le syst\xc3\xa8me de \"4-4-2\", ce sont les quatre de la ligne d\xc3\xa9fensive. on s'attaque aux quatre milieux de terrain...</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>quatre matchs nuls convaincants...</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\xc3\x80 part le maroc qui pourrait avoir un petit regret de n'avoir pas assomm\xc3\xa9 son adversaire le br\xc3\xa9sil, le cap-vert, l'\xc3\x89gypte et la rdc ont \xc3\xa9t\xc3\xa9 h\xc3\xa9ro\xc3\xafques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les lions de l'atlas, auteurs d'une prestation solide face \xc3\xa0 la sele\xc3\xa7ao br\xc3\xa9silienne, ont \xc3\xa9t\xc3\xa9 contraints au partage des points, z\xc3\xa9ro but partout. saibari a ouvert le score pour le maroc avant l'\xc3\xa9galisation br\xc3\xa9silienne, sign\xc3\xa9e vinicius jr. au prochain match les co\xc3\xa9quipiers de brahim diaz seront face \xc3\xa0 l'\xc3\x89cosse, tombeur du ha\xc3\xafti. un match \xc3\xa0 prendre au s\xc3\xa9rieux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le cap-vert et la rdc ont enregistr\xc3\xa9 leurs premiers points dans l'histoire de la coupe du monde. les requins bleus ont tenu en \xc3\xa9chec l'orge espagnol, 0-0, avec une bonne prestation du portier capverdien vozinha. pour sa deuxi\xc3\xa8me sortie le cap-vert joue face \xc3\xa0 l'uruguay. pour son premier match dans l'histoire du mondial, le cap-vert a fait bonne impression.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31438,\"width\":\"456px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"right\"} -->\n<figure class=\"wp-block-image alignright size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-56.png\" alt=\"\" class=\"wp-image-31438\" style=\"width:456px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>la rdc a tir\xc3\xa9 les poils dans les narines de la sele\xc3\xa7ao portugaise. men\xc3\xa9s tr\xc3\xa8s t\xc3\xb4t (6e) par un but de jo\xc3\xa0o neves la rdc a r\xc3\xa9tabli la parit\xc3\xa9 par yoane wisa \xc3\xa9galement marquant sur un coup de t\xc3\xaate avant la pause. c. ronaldo et les siens n'ont pas pu faire la diff\xc3\xa9rence. ce r\xc3\xa9sultat (1-1) permet aux l\xc3\xa9opards d'engranger leur premier point de l'histoire. la rdc sera face \xc3\xa0 la colombie au prochain match.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les pharaons d'\xc3\x89gypte et leur capitaine mo sahah sont pass\xc3\xa9s tout pr\xc3\xa8s d'une victoire. oppos\xc3\xa9s aux diables rouges de la belgique, les pharaons ont fait la course en t\xc3\xaate avec l'ouverture du score sur un encha\xc3\xaenement de emma ashour (19e) avant de voir son d\xc3\xa9fenseur mohamed hany, sous la pr\xc3\xa9sidence de romelu lukaku marquer contre son camp. ce point permet \xc3\xa0 l'\xc3\x89gypte de bien entamer le tournoi.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>deux victoires au forceps, 1-0....</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la c\xc3\xb4te d'ivoire et le ghana ont sauv\xc3\xa9 l'honneur pour l'afrique en termes de victoire pour la premi\xc3\xa8re journ\xc3\xa9e. les deux nations ont battu respectivement l'\xc3\x89quateur et le panama sur le m\xc3\xaame score d'un but \xc3\xa0 z\xc3\xa9ro. les \xc3\x89l\xc3\xa9phants de la c\xc3\xb4te d'ivoire, par le biais de l'ailier de manchester united, amad diallo a \xc3\xa9pingl\xc3\xa9 l'\xc3\x89quateur, et s'offre ainsi une victoire de prestige d\xc3\xa9terminante dans la course \xc3\xa0 la qualification.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans la m\xc3\xaame poule, l'allemagne a \xc3\xa9parpill\xc3\xa9 le cura\xc3\xa7ao 7 buts \xc3\xa0 1. le choc de la deuxi\xc3\xa8me journ\xc3\xa9e du groupe oppose la c\xc3\xb4te d'ivoire \xc3\xa0 l'allemagne.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31439,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-57.png\" alt=\"\" class=\"wp-image-31439\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>les black stars du ghana ont tenu devant le panama. ce dernier a domin\xc3\xa9 les d\xc3\xa9bats mais l'essentiel a \xc3\xa9t\xc3\xa9 fait par caleb yerenkyi en toute fin de rencontre. avant d'affronter les deux autres grosses nations du groupe le ghana peut avancer calmement \xc3\xa0 la recherche d'un point pour se placer parmi les qualifi\xc3\xa9s. le ghana joue face \xc3\xa0 l'angleterre pour la prochaine sortie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les nations africaines n'ont obtenu que le tiers des points mis en jeu pour la premi\xc3\xa8re journ\xc3\xa9e. pour la premi\xc3\xa8re fois l'afrique compte 10 repr\xc3\xa9sentants. il va falloir rectifier le tir afin d'obtenir le plus de poings pour voir plusieurs pays du continent au tour suivant.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>delanov a.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em> </em></strong><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 201.55.140.36
country_id: 3469034
description:
Jun 19 20:09:18 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 201.55.140.36 has been locked due to Imunify RBL


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 43.172.198.254
country_id: 1880251
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:request_uri||MV:la-bidc-lance-son-cadre-de-financement-esg-et-obtient-une-evaluation-positive-de-la-part-de-iss-esg-solutions/||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.54.114.133
country_id: 1512440
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/08/IMG-20210811-WA0030.jpg 1080w, http:/togodailynews.tg/wp-content/uploads/2021/08/IMG-20210811-WA0030-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2021/08/IMG-20210811-WA0030-768x512.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2021/08/IMG-20210811-WA0030-1024x683.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2021/08/IMG-20210811-WA0030-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 201.55.140.36
country_id: 3469034
description:
Jun 19 20:09:33 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 201.55.140.36 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.113.171.137
country_id: 1814991
description:
2026-06-19 20:09:48 dovecot_plain authenticator failed for H=(nauo3wrgku43tw2xvg58x) [123.113.171.137]:46010: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 123.113.171.137
country_id: 1814991
description:
Jun 19 20:09:46 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 123.113.171.137 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.109.144
country_id: 3865483
description:
Jun 19 20:09:49 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.109.144 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 89.131.187.10
country_id: 2510769
description:
89.131.187.10 - - [19/Jun/2026:20:10:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6592149&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D14816&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781899803 HTTP/2.0" 302 0 mediatopnews.tg "https://mediatopnews.tg/?p=14816" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.7243.1725 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:89.131.187.10


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.171.1.3
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/2000816850 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.252.196.68
country_id: 3017382
domain: libertetogo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:104.252.196.68||TA:104.252.196.68||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 122.57.167.142
country_id: 2186224
description:
[2026-06-19 20:12:58 +0000] info [whostmgrd] 122.57.167.142 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 195.242.125.180
country_id: 798544
description:
Jun 19 20:16:10 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 195.242.125.180 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 94.180.227.227
country_id: 2017370
description:
2026-06-19 20:16:24 H=([94.180.227.227]) [94.180.227.227]:62171 F=<home@white-ways.com> rejected RCPT <home@white-ways.com>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.169.30
country_id: 3175395
description:
Jun 19 20:16:33 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.169.30 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.171.77
country_id: 3175395
description:
Jun 19 20:16:51 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.171.77 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.250.55.230
country_id: 3437598
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211125-WA0089-1024x833.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211125-WA0089-300x244.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211125-WA0089-768x625.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2021/11/IMG-20211125-WA0089.jpg 1080w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.17.125.42
country_id: 690791
description:
Jun 19 20:21:23 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.17.125.42 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.101.155
country_id: 3865483
description:
Jun 19 20:21:02 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.101.155 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.17.125.42
country_id: 690791
description:
Jun 19 20:21:30 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.17.125.42 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.42.200.110
country_id: 1880251
description:
[2026-06-19 20:23:40 +0000] info [cpaneld] 152.42.200.110 - togoinrdceh "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 102.64.223.215
country_id: 2363686
description:
[2026-06-19 20:24:56 +0000] info [cpaneld] 102.64.223.215 NEW emupgdkn:goHVX88kf_bk6Vii address=102.64.223.215,app=cpaneld,creator=emupgdkn,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:20:25:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6722975&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781900711 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.223.251.150
country_id: 2395170
description:
Jun 19 20:24:39 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.223.251.150 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.184.80.190
country_id: 3469034
description:
Jun 19 20:24:41 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.184.80.190 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.6.13.122
country_id: 2635167
description:
[2026-06-19 20:24:54 +0000] info [cpaneld] 82.6.13.122 - info "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user info (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.208.106.50
country_id: 3175395
description:
Jun 19 20:24:56 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.208.106.50 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 1.55.188.115
country_id: 1562822
description:
1.55.188.115 - - [19/Jun/2026:20:26:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9608086&pdata=https%253A%252F%252Ftdn.tg%252Fauthor%252Faben%252Fpage%252F388%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781900759 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/author/aben/page/388/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.9315.1210 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:1.55.188.115


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 213.92.220.103
country_id: 798544
description:
Jun 19 20:26:09 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 213.92.220.103 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.121.162.56
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/trafic-de-produits-psychotropes-une-vingtaine-dindividus-interpelles-a-ouidah/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.121.162.56
country_id: 2542007
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/trafic-de-produits-psychotropes-une-vingtaine-dindividus-interpelles-a-ouidah/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 102.64.164.200
country_id: 2363686
description:
[2026-06-19 20:26:29 +0000] info [whostmgrd] 102.64.164.200 - root "GET /cpsess4179796351/json-api/loadavg HTTP/1.1" DEFERRED LOGIN whostmgrd: cookie ip check: IP address has changed: IP Address [104.28.163.71] != Current IP Address [102.64.164.200]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.9.155.126
country_id: 3469034
description:
[2026-06-19 20:29:27 +0000] info [cpaneld] 200.9.155.126 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 138.199.39.178
country_id: 1861060
description:
Jun 19 20:29:50 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 138.199.39.178 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 138.199.39.178
country_id: 1861060
description:
2026-06-19 20:29:52 dovecot_login authenticator failed for H=(wsip-184-178-172-12.rn.hr.cox.net) [138.199.39.178]:58625: 535 Incorrect authentication data (set_id=phipa@centif.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 61.73.190.98
country_id: 1835841
description:
2026-06-19 20:31:04 dovecot_login authenticator failed for H=([61.73.190.98]) [61.73.190.98]:55258: 535 Incorrect authentication data (set_id=info@emt.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.18.223
country_id: 3469034
description:
Jun 19 20:31:30 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.18.223 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 102.64.164.200
country_id: 2363686
description:
[2026-06-19 20:32:51 +0000] info [whostmgrd] 102.64.164.200 - root "GET /cpsess4179796351/json-api/loadavg HTTP/1.1" DEFERRED LOGIN whostmgrd: cookie ip check: IP address has changed: IP Address [104.28.163.71] != Current IP Address [102.64.164.200]


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 42.112.94.145
country_id: 1562822
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/album/journee-du-1er-juin-a-la-snb HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.8.249.34
country_id: 3469034
description:
Jun 19 20:33:26 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.8.249.34 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.8.249.34
country_id: 3469034
description:
Jun 19 20:33:34 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.8.249.34 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.172.163.164
country_id: 6252001
domain: dagl.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:107.172.163.164||TA:107.172.163.164||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.216.88.75
country_id: 3469034
description:
Jun 19 20:35:38 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.216.88.75 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.228.113.27
country_id: 1835841
description:
Jun 19 20:38:01 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.228.113.27 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.228.113.27
country_id: 1835841
description:
2026-06-19 20:38:03 dovecot_login authenticator failed for H=([211.228.113.27]) [211.228.113.27]:33119: 535 Incorrect authentication data (set_id=scan@togosem.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.174.125.183
country_id: 3469034
description:
Jun 19 20:38:27 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.174.125.183 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.55.89.5
country_id: 1269750
description:
2026-06-19 20:38:07 dovecot_login authenticator failed for H=([103.55.89.5]) [103.55.89.5]:50096: 535 Incorrect authentication data (set_id=scan@togosem.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.55.89.5
country_id: 1269750
description:
Jun 19 20:38:05 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.55.89.5 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.213.195.212
country_id: 1269750
description:
Jun 19 20:39:25 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.213.195.212 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 177.174.125.183
country_id: 3469034
description:
2026-06-19 20:38:29 dovecot_login authenticator failed for H=([187.92.239.160]) [177.174.125.183]:42004: 535 Incorrect authentication data (set_id=scan@togosem.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 20:38:55 +0000] info [cpaneld] 185.55.240.13 - iaideveloppementgroupe@gmail.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.213.195.212
country_id: 1269750
description:
Jun 19 20:39:33 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.213.195.212 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.9.94
country_id: 3469034
description:
Jun 19 20:40:55 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.9.94 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.15
country_id: 1880251
description:
47.128.96.15 - - [19/Jun/2026:20:41:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9661034&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Finscription-a-luniversite-de-lome-ul%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781901718 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/inscription-a-luniversite-de-lome-ul/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.15


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 128.199.123.37
country_id: 1880251
description:
[2026-06-19 20:41:34 +0000] info [cpaneld] 128.199.123.37 - ucaouut "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.136.176
country_id: 3469034
description:
Jun 19 20:44:17 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.136.176 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 20:44:19 +0000] info [cpaneld] 185.55.240.13 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.136.176
country_id: 3469034
description:
Jun 19 20:44:32 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.136.176 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 83.171.207.38
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/b9aca2 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 102.64.175.56
country_id: 2363686
description:
[2026-06-19 20:48:59 +0000] info [cpaneld] 102.64.175.56 NEW uljcqiuy:Md0IFpr0TUo9OCaJ address=102.64.175.56,app=cpaneld,creator=root,method=handle_form_login,path=loadsession:uljcqiuy:6JDrtdzhQBmIbk4U:create_user_session,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 191.99.75.72
country_id: 3658394
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/263253816 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.120.96.216
country_id: 3469034
description:
Jun 19 20:50:05 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.120.96.216 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 111.61.97.5
country_id: 1814991
description:
Jun 19 20:50:26 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 111.61.97.5 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.61.97.5
country_id: 1814991
description:
2026-06-19 20:50:28 dovecot_login authenticator failed for H=([111.61.97.5]) [111.61.97.5]:37790: 535 Incorrect authentication data (set_id=info@cameg-togo.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.252.76.88
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/culture-adoption-a-lunanimite-du-code-du-cinema-et-de-limage-animee-au-togo HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.226.156.253
country_id: 3895114
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/distinction-le-prix-du-meilleur-promoteur-de-la-paix-et-de-la-non-violence-en-afrique-decerne-a-johaness-makouvia HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 153.124.164.113
country_id: 1643084
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:153.124.164.113||TA:153.124.164.113||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:20:54:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6580848&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781902461 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 188.71.244.235
country_id: 285570
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/9d93a4 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.105.141.231
country_id: 798544
description:
Jun 19 20:56:42 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.105.141.231 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.242.37.3
country_id: 286963
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-de-21-le-taux-dacces-a-leau-potable-est-passe-a-69 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 89.43.133.181
country_id: 719819
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-la-promotion-du-leadership-feminin-gagne-du-terrain HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.197.18.172
country_id: 241170
domain: www.lasnb.snb.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.lasnb.snb.tg/uploads/images/33.jpeg HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 20:57:47 +0000] info [cpaneld] 185.55.240.13 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.121.128.90
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/8f9397 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 21:00:03 +0000] info [cpaneld] 185.55.240.13 - sprocaadmin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 43.172.196.251
country_id: 1880251
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:page_title||MV:Revalorisation des sites touristiques : la cascade de Wom\xc3\xa9 va \xc3\xaatre enjoliv\xc3\xa9e||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 128.199.123.37
country_id: 1880251
description:
[2026-06-19 21:00:42 +0000] info [cpaneld] 128.199.123.37 - dany2 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dany2 (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 95.164.245.108
country_id: 6252001
domain: dany2.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:95.164.245.108||TA:95.164.245.108||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 186.247.203.106
country_id: 3469034
domain: lct-togo.tg
description:
IM360 WAF: Bad file extension||RSV:8.19||T:APACHE||MVN:REQUEST_FILENAME||MV:/simplicity-is-the-ultimate-sophistication/1xbet-12.com||User:lhxhatyj||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.71.123
country_id: 3469034
description:
Jun 19 21:03:04 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.71.123 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 109.206.103.83
country_id: 6290252
description:
Jun 19 21:03:22 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 109.206.103.83 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.18.242.162
country_id: 1269750
description:
Jun 19 21:03:25 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.18.242.162 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 109.206.103.83
country_id: 6290252
description:
Jun 19 21:03:28 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 109.206.103.83 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.18.242.162
country_id: 1269750
description:
Jun 19 21:03:33 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.18.242.162 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.222.138.17
country_id: 831053
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-la-rentree-diplomatique-2022-2023-est-effective/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-19 21:06:10 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:52656: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 151.245.207.78
country_id: 2635167
domain: lacs1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:151.245.207.78||TA:151.245.207.78||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.192.66.25
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/07/IMG-20210708-WA0015.jpg 1080w, http:/togodailynews.tg/wp-content/uploads/2021/07/IMG-20210708-WA0015-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2021/07/IMG-20210708-WA0015-768x511.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2021/07/IMG-20210708-WA0015-1024x682.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2021/07/IMG-20210708-WA0015-272x182.jpg 272w HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.55.240.13
country_id: 3017382
description:
[2026-06-19 21:09:50 +0000] info [cpaneld] 185.55.240.13 - e.sanvee "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.sanvee (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [19/Jun/2026:21:11:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6713501&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781903476 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.222.140.236
country_id: 241170
domain: sthandling-aero.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/sthandling-aero.tg/wp-content/uploads/2017/07/home_media_number_2.png HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 146.70.192.108
country_id: 1880251
domain: flp-tg.com
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.19||T:APACHE||REQUEST_URI:/wp-includes/wlwmanifest.xml||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 148.72.64.32
country_id: 6252001
description:
Jun 19 21:13:22 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 148.72.64.32 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.150.94.73
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/securite-alimentaire-28-362-producteurs-beneficient-des-semences-certifiees-et-engrais/feed HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.91.164.131
country_id: 3469034
description:
Jun 19 21:15:44 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.91.164.131 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.17.137.118
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/ecole-de-la-chance-une-formation-gratuite-pour-lavenir-de-1-500-jeunes-filles-togolaises/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.17.137.118
country_id: 3625428
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/ecole-de-la-chance-une-formation-gratuite-pour-lavenir-de-1-500-jeunes-filles-togolaises/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.49
country_id: 3469034
description:
Jun 19 21:17:36 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.49 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 177.10.23.236
country_id: 3469034
description:
177.10.23.236 - - [19/Jun/2026:21:18:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7445141&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D14612&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781903923 HTTP/2.0" 302 0 mediatopnews.tg "https://mediatopnews.tg/?p=14612" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.7887.1520 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:177.10.23.236


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.42.200.110
country_id: 1880251
description:
[2026-06-19 21:19:24 +0000] info [cpaneld] 152.42.200.110 - nwjvzxzr "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nwjvzxzr (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.120.72.223
country_id: 3469034
description:
Jun 19 21:18:52 ns5 auth[4148957]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.120.72.223 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.236.123.236
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/author/7d6e79 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.159.177.87
country_id: 3996063
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/author/1347724381 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.41.140.66
country_id: 286963
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/author/1537474364 HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.115.67.83
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/author/false HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.169.131.52
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/04/IMG-20240413-WA0727-1024x683.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2024/04/IMG-20240413-WA0727-300x200.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2024/04/IMG-20240413-WA0727-768x512.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2024/04/IMG-20240413-WA0727-272x182.jpg 272w, http:/togodailynews.tg/wp-content/uploads/2024/04/IMG-20240413-WA0727.jpg 1080w HTTP/1.1||RSV:8.19||T:APACHE||


