# incident

plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.182.252.222
country_id: 6252001
description:
[2026-07-03 08:05:42 +0000] info [cpaneld] 24.182.252.222 - corpsdi6 "GET /login/?login_only=1&user=corpsdi6&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user corpsdi6 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.178.227.207
country_id: 6252001
description:
[2026-07-03 08:05:39 +0000] info [cpaneld] 212.178.227.207 - corpsdi5 "GET /login/?login_only=1&user=corpsdi5&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user corpsdi5 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.110.206.46
country_id: 6252001
description:
[2026-07-03 08:05:06 +0000] info [cpaneld] 46.110.206.46 - corpsdi "GET /login/?login_only=1&user=corpsdi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user corpsdi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.200.132.97
country_id: 6252001
description:
[2026-07-03 08:05:22 +0000] info [cpaneld] 68.200.132.97 - co "GET /login/?login_only=1&user=co&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user co (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.163.229.241
country_id: 6252001
description:
[2026-07-03 08:05:19 +0000] info [cpaneld] 73.163.229.241 - cor "GET /login/?login_only=1&user=cor&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cor (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [03/Jul/2026:08:06:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6723950&pdata=http%253A%252F%252Fsproca.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783065988 HTTP/1.1" 302 0 sproca.tg "http://sproca.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [03/Jul/2026:08:06:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10196074&pdata=http%253A%252F%252Fmail.sproca.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783065988 HTTP/1.1" 302 0 mail.sproca.tg "http://mail.sproca.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 80.248.64.198
country_id: 2363686
description:
[2026-07-03 08:08:40 +0000] info [cpaneld] 80.248.64.198 - neliam "GET /cpsess6971888695/frontend/jupiter/cron/index.html HTTP/1.1" DEFERRED LOGIN cpaneld: security token incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.238.156.31
country_id: 3175395
description:
2026-07-03 08:08:58 dovecot_login authenticator failed for H=(LSyNJjRdC) [185.238.156.31]:38421: 535 Incorrect authentication data (set_id=info@cndh-togo.org)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.50
country_id: 3017382
description:
[2026-07-03 08:08:12 +0000] info [cpaneld] 5.231.255.50 NEW oviaiart:UYY14rXjO3jsrAQ4 address=5.231.255.50,app=cpaneld,creator=oviaiart,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.83.109
country_id: 6252001
description:
[2026-07-03 08:08:14 +0000] info [cpaneld] 134.195.83.109 NEW oviaiart:7Si9BxwDIXd9Ncv0 address=134.195.83.109,app=cpaneld,creator=oviaiart,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 80.248.64.198
country_id: 2363686
description:
[2026-07-03 08:08:22 +0000] info [cpaneld] 80.248.64.198 NEW neliam:lPJHN95_oYMsmnn2 address=80.248.64.198,app=cpaneld,creator=neliam,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.48
country_id: 6252001
description:
205.169.39.48 - - [03/Jul/2026:08:09:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12938902&pdata=https%253A%252F%252Fautoconfig.mig.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783066171 HTTP/2.0" 302 0 autoconfig.mig.tg "https://autoconfig.mig.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.48


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.238.156.31
country_id: 3175395
description:
2026-07-03 08:09:15 dovecot_login authenticator failed for H=(fPDMAZO) [185.238.156.31]:38444: 535 Incorrect authentication data (set_id=info@cndh-togo.org)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 201.133.202.85
country_id: 3996063
description:
2026-07-03 08:10:45 dovecot_plain authenticator failed for H=dsl-201-133-202-85.prod-infinitum.com.mx ([69.172.210.47]) [201.133.202.85]:46782: 535 Incorrect authentication data (set_id=marketing@ucao-uut.tg)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 198.142.152.67
country_id: 2077456
description:
Denial of Service (DoS) attack was discovered from 198.142.152.67: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 198.142.152.68
country_id: 2077456
description:
Denial of Service (DoS) attack was discovered from 198.142.152.68: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.167.242
country_id: 2363686
description:
102.64.167.242 - - [03/Jul/2026:08:12:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9868907&pdata=http%253A%252F%252Fatms.tg%252F%253Futm_source%253Dig%2526utm_medium%253Dsocial%2526utm_content%253Dlink_in_bio%2526fbclid%253DPAZXh0bgNhZW0CMTEAc3J0YwZhcHBfaWQPMTI0MDI0NTc0Mjg3NDE0AAGnkWCgbTMwtzntmmgnTGtYFTExCNRdW-awuFdt0rjtcg8w3kd_FyaICxd1nb8_aem_JW7GyXALKkEsN6aObN95IA&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783066358 HTTP/1.1" 302 0 atms.tg "http://atms.tg/?utm_source=ig&utm_medium=social&utm_content=link_in_bio&fbclid=PAZXh0bgNhZW0CMTEAc3J0YwZhcHBfaWQPMTI0MDI0NTc0Mjg3NDE0AAGnkWCgbTMwtzntmmgnTGtYFTExCNRdW-awuFdt0rjtcg8w3kd_FyaICxd1nb8_aem_JW7GyXALKkEsN6aObN95IA" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F77 Instagram 436.0.0.24.53 (iPhone14,5; iOS 26_5; fr_FR; fr; scale=3.00; 1170x2532; IABMV/1; 1005037813) Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.167.242


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.52
country_id: 6252001
description:
205.169.39.52 - - [03/Jul/2026:08:12:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9607277&pdata=https%253A%252F%252Fmatosshop.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783066367 HTTP/2.0" 302 0 matosshop.tg "https://matosshop.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.52


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.167.242
country_id: 2363686
description:
102.64.167.242 - - [03/Jul/2026:08:13:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9595802&pdata=https%253A%252F%252Fatms.tg%252F%253Futm_source%253Dig%2526utm_medium%253Dsocial%2526utm_content%253Dlink_in_bio%2526fbclid%253DPAdGRleAS0TnFleHRuA2FlbQIxMQBzcnRjBmFwcF9pZA8xMjQwMjQ1NzQyODc0MTQAAaeRYKBtMzC3Oe2aaCdMa1gVMTEI1F1b5rC4V23SuO1yDzDeR38XJogLF3Wdvw_aem_JW7GyXALKkEsN6aObN95IA&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783066405 HTTP/2.0" 302 0 atms.tg "https://atms.tg/?utm_source=ig&utm_medium=social&utm_content=link_in_bio&fbclid=PAdGRleAS0TnFleHRuA2FlbQIxMQBzcnRjBmFwcF9pZA8xMjQwMjQ1NzQyODc0MTQAAaeRYKBtMzC3Oe2aaCdMa1gVMTEI1F1b5rC4V23SuO1yDzDeR38XJogLF3Wdvw_aem_JW7GyXALKkEsN6aObN95IA" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.167.242


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.167.242
country_id: 2363686
description:
102.64.167.242 - - [03/Jul/2026:08:14:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9869464&pdata=https%253A%252F%252Fatms.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783066475 HTTP/2.0" 302 0 atms.tg "https://atms.tg/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.167.242


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-07-03 08:15:44 +0000] info [webmaild] 160.242.195.10 - kanku@caissederetraites.tg "POST /cpsess4469811545/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-07-03 08:15:20 +0000] info [webmaild] 196.171.46.177 - matthieu.awide@togointerim.net "POST /cpsess4382973443/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.86.246] != Current IP Address [196.171.46.177]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.167.133
country_id: 2363686
description:
102.64.167.133 - - [03/Jul/2026:08:15:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6657177&pdata=https%253A%252F%252Ftdn.tg%252Fagence-togo-digital-recrute%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783066531 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/agence-togo-digital-recrute/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.167.133


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.8
country_id: 6252001
description:
205.169.39.8 - - [03/Jul/2026:08:15:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6722147&pdata=http%253A%252F%252Fcfpj.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783066548 HTTP/1.1" 302 0 cfpj.tg "http://cfpj.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.8


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-07-03 08:16:15 +0000] info [webmaild] 196.171.46.177 - vincent.sodjehoun@togointerim.net "POST /cpsess4484421801/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.86.246] != Current IP Address [196.171.46.177]


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-07-03 08:16:44 +0000] info [webmaild] 160.242.195.10 - kanku@caissederetraites.tg "POST /cpsess4469811545/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.172
country_id: 1880251
description:
47.128.96.172 - - [03/Jul/2026:08:17:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6789225&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fdeviation-tsevie%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783066629 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/deviation-tsevie/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.172


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-07-03 08:17:04 +0000] info [webmaild] 160.242.195.10 - kanku@caissederetraites.tg "POST /cpsess4469811545/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 201.198.177.182
country_id: 3624060
description:
2026-07-03 08:18:32 dovecot_plain authenticator failed for H=([69.172.210.47]) [201.198.177.182]:56364: 535 Incorrect authentication data (set_id=info@togointerim.net)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 213.158.199.10
country_id: 798544
description:
Denial of Service (DoS) attack was discovered from 213.158.199.10: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 213.158.199.9
country_id: 798544
description:
Denial of Service (DoS) attack was discovered from 213.158.199.9: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 193.151.190.167
country_id: 6252001
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.23||T:APACHE||RA:193.151.190.167||TA:193.151.190.167||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.238.189.153
country_id: 3996063
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/actualite/detail/prix-jean-julien-codjovi HTTP/1.1||RSV:8.23||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 137.83.187.155
country_id: 2921044
description:
Denial of Service (DoS) attack was discovered from 137.83.187.155: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 77350307
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 91.193.232.78
country_id: 6252001
domain: civilemagazine.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:wadminw||User:aifkjzqm||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [03/Jul/2026:08:27:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12937668&pdata=http%253A%252F%252Fwww.djama.snb.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783067238 HTTP/1.1" 302 0 www.djama.snb.tg "http://www.djama.snb.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.122.148.140
country_id: 953987
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/event/la-gamme-de-boissons-gazeuses-de-la-snb-presentee-a-la-presse HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.58
country_id: 6252001
description:
205.169.39.58 - - [03/Jul/2026:08:30:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10329243&pdata=http%253A%252F%252Fboutique.cafe.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783067412 HTTP/1.1" 302 0 boutique.cafe.tg "http://boutique.cafe.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.58


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 176.125.230.4
country_id: 2562770
description:
176.125.230.4 - - [03/Jul/2026:08:31:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9933974&pdata=https%253A%252F%252Fpartenaires.ucao-uut.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783067489 HTTP/2.0" 302 0 partenaires.ucao-uut.tg "https://partenaires.ucao-uut.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:176.125.230.4


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.143.232.189
country_id: 2635167
description:
104.143.232.189 - - [03/Jul/2026:08:32:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9672040&pdata=https%253A%252F%252Fcorpsdiplomaticnews.tg%252Findex.php%252F2025%252F11%252F24%252Fprima-les-chambres-de-commerce-du-togo-et-du-benin-repensent-la-circulation-des-produits-agricoles%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783067530 HTTP/2.0" 302 0 corpsdiplomaticnews.tg "https://corpsdiplomaticnews.tg/index.php/2025/11/24/prima-les-chambres-de-commerce-du-togo-et-du-benin-repensent-la-circulation-des-produits-agricoles/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2093.1952 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.143.232.189


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.23
country_id: 6252001
description:
205.169.39.23 - - [03/Jul/2026:08:33:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13157064&pdata=http%253A%252F%252Fwww.consult.sodigaz.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783067579 HTTP/1.1" 302 0 www.consult.sodigaz.tg "http://www.consult.sodigaz.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.23


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 220.80.251.97
country_id: 1835841
description:
[2026-07-03 08:33:16 +0000] info [whostmgrd] 220.80.251.97 - moderator "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.0
country_id: 6252001
description:
205.169.39.0 - - [03/Jul/2026:08:34:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7052741&pdata=http%253A%252F%252Fjvvtdy.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783067652 HTTP/1.1" 302 0 jvvtdy.mediatopnews.tg "http://jvvtdy.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.118.29.61
country_id: 2328926
description:
[2026-07-03 08:35:19 +0000] info [cpaneld] 105.118.29.61 - camaegdtomgo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 145.224.108.254
country_id: 732800
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/49.jpeg HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.138.68.118
country_id: 953987
description:
[2026-07-03 08:36:17 +0000] info [whostmgrd] 41.138.68.118 - moder "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.118.29.61
country_id: 2328926
description:
[2026-07-03 08:37:38 +0000] info [cpaneld] 105.118.29.61 - pduusmyf "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.78.12
country_id: 6252001
description:
[2026-07-03 08:38:40 +0000] info [cpaneld] 217.181.78.12 - ljrwwgxg "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.118.29.61
country_id: 2328926
description:
[2026-07-03 08:38:52 +0000] info [cpaneld] 105.118.29.61 - pduusmyf "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.15
country_id: 6252001
description:
205.169.39.15 - - [03/Jul/2026:08:39:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10186181&pdata=http%253A%252F%252Fmail.sproca.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783067954 HTTP/1.1" 302 0 mail.sproca.tg "http://mail.sproca.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.15


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 109.107.227.181
country_id: 248816
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/album/la-djama-lager-disponible-sur-le-marche HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77705892
name: IM360 WAF: Tracking doubtful fake-admin WordPress username (RBL-only)
abuser: 193.56.116.61
country_id: 6252001
domain: civilemagazine.tg
description:
IM360 WAF: Tracking doubtful fake-admin WordPress username (RBL-only)||MV:wp-system||MVN:ARGS:log||WPU:wp-system||User:aifkjzqm||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.170.66.202
country_id: 2363686
description:
[2026-07-03 08:40:30 +0000] info [webmaild] 196.170.66.202 - illene.e@inger.tg "POST /cpsess0881596670/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 144.124.192.1
country_id: 1512440
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/18.jpeg HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 158.173.155.240
country_id: 2921044
description:
Jul  3 08:41:46 ns5 pure-ftpd[75745]: (?@158.173.155.240) [INFO] New connection from 158.173.155.240


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 173.239.200.140
country_id: 1733045
description:
Jul  3 08:41:58 ns5 pure-ftpd[75802]: (?@173.239.200.140) [INFO] New connection from 173.239.200.140


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.0
country_id: 6252001
description:
205.169.39.0 - - [03/Jul/2026:08:42:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7039594&pdata=http%253A%252F%252Fwebdisk.sproca.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783068120 HTTP/1.1" 302 0 webdisk.sproca.tg "http://webdisk.sproca.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.3
country_id: 6252001
description:
205.169.39.3 - - [03/Jul/2026:08:43:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12807787&pdata=http%253A%252F%252Fsproca.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783068183 HTTP/1.1" 302 0 sproca.tg "http://sproca.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.3


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.170.66.202
country_id: 2363686
description:
[2026-07-03 08:43:52 +0000] info [webmaild] 196.170.66.202 - wiyao.g@inger.tg "POST /cpsess9414263497/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.168.215.35] != Current IP Address [196.170.66.202]


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.191.160.98
country_id: 1562822
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/event/les-prix-des-produits-snb-restent-inchanges HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 200.71.124.127
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:08-47.200.71.124.127||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.170.51.177
country_id: 2363686
description:
[2026-07-03 08:47:26 +0000] info [webmaild] 196.170.51.177 - ktegnema@caissederetraites.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 200.71.124.127
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.23||T:APACHE||RA:200.71.124.127||TA:200.71.124.127||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.97.163.58
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/la-bidc-et-afriland-first-bank-ci-concluent-un-partenariat-de-10-milliards-fcfa-pour-soutenir-la-croissance-des-pme-en-cote-divoire/ HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.97.163.58
country_id: 1210997
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/la-bidc-et-afriland-first-bank-ci-concluent-un-partenariat-de-10-milliards-fcfa-pour-soutenir-la-croissance-des-pme-en-cote-divoire/ HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.5
country_id: 6252001
description:
205.169.39.5 - - [03/Jul/2026:08:48:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7170161&pdata=https%253A%252F%252Fzismaz.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783068492 HTTP/2.0" 302 0 zismaz.mediatopnews.tg "https://zismaz.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.5


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.15
country_id: 6252001
description:
205.169.39.15 - - [03/Jul/2026:08:49:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9987430&pdata=https%253A%252F%252Fzismaz.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783068595 HTTP/2.0" 302 0 zismaz.mediatopnews.tg "https://zismaz.mediatopnews.tg/" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_1 like Mac OS X) AppleWebKit/603.1.30 (KHTML, like Gecko) Version/10.0 Mobile/14E304 Safari/602.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.15


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 91.92.120.161
country_id: 732800
description:
2026-07-03 08:49:47 H=([91.92.120.161]) [91.92.120.161]:54836 F=<contact@sthandling-aero.tg> rejected RCPT <contact@sthandling-aero.tg>: Sender verify failed


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.28
country_id: 6252001
description:
205.169.39.28 - - [03/Jul/2026:08:51:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10198728&pdata=https%253A%252F%252Fzismaz.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783068702 HTTP/2.0" 302 0 zismaz.mediatopnews.tg "https://zismaz.mediatopnews.tg/" "Mozilla/5.0 (Linux; Android 7.0; SM-G930V Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.28


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.173.173.190
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/shop/bouffe/wingsn-shake/nos-viandes/steak-au-poivre/?add-to-cart=1926||QS:add-to-cart=1926||RSV:8.23||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 117.5.193.190
country_id: 1562822
description:
2026-07-03 08:52:18 dovecot_plain authenticator failed for H=([69.172.210.47]) [117.5.193.190]:37602: 535 Incorrect authentication data (set_id=admin@corpsdiplomaticnews.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.62.37.209
country_id: 690791
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-une-nouvelle-etape-pour-laccompagnement-entrepreneurial-des-jeunes/ HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 119.193.250.48
country_id: 1835841
description:
[2026-07-03 08:52:50 +0000] info [whostmgrd] 119.193.250.48 - jnikuekuete "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.62.37.209
country_id: 690791
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/togo-une-nouvelle-etape-pour-laccompagnement-entrepreneurial-des-jeunes/ HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.172
country_id: 1880251
description:
47.128.96.172 - - [03/Jul/2026:08:55:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6528363&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fdv-lottery%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783068922 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/dv-lottery/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.172


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.64.145.253
country_id: 2363686
description:
2026-07-03 08:55:07 dovecot_login authenticator failed for H=(Yoga) [102.64.145.253]:51823: 535 Incorrect authentication data (set_id=contactcert@certlogisticstogo.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 211.228.82.173
country_id: 1835841
description:
[2026-07-03 08:56:27 +0000] info [whostmgrd] 211.228.82.173 - admin "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.117.235.173
country_id: 2802361
description:
[2026-07-03 08:57:24 +0000] info [whostmgrd] 178.117.235.173 - supporthosting@cafe.tg "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77350026
name: IM360 WAF: Track suspicious Spring Framework requests
abuser: 155.212.37.155
country_id: 2750405
domain: mesyscom.com
description:
IM360 WAF: Track suspicious Spring Framework requests||RSV:8.23||T:APACHE||MVN:ARGS:class_list.class_list||MV:post-11559||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.5.216.30
country_id: 1210997
description:
103.5.216.30 - - [03/Jul/2026:08:59:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6974052&pdata=https%253A%252F%252Fcfpj.tg%252Fyedk-315115jetid.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783069166 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/yedk-315115jetid.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.5.216.30


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.79.4.148
country_id: 2750405
description:
[2026-07-03 09:00:56 +0000] info [whostmgrd] 80.79.4.148 - jnikuekuete@otr.tg "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77350541
name: IM360 WAF: Possible SQL injection attack
abuser: 31.134.2.38
country_id: 241170
domain: mesyscom.com
description:
IM360 WAF: Possible SQL injection attack||MVN:ARGS:_links.about.about.href||MV:https://mesyscom.com/wp-json/wp/v2/types/page' UNION SELECT NULL-- -||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.54.78.227
country_id: 1512440
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/mois-du-consommer-local-renforcement-de-lengagement-national-pour-le-made-in-togo/ HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.54.78.227
country_id: 1512440
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/mois-du-consommer-local-renforcement-de-lengagement-national-pour-le-made-in-togo/ HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 203.99.187.86
country_id: 1168579
description:
[2026-07-03 09:04:36 +0000] info [whostmgrd] 203.99.187.86 - Administrator "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.2
country_id: 6252001
description:
205.169.39.2 - - [03/Jul/2026:09:04:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7235782&pdata=http%253A%252F%252Fsbvdn6.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783069484 HTTP/1.1" 302 0 sbvdn6.mediatopnews.tg "http://sbvdn6.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.2


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.21.202.1
country_id: 3469034
description:
[2026-07-03 09:05:52 +0000] info [whostmgrd] 187.21.202.1 - moderator "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.3
country_id: 6252001
description:
205.169.39.3 - - [03/Jul/2026:09:06:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6710470&pdata=http%253A%252F%252F1l7yem.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783069598 HTTP/1.1" 302 0 1l7yem.mediatopnews.tg "http://1l7yem.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.3


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.110.134
country_id: 99237
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/31.jpeg HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.158.52.102
country_id: 6251999
description:
[2026-07-03 09:11:34 +0000] info [whostmgrd] 104.158.52.102 - support "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 1.20.156.65
country_id: 1605651
description:
[2026-07-03 09:11:47 +0000] info [whostmgrd] 1.20.156.65 - root "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.30
country_id: 6252001
description:
205.169.39.30 - - [03/Jul/2026:09:11:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6449260&pdata=http%253A%252F%252Fgfcusr.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783069894 HTTP/1.1" 302 0 gfcusr.mediatopnews.tg "http://gfcusr.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.30


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.35.195
country_id: 6251999
domain: macite.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.23||T:APACHE||RA:104.239.35.195||TA:104.239.35.195||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.173.181.225
country_id: 6252001
description:
[2026-07-03 09:13:04 +0000] info [whostmgrd] 107.173.181.225 - Administrator "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 41.79.219.20
country_id: 2395170
description:
41.79.219.20 - - [03/Jul/2026:09:16:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6593949&pdata=https%253A%252F%252Fmesyscom.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783070212 HTTP/2.0" 302 0 mesyscom.com "https://mesyscom.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:41.79.219.20


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 3.239.155.27
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 3.239.155.27: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.208.163.174
country_id: 2661886
description:
[2026-07-03 09:17:58 +0000] info [whostmgrd] 217.208.163.174 - moder "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.7
country_id: 6252001
description:
205.169.39.7 - - [03/Jul/2026:09:18:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6527645&pdata=http%253A%252F%252Fahoefa.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783070303 HTTP/1.1" 302 0 ahoefa.tg "http://ahoefa.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.7


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 208.84.100.167
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 208.84.100.167: 80 connections per 30 seconds to 80 port.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 89.147.172.213
country_id: 286963
description:
89.147.172.213 - - [03/Jul/2026:09:23:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6908312&pdata=https%253A%252F%252Fucao-uut.tg%252Fmaster-economie-et-gestions%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783070579 HTTP/2.0" 302 0 ucao-uut.tg "https://ucao-uut.tg/master-economie-et-gestions/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.9011.1188 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:89.147.172.213


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.105.170.202
country_id: 3923057
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/actualite/detail/9eme-forum-des-marches-dassurances HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-07-03 09:24:37 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:44554: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.244.148.35
country_id: 99237
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/event/djama-en-fete-adidogome HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 118.37.207.113
country_id: 1835841
description:
[2026-07-03 09:30:27 +0000] info [whostmgrd] 118.37.207.113 - supporthosting "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.97.201.230
country_id: 2750405
description:
[2026-07-03 09:31:43 +0000] info [whostmgrd] 95.97.201.230 - admin "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.150.57.183
country_id: 2510769
description:
[2026-07-03 09:34:01 +0000] info [whostmgrd] 79.150.57.183 - root "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.11.194
country_id: 6252001
description:
[2026-07-03 09:36:00 +0000] info [cpaneld] 195.63.11.194 - qledpnjw "POST /execute/Fileman/save_file_content?dir=public_html&path=public_html&from_charset=UTF-8&content=%3C%3Fphp+%24s+%3D+%22false%22%3Bif+%28mail%28%24_COOKIE%5B%22email_send_id%22%5D%2C%22Cp+Send+%23%22.%24_COOKIE%5B%22it_id%22%5D%2C%22Cp+Send+Working+..+%23%22.%24_COOKIE%5B%22it_id%22%5D.%22%5CnHash%3A+%22.md5%28time%28%29.uniqid%28%29%29%29%29+%7B%24s+%3D+%22true%22%3B%7Decho+%24s%3B%3F%3E&file=test123Cp.php&file_name=test123Cp.php HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 123.17.209.196
country_id: 1562822
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/events/8 HTTP/1.1||RSV:8.23||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 91.137.27.140
country_id: 2921044
description:
Denial of Service (DoS) attack was discovered from 91.137.27.140: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:9e2c7de7e315224076db8b98a6ded212ae9cdb56||Title:gjiv6a3zg6tf61||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:277e385210952c63724cc25fa872449022b78fab||Title:jw8dtz54p836u2||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.156
country_id: 2635167
description:
[2026-07-03 09:44:59 +0000] info [cpaneld] 5.230.133.156 NEW oviaiart:NpO08niBR4JwoUhr address=5.230.133.156,app=cpaneld,creator=oviaiart,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 121.190.124.78
country_id: 1835841
description:
[2026-07-03 09:45:25 +0000] info [whostmgrd] 121.190.124.78 - support "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f273005e5a4aba432dfd34119a06607c91fbc359||Title:0a3bj6umciwt6fg||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d4440f4e1ad0c873a1338bd5771fddc717313bcc||Title:23nkt4ju19midpj4kw||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.83.201.9
country_id: 3469034
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/22.jpeg HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.191.198.227
country_id: 1562822
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/32.jpeg HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a07c4b8cb8e1ae0acf8e7db8507d0e45db1fdb49||Title:tmlvr4dsgl9tj99o9||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.88.70
country_id: 2750405
description:
[2026-07-03 09:47:34 +0000] info [cpaneld] 217.181.88.70 - mipbtgnb "POST /execute/Fileman/save_file_content?dir=public_html&path=public_html&from_charset=UTF-8&content=%3C%3Fphp+%24s+%3D+%22false%22%3Bif+%28mail%28%24_COOKIE%5B%22email_send_id%22%5D%2C%22Cp+Send+%23%22.%24_COOKIE%5B%22it_id%22%5D%2C%22Cp+Send+Working+..+%23%22.%24_COOKIE%5B%22it_id%22%5D.%22%5CnHash%3A+%22.md5%28time%28%29.uniqid%28%29%29%29%29+%7B%24s+%3D+%22true%22%3B%7Decho+%24s%3B%3F%3E&file=test123Cp.php&file_name=test123Cp.php HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f078a118b4432ff46f65e7ab38e9210709ff4247||Title:160zjvm270xn6w0c||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:56211706671cd0b6e8aa77b64c7781f61032e075||Title:znfhejhhvmm0zf5d||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:6fbdb499fab665046c53b51ad3743681986eb77b||Title:8xw94bwit2ivvv||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:dc342bda19023e3273d9db27e31c7257dc93e14a||Title:a4x6rej9p1deiavk||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.247.215.135
country_id: 953987
domain: letempsdaider.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/letempsdaider.org/ HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:14aa3672572ea6cd4ccb1a71a8022e07374318ef||Title:1tn5xquzipz8zkq53||RSV:8.23||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 168.199.145.117
country_id: 1861060
domain: lcr-adem.org
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.23||T:APACHE||RA:168.199.145.117||TA:168.199.145.117||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:62d37375d601498f5878edee109f6c045252a995||Title:t3z53u86443ewd||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 34.233.208.81
country_id: 6252001
domain: boutique.cafe.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.23||T:APACHE||MV:/wp-json/wp/v2/users?per_page=100&orderby=id&order=asc&_fields=id,slug||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 95.87.64.79
country_id: 1527747
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/15.jpeg HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:21ecabbac994e64c1ba287b9cc97271198cfdcf6||Title:nyqhffntm1zvzvvg||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1f166e24c497b4dbe9760b5b98aa182739b2b326||Title:221gd7rloyn1hkyl1i||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77141095
name: IM360 WAF: Track spam in PrestaShop
abuser: 196.168.118.72
country_id: 2363686
domain: wages.tg
description:
IM360 WAF: Track spam in PrestaShop||RSV:8.23||T:APACHE||MVN:REQUEST_FILENAME||MV:/wp-json/contact-form-7/v1/contact-forms/1675/feedback||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 202.191.122.82
country_id: 1210997
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/41.jpeg HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a810b6d086322724c428fb64d0c50cb594189938||Title:x68d0hvlkzxlf7625||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 185.36.191.21
country_id: 2750405
domain: butodra.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.23||T:APACHE||MV:/wp-json/wp/v2/users/?who=authors&per_page=100&_locale=user||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.1.10.173
country_id: 6252001
description:
[2026-07-03 09:57:07 +0000] info [whostmgrd] 73.1.10.173 - root "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:58eaf956ebd5362e921668285810b0ccf933af93||Title:j7p84x2ue9zws6j||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.36.191.21
country_id: 2750405
description:
185.36.191.21 - - [03/Jul/2026:09:57:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10143635&pdata=https%253A%252F%252Fbutodra.tg%252Fwp-login.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783072634 HTTP/2.0" 302 0 butodra.tg "https://butodra.tg/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.36.191.21


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.167.133
country_id: 2363686
description:
102.64.167.133 - - [03/Jul/2026:09:57:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10197913&pdata=https%253A%252F%252Ftogointerim.net&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783072647 HTTP/2.0" 302 0 togointerim.net "https://togointerim.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:152.0) Gecko/20100101 Firefox/152.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.167.133


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 41.79.219.200
country_id: 2395170
description:
41.79.219.200 - - [03/Jul/2026:09:58:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10053992&pdata=https%253A%252F%252Fmacite.tg%252F2023%252F07%252F07%252Fbepc-2023-les-resultats-disponibles-depuis-hier-22h%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783072689 HTTP/2.0" 302 0 macite.tg "https://macite.tg/2023/07/07/bepc-2023-les-resultats-disponibles-depuis-hier-22h/" "Mozilla/5.0 (Linux; Android 10; TECNO BC2c Build/QP1A.190711.020) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.7827.164 Mobile Safari/537.36" WL:"0" "com.google.android.apps.searchlite" XFF:"-" CAPTCHA:"0" PEER:41.79.219.200


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:27be5e23e910334e590faac11edf1f7dece32603||Title:nu2dnfpuxofbsu||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.185.56.159
country_id: 1269750
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:07e1b49534ae74693ba24c0ea8632b5e8ecff25d||Title:56fa8ternnxmyce16||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 65.109.32.24
country_id: 660013
domain: belali.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Collect Your Digital Tokens cs4638137.tw1.ru||Email:n3903.1655+9507@gmail.com||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.79
country_id: 2635167
description:
[2026-07-03 10:02:31 +0000] info [cpaneld] 5.230.133.79 NEW oviaiart:EUJcTJ_0d_y10mPw address=5.230.133.79,app=cpaneld,creator=oviaiart,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.24.159.34
country_id: 3658394
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/24.jpeg HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.8
country_id: 6252001
description:
205.169.39.8 - - [03/Jul/2026:10:06:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7053210&pdata=http%253A%252F%252Fconfortis.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783073164 HTTP/1.1" 302 0 confortis.tg "http://confortis.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.8


plugin: modsec
rule: 77316736
name: IM360 WAF: Request body parsing error
abuser: 155.212.110.228
country_id: 298795
domain: crepsad.tg
description:
IM360 WAF: Request body parsing error||err_msg:XML parsing error: XML: Failed to parse document.||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.11
country_id: 6252001
description:
205.169.39.11 - - [03/Jul/2026:10:08:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9659753&pdata=http%253A%252F%252Fxqr2qh.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783073322 HTTP/1.1" 302 0 xqr2qh.mediatopnews.tg "http://xqr2qh.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.11


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 196.168.199.123
country_id: 2363686
description:
[2026-07-03 10:12:02 +0000] info [cpaneld] 196.168.199.123 NEW mvfxewjz:x8AyKrzynIyeIT02 address=196.168.199.123,app=cpaneld,creator=mvfxewjz,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 144.124.199.202
country_id: 1512440
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/togo-cap-sur-80-dacces-a-la-cuisson-propre-dici-2030/ HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 144.124.199.202
country_id: 1512440
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-cap-sur-80-dacces-a-la-cuisson-propre-dici-2030/ HTTP/1.1||RSV:8.23||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 119.4.90.222
country_id: 1814991
description:
Denial of Service (DoS) attack was discovered from 119.4.90.222: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.4
country_id: 6252001
description:
205.169.39.4 - - [03/Jul/2026:10:13:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6855322&pdata=https%253A%252F%252Fv2lhxq.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783073613 HTTP/2.0" 302 0 v2lhxq.mediatopnews.tg "https://v2lhxq.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.4


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 172.83.252.130
country_id: 6252001
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.23||T:APACHE||RA:172.83.252.130||TA:172.83.252.130||


plugin: modsec
rule: 77316736
name: IM360 WAF: Request body parsing error
abuser: 103.244.145.211
country_id: 798549
domain: togofeed.com
description:
IM360 WAF: Request body parsing error||err_msg:Multipart: Boundary not found in C-T.||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 175.107.212.199
country_id: 1168579
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/10.jpeg HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.54
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:56032c7c42df2bd070f24dba09fd502fcae92ccd||Title:j72cek3s8an799wf1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.39
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:70260c8591471250ff1553ae29dd8a59b8a8ed9e||Title:z4kdzic48qbzb3uwc0||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 102.64.220.39
country_id: 2363686
domain: togodailynews.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.23||T:APACHE||MV:/wp-json/wp/v2/users?context=view&search=gmail.com&_locale=user||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.48
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b24ed67965adbdd045b2e9b0a30c5cff54b6a219||Title:gqrpn58ssbj00k||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.33
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:eaa951a6483ff1071b2f54d71b2d5c90d804228e||Title:jghf3tzji4xg2vln||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.134
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b521f7a790dd6d126858916ff11c4d5fae405a90||Title:llinxuw6wu5nu32iga||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.48
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:94f108f176e6fa32dc49ddd8847f1e279fb55225||Title:jbjvpie2q23cf1dw||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.170.45.140
country_id: 2363686
description:
[2026-07-03 10:21:46 +0000] info [webmaild] 196.170.45.140 - a.ajavon@wages.tg "POST /cpsess8637887359/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.168.0.186] != Current IP Address [196.170.45.140]


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.47
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f38cb51bd4f246fae83524b90acb68d551ef57d6||Title:geeg231daibap5qjed||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.39
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:99b39a4b6b918f12088e7bbc4a0a39ed6640c288||Title:n9p59z9b0ys2yfh||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.47
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1d3952fb2bea4bedd0e384239eddfd0a01c9b023||Title:ba9zfa4lzkia6o3||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.52
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:533e86b806c1677b9b975b18c6659a6ffc43a3a5||Title:kuce7j0c8fawjhbqr||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.30
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:65d45df752dd71658672c94123c626c2fd088782||Title:qn214sh1r0xm3h6xd||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.44
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:c305d55b2129661d1d2ffd1fc8c8f77ae6d47fbd||Title:d11o29020li17cblzn||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.134
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:298ea9645c220d7efba0dede8554584af7ad661b||Title:4galvrod7jgqzlu||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.32
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:2cda98a9610895cefea125ff7d7f7c76d183274c||Title:0hnjjkxpj42zlbuj9||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.47
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:bbdd3b61891003b103d273097164b67e8dbd38aa||Title:2chglb00385zspf6h||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.39
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:28ca9c35ed638e2a8451a35ca98213fea128cbae||Title:hpfdj2wubsnbmk5g||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.54
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:202bb42d59803b7f04935253dd79e4efddea8b38||Title:gly22932vvcuko9na2||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.145
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:37d7d18665b9e62dc77d922108ac1b2f5b580f27||Title:e768lobr6s18wbc||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.33
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7ee23d866c3d1ae5a2b35aa50ad7e19434ddf1ee||Title:am1li92noesew1cxz||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.42
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:14b81d147db30474d6697e6d67bd9e79fe080bb5||Title:gvsk2n1miotcg2i||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.145
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:be6afae4f0c85627e04caee5d21daa2242234320||Title:gyxw9r85jdv5v7hrej||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.44
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:788496f199d1b3413948fb8cc489ba14977996b9||Title:zebi2rcpaw0cepn||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.39
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:9f9ceb02285f83c85b228d3c3f1e8e934728e6e9||Title:yhdbvenlrcwr9eh5sh||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.146
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:e86619fa2198357711ef1cfec77e80c754093ed7||Title:d9jk2iaw45xkdck||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.40
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:9dad05927052b6442d50bc3ca163bf096b223430||Title:nv86e2g8k6k40ng||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.38
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:33ee935d76c7deca0dd743230c3535e9199edca5||Title:o1uddx5jwsis7t||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.30
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:edc643ad53d3b32d1be448ca1085df7d017399dd||Title:zxxaio9ru8t3f0o||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.38
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a32b20dbae33f47b755a0a50955dcf1818355bba||Title:b0a5xlbiq19crhs5x0||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.54
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b5b87797bb6a24a495f2aebdcf37d7d4cbef4161||Title:4iy8nod18nqnpgj||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.39
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:4abba0d2fc553df8f37fed8fd6f476c11be0e593||Title:ik0lae4wt821im3edk||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.40
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:735b3885330e7973c70bb1536fbeedce8392e924||Title:s3jemkqqt5jewzh1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 155.2.215.42
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b32079340ef42511b6c307d1ae68606ac41d1779||Title:sm8voxveslza8s8||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.32
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:03fbe8e1bea46e9d41505135caf2e1c0aef4a79b||Title:yqu21m36vbjjkf||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.145
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:74befaf1abf2e10a9d56719d12965bfbf70351bd||Title:m7e03w7986zm5b1p8||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 89.139.216.222
country_id: 294640
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/togo-voici-le-decoupage-de-lannee-scolaire-et-universitaire-2021-2022 HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 142.111.152.138
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:e28cb002ee812fb9931eb6b21af520323cfd2368||Title:3qdjbdk8glbgqmi38z||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.0
country_id: 6252001
description:
205.169.39.0 - - [03/Jul/2026:10:35:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7247510&pdata=http%253A%252F%252Fautoconfig.henkagroupe.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783074944 HTTP/1.1" 302 0 autoconfig.henkagroupe.com "http://autoconfig.henkagroupe.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.0


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.173.179.47
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/shop/bouffe/wingsn-shake/chiken-wings/wing-roti-au-four-5-pieces/?add-to-cart=1870||QS:add-to-cart=1870||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.190.204.49
country_id: 1210997
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/event/visite-du-ministre-allemand-de-la-cooperation-economique-et-du-developpement HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 131.0.196.227
country_id: 3923057
description:
2026-07-03 10:40:03 dovecot_login authenticator failed for H=(brx.com) [131.0.196.227]:21385: 535 Incorrect authentication data (set_id=andre.k@cafe.tg)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 43.157.224.197
country_id: 1643084
domain: zephyr.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.23||T:APACHE||MV:/wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.57
country_id: 6252001
description:
205.169.39.57 - - [03/Jul/2026:10:41:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10249110&pdata=https%253A%252F%252Fwebmail.marketplace.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783075273 HTTP/2.0" 302 0 webmail.marketplace.netmaster.tg "https://webmail.marketplace.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.57


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.50
country_id: 6252001
description:
205.169.39.50 - - [03/Jul/2026:10:41:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001302&pdata=http%253A%252F%252Fcpanel.marketplace.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783075271 HTTP/1.1" 302 0 cpanel.marketplace.netmaster.tg "http://cpanel.marketplace.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.50


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.187.144.209
country_id: 1562822
domain: lasnb.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/lasnb.com/event/hogbeza-2023-apotheose HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.20
country_id: 2635167
description:
[2026-07-03 10:42:28 +0000] info [cpaneld] 5.230.133.20 NEW oviaiart:e7D7SerZCfJfzK4u address=5.230.133.20,app=cpaneld,creator=oviaiart,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 93.185.162.138
country_id: 1643084
description:
93.185.162.138 - - [03/Jul/2026:10:43:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10064835&pdata=https%253A%252F%252Fwww.ca-togo.org%252Fpresentation&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783075380 HTTP/2.0" 302 0 www.ca-togo.org "https://www.ca-togo.org/presentation" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:93.185.162.138


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.36.191.21
country_id: 2750405
description:
185.36.191.21 - - [03/Jul/2026:10:44:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9868183&pdata=https%253A%252F%252Fbutodra.tg%252Fwp-login.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783075488 HTTP/2.0" 302 0 butodra.tg "https://butodra.tg/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.36.191.21


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.57
country_id: 6252001
description:
205.169.39.57 - - [03/Jul/2026:10:45:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6844313&pdata=https%253A%252F%252Fwebdisk.marketplace.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783075508 HTTP/2.0" 302 0 webdisk.marketplace.netmaster.tg "https://webdisk.marketplace.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.57


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 193.203.9.210
country_id: 294640
domain: civilemagazine.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:@Wes09012001@.civilemagazine.tg||Method:wp.getUsersBlogs


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 86.126.179.113
country_id: 798549
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:HEAD http:/togodailynews.tg/wp-content/uploads/2026/07/WhatsApp-Image-2026-07-02-at-23.41.11-300x200.webp HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.18
country_id: 6252001
description:
205.169.39.18 - - [03/Jul/2026:10:46:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6656926&pdata=http%253A%252F%252Fmig.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783075573 HTTP/1.1" 302 0 mig.tg "http://mig.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.18


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.23
country_id: 6252001
description:
205.169.39.23 - - [03/Jul/2026:10:46:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6711143&pdata=http%253A%252F%252Fautoconfig.marketplace.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783075582 HTTP/1.1" 302 0 autoconfig.marketplace.netmaster.tg "http://autoconfig.marketplace.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.23


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 41.207.169.35
country_id: 2363686
description:
Denial of Service (DoS) attack was discovered from 41.207.169.35: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.1
country_id: 6252001
description:
205.169.39.1 - - [03/Jul/2026:10:48:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9660359&pdata=http%253A%252F%252Fcpcontacts.marketplace.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783075719 HTTP/1.1" 302 0 cpcontacts.marketplace.netmaster.tg "http://cpcontacts.marketplace.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.1


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.35.176.24
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/dr-christian-mouala-nomme-directeur-pays-de-lonusida-au-togo/ HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.35.176.24
country_id: 1210997
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/dr-christian-mouala-nomme-directeur-pays-de-lonusida-au-togo/ HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.130.174.151
country_id: 1210997
domain: lasnb.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/lasnb.com/history HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.77.121
country_id: 6252001
description:
[2026-07-03 10:59:59 +0000] info [cpaneld] 217.181.77.121 - fgbegmfv "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.217.99.140
country_id: 1210997
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/52.jpeg HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 35.89.10.184
country_id: 6252001
description:
35.89.10.184 - - [03/Jul/2026:11:02:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9804390&pdata=https%253A%252F%252Fsotranetogo.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783076576 HTTP/2.0" 302 0 sotranetogo.com "https://sotranetogo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.7871.46 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:35.89.10.184


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 64.89.163.26
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 64.89.163.26: 80 connections per 30 seconds to 80 port.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 85.106.113.28
country_id: 298795
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/audios HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.70.21
country_id: 6252001
description:
[2026-07-03 11:08:20 +0000] info [cpaneld] 217.181.70.21 - pnlpzmfv "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 177.234.139.116
country_id: 3175395
domain: www.letabloid.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:marywakefield||Email:aasdakalymaga@needforspeeds.online||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 177.234.139.116
country_id: 3175395
domain: www.letabloid.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:11-09.177.234.139.116||RSV:8.23||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.64.145.253
country_id: 2363686
description:
2026-07-03 11:11:57 dovecot_login authenticator failed for H=(Yoga) [102.64.145.253]:54219: 535 Incorrect authentication data (set_id=contactcert@certlogisticstogo.com)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 107.189.31.52
country_id: 2960313
description:
107.189.31.52 - apicafe [03/Jul/2026:11:12:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001305&pdata=https%253A%252F%252Fapi.free.netmaster.tg%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783077171 HTTP/2.0" 302 0 api.free.netmaster.tg "https://api.free.netmaster.tg:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:107.189.31.52


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.64.145.253
country_id: 2363686
description:
2026-07-03 11:13:16 dovecot_login authenticator failed for H=(Yoga) [102.64.145.253]:65260: 535 Incorrect authentication data (set_id=contactcert@certlogisticstogo.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.64.145.253
country_id: 2363686
description:
2026-07-03 11:14:06 dovecot_login authenticator failed for H=(Yoga) [102.64.145.253]:63131: 535 Incorrect authentication data (set_id=contactcert@certlogisticstogo.com)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.46.93
country_id: 2635167
description:
85.203.46.93 - - [03/Jul/2026:11:16:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6788202&pdata=https%253A%252F%252Fwww.lasnb.snb.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783077357 HTTP/2.0" 302 0 www.lasnb.snb.tg "https://www.lasnb.snb.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.46.93


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.63.61.84
country_id: 1168579
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/70.jpeg HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.18.34.246
country_id: 6252001
description:
[2026-07-03 11:18:06 +0000] info [cpaneld] 50.18.34.246 - prince "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user prince (has_cpuser_file failed)


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 159.26.113.31
country_id: 2264397
domain: cafe.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/150.0.0.0 Safari/537.36||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 54.70.53.60
country_id: 6252001
description:
54.70.53.60 - - [03/Jul/2026:11:22:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13004953&pdata=https%253A%252F%252Fzephyr.tg%252F%253Frb-etemplate%253Dmain_menu&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783077733 HTTP/2.0" 302 0 zephyr.tg "https://zephyr.tg/?rb-etemplate=main_menu" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:54.70.53.60


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.196
country_id: 1880251
description:
47.128.96.196 - - [03/Jul/2026:11:24:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000793&pdata=https%253A%252F%252Ftdn.tg%252Fbenin-circonstances-deces-sonia-agbantou%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783077875 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/benin-circonstances-deces-sonia-agbantou/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.196


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 209.242.198.21
country_id: 3017382
description:
209.242.198.21 - - [03/Jul/2026:11:24:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6657133&pdata=https%253A%252F%252Ftogomedia24.tg%252F2024%252F03%252F26%252Fau-togo-les-deputes-adoptent-une-nouvelle-constitution-ouvrant-la-voie-royale-a-faure-gnassingbe%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783077881 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/2024/03/26/au-togo-les-deputes-adoptent-une-nouvelle-constitution-ouvrant-la-voie-royale-a-faure-gnassingbe/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.3023.1234 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:209.242.198.21


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.173.137.196
country_id: 6252001
domain: macite.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.23||T:APACHE||RA:107.173.137.196||TA:107.173.137.196||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 208.84.102.46
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 208.84.102.46: 80 connections per 30 seconds to 80 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.18.34.246
country_id: 6252001
description:
[2026-07-03 11:31:57 +0000] info [cpaneld] 50.18.34.246 - tresorerie "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tresorerie (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 35.89.10.184
country_id: 6252001
description:
35.89.10.184 - - [03/Jul/2026:11:32:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12753769&pdata=https%253A%252F%252Fwww.cinema.free.netmaster.tg.154-70-82-246.cpanel.site&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783078326 HTTP/2.0" 302 0 www.cinema.free.netmaster.tg.154-70-82-246.cpanel.site "https://www.cinema.free.netmaster.tg.154-70-82-246.cpanel.site/" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:35.89.10.184


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.18.34.246
country_id: 6252001
description:
[2026-07-03 11:32:48 +0000] info [cpaneld] 50.18.34.246 - pduusmyf "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 176.101.173.220
country_id: 6251999
domain: togodailynews.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/147.0.0.0 Safari/537.36||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.18
country_id: 6252001
description:
205.169.39.18 - - [03/Jul/2026:11:34:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13081444&pdata=http%253A%252F%252Fxqr2qh.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783078447 HTTP/1.1" 302 0 xqr2qh.mediatopnews.tg "http://xqr2qh.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.18


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 123.31.98.85
country_id: 1562822
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/events/6 HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.18.34.246
country_id: 6252001
description:
[2026-07-03 11:34:55 +0000] info [cpaneld] 50.18.34.246 - camaegdtomgo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 131.196.57.216
country_id: 3469034
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/album/journee-internationale-des-travailleurs HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 203.134.193.134
country_id: 1269750
domain: app.cfmi.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.23||T:APACHE||MV:/wp-json/wp/v2/users?per_page=100&orderby=id&order=desc&_fields=id,slug||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 177.86.5.48
country_id: 3469034
description:
177.86.5.48 - - [03/Jul/2026:11:36:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13198441&pdata=https%253A%252F%252Fcfpj.tg%252Fnadu-117208oitems%252Fetidm82an.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783078593 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/nadu-117208oitems/etidm82an.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:177.86.5.48


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.18.34.246
country_id: 6252001
description:
[2026-07-03 11:37:14 +0000] info [cpaneld] 50.18.34.246 - pduusmyf "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.73.96
country_id: 6252001
description:
[2026-07-03 11:39:24 +0000] info [cpaneld] 217.181.73.96 - ulduzncs "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-07-03 11:39:57 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:33786: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 156.38.75.186
country_id: 2363686
description:
[2026-07-03 11:40:00 +0000] info [cpaneld] 156.38.75.186 NEW crrhuemo:DmdXrWZLE77g9eUs address=156.38.75.186,app=cpaneld,creator=crrhuemo,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.122.119.22
country_id: 3508796
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/le-cnp-togo-et-otr-anticipent-le-controle-fiscal/ HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.75.27
country_id: 6252001
description:
[2026-07-03 11:41:50 +0000] info [cpaneld] 217.181.75.27 - camaegdtomgo "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.122.119.22
country_id: 3508796
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/le-cnp-togo-et-otr-anticipent-le-controle-fiscal/ HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.167.133
country_id: 2363686
description:
102.64.167.133 - - [03/Jul/2026:11:45:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7039593&pdata=https%253A%252F%252Ftogointerim.net%252Femplois%252Frecherche%253Fpage%253D6&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783079129 HTTP/2.0" 302 0 togointerim.net "https://togointerim.net/emplois/recherche?page=6" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:152.0) Gecko/20100101 Firefox/152.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.167.133


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.188.165.43
country_id: 1562822
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/product/show/chap-cola-au-citron HTTP/1.1||RSV:8.23||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.180.240.96
country_id: 1282988
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/34.jpeg HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.68.134
country_id: 6252001
description:
[2026-07-03 11:47:20 +0000] info [cpaneld] 217.181.68.134 - moodlefreenetmas "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.36.191.21
country_id: 2750405
description:
185.36.191.21 - - [03/Jul/2026:11:47:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13003110&pdata=https%253A%252F%252Fbutodra.tg%252Fwp-login.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783079244 HTTP/2.0" 302 0 butodra.tg "https://butodra.tg/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.36.191.21


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.4
country_id: 6252001
description:
205.169.39.4 - - [03/Jul/2026:11:47:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6841447&pdata=http%253A%252F%252Fautoconfig.mig.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783079253 HTTP/1.1" 302 0 autoconfig.mig.tg "http://autoconfig.mig.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.4


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 102.64.160.207
country_id: 2363686
description:
[2026-07-03 11:48:44 +0000] info [cpaneld] 102.64.160.207 NEW ntbgzycf:0A2kVdhR8m1LTJ63 address=102.64.160.207,app=cpaneld,creator=ntbgzycf,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 203.134.193.134
country_id: 1269750
domain: new.istm.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.23||T:APACHE||MV:/wp-json/wp/v2/users?context=edit&per_page=100&_fields=slug||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 188.253.216.202
country_id: 587116
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/product/show/djama-panache HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.226
country_id: 2635167
description:
[2026-07-03 11:48:14 +0000] info [cpaneld] 5.230.153.226 - cloudetracks "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.202.11.76
country_id: 298795
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/album/djama-pilsner-donne-la-joie-aux-amoureux-du-ballon-rond HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 192.42.116.100
country_id: 2750405
description:
192.42.116.100 - mvfxewjz [03/Jul/2026:11:51:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7171269&pdata=https%253A%252F%252Fdavakconsulting.com%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783079486 HTTP/2.0" 302 0 davakconsulting.com "https://davakconsulting.com:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:192.42.116.100


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.231.33.38
country_id: 241170
description:
185.231.33.38 - mvfxewjz [03/Jul/2026:11:52:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6997870&pdata=https%253A%252F%252Fdavakconsulting.com%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783079516 HTTP/2.0" 302 0 davakconsulting.com "https://davakconsulting.com:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.231.33.38


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.42.23.74
country_id: 3895114
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/8.jpeg HTTP/1.1||RSV:8.23||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [03/Jul/2026:11:54:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9673062&pdata=http%253A%252F%252Fcpanel.moodle.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783079650 HTTP/1.1" 302 0 cpanel.moodle.free.netmaster.tg "http://cpanel.moodle.free.netmaster.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.23
country_id: 6252001
description:
205.169.39.23 - - [03/Jul/2026:11:54:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13028293&pdata=http%253A%252F%252Fautoconfig.luboxx.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783079661 HTTP/1.1" 302 0 autoconfig.luboxx.free.netmaster.tg "http://autoconfig.luboxx.free.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.23


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.36.191.21
country_id: 2750405
description:
185.36.191.21 - - [03/Jul/2026:12:00:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13081194&pdata=https%253A%252F%252Fbutodra.tg%252Fwp-login.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783080040 HTTP/2.0" 302 0 butodra.tg "https://butodra.tg/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.36.191.21


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.11.172.54
country_id: 719819
description:
45.11.172.54 - - [03/Jul/2026:12:01:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119572&pdata=https%253A%252F%252Fwww.partenaires.ucao-uut.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783080079 HTTP/2.0" 302 0 www.partenaires.ucao-uut.tg "https://www.partenaires.ucao-uut.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.11.172.54


plugin: modsec
rule: 77350374
name: IM360 WAF: Scan attempt by bytespider crawler
abuser: 47.128.118.175
country_id: 1880251
domain: crrhuemoa.org
description:
IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 185.36.191.21
country_id: 2750405
domain: butodra.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.24||T:APACHE||MV:/wp-json/wp/v2/users/me?_locale=user||


plugin: modsec
rule: 33303
name: IM360 WAF: WordPress Bruteforce RBL track
abuser: 35.196.12.192
country_id: 6252001
domain: ekeasarl.com
description:
IM360 WAF: WordPress Bruteforce RBL track||Name:||WPU:||User:edjatiapougloe||Script:/home/edjatiapougloe/public_html/xmlrpc.php||RSV:8.24||T:APACHE||MV:/xmlrpc.php||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.36.191.21
country_id: 2750405
description:
185.36.191.21 - - [03/Jul/2026:12:03:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6908056&pdata=https%253A%252F%252Fbutodra.tg%252Fwp-login.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783080193 HTTP/2.0" 302 0 butodra.tg "https://butodra.tg/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.36.191.21


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 162.252.54.238
country_id: 6252001
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.24||T:APACHE||RA:162.252.54.238||TA:162.252.54.238||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.174.169.81
country_id: 6252001
description:
[2026-07-03 12:03:21 +0000] info [cpaneld] 107.174.169.81 NEW ttfuehop:PUYzisJZllZ6wayY address=107.174.169.81,app=cpaneld,creator=ttfuehop,method=handle_form_login,path=form,possessed=0


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 34.217.141.27
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 34.217.141.27: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.45.114.96
country_id: 1168579
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/event/adzinikuzan-2023-apotheose HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77350541
name: IM360 WAF: Possible SQL injection attack
abuser: 77.243.90.12
country_id: 241170
domain: www.letabloid.tg
description:
IM360 WAF: Possible SQL injection attack||MVN:ARGS_NAMES:gt;While you crapper do a dislodge trial, it is a subscription service, which agency you're actually support the citizenry rear the stories. In the Holocene years, erotica sites give birth been close rapidly, it whole happened because industriousness shifted toward buck private unpaid magazine stores the like onlyfans and others. The ones WHO left-hand did approximately drastic changes and added net ton of spammy ads on their erotica site, which resulted in us removing them from this original list. RedPorn.tv English hawthorn await wish a bare website, only it plays legion to Sir Thomas More subject matter than you behind excite a sting at (or, rock something else!). On that point are a few things that we have intercourse near this website.||MV:gt;While you crapper do a dislodge trial, it is a subscription service, which agency you're actually support the citizenry rear the stories. In the Holocene years, erotica sites give birth been close rapidly, it whole happened because industriousness shifted toward buck private unpaid magazine stores the like onlyfans and others. The ones WHO left-hand did approximately drastic changes and added net ton of spammy ads on their erotica site, which resulted in us removing them from this original list. RedPorn.tv English hawthorn await wish a bare website, only it plays legion to Sir Thomas More subject matter than you behind excite a sting at (or, rock something else!). On that point are a few things that we have intercourse near this website.||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.104.116.85
country_id: 3595528
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/tce-2025-livoirien-koffi-nguessan-oswald-remporte-les-20-millions-fcfa/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.246.85.225
country_id: 3865483
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/event/hogbeza-2023-apotheose HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.71.173
country_id: 6252001
description:
[2026-07-03 12:09:32 +0000] info [cpaneld] 217.181.71.173 - neliam "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.104.116.85
country_id: 3595528
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/tce-2025-livoirien-koffi-nguessan-oswald-remporte-les-20-millions-fcfa/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 64.139.42.99
country_id: 2077456
domain: www.sncom.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/139.0.7258.5 Safari/537.36||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.68.148
country_id: 6252001
description:
[2026-07-03 12:10:08 +0000] info [cpaneld] 217.181.68.148 - cloudetracks "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.199.60.176
country_id: 1880251
description:
[2026-07-03 12:11:51 +0000] info [cpaneld] 138.199.60.176 - ttfuehop "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: brute force attempt (user ttfuehop) has locked out IP 138.199.60.176


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.38
country_id: 2635167
description:
[2026-07-03 12:11:05 +0000] info [cpaneld] 5.230.153.38 NEW ttfuehop:FndleOqrohYeqZRb address=5.230.153.38,app=cpaneld,creator=ttfuehop,method=handle_form_login,path=form,possessed=0


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 138.199.60.176
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[cpaneld] [Local IP Address]=[154.70.82.246] [Local Port]=[2083] [Remote IP Address]=[138.199.60.176] [Remote Port]=[53341] [Authentication Database]=[system] [Username]=[ttfuehop] (1/30 failures) (blocked until [Sat Jul  4 12:11:51 2026 UTC/Sat Jul  4 12:11:51 2026 LOCAL])


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 138.199.60.176
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[cpaneld] [Local IP Address]=[154.70.82.246] [Local Port]=[2083] [Remote IP Address]=[138.199.60.176] [Remote Port]=[63190] [Authentication Database]=[system] [Username]=[ttfuehop] (1/30 failures) (blocked until [Sat Jul  4 12:12:05 2026 UTC/Sat Jul  4 12:12:05 2026 LOCAL])


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.199.60.176
country_id: 1880251
description:
[2026-07-03 12:12:05 +0000] info [cpaneld] 138.199.60.176 - ttfuehop "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: brute force attempt (user ttfuehop) has locked out IP 138.199.60.176


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 92.62.121.118
country_id: 1269750
description:
[2026-07-03 12:12:20 +0000] info [cpaneld] 92.62.121.118 NEW ttfuehop:sXX7XRLH42rrphr5 address=92.62.121.118,app=cpaneld,creator=ttfuehop,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 40.125.84.253
country_id: 6252001
domain: ucao-uut.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.79.23
country_id: 6252001
description:
[2026-07-03 12:13:04 +0000] info [cpaneld] 217.181.79.23 - ljrwwgxg "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-07-03 12:15:18 dovecot_login authenticator failed for H=server.fusionmail.shop (TUZ4BsX) [91.92.241.106]:59546: 535 Incorrect authentication data (set_id=bkibalo)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 45.38.156.254
country_id: 798544
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.24||T:APACHE||MV:/index.php/wp-json/wp/v2/users/me?context=edit&_locale=user||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.167.133
country_id: 2363686
description:
102.64.167.133 - - [03/Jul/2026:12:18:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131098&pdata=https%253A%252F%252Fbrmn.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783081123 HTTP/2.0" 302 0 brmn.tg "https://brmn.tg/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.3.1 Safari/605.1.15" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.167.133


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 64.177.117.102
country_id: 6252001
description:
64.177.117.102 - - [03/Jul/2026:12:18:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13199458&pdata=https%253A%252F%252Ffbafrica.com%252Fcontact&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783081085 HTTP/2.0" 302 0 fbafrica.com "https://fbafrica.com/contact" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.7827.55 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:64.177.117.102


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-07-03 12:18:20 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:55422: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.16
country_id: 6252001
description:
205.169.39.16 - - [03/Jul/2026:12:19:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6986349&pdata=http%253A%252F%252Fhaplucia-togo.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783081140 HTTP/1.1" 302 0 haplucia-togo.tg "http://haplucia-togo.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.16


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.18
country_id: 6252001
description:
205.169.39.18 - - [03/Jul/2026:12:18:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9988506&pdata=http%253A%252F%252Fcpcalendars.moodle.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783081116 HTTP/1.1" 302 0 cpcalendars.moodle.free.netmaster.tg "http://cpcalendars.moodle.free.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.18


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.0
country_id: 6252001
description:
205.169.39.0 - - [03/Jul/2026:12:18:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6842210&pdata=http%253A%252F%252Fcpcontacts.moodle.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783081115 HTTP/1.1" 302 0 cpcontacts.moodle.free.netmaster.tg "http://cpcontacts.moodle.free.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.43
country_id: 6252001
description:
205.169.39.43 - - [03/Jul/2026:12:18:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12895385&pdata=http%253A%252F%252Fcpanel.moodle.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783081135 HTTP/1.1" 302 0 cpanel.moodle.free.netmaster.tg "http://cpanel.moodle.free.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.43


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 47.84.199.24
country_id: 1880251
description:
Jul  3 12:20:28 ns5 pure-ftpd[378306]: (?@47.84.199.24) [WARNING] Authentication failed for user [root]


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 47.84.199.24
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[pure-ftpd] [Local IP Address]=[154.70.82.246] [Local Port]=[21] [Remote IP Address]=[47.84.199.24] [Authentication Database]=[system] [Username]=[root] (1/30 failures) (blocked until [Sat Jul  4 12:20:25 2026 UTC/Sat Jul  4 12:20:25 2026 LOCAL])


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.8
country_id: 6252001
description:
205.169.39.8 - - [03/Jul/2026:12:21:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13398161&pdata=http%253A%252F%252Fwebmail.moodle.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783081262 HTTP/1.1" 302 0 webmail.moodle.free.netmaster.tg "http://webmail.moodle.free.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.8


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.14
country_id: 6252001
description:
205.169.39.14 - - [03/Jul/2026:12:21:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10120090&pdata=http%253A%252F%252Fautodiscover.moodle.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783081264 HTTP/1.1" 302 0 autodiscover.moodle.free.netmaster.tg "http://autodiscover.moodle.free.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.14


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-07-03 12:22:05 dovecot_login authenticator failed for H=server.fusionmail.shop (0s7kG5yz) [91.92.241.106]:61209: 535 Incorrect authentication data (set_id=bkibalo)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-07-03 12:24:59 dovecot_login authenticator failed for H=server.fusionmail.shop (1S5s6ZUFn) [91.92.241.106]:59414: 535 Incorrect authentication data (set_id=bkibalo)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.224.211.159
country_id: 3865483
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/locations HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 222.255.127.157
country_id: 1562822
domain: lasnb.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/lasnb.com/sponsoring HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.205.109.168
country_id: 1819730
domain: c2ie.tg
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.24||T:APACHE||MV:/wp-admin/images/index.php||SC:/home/cietg/public_html/wp-admin/images/index.php||


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 217.15.161.214
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[whostmgrd] [Local IP Address]=[154.70.82.246] [Local Port]=[2087] [Remote IP Address]=[217.15.161.214] [Remote Port]=[56599] [Authentication Database]=[system] [Username]=[koolnetfree] (1/30 failures) (blocked until [Sat Jul  4 12:27:23 2026 UTC/Sat Jul  4 12:27:23 2026 LOCAL])


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.15.161.214
country_id: 1880251
description:
[2026-07-03 12:27:23 +0000] info [whostmgrd] 217.15.161.214 - koolnetfree "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: brute force attempt (user koolnetfree) has locked out IP 217.15.161.214


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.46
country_id: 2635167
description:
[2026-07-03 12:27:15 +0000] info [cpaneld] 5.230.153.46 NEW formationfreenet:BtwZfEZZYikH7skE address=5.230.153.46,app=cpaneld,creator=formationfreenet,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77140742
name: IM360 WAF: Block abusive scripts
abuser: 20.205.109.168
country_id: 1819730
domain: c2ie.tg
description:
IM360 WAF: Block abusive scripts||MVN:REQUEST_URI||RSV:8.24||T:APACHE||MV:/wp-admin/includes/index.php||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 45.141.128.144
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.24||T:APACHE||RA:45.141.128.144||TA:45.141.128.144||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 49.45.46.5
country_id: 1269750
description:
Denial of Service (DoS) attack was discovered from 49.45.46.5: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.173.180.14
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/shop/telephones-2/tecno/tecno-spark-2-pro/?add-to-cart=2357||QS:add-to-cart=2357||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.189.195.92
country_id: 1562822
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/event/djama-en-fete-amadahome-stout-porter HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.66.147.104
country_id: 953987
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/event/rencontre-trimestrielle-societe-nouvelle-de-boissons-et-partenaires HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 134.199.91.81
country_id: 6252001
description:
[2026-07-03 12:31:37 +0000] info [cpaneld] 134.199.91.81 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-07-03 12:31:39 dovecot_login authenticator failed for H=server.fusionmail.shop (6rfp6Rszn) [91.92.241.106]:61447: 535 Incorrect authentication data (set_id=bkibalo)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 166.88.155.137
country_id: 6252001
domain: macite.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.24||T:APACHE||RA:166.88.155.137||TA:166.88.155.137||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.92.241.106
country_id: 2750405
description:
2026-07-03 12:32:41 dovecot_login authenticator failed for H=server.fusionmail.shop (uCake1jXJa) [91.92.241.106]:65343: 535 Incorrect authentication data (set_id=bkibalo)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.185.76.59
country_id: 2264397
description:
[2026-07-03 12:33:01 +0000] info [cpaneld] 89.185.76.59 - wgqhqbem "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.223.241
country_id: 3017382
domain: macite.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.24||T:APACHE||RA:104.253.223.241||TA:104.253.223.241||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.114.60.74
country_id: 6252001
description:
[2026-07-03 12:34:29 +0000] info [cpaneld] 92.114.60.74 - admin@togocarrierebetons.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.77.96
country_id: 6252001
description:
[2026-07-03 12:34:34 +0000] info [cpaneld] 217.181.77.96 - mipbtgnb "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 213.230.74.75
country_id: 1512440
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/29.jpeg HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 23.230.80.22
country_id: 798544
description:
23.230.80.22 - - [03/Jul/2026:12:38:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9857122&pdata=https%253A%252F%252Ftogomedia24.tg%252Ftag%252F2029%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783082278 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/tag/2029/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.1303.1248 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:23.230.80.22


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.6
country_id: 6252001
description:
205.169.39.6 - - [03/Jul/2026:12:39:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13278659&pdata=https%253A%252F%252Fzephyr.tg%252F%253Frb-etemplate%253Dmain_menu&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783082383 HTTP/2.0" 302 0 zephyr.tg "https://zephyr.tg/?rb-etemplate=main_menu" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.6


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.5
country_id: 6252001
description:
205.169.39.5 - - [03/Jul/2026:12:40:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7522964&pdata=http%253A%252F%252Fautoconfig.smarty.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783082429 HTTP/1.1" 302 0 autoconfig.smarty.tg "http://autoconfig.smarty.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.5


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-07-03 12:41:26 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:45484: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 205.147.17.15
country_id: 3144096
description:
Denial of Service (DoS) attack was discovered from 205.147.17.15: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 205.147.17.16
country_id: 3144096
description:
Denial of Service (DoS) attack was discovered from 205.147.17.16: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 205.147.17.14
country_id: 3144096
description:
Denial of Service (DoS) attack was discovered from 205.147.17.14: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [03/Jul/2026:12:43:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9594213&pdata=http%253A%252F%252Fcpcontacts.net.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783082626 HTTP/1.1" 302 0 cpcontacts.net.free.netmaster.tg "http://cpcontacts.net.free.netmaster.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [03/Jul/2026:12:43:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9793435&pdata=http%253A%252F%252Fautodiscover.net.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783082627 HTTP/1.1" 302 0 autodiscover.net.free.netmaster.tg "http://autodiscover.net.free.netmaster.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 217.138.193.184
country_id: 290557
description:
Jul  3 12:43:53 ns5 pure-ftpd[393675]: (?@217.138.193.184) [INFO] New connection from 217.138.193.184


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [03/Jul/2026:12:44:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9750891&pdata=https%253A%252F%252Fcpcontacts.net.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783082676 HTTP/2.0" 302 0 cpcontacts.net.free.netmaster.tg "https://cpcontacts.net.free.netmaster.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [03/Jul/2026:12:44:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935216&pdata=https%253A%252F%252Fwebdisk.net.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783082675 HTTP/2.0" 302 0 webdisk.net.free.netmaster.tg "https://webdisk.net.free.netmaster.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 35.89.10.184
country_id: 6252001
description:
35.89.10.184 - - [03/Jul/2026:12:44:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6516331&pdata=https%253A%252F%252Fkpmg.tg%252Ff3fcede3ceb48531317d565cce982d2b%252Facf2d8c858075b0500387330fbe3e107%252Fea425e05eea2788cc063ebda30164563%252F0e3d26786953aa33eaa79d2011a94992%252F223e0c8cca861474d24cfd8905cb5776%252Findex.php%253Fcmd%253Dlogin&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783082685 HTTP/2.0" 302 0 kpmg.tg "https://kpmg.tg/f3fcede3ceb48531317d565cce982d2b/acf2d8c858075b0500387330fbe3e107/ea425e05eea2788cc063ebda30164563/0e3d26786953aa33eaa79d2011a94992/223e0c8cca861474d24cfd8905cb5776/index.php?cmd=login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.7871.46 Safari/537.36 Edge/18.19582" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:35.89.10.184


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.173.175.161
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/static_block/shop-bottom-jumbotron/?add-to-cart=7814||QS:add-to-cart=7814||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.4.250.242
country_id: 6252001
description:
103.4.250.242 - - [03/Jul/2026:12:46:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9660310&pdata=https%253A%252F%252Fautoconfig.net.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783082774 HTTP/2.0" 302 0 autoconfig.net.free.netmaster.tg "https://autoconfig.net.free.netmaster.tg/" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/144.0.7559.95 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.4.250.242


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.196.9.10
country_id: 6252001
description:
103.196.9.10 - - [03/Jul/2026:12:46:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6525794&pdata=http%253A%252F%252Fautoconfig.net.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783082798 HTTP/1.1" 302 0 autoconfig.net.free.netmaster.tg "http://autoconfig.net.free.netmaster.tg/" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/144.0.7559.95 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.196.9.10


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 123.26.171.33
country_id: 1562822
domain: lasnb.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/lasnb.com/product/show/bitter-lemon HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-07-03 12:49:42 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:47184: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 65.109.32.24
country_id: 660013
domain: belali.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Collect Your Digital Tokens cs3560449.tw1.ru||Email:n3903165.5@gmail.com||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 118.100.232.48
country_id: 1733045
description:
[2026-07-03 12:52:12 +0000] info [whostmgrd] 118.100.232.48 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.133
country_id: 1880251
description:
47.128.96.133 - - [03/Jul/2026:12:52:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13407599&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fkickboxing%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783083147 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/kickboxing/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.133


plugin: modsec
rule: 77142124
name: IM360 WAF: Track WordPress registration flood
abuser: 65.109.32.24
country_id: 660013
domain: belali.tg
description:
IM360 WAF: Track WordPress registration flood||WPU:||RSV:8.24||T:APACHE||MVN:ARGS:action||MV:register||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.171.19.151
country_id: 2363686
domain: leadelles.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.24||T:APACHE||MV:/index.php/wp-json/wp/v2/users/3?context=view&_fields=id%2Cname&_locale=user||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.71.110
country_id: 6252001
description:
[2026-07-03 12:55:57 +0000] info [cpaneld] 217.181.71.110 - pmalabvi "POST /execute/Fileman/save_file_content?dir=public_html&path=public_html&from_charset=UTF-8&content=%3C%3Fphp+%24s+%3D+%22false%22%3Bif+%28mail%28%24_COOKIE%5B%22email_send_id%22%5D%2C%22Cp+Send+%23%22.%24_COOKIE%5B%22it_id%22%5D%2C%22Cp+Send+Working+..+%23%22.%24_COOKIE%5B%22it_id%22%5D.%22%5CnHash%3A+%22.md5%28time%28%29.uniqid%28%29%29%29%29+%7B%24s+%3D+%22true%22%3B%7Decho+%24s%3B%3F%3E&file=test123Cp.php&file_name=test123Cp.php HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 59.144.144.22
country_id: 1269750
description:
Denial of Service (DoS) attack was discovered from 59.144.144.22: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.227.184.204
country_id: 6252001
description:
[2026-07-03 12:58:52 +0000] info [cpaneld] 136.227.184.204 - tresorerie "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tresorerie (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 182.78.212.206
country_id: 1269750
description:
Denial of Service (DoS) attack was discovered from 182.78.212.206: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.42
country_id: 2635167
description:
[2026-07-03 12:59:05 +0000] info [cpaneld] 5.230.133.42 NEW naduwpdk:3e6XhXGRsiXdGjhI address=5.230.133.42,app=cpaneld,creator=naduwpdk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.14.145
country_id: 6252001
description:
[2026-07-03 12:59:05 +0000] info [cpaneld] 195.63.14.145 - jvrzfkho "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77896900
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 104.207.53.221
country_id: 2635167
domain: sp-eau.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:administratoir||User:doufelg||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 23.128.248.166
country_id: 6252001
description:
23.128.248.166 - qledpnjw [03/Jul/2026:13:01:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119531&pdata=https%253A%252F%252Ftogofeed.tg%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783083664 HTTP/2.0" 302 0 togofeed.tg "https://togofeed.tg:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:23.128.248.166


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.97.144
country_id: 99237
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/product/show/djama-lager HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 23.128.248.166
country_id: 6252001
description:
23.128.248.166 - yydrdvav [03/Jul/2026:13:02:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6592104&pdata=https%253A%252F%252Fvitrinenews.tg%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783083755 HTTP/2.0" 302 0 vitrinenews.tg "https://vitrinenews.tg:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:23.128.248.166


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.9.191
country_id: 6252001
description:
[2026-07-03 13:02:47 +0000] info [cpaneld] 195.63.9.191 - sxoyfjqv "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-07-03 13:02:53 +0000] info [webmaild] 196.171.46.177 - mawide@togointerim.net "GET /cpsess1553177919/3rdparty/roundcube/?_task=mail&_mbox=INBOX HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 23.128.248.166
country_id: 6252001
description:
23.128.248.166 - yydrdvav [03/Jul/2026:13:03:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10053786&pdata=https%253A%252F%252Fvitrinenews.tg%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783083787 HTTP/2.0" 302 0 vitrinenews.tg "https://vitrinenews.tg:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:23.128.248.166


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 136.158.42.48
country_id: 1694008
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/product/show/chap-limonade HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.182
country_id: 3017382
description:
[2026-07-03 13:05:18 +0000] info [cpaneld] 5.231.64.182 NEW naduwpdk:_sQqPx2gK6jpXjhm address=5.231.64.182,app=cpaneld,creator=naduwpdk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.217
country_id: 2635167
description:
[2026-07-03 13:05:10 +0000] info [cpaneld] 5.230.153.217 NEW naduwpdk:yA89NY9av4TCbsjd address=5.230.153.217,app=cpaneld,creator=naduwpdk,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.189.78.225
country_id: 3895114
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/53.jpeg HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 152.59.146.243
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:45f733c7beec23020ae2af4c9220e631b682284c||Title:yz9278j1bh6oadr||RSV:8.24||T:APACHE||


plugin: modsec
rule: 33375
name: IM360 WAF: XMLRPC fault response
abuser: 152.59.146.243
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XMLRPC fault response||MV:<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<methodResponse>\n  <fault>\n    <value>\n      <struct>\n        <member>\n          <name>faultCode</name>\n          <value><int>403</int></value>\n        </member>\n        <member>\n          <name>faultString</name>\n          <value><string>Identifiant ou mot de passe incorrect.</string></value>\n        </member>\n      </struct>\n    </value>\n  </fault>\n</methodResponse>\n||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.39.192.53
country_id: 6252001
description:
[2026-07-03 13:07:35 +0000] info [cpaneld] 152.39.192.53 - admin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.186.126
country_id: 6252001
description:
47.251.186.126 - - [03/Jul/2026:13:09:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13014983&pdata=http%253A%252F%252Fbelali.tg%253A2086%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783084151 HTTP/1.1" 302 0 belali.tg "http://belali.tg:2086/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.186.126


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.89.246.29
country_id: 6252001
description:
47.89.246.29 - - [03/Jul/2026:13:09:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10184035&pdata=http%253A%252F%252Fmacite.tg%253A2086%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783084166 HTTP/1.1" 302 0 macite.tg "http://macite.tg:2086/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.89.246.29


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.254.76.66
country_id: 6252001
description:
47.254.76.66 - - [03/Jul/2026:13:09:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10341228&pdata=http%253A%252F%252Fwww.arse.tg%253A2086%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783084174 HTTP/1.1" 302 0 www.arse.tg "http://www.arse.tg:2086/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.254.76.66


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.88.18.245
country_id: 6252001
description:
47.88.18.245 - - [03/Jul/2026:13:09:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000275&pdata=http%253A%252F%252Flacs1.mairie.tg%253A2086%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783084144 HTTP/1.1" 302 0 lacs1.mairie.tg "http://lacs1.mairie.tg:2086/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.88.18.245


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.90.48
country_id: 6252001
description:
47.251.90.48 - - [03/Jul/2026:13:09:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6974663&pdata=http%253A%252F%252Farse.tg%253A2086%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783084150 HTTP/1.1" 302 0 arse.tg "http://arse.tg:2086/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.90.48


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.43
country_id: 6252001
description:
205.169.39.43 - - [03/Jul/2026:13:09:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131048&pdata=https%253A%252F%252Fmonde-ai.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783084177 HTTP/2.0" 302 0 monde-ai.tg "https://monde-ai.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.43


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.77.227.227
country_id: 6252001
description:
47.77.227.227 - - [03/Jul/2026:13:09:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051418&pdata=http%253A%252F%252Fcafe.tg%253A2086%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783084155 HTTP/1.1" 302 0 cafe.tg "http://cafe.tg:2086/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.77.227.227


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.77.228.238
country_id: 6252001
description:
47.77.228.238 - - [03/Jul/2026:13:09:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7260319&pdata=http%253A%252F%252F154.70.82.246%253A2086%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783084158 HTTP/1.1" 302 0 154.70.82.246 "http://154.70.82.246:2086/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.77.228.238


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.26
country_id: 6252001
description:
205.169.39.26 - - [03/Jul/2026:13:10:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6801051&pdata=http%253A%252F%252Fnq42gl.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783084249 HTTP/1.1" 302 0 nq42gl.mediatopnews.tg "http://nq42gl.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.26


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 104.199.29.0
country_id: 2802361
domain: luboxx.free.netmaster.tg
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.24||T:APACHE||REQUEST_URI:/blog/wp-includes/wlwmanifest.xml||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.169.25.67
country_id: 2363686
domain: www.letabloid.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.24||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 152.59.146.243
country_id: 1269750
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:butodra.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:c2bc6eccf24e3553a9469122eb8e77f0b8f318b7||Title:3asfhoh5yfk9yd||RSV:8.24||T:APACHE||


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 47.84.199.24
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[pure-ftpd] [Local IP Address]=[154.70.82.249] [Local Port]=[21] [Remote IP Address]=[47.84.199.24] [Authentication Database]=[ftp] [Username]=[stephane.o@netmaster.tg] (1/30 failures) (blocked until [Sat Jul  4 13:14:36 2026 UTC/Sat Jul  4 13:14:36 2026 LOCAL])


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 47.84.199.24
country_id: 1880251
description:
Jul  3 13:14:42 ns5 pure-ftpd[409502]: (?@47.84.199.24) [WARNING] Authentication failed for user [stephane.o@netmaster.tg]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.29
country_id: 6252001
description:
205.169.39.29 - - [03/Jul/2026:13:16:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7170205&pdata=http%253A%252F%252Fwww.davetechno.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783084617 HTTP/1.1" 302 0 www.davetechno.tg "http://www.davetechno.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.29


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 193.163.89.139
country_id: 6252001
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.24||T:APACHE||RA:193.163.89.139||TA:193.163.89.139||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.112.132.198
country_id: 1814991
description:
2026-07-03 13:17:45 dovecot_plain authenticator failed for H=(aqvbge27up5yflujzf7xkhg) [123.112.132.198]:34192: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.29
country_id: 6252001
description:
205.169.39.29 - - [03/Jul/2026:13:17:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6778055&pdata=http%253A%252F%252Fdavetechno.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783084626 HTTP/1.1" 302 0 davetechno.tg "http://davetechno.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.29


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 174.118.45.202
country_id: 6251999
domain: tdn.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.24||T:APACHE||MV:/wp-json/wp/v2/users?context=view&who=authors&per_page=100&_fields=id%2Cname&_locale=user||


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 41.182.92.98
country_id: 3355338
description:
Jul  3 13:18:19 ns5 pure-ftpd[411629]: (?@41.182.92.98) [WARNING] Authentication failed for user [etudelocohsecu@otr.tg]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 194.190.169.197
country_id: 2017370
description:
2026-07-03 13:18:19 dovecot_plain authenticator failed for H=c4350.col.wm.ru (o8a22ycgt9v4azhx1yeu) [194.190.169.197]:49001: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.252.80.138
country_id: 3469034
description:
[2026-07-03 13:20:32 +0000] info [whostmgrd] 38.252.80.138 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.170.73.107
country_id: 3469034
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/actualite/detail/40eme-anniversaire-de-la-cica-re HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 34.82.250.196
country_id: 6252001
domain: 2wd.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.24||T:APACHE||MV:/wp-json/wp/v2/users/||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.25
country_id: 6252001
description:
205.169.39.25 - - [03/Jul/2026:13:24:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9858455&pdata=http%253A%252F%252Fahoefa.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783085044 HTTP/1.1" 302 0 ahoefa.tg "http://ahoefa.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.25


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 43.173.178.153
country_id: 1880251
domain: soena.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/shop/bouffe/opera/pizza-opera/basquaise/?add-to-cart=2107||QS:add-to-cart=2107||RSV:8.24||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.238.10.167
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.24||T:APACHE||RA:104.238.10.167||TA:104.238.10.167||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 143.105.17.189
country_id: 3996063
domain: lasnb.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/lasnb.com/audios HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.216.141
country_id: 2363686
description:
102.64.216.141 - - [03/Jul/2026:13:29:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051109&pdata=https%253A%252F%252Fsnb.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783085351 HTTP/2.0" 302 0 snb.tg "https://snb.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.216.141


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.222.167.231
country_id: 3469034
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/mission HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77350374
name: IM360 WAF: Scan attempt by bytespider crawler
abuser: 104.28.217.140
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77142201
name: IM360 WAF: Possible enumeration of sensitive data (dirb)
abuser: 104.28.217.140
country_id: 2750405
domain: securite.cloud-et-racks.tg
description:
IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||RSV:8.24||T:APACHE||MV:.env.swp||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.28.217.140
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.24||T:APACHE||RA:104.28.217.140||TA:104.28.217.140||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.52
country_id: 6252001
description:
205.169.39.52 - - [03/Jul/2026:13:32:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10261863&pdata=https%253A%252F%252Fahoefa.tg%252Fscript.js&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783085578 HTTP/2.0" 302 0 ahoefa.tg "https://ahoefa.tg/script.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.52


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 104.28.217.140
country_id: 2750405
domain: securite.cloud-et-racks.tg
description:
IM360 WAF: Bad file extension||RSV:8.24||T:APACHE||MVN:REQUEST_FILENAME||MV:/.env.backup||User:cloudetracks||


plugin: modsec
rule: 77350212
name: IM360 WAF: Information Disclosure Attempt in WordPress
abuser: 104.28.217.140
country_id: 2750405
domain: securite.cloud-et-racks.tg
description:
IM360 WAF: Information Disclosure Attempt in WordPress||MV:/wp-config.php.bak||RSV:8.24||T:APACHE||REQUEST_URI:/wp-config.php.bak||


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 47.236.147.255
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[pure-ftpd] [Local IP Address]=[154.70.82.246] [Local Port]=[21] [Remote IP Address]=[47.236.147.255] [Authentication Database]=[system] [Username]=[rXs0IbJU8p] (1/30 failures) (blocked until [Sat Jul  4 13:33:27 2026 UTC/Sat Jul  4 13:33:27 2026 LOCAL])


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 47.236.147.255
country_id: 1880251
description:
Jul  3 13:33:33 ns5 pure-ftpd[419978]: (?@47.236.147.255) [WARNING] Authentication failed for user [rXs0IbJU8p]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.165.198.47
country_id: 6252001
description:
104.165.198.47 - - [03/Jul/2026:13:41:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7313566&pdata=https%253A%252F%252Flibertetogo.tg%252Findex.php%252Ftag%252Fgrand-marche-de-lome%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783086102 HTTP/2.0" 302 0 libertetogo.tg "https://libertetogo.tg/index.php/tag/grand-marche-de-lome/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.5001.1131 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.165.198.47


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.188.140.5
country_id: 3865483
description:
[2026-07-03 13:42:32 +0000] info [cpaneld] 190.188.140.5 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.158.228.112
country_id: 3865483
description:
[2026-07-03 13:42:38 +0000] info [cpaneld] 186.158.228.112 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.97.244.75
country_id: 3625428
description:
[2026-07-03 13:42:41 +0000] info [cpaneld] 190.97.244.75 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.244.155.136
country_id: 99237
description:
[2026-07-03 13:42:59 +0000] info [cpaneld] 185.244.155.136 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 72.50.1.32
country_id: 4566966
domain: lasnb.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/lasnb.com/locations HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 81.105.86.157
country_id: 2635167
description:
[2026-07-03 13:42:26 +0000] info [cpaneld] 81.105.86.157 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.218.24.151
country_id: 2017370
description:
[2026-07-03 13:43:04 +0000] info [cpaneld] 178.218.24.151 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 34.181.201.170
country_id: 6252001
domain: mail.net.free.netmaster.tg
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.24||T:APACHE||REQUEST_URI:/wp-includes/wlwmanifest.xml||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 185.226.34.19
country_id: 3017382
description:
[2026-07-03 13:45:21 +0000] info [cpaneld] 185.226.34.19 NEW conforwellty:YWNy45f2cWW3CgMs address=185.226.34.19,app=cpaneld,creator=conforwellty,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 77.137.65.51
country_id: 294640
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/album/nouvelle-gamme-de-produits HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.235.160.62
country_id: 3932488
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/35.jpeg HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.0
country_id: 6252001
description:
205.169.39.0 - - [03/Jul/2026:13:46:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10065300&pdata=http%253A%252F%252Fywxmm6.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783086398 HTTP/1.1" 302 0 ywxmm6.mediatopnews.tg "http://ywxmm6.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.22.41
country_id: 2921044
description:
[2026-07-03 13:48:14 +0000] info [cpaneld] 195.63.22.41 - dmmkifel "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 95.155.151.200
country_id: 2750405
description:
95.155.151.200 - lecdsntn [03/Jul/2026:13:51:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13211542&pdata=https%253A%252F%252Fopa-conseils.tg%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783086690 HTTP/2.0" 302 0 opa-conseils.tg "https://opa-conseils.tg:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:95.155.151.200


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.172.105.51
country_id: 1814991
description:
2026-07-03 13:54:29 dovecot_plain authenticator failed for H=(ocfi8pnubxvt2rjjmc1b2) [59.172.105.51]:46308: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 194.180.233.188
country_id: 6252001
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.24||T:APACHE||RA:194.180.233.188||TA:194.180.233.188||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 165.101.21.24
country_id: 1149361
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b1fd99df00963e082467170a43293784c5fc8855||Title:5pq7772zzotx5y8fga||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 168.197.245.134
country_id: 3469034
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/album/djama-en-fete-adidogome HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.44.62.228
country_id: 6252001
description:
[2026-07-03 13:57:14 +0000] info [cpaneld] 64.44.62.228 - moodlefreenetmas "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.97.238.222
country_id: 3625428
domain: lasnb.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/lasnb.com/product/show/djama-panache HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.87.152.75
country_id: 1814991
description:
2026-07-03 13:59:35 dovecot_plain authenticator failed for H=(b7qoj17234y63ezwv) [49.87.152.75]:60186: 535 Incorrect authentication data (set_id=arse@arse.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [03/Jul/2026:14:01:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10459754&pdata=https%253A%252F%252Fmetaart.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783087259 HTTP/2.0" 302 0 metaart.tg "https://metaart.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [03/Jul/2026:14:00:52 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9804393&pdata=https%253A%252F%252Fsproca.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783087251 HTTP/2.0" 302 0 sproca.tg "https://sproca.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [03/Jul/2026:14:01:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7129190&pdata=https%253A%252F%252Fsproca.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783087276 HTTP/2.0" 302 0 sproca.tg "https://sproca.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 197.238.52.198
country_id: 2464461
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/33.jpeg HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.13
country_id: 6252001
description:
205.169.39.13 - - [03/Jul/2026:14:04:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9739370&pdata=http%253A%252F%252Fsproca.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783087469 HTTP/1.1" 302 0 sproca.tg "http://sproca.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.13


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.128.41.27
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/reboisement-un-appel-national-a-lengagement-citoyen-pour-batir-le-togo-de-demain/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.128.41.27
country_id: 3865483
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/reboisement-un-appel-national-a-lengagement-citoyen-pour-batir-le-togo-de-demain/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.38
country_id: 6252001
description:
205.169.39.38 - - [03/Jul/2026:14:04:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10196324&pdata=https%253A%252F%252Fsproca.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783087495 HTTP/2.0" 302 0 sproca.tg "https://sproca.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.38


plugin: modsec
rule: 77350541
name: IM360 WAF: Possible SQL injection attack
abuser: 157.22.124.45
country_id: 2635167
domain: cinema.free.netmaster.tg
description:
IM360 WAF: Possible SQL injection attack||MVN:ARGS:search||MV:1' UNION SELECT NULL-- -||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.4
country_id: 6252001
description:
205.169.39.4 - - [03/Jul/2026:14:05:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12830829&pdata=http%253A%252F%252Fmetaart.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783087510 HTTP/1.1" 302 0 metaart.tg "http://metaart.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.4


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.104.6.147
country_id: 102358
description:
[2026-07-03 14:08:29 +0000] info [cpaneld] 37.104.6.147 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.137.65.155
country_id: 294640
description:
[2026-07-03 14:08:21 +0000] info [cpaneld] 77.137.65.155 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.163.113.218
country_id: 690791
description:
[2026-07-03 14:08:33 +0000] info [cpaneld] 188.163.113.218 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.108.155.66
country_id: 3469034
description:
[2026-07-03 14:08:50 +0000] info [cpaneld] 131.108.155.66 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.34.60.52
country_id: 2921044
description:
[2026-07-03 14:08:36 +0000] info [cpaneld] 91.34.60.52 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.6.242.227
country_id: 3469034
description:
[2026-07-03 14:08:40 +0000] info [cpaneld] 189.6.242.227 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.93.140.10
country_id: 1210997
description:
[2026-07-03 14:08:46 +0000] info [cpaneld] 103.93.140.10 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.219
country_id: 2635167
description:
[2026-07-03 14:09:51 +0000] info [cpaneld] 5.230.153.219 NEW oviaiart:KSzAcVvC4IISizIs address=5.230.153.219,app=cpaneld,creator=oviaiart,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77350582
name: IM360 WAF: Bytedancewebview detected
abuser: 54.223.247.92
country_id: 1814991
domain: tdn.tg
description:
IM360 WAF: Bytedancewebview detected||UA:Mozilla/5.0 (Linux; Android 10; HD1900 Build/QKQ1.190716.003; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/75.0.3770.156 Mobile Safari/537.36  aweme_230400 JsSdk/1.0 NetType/WIFI  AppName/aweme app_version/23.4.0 ByteLocale/zh-CN Region/CN AppSkin/white AppTheme/light BytedanceWebview/d8a21c6 WebView/075113004008||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.227
country_id: 2635167
description:
[2026-07-03 14:09:56 +0000] info [cpaneld] 5.230.153.227 NEW oviaiart:8mC4ogIqjI1Qu3qp address=5.230.153.227,app=cpaneld,creator=oviaiart,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.184.220.203
country_id: 2077456
description:
[2026-07-03 14:10:24 +0000] info [cpaneld] 89.184.220.203 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.233.73
country_id: 6252001
description:
2026-07-03 14:11:45 dovecot_plain authenticator failed for H=(z0xkcouvpbxfkvwojhocsj) [104.28.233.73]:52863: 535 Incorrect authentication data (set_id=asewonou@otr.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 84.54.120.228
country_id: 1512440
description:
[2026-07-03 14:12:23 +0000] info [cpaneld] 84.54.120.228 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.171.122.158
country_id: 3625428
description:
[2026-07-03 14:12:45 +0000] info [cpaneld] 38.171.122.158 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.121.107.83
country_id: 3865483
description:
[2026-07-03 14:12:42 +0000] info [cpaneld] 138.121.107.83 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 114.130.180.61
country_id: 1210997
description:
[2026-07-03 14:12:36 +0000] info [cpaneld] 114.130.180.61 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.78.161.176
country_id: 174982
description:
[2026-07-03 14:12:39 +0000] info [cpaneld] 178.78.161.176 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.63.242.118
country_id: 3865483
description:
[2026-07-03 14:12:54 +0000] info [cpaneld] 179.63.242.118 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.23.66.21
country_id: 2017370
description:
[2026-07-03 14:12:26 +0000] info [cpaneld] 185.23.66.21 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.242.106.43
country_id: 3658394
description:
[2026-07-03 14:12:30 +0000] info [cpaneld] 190.242.106.43 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 118.100.234.90
country_id: 1733045
description:
[2026-07-03 14:12:51 +0000] info [cpaneld] 118.100.234.90 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 123.16.147.90
country_id: 1562822
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/partenaire HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>le grand lom\xc3\xa9 est sur le point de passer \xc3\xa0 une autre dimension dans l'am\xc3\xa9lioration de son acc\xc3\xa8s \xc3\xa0 l'\xc3\xa9lectricit\xc3\xa9. la zone, marqu\xc3\xa9e par l'urbanisation rapide, la densification des activit\xc3\xa9s \xc3\xa9conomiques et la mont\xc3\xa9e continue des besoins \xc3\xa9nerg\xc3\xa9tiques, obtient des projections rassurantes pour 2026.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les projections montrent clairement une chose, la volont\xc3\xa9 affirm\xc3\xa9e de l'autorit\xc3\xa9 publique de renforcer durablement le r\xc3\xa9seau de distribution \xc3\xa9lectrique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>donn\xc3\xa9es pr\xc3\xa9visionnelles</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>selon la ceet, compagnie \xc3\xa9nergie \xc3\xa9lectrique du togo, 37.438 nouveaux abonn\xc3\xa9s devraient \xc3\xaatre raccord\xc3\xa9s \xc3\xa0 son r\xc3\xa9seau dans le grand lom\xc3\xa9 au cours de cette ann\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la dynamique de 2026 s'accompagne d'un engagement financier de l'\xc3\x89tat estim\xc3\xa9 \xc3\xa0 environ 3 milliards de francs cfa, destin\xc3\xa9 \xc3\xa0 soutenir les investissements n\xc3\xa9cessaires \xc3\xa0 l'extension et \xc3\xa0 la consolidation des infrastructures \xc3\xa9lectriques dans la capitale et ses environs.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31769,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31769\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>cette orientation est celle d'une strat\xc3\xa9gie : accompagner la croissance urbaine par un renforcement proportionnel des capacit\xc3\xa9s \xc3\xa9nerg\xc3\xa9tiques. dans une agglom\xc3\xa9ration qui concentre une part importante des activit\xc3\xa9s administratives, commerciales, industrielles et de services du pays, l'\xc3\xa9lectricit\xc3\xa9 constitue un facteur d\xc3\xa9terminant de performance.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>pour quel enjeu&nbsp;?</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il d\xc3\xa9passe largement la simple augmentation du nombre de branchements. il s'agit d'adapter le r\xc3\xa9seau \xc3\xa9lectrique \xc3\xa0 une ville en expansion continue, o\xc3\xb9 les nouveaux quartiers se d\xc3\xa9veloppent rapidement et o\xc3\xb9 les besoins en \xc3\xa9nergie \xc3\xa9voluent avec la diversification des usages : logements, petits commerces, ateliers, services num\xc3\xa9riques, \xc3\xa9quipements de conservation et infrastructures publiques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'investissement public projet\xc3\xa9 s'inscrit dans une logique de consolidation des acquis et de pr\xc3\xa9paration de l'avenir. il vise \xc3\xa0 am\xc3\xa9liorer la fiabilit\xc3\xa9 du r\xc3\xa9seau, \xc3\xa0 r\xc3\xa9duire les zones encore insuffisamment desservies et \xc3\xa0 accompagner l'\xc3\xa9mergence de nouvelles zones d'habitation et d'activit\xc3\xa9s \xc3\xa9conomiques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans ce contexte, la ceet occupe une place centrale. en tant qu'op\xc3\xa9rateur national, elle assure non seulement la distribution de l'\xc3\xa9lectricit\xc3\xa9, mais \xc3\xa9galement l'adaptation progressive des infrastructures aux besoins croissants des usagers. son action contribue directement \xc3\xa0 la modernisation du tissu urbain et \xc3\xa0 la structuration des services essentiels.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31645,\"width\":\"559px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-78.png\" alt=\"\" class=\"wp-image-31645\" style=\"width:559px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>cons\xc3\xa9quences directes</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'impact attendu de cette extension est multiple. sur le plan \xc3\xa9conomique, une meilleure couverture \xc3\xa9lectrique favorise l'installation de nouvelles activit\xc3\xa9s et renforce la productivit\xc3\xa9 des entreprises existantes. sur le plan social, elle am\xc3\xa9liore les conditions de vie des m\xc3\xa9nages, facilite l'acc\xc3\xa8s \xc3\xa0 l'\xc3\xa9ducation num\xc3\xa9rique et renforce la s\xc3\xa9curit\xc3\xa9 dans les quartiers gr\xc3\xa2ce \xc3\xa0 un \xc3\xa9clairage plus \xc3\xa9tendu.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le chiffre de 37.438 nouveaux abonn\xc3\xa9s projet\xc3\xa9s illustre ainsi l'ampleur des besoins \xc3\xa9nerg\xc3\xa9tiques du grand lom\xc3\xa9, mais aussi la r\xc3\xa9ponse progressive apport\xc3\xa9e par les politiques publiques. c'est donc une vision d'ensemble qui se dessine : celle d'un grand lom\xc3\xa9 \xc3\xa9panoui.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>samir b.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 134.199.85.86
country_id: 6252001
description:
[2026-07-03 14:13:58 +0000] info [cpaneld] 134.199.85.86 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.24.162.16
country_id: 2017370
description:
[2026-07-03 14:14:18 +0000] info [cpaneld] 95.24.162.16 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.231.105.26
country_id: 285570
description:
[2026-07-03 14:14:14 +0000] info [cpaneld] 37.231.105.26 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.91.131.233
country_id: 6254930
description:
[2026-07-03 14:14:30 +0000] info [cpaneld] 77.91.131.233 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.136.148.236
country_id: 99237
description:
[2026-07-03 14:14:34 +0000] info [cpaneld] 185.136.148.236 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 103.124.95.161
country_id: 1562822
domain: new.cloud-et-racks.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.24||T:APACHE||MV:/wp-json/wp/v2/users?per_page=100&_fields=id,slug,name,link,roles||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 151.237.58.60
country_id: 2510769
description:
[2026-07-03 14:14:09 +0000] info [cpaneld] 151.237.58.60 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.211.122.117
country_id: 289688
description:
[2026-07-03 14:14:27 +0000] info [cpaneld] 89.211.122.117 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.142.222.73
country_id: 3996063
description:
[2026-07-03 14:14:36 +0000] info [cpaneld] 187.142.222.73 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.189.247.217
country_id: 3895114
description:
[2026-07-03 14:16:00 +0000] info [cpaneld] 201.189.247.217 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 171.101.117.12
country_id: 1605651
description:
[2026-07-03 14:15:57 +0000] info [cpaneld] 171.101.117.12 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.245.5.5
country_id: 3469034
description:
[2026-07-03 14:16:24 +0000] info [cpaneld] 170.245.5.5 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 85.174.192.77
country_id: 2017370
description:
[2026-07-03 14:16:27 +0000] info [cpaneld] 85.174.192.77 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 85.65.183.153
country_id: 294640
description:
[2026-07-03 14:16:44 +0000] info [cpaneld] 85.65.183.153 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.247.235.25
country_id: 2017370
description:
[2026-07-03 14:16:10 +0000] info [cpaneld] 91.247.235.25 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.104.96.233
country_id: 3469034
description:
[2026-07-03 14:16:31 +0000] info [cpaneld] 179.104.96.233 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.166.166.34
country_id: 3469034
description:
[2026-07-03 14:16:41 +0000] info [cpaneld] 45.166.166.34 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.6.18.109
country_id: 3932488
description:
[2026-07-03 14:16:07 +0000] info [cpaneld] 179.6.18.109 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.193.158.62
country_id: 3469034
description:
[2026-07-03 14:16:25 +0000] info [cpaneld] 186.193.158.62 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 202.59.209.226
country_id: 1210997
description:
[2026-07-03 14:16:03 +0000] info [cpaneld] 202.59.209.226 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.234.214.199
country_id: 3469034
description:
[2026-07-03 14:16:14 +0000] info [cpaneld] 45.234.214.199 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.159.91.203
country_id: 3469034
description:
[2026-07-03 14:16:22 +0000] info [cpaneld] 201.159.91.203 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.15.22.202
country_id: 1210997
description:
[2026-07-03 14:16:30 +0000] info [cpaneld] 157.15.22.202 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.196.78.254
country_id: 3469034
description:
[2026-07-03 14:16:33 +0000] info [cpaneld] 131.196.78.254 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.213.58.247
country_id: 2017370
description:
[2026-07-03 14:16:36 +0000] info [cpaneld] 176.213.58.247 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 82.194.22.78
country_id: 587116
domain: www.arse.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.arse.tg/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 176.204.68.182
country_id: 290557
domain: arse.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:support!.arse.tg||ServerName:arse.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:25a414a60af56cd8ee216dcd7a4265d879ecf746||Title:x7ccoiffe11op1q8t||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 150.241.203.201
country_id: 6252001
description:
[2026-07-03 14:21:08 +0000] info [cpaneld] 150.241.203.201 NEW ohuuvcqw:Qa17ksov0SXDxjqL address=150.241.203.201,app=cpaneld,creator=ohuuvcqw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.65.183.94
country_id: 3469034
description:
[2026-07-03 14:21:13 +0000] info [cpaneld] 45.65.183.94 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.114.37.59
country_id: 3895114
description:
[2026-07-03 14:21:33 +0000] info [cpaneld] 190.114.37.59 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.224.149.240
country_id: 3686110
description:
[2026-07-03 14:21:37 +0000] info [cpaneld] 38.224.149.240 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 183.80.151.147
country_id: 1562822
description:
[2026-07-03 14:21:06 +0000] info [cpaneld] 183.80.151.147 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.240.165.125
country_id: 3625428
description:
[2026-07-03 14:21:59 +0000] info [cpaneld] 185.240.165.125 - ariana "GET /login/?login_only=1&user=ariana&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ariana (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.191.75.58
country_id: 1562822
description:
[2026-07-03 14:21:16 +0000] info [cpaneld] 14.191.75.58 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.56.195.23
country_id: 99237
description:
[2026-07-03 14:21:22 +0000] info [cpaneld] 185.56.195.23 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.32.212.124
country_id: 2017370
description:
[2026-07-03 14:21:56 +0000] info [cpaneld] 212.32.212.124 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.99.113.63
country_id: 290557
description:
[2026-07-03 14:21:10 +0000] info [cpaneld] 92.99.113.63 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.223.30.161
country_id: 3996063
description:
[2026-07-03 14:21:26 +0000] info [cpaneld] 189.223.30.161 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.221.78.90
country_id: 3469034
description:
[2026-07-03 14:22:08 +0000] info [cpaneld] 177.221.78.90 - aria "GET /login/?login_only=1&user=aria&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user aria (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.22.46.10
country_id: 831053
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/28.jpeg HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 86.110.15.108
country_id: 2017370
description:
[2026-07-03 14:22:10 +0000] info [cpaneld] 86.110.15.108 - ari "GET /login/?login_only=1&user=ari&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ari (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.184.244.115
country_id: 290291
description:
[2026-07-03 14:22:12 +0000] info [cpaneld] 46.184.244.115 - ar "GET /login/?login_only=1&user=ar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.142.101.81
country_id: 3625428
description:
[2026-07-03 14:22:05 +0000] info [cpaneld] 190.142.101.81 - arian "GET /login/?login_only=1&user=arian&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user arian (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 203.162.159.13
country_id: 1562822
domain: togomedia24.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togomedia24.tg/tag/hipitaux-mere-enfant-projet-de-construction/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 32.192.137.37
country_id: 6252001
domain: www.lasnb-togo.snb.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/131.0.6778.85 Safari/537.36||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>le grand lom\xc3\xa9 est sur le point de passer \xc3\xa0 une autre dimension dans l'am\xc3\xa9lioration de son acc\xc3\xa8s \xc3\xa0 l'\xc3\xa9lectricit\xc3\xa9. la zone, marqu\xc3\xa9e par l'urbanisation rapide, la densification des activit\xc3\xa9s \xc3\xa9conomiques et la mont\xc3\xa9e continue des besoins \xc3\xa9nerg\xc3\xa9tiques, obtient des projections rassurantes pour 2026.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les projections montrent clairement une chose, la volont\xc3\xa9 affirm\xc3\xa9e de l'autorit\xc3\xa9 publique de renforcer durablement le r\xc3\xa9seau de distribution \xc3\xa9lectrique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31865,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/image-21.png\" alt=\"\" class=\"wp-image-31865\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>donn\xc3\xa9es pr\xc3\xa9visionnelles</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>selon la ceet, compagnie \xc3\xa9nergie \xc3\xa9lectrique du togo, 37.438 nouveaux abonn\xc3\xa9s devraient \xc3\xaatre raccord\xc3\xa9s \xc3\xa0 son r\xc3\xa9seau dans le grand lom\xc3\xa9 au cours de cette ann\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la dynamique de 2026 s'accompagne d'un engagement financier de l'\xc3\x89tat estim\xc3\xa9 \xc3\xa0 environ 3 milliards de francs cfa, destin\xc3\xa9 \xc3\xa0 soutenir les investissements n\xc3\xa9cessaires \xc3\xa0 l'extension et \xc3\xa0 la consolidation des infrastructures \xc3\xa9lectriques dans la capitale et ses environs.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31769,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31769\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>cette orientation est celle d'une strat\xc3\xa9gie : accompagner la croissance urbaine par un renforcement proportionnel des capacit\xc3\xa9s \xc3\xa9nerg\xc3\xa9tiques. dans une agglom\xc3\xa9ration qui concentre une part importante des activit\xc3\xa9s administratives, commerciales, industrielles et de services du pays, l'\xc3\xa9lectricit\xc3\xa9 constitue un facteur d\xc3\xa9terminant de performance.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>pour quel enjeu&nbsp;?</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il d\xc3\xa9passe largement la simple augmentation du nombre de branchements. il s'agit d'adapter le r\xc3\xa9seau \xc3\xa9lectrique \xc3\xa0 une ville en expansion continue, o\xc3\xb9 les nouveaux quartiers se d\xc3\xa9veloppent rapidement et o\xc3\xb9 les besoins en \xc3\xa9nergie \xc3\xa9voluent avec la diversification des usages : logements, petits commerces, ateliers, services num\xc3\xa9riques, \xc3\xa9quipements de conservation et infrastructures publiques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'investissement public projet\xc3\xa9 s'inscrit dans une logique de consolidation des acquis et de pr\xc3\xa9paration de l'avenir. il vise \xc3\xa0 am\xc3\xa9liorer la fiabilit\xc3\xa9 du r\xc3\xa9seau, \xc3\xa0 r\xc3\xa9duire les zones encore insuffisamment desservies et \xc3\xa0 accompagner l'\xc3\xa9mergence de nouvelles zones d'habitation et d'activit\xc3\xa9s \xc3\xa9conomiques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans ce contexte, la ceet occupe une place centrale. en tant qu'op\xc3\xa9rateur national, elle assure non seulement la distribution de l'\xc3\xa9lectricit\xc3\xa9, mais \xc3\xa9galement l'adaptation progressive des infrastructures aux besoins croissants des usagers. son action contribue directement \xc3\xa0 la modernisation du tissu urbain et \xc3\xa0 la structuration des services essentiels.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31645,\"width\":\"559px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-78.png\" alt=\"\" class=\"wp-image-31645\" style=\"width:559px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>cons\xc3\xa9quences directes</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'impact attendu de cette extension est multiple. sur le plan \xc3\xa9conomique, une meilleure couverture \xc3\xa9lectrique favorise l'installation de nouvelles activit\xc3\xa9s et renforce la productivit\xc3\xa9 des entreprises existantes. sur le plan social, elle am\xc3\xa9liore les conditions de vie des m\xc3\xa9nages, facilite l'acc\xc3\xa8s \xc3\xa0 l'\xc3\xa9ducation num\xc3\xa9rique et renforce la s\xc3\xa9curit\xc3\xa9 dans les quartiers gr\xc3\xa2ce \xc3\xa0 un \xc3\xa9clairage plus \xc3\xa9tendu.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le chiffre de 37.438 nouveaux abonn\xc3\xa9s projet\xc3\xa9s illustre ainsi l'ampleur des besoins \xc3\xa9nerg\xc3\xa9tiques du grand lom\xc3\xa9, mais aussi la r\xc3\xa9ponse progressive apport\xc3\xa9e par les politiques publiques. c'est donc une vision d'ensemble qui se dessine : celle d'un grand lom\xc3\xa9 \xc3\xa9panoui.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>samir b.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.5.35.123
country_id: 3895114
domain: macite.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/macite.tg/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.221.216.28
country_id: 6252001
description:
[2026-07-03 14:24:43 +0000] info [whostmgrd] 97.221.216.28 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 77.90.185.5
country_id: 130758
domain: sp-eau.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77141095r77142192||MV:14-24.77.90.185.5||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 2.48.250.162
country_id: 290557
domain: arse.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:support!.arse.tg||ServerName:arse.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1a62d937e47880e306f5a28c3613b56b9a779645||Title:322oo2lhgrzwwg||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.12.184.119
country_id: 3437598
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/crise-du-golfe-afreximbank-protege-les-economies-africaines-et-caribeennes/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 134.195.83.234
country_id: 6252001
description:
[2026-07-03 14:27:36 +0000] info [cpaneld] 134.195.83.234 - pmalabvi "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 46.253.131.137
country_id: 6252001
domain: www.cameg-togo.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.24||T:APACHE||MV:/wp-json/wp/v2/users||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 52.71.44.117
country_id: 6252001
domain: lepoint-actu.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/138.0.0.0 Safari/537.36||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.14
country_id: 6252001
description:
205.169.39.14 - - [03/Jul/2026:14:30:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935764&pdata=http%253A%252F%252Fdjama.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783088993 HTTP/1.1" 302 0 djama.tg "http://djama.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.14


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 223.206.242.210
country_id: 1605651
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/crise-du-golfe-afreximbank-protege-les-economies-africaines-et-caribeennes/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.155
country_id: 1880251
description:
47.128.96.155 - - [03/Jul/2026:14:32:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10208155&pdata=https%253A%252F%252Fbutodra.tg%252F2026%252F07%252F03%252Fthe-subtle-luxuries-of-online-casino-entertainment%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783089161 HTTP/2.0" 302 0 butodra.tg "https://butodra.tg/2026/07/03/the-subtle-luxuries-of-online-casino-entertainment/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.155


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 2.48.250.162
country_id: 290557
domain: arse.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:support!.arse.tg||ServerName:arse.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:832720b19dd5893a711b2599664af1b155541845||Title:avoutqkiokbogrr||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 2.48.250.162
country_id: 290557
domain: arse.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:support!.arse.tg||ServerName:arse.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:70bb12773a51a650ae81d1170146a475b42f1185||Title:or6ahfnv8d5zk6iv||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 43.248.15.162
country_id: 1168579
domain: 24heureinfo.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/24heureinfo.tg/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.3
country_id: 6252001
description:
205.169.39.3 - - [03/Jul/2026:14:34:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10252692&pdata=http%253A%252F%252Fwww.djama.snb.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783089248 HTTP/1.1" 302 0 www.djama.snb.tg "http://www.djama.snb.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.3


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.175.146.217
country_id: 99237
domain: 24heureinfo.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/24heureinfo.tghttp/24heureinfo.tg/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 89.19.35.235
country_id: 6252001
domain: emt.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:SXWok*rKSIuEOewWe2IT$Ie@.emt.tg||Method:wp.getUsersBlogs


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.188.34.23
country_id: 337996
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/albums/page/6 HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 2.48.250.162
country_id: 290557
domain: arse.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:support!.arse.tg||ServerName:arse.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d5e8430e1ddd5d5d6548ae62db7776c7460a45ba||Title:qs65ghx4iz07di||RSV:8.24||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.81
country_id: 130758
description:
2026-07-03 14:38:18 dovecot_login authenticator failed for H=(localhost) [81.30.98.81]:39871: 535 Incorrect authentication data (set_id=user12)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.12
country_id: 1880251
description:
47.128.96.12 - - [03/Jul/2026:14:38:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7064167&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fjeune-femme-leader%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783089499 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/jeune-femme-leader/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.12


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 2.48.250.162
country_id: 290557
domain: arse.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:support!.arse.tg||ServerName:arse.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:6c106466f07babd5e9c3ec3eb3cb20128414c2cc||Title:ti9dge57byw7po||RSV:8.24||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 194.165.16.21
country_id: 2993457
description:
2026-07-03 14:41:49 dovecot_plain authenticator failed for H=(do.x7root.com) [194.165.16.21]:56455: 535 Incorrect authentication data (set_id=e.sanvee@lacs1.mairie.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.132.57.123
country_id: 6252001
description:
34.132.57.123 - - [03/Jul/2026:14:43:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13134954&pdata=http%253A%252F%252Fcfpj.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783089811 HTTP/1.1" 302 0 cfpj.tg "http://cfpj.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.132.57.123


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.185.221.199
country_id: 1562822
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/11.jpeg HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.241.25.77
country_id: 2017370
description:
[2026-07-03 14:44:51 +0000] info [cpaneld] 92.241.25.77 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.10.155.71
country_id: 3895114
description:
[2026-07-03 14:44:40 +0000] info [cpaneld] 186.10.155.71 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 128.201.196.210
country_id: 3469034
description:
[2026-07-03 14:45:01 +0000] info [cpaneld] 128.201.196.210 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.20.244
country_id: 2921044
description:
[2026-07-03 14:44:45 +0000] info [cpaneld] 195.63.20.244 - ljrwwgxg "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.65.114.110
country_id: 3017382
description:
[2026-07-03 14:44:49 +0000] info [cpaneld] 82.65.114.110 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.201.244.118
country_id: 99237
description:
[2026-07-03 14:45:08 +0000] info [cpaneld] 62.201.244.118 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.178.98.84
country_id: 2017370
description:
[2026-07-03 14:45:10 +0000] info [cpaneld] 195.178.98.84 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 149.50.204.109
country_id: 3658394
description:
[2026-07-03 14:45:04 +0000] info [cpaneld] 149.50.204.109 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.85.201
country_id: 2921044
description:
[2026-07-03 14:47:04 +0000] info [cpaneld] 217.181.85.201 - sodigaz "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 14:48:20 +0000] info [cpaneld] 62.146.238.204 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[cpaneld] [Local IP Address]=[154.70.82.246] [Local Port]=[2083] [Remote IP Address]=[62.146.238.204] [Remote Port]=[63404] [Authentication Database]=[system] [Username]=[e.carine] (1/30 failures) (blocked until [Sat Jul  4 14:48:20 2026 UTC/Sat Jul  4 14:48:20 2026 LOCAL])


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 45.147.235.134
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.24||T:APACHE||RA:45.147.235.134||TA:45.147.235.134||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.81
country_id: 130758
description:
2026-07-03 14:49:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.81]:59294: 535 Incorrect authentication data (set_id=raedisch)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.43.82.191
country_id: 6254930
description:
[2026-07-03 14:53:50 +0000] info [cpaneld] 46.43.82.191 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.178.238.200
country_id: 2542007
description:
[2026-07-03 14:53:52 +0000] info [cpaneld] 160.178.238.200 - ariana "GET /login/?login_only=1&user=ariana&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ariana (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.7.214.87
country_id: 3469034
description:
[2026-07-03 14:53:55 +0000] info [cpaneld] 201.7.214.87 - arianatg "GET /login/?login_only=1&user=arianatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user arianatg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.213.229.156
country_id: 2215636
description:
[2026-07-03 14:54:01 +0000] info [cpaneld] 102.213.229.156 - aria "GET /login/?login_only=1&user=aria&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user aria (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 128.201.118.177
country_id: 3895114
description:
[2026-07-03 14:53:57 +0000] info [cpaneld] 128.201.118.177 - arian "GET /login/?login_only=1&user=arian&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user arian (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.160.32.215
country_id: 3895114
description:
[2026-07-03 14:54:04 +0000] info [cpaneld] 181.160.32.215 - ari "GET /login/?login_only=1&user=ari&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ari (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.94.144
country_id: 6252001
description:
[2026-07-03 14:56:09 +0000] info [whostmgrd] 172.56.94.144 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 158.94.211.154
country_id: 2750405
description:
2026-07-03 14:56:20 H=([158.94.211.154]) [158.94.211.154]:50104 F=<No-reply@eco.com.pk> rejected RCPT <whiteway@white-ways.com>: The mail server could not deliver mail to whiteway@white-ways.com.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[cpaneld] [Local IP Address]=[154.70.82.246] [Local Port]=[2083] [Remote IP Address]=[62.146.238.204] [Remote Port]=[55526] [Authentication Database]=[system] [Username]=[.SAPHYRTOUR] (1/30 failures) (blocked until [Sat Jul  4 14:57:50 2026 UTC/Sat Jul  4 14:57:50 2026 LOCAL])


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 14:57:50 +0000] info [cpaneld] 62.146.238.204 - .SAPHYRTOUR "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.81
country_id: 130758
description:
2026-07-03 14:59:42 dovecot_login authenticator failed for H=(localhost) [81.30.98.81]:28536: 535 Incorrect authentication data (set_id=selda)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.231.255.233
country_id: 3017382
description:
[2026-07-03 14:59:26 +0000] info [cpaneld] 5.231.255.233 - arsjawjaz "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.81
country_id: 130758
description:
2026-07-03 15:00:17 dovecot_login authenticator failed for H=(localhost) [81.30.98.81]:14819: 535 Incorrect authentication data (set_id=selda)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.118.89
country_id: 6252001
description:
47.251.118.89 - - [03/Jul/2026:15:01:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131823&pdata=https%253A%252F%252Fwww.snb.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783090894 HTTP/2.0" 302 0 www.snb.tg "https://www.snb.tg/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.118.89


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 207.90.244.5
country_id: 6252001
description:
Jul  3 15:01:43 ns5 pure-ftpd[464363]: (?@207.90.244.5) [WARNING] Authentication failed for user [anonymous]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.90.48
country_id: 6252001
description:
47.251.90.48 - - [03/Jul/2026:15:01:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10249628&pdata=https%253A%252F%252Farse.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783090900 HTTP/2.0" 302 0 arse.tg "https://arse.tg/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.90.48


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.6.145.90
country_id: 6252001
description:
[2026-07-03 15:01:03 +0000] info [whostmgrd] 107.6.145.90 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.255.102.218
country_id: 2589581
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/developpement-economique-inclusif-kossi-lamadokou-en-seance-de-travail-avec-les-acteurs-culturels-a-kara/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.255.102.218
country_id: 2589581
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/developpement-economique-inclusif-kossi-lamadokou-en-seance-de-travail-avec-les-acteurs-culturels-a-kara/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:19f38edfc749dad0b2a31ea2b6ea8e53021285e8||Title:m2wtj0bbc94hh6ehb2||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:4812a665f83de544298d8d44cc3367d3425bb28c||Title:204p1l4kvsqjk9wqi||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:8d124df723261199e07e4cba230c966d09f9698e||Title:uf55uvgtmvudgxysy||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1b565ab66d9f3cf359853adca12e2e1bfe7cb44c||Title:p9jly8vr6ddzvz7al||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 15:06:10 +0000] info [cpaneld] 62.146.238.204 - pduusmyf "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: brute force attempt (user pduusmyf) has locked out IP 62.146.238.204


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 27.115.124.109
country_id: 1814991
description:
27.115.124.109 - - [03/Jul/2026:15:06:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7171181&pdata=https%253A%252F%252Fwww.letabloid.tg%252Fcategory%252Fsociete%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783091177 HTTP/2.0" 302 0 www.letabloid.tg "https://www.letabloid.tg/category/societe/" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.109


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 123.6.49.18
country_id: 1814991
description:
123.6.49.18 - - [03/Jul/2026:15:06:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9869166&pdata=https%253A%252F%252Fwww.letabloid.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783091181 HTTP/2.0" 302 0 www.letabloid.tg "https://www.letabloid.tg/" "Mozilla/5.0 (Linux; Android 11; CPH2185) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.18


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[cpaneld] [Local IP Address]=[154.70.82.246] [Local Port]=[2083] [Remote IP Address]=[62.146.238.204] [Remote Port]=[62000] [Authentication Database]=[system] [Username]=[pduusmyf] (1/30 failures) (blocked until [Sat Jul  4 15:06:09 2026 UTC/Sat Jul  4 15:06:09 2026 LOCAL])


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ef5134c3fed9f16995274a4e32ca0de26145050e||Title:svxqz7q77rkb1z||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f51ea0eef6cb9408e697b58b5928f2b0bc1f2506||Title:e3e2jqz7x7f9rjx||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:82b627cb413aab1327ae251cf511531b87b06c24||Title:i8qcans4hjra8w||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-07-03 15:09:58 +0000] info [webmaild] 160.242.195.10 - secretariat_daj@caissederetraites.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:71734b94a2ad46856bed774ca517b6a30456693e||Title:n2r26wsrpslfhfnb||RSV:8.24||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.81
country_id: 130758
description:
2026-07-03 15:10:08 dovecot_login authenticator failed for H=(localhost) [81.30.98.81]:60761: 535 Incorrect authentication data (set_id=manoj)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-07-03 15:10:51 +0000] info [webmaild] 160.242.195.10 - adesouza@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d739b3f2a3e39510db78e620a3ecf5eed6ac8026||Title:r5ennwrtw8hokp6wes||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:692a291f66b4fa8abc2b20d6ebcb5ae1b359815f||Title:snxoq45aue01xlsfs||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 89.124.92.137
country_id: 2750405
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-11.89.124.92.137||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-07-03 15:11:28 +0000] info [webmaild] 160.242.195.10 - adesouza@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:8f394cee2a24ed8660e2c90e629e6e41ebb96ca2||Title:btw5ofi0q8a80kn8||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.196.9.200
country_id: 6252001
description:
103.196.9.200 - - [03/Jul/2026:15:12:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9793477&pdata=http%253A%252F%252Fmetaart.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783091546 HTTP/1.1" 302 0 metaart.tg "http://metaart.tg/" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/144.0.7559.95 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.196.9.200


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:37a253a057e8629f70ccd900bcbb473860fb94b0||Title:ys5pm0ue6lprxi5||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-07-03 15:13:10 +0000] info [cpaneld] 160.242.195.10 NEW assedderetrm:XIzoJpIh8Oj_O_1U address=160.242.195.10,app=cpaneld,creator=assedderetrm,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 89.124.81.121
country_id: 2750405
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-13.89.124.81.121||RSV:8.24||T:APACHE||


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - adesouza@caissederetraites.tg [07/03/2026:15:14:41 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: adesouza@caissederetraites.tg


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d51893f1eac6aafc0cb45927dc0715daaabb3f6d||Title:obfs4a4gixe6hz||RSV:8.24||T:APACHE||


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[whostmgrd] [Local IP Address]=[154.70.82.246] [Local Port]=[2087] [Remote IP Address]=[62.146.238.204] [Remote Port]=[57677] [Authentication Database]=[system] [Username]=[a4@gmail.com] (1/30 failures) (blocked until [Sat Jul  4 15:16:03 2026 UTC/Sat Jul  4 15:16:03 2026 LOCAL])


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>le partenariat strat\xc3\xa9gique entre le togo et la banque africaine de d\xc3\xa9veloppement (bad) franchit un nouveau cap. le jeudi 2 juillet dernier, le pr\xc3\xa9sident du groupe de la bad, m. sidi ould tah, en s\xc3\xa9jour de travail dans la capitale togolaise, a \xc3\xa9t\xc3\xa9 re\xc3\xa7u en audience par le pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9. cette rencontre de haut niveau a permis de saluer la solidit\xc3\xa9 \xc3\xa9conomique du pays et de tracer les grandes lignes des investissements futurs.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>au menu des \xc3\xa9changes, la sant\xc3\xa9 \xc3\xa9conomique du togo a fait l'objet de vives f\xc3\xa9licitations de la part de l'institution panafricaine. m. sidi ould tah s\xe2\x80\x99est r\xc3\xa9joui des progr\xc3\xa8s macro\xc3\xa9conomiques notables enregistr\xc3\xa9s par le pays, mettant en lumi\xc3\xa8re le succ\xc3\xa8s des r\xc3\xa9formes structurelles men\xc3\xa9es ces derni\xc3\xa8res ann\xc3\xa9es.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\xc2\xab <em>c\xe2\x80\x99\xc3\xa9tait une opportunit\xc3\xa9 pour f\xc3\xa9liciter [le pr\xc3\xa9sident du conseil] pour les excellentes performances macro\xc3\xa9conomiques r\xc3\xa9alis\xc3\xa9es par le togo et surtout pour les r\xc3\xa9sultats de la derni\xc3\xa8re revue du fonds mon\xc3\xa9taire international (fmi), qui a montr\xc3\xa9 les avanc\xc3\xa9es notables r\xc3\xa9alis\xc3\xa9es par le pays</em> \xc2\xbb, a d\xc3\xa9clar\xc3\xa9 le pr\xc3\xa9sident de la bad \xc3\xa0 l'issue de l'audience.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31769,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31769\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>les discussions ont \xc3\xa9galement permis de passer en revue le portefeuille de projets en cours et de d\xc3\xa9finir les perspectives de coop\xc3\xa9ration pour les cinq prochaines ann\xc3\xa9es. le pr\xc3\xa9sident de la bad a r\xc3\xa9it\xc3\xa9r\xc3\xa9 la ferme volont\xc3\xa9 de l\xe2\x80\x99institution panafricaine d\xe2\x80\x99accompagner le gouvernement togolais dans ses ambitions de d\xc3\xa9veloppement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour garantir le succ\xc3\xa8s de cette collaboration, la bad s'engage \xc3\xa0 optimiser ses m\xc3\xa9canismes d'intervention \xc3\xa0 travers trois leviers majeurs, tels que l\xe2\x80\x99am\xc3\xa9lioration de la qualit\xc3\xa9 d\xe2\x80\x99ex\xc3\xa9cution des projets sur le terrain, l\xe2\x80\x99acc\xc3\xa9l\xc3\xa9ration des d\xc3\xa9caissements financiers, et la r\xc3\xa9duction des d\xc3\xa9lais de mise en \xc5\x93uvre des chantiers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l\xe2\x80\x99objectif de ces diff\xc3\xa9rentes mesures est d\xe2\x80\x99assurer un alignement total des interventions de la banque sur les priorit\xc3\xa9s strat\xc3\xa9giques d\xc3\xa9finies par l'ex\xc3\xa9cutif togolais.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31645,\"width\":\"552px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-78.png\" alt=\"\" class=\"wp-image-31645\" style=\"width:552px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>un portefeuille de plus de 327 milliards de fcfa au togo</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l\xe2\x80\x99impact de la banque africaine de d\xc3\xa9veloppement au togo se traduit par des r\xc3\xa9alisations concr\xc3\xa8tes dans des secteurs vitaux. les investissements de la bad soutiennent activement trois piliers strat\xc3\xa9giques, \xc3\xa0 savoir&nbsp;: l\xe2\x80\x99\xc3\xa9nergie avec le renforcement de l\xe2\x80\x99acc\xc3\xa8s des populations \xc3\xa0 l\xe2\x80\x99\xc3\xa9lectricit\xc3\xa9, l\xe2\x80\x99agriculture pour garantir la s\xc3\xa9curit\xc3\xa9 alimentaire et booster les exportations, et</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que jusqu\xe2\x80\x99en 2026, le partenariat entre le togo et la bad a permis la mise en \xc5\x93uvre de 26 projets pour un investissement total de 327,36 milliards de fcfa.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.67.165
country_id: 2363686
description:
[2026-07-03 15:15:29 +0000] info [webmaild] 196.171.67.165 - agencekara@caissederetraites.tg "GET /cpsess0220625764/3rdparty/roundcube/?_task=mail&_mbox=INBOX HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:c2f2a2e5323a212c598b78f28fce70f09631ad20||Title:93sdyd1pd4e26soj||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.171.67.165
country_id: 2363686
description:
[2026-07-03 15:15:57 +0000] info [webmaild] 196.171.67.165 - mkoudahe@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 15:16:03 +0000] info [whostmgrd] 62.146.238.204 - a4@gmail.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: brute force attempt (user a4@gmail.com) has locked out IP 62.146.238.204


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.67.165
country_id: 2363686
description:
[2026-07-03 15:16:34 +0000] info [webmaild] 196.171.67.165 - mkoudahe@caissederetraites.tg "POST /cpsess7721962534/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ed3d834da4d33e52f29e3c25977ba6ec438aad66||Title:d9d04n8p28w5cynvr||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.67.165
country_id: 2363686
description:
[2026-07-03 15:17:34 +0000] info [webmaild] 196.171.67.165 - mkoudahe@caissederetraites.tg "POST /cpsess7721962534/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f529ef67445cacd858001e21e870afc85ec35e25||Title:g3wd61audzk0wi||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:273252544fddd03896692b1dbedca7dc2e1259e3||Title:xh8va9gjmkzsgw8s||RSV:8.24||T:APACHE||


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - adesouza@caissederetraites.tg [07/03/2026:15:18:08 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: adesouza@caissederetraites.tg


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:dfd8ca98018a0a4531228a35145a1e8da8e08315||Title:epgtibbntqao53en||RSV:8.24||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.81
country_id: 130758
description:
2026-07-03 15:20:47 dovecot_login authenticator failed for H=(localhost) [81.30.98.81]:40466: 535 Incorrect authentication data (set_id=vms)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.43.129.83
country_id: 1269750
domain: lepoint-actu.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:raymond.lepoint-actu.tg||ServerName:lepoint-actu.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:3d36990a37766941d44b784450ff9261f665f748||Title:z65nbthhxlmfove47||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 91.106.42.72
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/chefferie-traditionnelle-le-gouvernement-enterine-la-designation-de-15-chefs-de-canton/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 91.106.42.72
country_id: 99237
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/chefferie-traditionnelle-le-gouvernement-enterine-la-designation-de-15-chefs-de-canton/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.81
country_id: 130758
description:
2026-07-03 15:21:05 dovecot_login authenticator failed for H=(localhost) [81.30.98.81]:32053: 535 Incorrect authentication data (set_id=vms)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.87.29.145
country_id: 3865483
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/album/deux-ans-grace-a-vous HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 15:23:05 +0000] info [whostmgrd] 62.146.238.204 - masfloy "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: brute force attempt (user masfloy) has locked out IP 62.146.238.204


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[whostmgrd] [Local IP Address]=[154.70.82.246] [Local Port]=[2087] [Remote IP Address]=[62.146.238.204] [Remote Port]=[56791] [Authentication Database]=[system] [Username]=[masfloy] (1/30 failures) (blocked until [Sat Jul  4 15:23:05 2026 UTC/Sat Jul  4 15:23:05 2026 LOCAL])


plugin: modsec
rule: 77705892
name: IM360 WAF: Tracking doubtful fake-admin WordPress username (RBL-only)
abuser: 121.200.216.8
country_id: 1562822
domain: myworkafrica.com
description:
IM360 WAF: Tracking doubtful fake-admin WordPress username (RBL-only)||MV:adm1n||MVN:ARGS:log||WPU:adm1n||User:lhxhatyj||RSV:8.24||T:APACHE||


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[whostmgrd] [Local IP Address]=[154.70.82.246] [Local Port]=[2087] [Remote IP Address]=[62.146.238.204] [Remote Port]=[50125] [Authentication Database]=[system] [Username]=[stephaneogou@gmail.com] (1/30 failures) (blocked until [Sat Jul  4 15:24:09 2026 UTC/Sat Jul  4 15:24:09 2026 LOCAL])


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.168.139.68
country_id: 2363686
description:
[2026-07-03 15:24:41 +0000] info [webmaild] 196.168.139.68 - KcrtZ5720 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: invalid webmail user KcrtZ5720 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 15:24:09 +0000] info [whostmgrd] 62.146.238.204 - stephaneogou@gmail.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: brute force attempt (user stephaneogou@gmail.com) has locked out IP 62.146.238.204


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.36.222.168
country_id: 1168579
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/album/ayizan-2023-apotheose HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 18.208.51.154
country_id: 6252001
domain: www.mg.cloud-et-racks.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/131.0.0.0 Safari/537.36||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 15:29:28 +0000] info [whostmgrd] 62.146.238.204 - apluser "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: brute force attempt (user apluser) has locked out IP 62.146.238.204


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[whostmgrd] [Local IP Address]=[154.70.82.246] [Local Port]=[2087] [Remote IP Address]=[62.146.238.204] [Remote Port]=[52345] [Authentication Database]=[system] [Username]=[apluser] (1/30 failures) (blocked until [Sat Jul  4 15:29:28 2026 UTC/Sat Jul  4 15:29:28 2026 LOCAL])


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 89.124.118.119
country_id: 2750405
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-30.89.124.118.119||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.146
country_id: 2635167
description:
[2026-07-03 15:30:34 +0000] info [cpaneld] 5.230.133.146 NEW formationfreenet:UqzGduoRgzx6hPot address=5.230.133.146,app=cpaneld,creator=formationfreenet,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 38.123.220.26
country_id: 3996063
domain: direct7.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309r77140835r77140736||MV:15-31.38.123.220.26||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 102.176.253.226
country_id: 2363686
description:
[2026-07-03 15:32:20 +0000] info [webmaild] 102.176.253.226 - dgi@ucao-uut.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [03/Jul/2026:15:32:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10262676&pdata=https%253A%252F%252Fkpmg.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783092759 HTTP/2.0" 302 0 kpmg.tg "https://kpmg.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.204
country_id: 2635167
description:
[2026-07-03 15:32:46 +0000] info [cpaneld] 5.230.153.204 - mvfxewjz "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.112.147.40
country_id: 1814991
description:
2026-07-03 15:33:57 dovecot_plain authenticator failed for H=(a25tmiupxxfoi8csisxf1u2jvy) [123.112.147.40]:56686: 535 Incorrect authentication data (set_id=admin@mesyscom.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 15:36:08 +0000] info [whostmgrd] 62.146.238.204 - apluser "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: brute force attempt (user apluser) has locked out IP 62.146.238.204


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[whostmgrd] [Local IP Address]=[154.70.82.246] [Local Port]=[2087] [Remote IP Address]=[62.146.238.204] [Remote Port]=[55747] [Authentication Database]=[system] [Username]=[apluser] (1/30 failures) (blocked until [Sat Jul  4 15:36:08 2026 UTC/Sat Jul  4 15:36:08 2026 LOCAL])


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 54.177.65.240
country_id: 6252001
description:
[2026-07-03 15:40:01 +0000] info [cpaneld] 54.177.65.240 - prince "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user prince (has_cpuser_file failed)


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 61.111.250.85
country_id: 1835841
description:
Denial of Service (DoS) attack was discovered from 61.111.250.85: 80 connections per 30 seconds to 443 port.


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>le palais des congr\xc3\xa8s de lom\xc3\xa9 est, en ce d\xc3\xa9but de mois de juillet, le centre de la diplomatie continentale. depuis ce matin, la capitale togolaise accueille la conf\xc3\xa9rence minist\xc3\xa9rielle extraordinaire de l\xe2\x80\x99alliance politique africaine (apa). objectif : d\xc3\xa9finir une position et des r\xc3\xa9ponses strat\xc3\xa9giques communes face aux r\xc3\xa9percussions de la crise au moyen-orient sur le continent africain.</em></strong><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans un contexte g\xc3\xa9opolitique mondial particuli\xc3\xa8rement tendu, l'afrique ne peut rester simple spectatrice. c'est sous le th\xc3\xa8me crucial&nbsp;: <em>\xc2\xab l\xe2\x80\x99afrique face \xc3\xa0 la crise au moyen-orient : impacts, d\xc3\xa9fis et r\xc3\xa9ponses strat\xc3\xa9giques \xc2\xbb,</em> que les ministres des affaires \xc3\xa9trang\xc3\xa8res et les d\xc3\xa9l\xc3\xa9gations de l'alliance politique africaine (apa) se r\xc3\xa9unissent au palais des congr\xc3\xa8s de lom\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>une rencontre d'urgence qui d\xc3\xa9montre une nouvelle fois encore le r\xc3\xb4le strat\xc3\xa9gique du togo, sous l'impulsion de sa diplomatie active, comme un terrain privil\xc3\xa9gi\xc3\xa9 de concertation et de recherche de solutions pour la paix et la stabilit\xc3\xa9 internationale.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31769,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31769\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>les grands enjeux de la conf\xc3\xa9rence : impacts et r\xc3\xa9ponses</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la crise qui secoue le moyen-orient a des effets directs et indirects sur les \xc3\xa9conomies et la s\xc3\xa9curit\xc3\xa9 du continent africain. les discussions de cette conf\xc3\xa9rence minist\xc3\xa9rielle extraordinaire s'articuleront autour des th\xc3\xa9matiques majeures telles que&nbsp;les impacts \xc3\xa9conomiques et \xc3\xa9nerg\xc3\xa9tiques&nbsp;; les d\xc3\xa9fis s\xc3\xa9curitaires et g\xc3\xa9opolitiques&nbsp;; et les r\xc3\xa9ponses strat\xc3\xa9giques communes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>a l\xe2\x80\x99issue des travaux ouverts par le pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9, une feuille de route sera \xc3\xa9labor\xc3\xa9e, portant la voix africaine unie pour peser dans les instances internationales et prot\xc3\xa9ger les int\xc3\xa9r\xc3\xaats du continent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31645,\"width\":\"553px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-78.png\" alt=\"\" class=\"wp-image-31645\" style=\"width:553px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>notons que l'alliance politique africaine (apa), en choisissant lom\xc3\xa9 pour cette session extraordinaire, r\xc3\xa9affirme la confiance des \xc3\x89tats membres envers la vision diplomatique togolaise, traditionnellement ax\xc3\xa9e sur la m\xc3\xa9diation, le dialogue et le panafricanisme.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>nous y reviendrons&nbsp;!!!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 102.64.220.39
country_id: 2363686
domain: togodailynews.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.24||T:APACHE||MV:/wp-json/wp/v2/users/1?context=view&_fields=id%2Cname&_locale=user||


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - dedeou@caissederetraites.tg [07/03/2026:15:44:03 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: dedeou@caissederetraites.tg


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 202.93.153.232
country_id: 1831722
description:
202.93.153.232 - - [03/Jul/2026:15:44:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9934231&pdata=https%253A%252F%252Ftogocarrierebetons.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783093453 HTTP/2.0" 302 0 togocarrierebetons.tg "https://togocarrierebetons.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:202.93.153.232


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[whostmgrd] [Local IP Address]=[154.70.82.246] [Local Port]=[2087] [Remote IP Address]=[62.146.238.204] [Remote Port]=[64579] [Authentication Database]=[system] [Username]=[apluser] (1/30 failures) (blocked until [Sat Jul  4 15:45:06 2026 UTC/Sat Jul  4 15:45:06 2026 LOCAL])


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 15:45:06 +0000] info [whostmgrd] 62.146.238.204 - apluser "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: brute force attempt (user apluser) has locked out IP 62.146.238.204


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 185.12.185.1
country_id: 1861060
domain: togodailynews.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/147.0.0.0 Safari/537.36||RSV:8.24||T:APACHE||


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - dedeou@caissederetraites.tg [07/03/2026:15:47:00 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: dedeou@caissederetraites.tg


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 130.193.250.73
country_id: 99237
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/actualite/detail/retraite-des-directeurs-generaux-des-compagnies-dassurances-membres-du-cat HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 138.185.15.4
country_id: 3932488
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/album/la-snb-bien-presente-aux-gnadoe-magazine-awards HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77093094
abuser: 136.116.198.170
country_id: 6252001
domain: arse.tg
description:


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 80.94.95.202
country_id: 798549
domain: mesyscom.com
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77141095r77142192||MV:15-50.80.94.95.202||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 181.177.102.211
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-51.181.177.102.211||RSV:8.24||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 85.19.195.12
country_id: 3144096
description:
2026-07-03 15:52:42 dovecot_login authenticator failed for H=(85-19-195-12.telia-isp.no) [85.19.195.12]:47792: 535 Incorrect authentication data (set_id=champion@soena.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.42.113.10
country_id: 1814991
description:
2026-07-03 15:52:45 dovecot_login authenticator failed for H=([182.42.113.10]) [182.42.113.10]:50476: 535 Incorrect authentication data (set_id=champion@soena.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.53.15.18
country_id: 2542007
description:
2026-07-03 15:52:05 dovecot_login authenticator failed for H=([102.53.15.18]) [102.53.15.18]:34975: 535 Incorrect authentication data (set_id=info@soena.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.203.231.220
country_id: 2464461
description:
2026-07-03 15:52:22 dovecot_login authenticator failed for H=([196.203.231.220]) [196.203.231.220]:40724: 535 Incorrect authentication data (set_id=champion@soena.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.139.124.120
country_id: 1835841
description:
2026-07-03 15:53:32 dovecot_login authenticator failed for H=([125.139.124.120]) [125.139.124.120]:41314: 535 Incorrect authentication data (set_id=champion@soena.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.165.29.196
country_id: 1733045
description:
2026-07-03 15:54:55 dovecot_login authenticator failed for H=([183.171.237.250]) [202.165.29.196]:52554: 535 Incorrect authentication data (set_id=nawoki@otr.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.176.18.69
country_id: 1210997
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/event/lancement-djama-stout-porter HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 15:55:25 +0000] info [whostmgrd] 62.146.238.204 - testeur2 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: brute force attempt (user testeur2) has locked out IP 62.146.238.204


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[whostmgrd] [Local IP Address]=[154.70.82.246] [Local Port]=[2087] [Remote IP Address]=[62.146.238.204] [Remote Port]=[55914] [Authentication Database]=[system] [Username]=[testeur2] (1/30 failures) (blocked until [Sat Jul  4 15:55:25 2026 UTC/Sat Jul  4 15:55:25 2026 LOCAL])


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.178.33.1
country_id: 1562822
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/objectif HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.113.16.253
country_id: 1210997
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/actualite/detail/seminaire-du-8-mai-2025-le-cat-accompagne-la-mise-en-oeuvre-de-la-nouvelle-convention-collective HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 15:58:07 +0000] info [whostmgrd] 62.146.238.204 - a4@gmail.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: brute force attempt (user a4@gmail.com) has locked out IP 62.146.238.204


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[whostmgrd] [Local IP Address]=[154.70.82.246] [Local Port]=[2087] [Remote IP Address]=[62.146.238.204] [Remote Port]=[65513] [Authentication Database]=[system] [Username]=[a4@gmail.com] (1/30 failures) (blocked until [Sat Jul  4 15:58:07 2026 UTC/Sat Jul  4 15:58:07 2026 LOCAL])


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 190.100.112.147
country_id: 3895114
description:
190.100.112.147 - - [03/Jul/2026:15:58:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6723687&pdata=https%253A%252F%252Fcfpj.tg%252Feedo-799hetidm92t.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783094299 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/eedo-799hetidm92t.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:190.100.112.147


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[whostmgrd] [Local IP Address]=[154.70.82.246] [Local Port]=[2087] [Remote IP Address]=[62.146.238.204] [Remote Port]=[58829] [Authentication Database]=[system] [Username]=[masfloy] (1/30 failures) (blocked until [Sat Jul  4 15:59:04 2026 UTC/Sat Jul  4 15:59:04 2026 LOCAL])


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 198.52.245.127
country_id: 6252001
description:
[2026-07-03 15:59:56 +0000] info [cpaneld] 198.52.245.127 - prince "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user prince (has_cpuser_file failed)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 102.64.220.39
country_id: 2363686
domain: togodailynews.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.24||T:APACHE||MV:/wp-json/wp/v2/users?context=view&search=gmail.com&_locale=user||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 15:59:05 +0000] info [whostmgrd] 62.146.238.204 - masfloy "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: brute force attempt (user masfloy) has locked out IP 62.146.238.204


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 128.201.98.166
country_id: 3469034
description:
[2026-07-03 16:00:46 +0000] info [cpaneld] 128.201.98.166 - fastsol "GET /login/?login_only=1&user=fastsol&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsol (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.91.180.79
country_id: 6254930
description:
[2026-07-03 16:00:32 +0000] info [cpaneld] 77.91.180.79 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.191.41.178
country_id: 3686110
description:
[2026-07-03 16:00:38 +0000] info [cpaneld] 38.191.41.178 - fastsolutiontg "GET /login/?login_only=1&user=fastsolutiontg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsolutiontg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.37.148.227
country_id: 3469034
description:
[2026-07-03 16:00:49 +0000] info [cpaneld] 177.37.148.227 - fastso "GET /login/?login_only=1&user=fastso&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastso (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.92.139.192
country_id: 690791
description:
[2026-07-03 16:00:53 +0000] info [cpaneld] 185.92.139.192 - fasts "GET /login/?login_only=1&user=fasts&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fasts (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.53.203.53
country_id: 3469034
description:
[2026-07-03 16:00:58 +0000] info [cpaneld] 200.53.203.53 - fast "GET /login/?login_only=1&user=fast&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fast (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 88.230.99.231
country_id: 298795
description:
[2026-07-03 16:00:35 +0000] info [cpaneld] 88.230.99.231 - fastsolution "GET /login/?login_only=1&user=fastsolution&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsolution (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.33.86.72
country_id: 3469034
description:
[2026-07-03 16:00:42 +0000] info [cpaneld] 177.33.86.72 - fastsolu "GET /login/?login_only=1&user=fastsolu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsolu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.157.81.215
country_id: 953987
description:
[2026-07-03 16:01:07 +0000] info [cpaneld] 41.157.81.215 - fa "GET /login/?login_only=1&user=fa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.181.31.75
country_id: 3469034
description:
[2026-07-03 16:01:04 +0000] info [cpaneld] 168.181.31.75 - fas "GET /login/?login_only=1&user=fas&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fas (has_cpuser_file failed)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 87.106.67.224
country_id: 2635167
domain: togosem.com
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.24||T:APACHE||MV:/wp-json/wp/v2/users?context=edit&per_page=100&_fields=slug||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 196.170.76.223
country_id: 2363686
description:
[2026-07-03 16:01:51 +0000] info [cpaneld] 196.170.76.223 NEW jvrzfkho:xGseiBMrXOmURbb9 address=196.170.76.223,app=cpaneld,creator=jvrzfkho,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [03/Jul/2026:16:02:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9859224&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783094546 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.71.9
country_id: 6252001
description:
[2026-07-03 16:02:55 +0000] info [cpaneld] 217.181.71.9 - mipbtgnb "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [03/Jul/2026:16:03:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9738855&pdata=https%253A%252F%252Ftogofarm.tg%252Ffr&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783094587 HTTP/2.0" 302 0 togofarm.tg "https://togofarm.tg/fr" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 16:03:54 +0000] info [cpaneld] 62.146.238.204 - wifizoneuser "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wifizoneuser (has_cpuser_file failed)


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[cpaneld] [Local IP Address]=[154.70.82.246] [Local Port]=[2083] [Remote IP Address]=[62.146.238.204] [Remote Port]=[53634] [Authentication Database]=[system] [Username]=[wifizoneuser] (1/30 failures) (blocked until [Sat Jul  4 16:03:54 2026 UTC/Sat Jul  4 16:03:54 2026 LOCAL])


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.51.11.52
country_id: 6252001
description:
[2026-07-03 16:06:31 +0000] info [whostmgrd] 98.51.11.52 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.177.21.104
country_id: 6251999
description:
[2026-07-03 16:08:10 +0000] info [cpaneld] 173.177.21.104 - lagorainfotg "GET /login/?login_only=1&user=lagorainfotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagorainfotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.162.122.133
country_id: 3996063
description:
[2026-07-03 16:08:16 +0000] info [cpaneld] 189.162.122.133 - lagorai "GET /login/?login_only=1&user=lagorai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagorai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.43.204.225
country_id: 3658394
description:
[2026-07-03 16:08:30 +0000] info [cpaneld] 186.43.204.225 - lago "GET /login/?login_only=1&user=lago&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lago (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.243.201.178
country_id: 3996063
description:
[2026-07-03 16:08:21 +0000] info [cpaneld] 187.243.201.178 - lagora "GET /login/?login_only=1&user=lagora&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagora (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.189.16.147
country_id: 3686110
description:
[2026-07-03 16:08:34 +0000] info [cpaneld] 181.189.16.147 - lag "GET /login/?login_only=1&user=lag&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lag (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.133.209.37
country_id: 6252001
description:
[2026-07-03 16:08:13 +0000] info [cpaneld] 195.133.209.37 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>suite aux pluies torrentielles des 29 et 30 juin 2026 et face aux d\xc3\xa9g\xc3\xa2ts engendr\xc3\xa9s, l\xe2\x80\x99ex\xc3\xa9cutif togolais maintient une alerte maximale. sous la coordination de la plateforme nationale de r\xc3\xa9duction des risques de catastrophes (pnrrc) et dans le cadre du plan orsec, l\xe2\x80\x99agence nationale de la protection civile (anpc) d\xc3\xa9ploie ses \xc3\xa9quipes 24h/24 \xc3\xa0 travers le centre national des op\xc3\xa9rations d'urgence (cnou) pour secourir les sinistr\xc3\xa9s et s\xc3\xa9curiser les zones touch\xc3\xa9es.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le bilan humain s'est malheureusement alourdi apr\xc3\xa8s le rep\xc3\xaachage d\xe2\x80\x99un corps sans vie au niveau du 4\xe1\xb5\x89 lac, portant \xc3\xa0 cinq (5) le nombre de d\xc3\xa9c\xc3\xa8s li\xc3\xa9s \xc3\xa0 ces intemp\xc3\xa9ries.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>op\xc3\xa9rations du 02 juillet 2026 : le point des interventions \xc3\xa0 lom\xc3\xa9</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les \xc3\xa9quipes de secours et les services techniques ont intensifi\xc3\xa9 leurs actions sur le terrain tout au long de la journ\xc3\xa9e du jeudi 2 juillet :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31879,\"width\":\"722px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/a2.jpg\" alt=\"\" class=\"wp-image-31879\" style=\"width:722px;height:auto\"/><figcaption class=\"wp-element-caption\"><em><strong>le ministre de la s\xc3\xa9curit\xc3\xa9 s'entretenant avec les \xc3\xa9quipes techniques </strong></em></figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>- pompage et aspiration des eaux : les op\xc3\xa9rations se poursuivent activement au bassin de togo 2000, \xc3\xa0 sanguera dangbessito, ainsi que dans les quartiers de l\xc3\xa9gbassito, av\xc3\xa9nou, belgique et mdn.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- s\xc3\xa9curisation et salubrit\xc3\xa9 : un immeuble mena\xc3\xa7ant de s'effondrer dans le secteur de m\xc3\xa8che amina a \xc3\xa9t\xc3\xa9 s\xc3\xa9curis\xc3\xa9. par ailleurs, le retrait des jacinthes d\xe2\x80\x99eau sur le lac de b\xc3\xa8, le nettoyage des voies et l'\xc3\xa9lagage sur le boulevard eyadema (c\xc3\xb4t\xc3\xa9 est) se poursuivent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- renfort mat\xc3\xa9riel majeur<strong> :</strong> la logistique a \xc3\xa9t\xc3\xa9 consid\xc3\xa9rablement renforc\xc3\xa9e gr\xc3\xa2ce \xc3\xa0 la mise \xc3\xa0 disposition de 4 camions spiros et 50 camions benne (par sara group), ainsi que 4 pompes \xc3\xa0 pilotage par cabine install\xc3\xa9es \xc3\xa0 tokoin tam\xc3\xa9 (par la soci\xc3\xa9t\xc3\xa9 bessac). le syst\xc3\xa8me de pompage d\xe2\x80\x99awatam\xc3\xa9 a \xc3\xa9galement \xc3\xa9t\xc3\xa9 raccord\xc3\xa9 au r\xc3\xa9seau \xc3\xa9lectrique de la ceet.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle sur le terrain \xc3\xa0 l'int\xc3\xa9rieur du pays</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour \xc3\xa9valuer l'\xc3\xa9tendue des d\xc3\xa9g\xc3\xa2ts hors de la capitale, une importante d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle s'est rendue, le jeudi 2 juillet, \xc3\xa0 vogan, adjodogou, anfoin, am\xc3\xa9gnran et ts\xc3\xa9vi\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette d\xc3\xa9l\xc3\xa9gation \xc3\xa9tait compos\xc3\xa9e des ministres s\xc3\xa9von-t\xc3\xa9p\xc3\xa9 kodjo ad\xc3\xa9dz\xc3\xa9, jean-marie tessi, et sani yaya, en charge respectivement de l\xe2\x80\x99am\xc3\xa9nagement du territoire et de l\xe2\x80\x99urbanisme ; de la sant\xc3\xa9, de l\xe2\x80\x99hygi\xc3\xa8ne publique et de la couverture sanitaire universelle ; et des travaux publics et des infrastructures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle ainspect\xc3\xa9 les ponts de boko et d'anfoin, ainsi que la d\xc3\xa9pression de dzrekpo. l'objectif est de d\xc3\xa9finir des mesures d'urgence pour r\xc3\xa9tablir rapidement la circulationsur la route nationale 34 (rn34). lors de chaque \xc3\xa9tape, la d\xc3\xa9l\xc3\xa9gation a apport\xc3\xa9 le message de solidarit\xc3\xa9 et de compassion du gouvernement aux populations sinistr\xc3\xa9es.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mesures de surveillance et pr\xc3\xa9visions m\xc3\xa9t\xc3\xa9o : appel \xc3\xa0 la vigilance</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>bien que les pluies se soient calm\xc3\xa9es sur le littoral, la vigilance reste de mise. des orages localis\xc3\xa9s sont attendus en soir\xc3\xa9e dans les r\xc3\xa9gions maritime, plateaux, centrale et kara.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>face aux risques persistants (d\xc3\xa9bordements de cours d'eau, effondrements d'habitations fragiles, chutes d'arbres et maladies hydriques), le gouvernement a renforc\xc3\xa9 ses mesures de s\xc3\xa9curit\xc3\xa9, notamment la surveillance hydrom\xc3\xa9t\xc3\xa9orologique permanente des stations hydrologiques, les patrouilles et rondes continues des forces de d\xc3\xa9fense et de s\xc3\xa9curit\xc3\xa9 dans les zones \xc3\xa0 risque, et la r\xc3\xa9gulation du trafic et mise en place de d\xc3\xa9viations routi\xc3\xa8res.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>un appel est lanc\xc3\xa9 \xc3\xa0 l'ensemble des populations \xc3\xa0 la plus grande prudence, \xc3\xa0 \xc3\xa9viter absolument les zones inond\xc3\xa9es et \xc3\xa0 respecter scrupuleusement les consignes de s\xc3\xa9curit\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>num\xc3\xa9ros verts d'urgence \xc3\xa0 composer (appels gratuits)</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en cas de situation critique ou d'inondation, contactez imm\xc3\xa9diatement les secours aux num\xc3\xa9ros suivants : <strong>170 \xe2\x80\x93 118 \xe2\x80\x93 1014 \xe2\x80\x93 1244 \xe2\x80\x93 171 \xe2\x80\x93 172.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mab\xc3\xa9 b.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.23.2.117
country_id: 3469034
description:
[2026-07-03 16:08:27 +0000] info [cpaneld] 177.23.2.117 - lagor "GET /login/?login_only=1&user=lagor&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagor (has_cpuser_file failed)


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 62.146.238.204
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[whostmgrd] [Local IP Address]=[154.70.82.246] [Local Port]=[2087] [Remote IP Address]=[62.146.238.204] [Remote Port]=[57332] [Authentication Database]=[system] [Username]=[stephanetg] (1/30 failures) (blocked until [Sat Jul  4 16:09:59 2026 UTC/Sat Jul  4 16:09:59 2026 LOCAL])


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 91.92.120.78
country_id: 732800
description:
2026-07-03 16:09:15 H=([91.92.120.78]) [91.92.120.78]:50538 X=TLS1.3:TLS_AES_256_GCM_SHA384:256 F=<contact@sthandling-aero.tg> rejected RCPT <contact@sthandling-aero.tg>: Sender verify failed


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>suite aux pluies torrentielles des 29 et 30 juin 2026 et face aux d\xc3\xa9g\xc3\xa2ts engendr\xc3\xa9s, l\xe2\x80\x99ex\xc3\xa9cutif togolais maintient une alerte maximale. sous la coordination de la plateforme nationale de r\xc3\xa9duction des risques de catastrophes (pnrrc) et dans le cadre du plan orsec, l\xe2\x80\x99agence nationale de la protection civile (anpc) d\xc3\xa9ploie ses \xc3\xa9quipes 24h/24 \xc3\xa0 travers le centre national des op\xc3\xa9rations d'urgence (cnou) pour secourir les sinistr\xc3\xa9s et s\xc3\xa9curiser les zones touch\xc3\xa9es.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le bilan humain s'est malheureusement alourdi apr\xc3\xa8s le rep\xc3\xaachage d\xe2\x80\x99un corps sans vie au niveau du 4\xe1\xb5\x89 lac, portant \xc3\xa0 cinq (5) le nombre de d\xc3\xa9c\xc3\xa8s li\xc3\xa9s \xc3\xa0 ces intemp\xc3\xa9ries.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>op\xc3\xa9rations du 02 juillet 2026 : le point des interventions \xc3\xa0 lom\xc3\xa9</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les \xc3\xa9quipes de secours et les services techniques ont intensifi\xc3\xa9 leurs actions sur le terrain tout au long de la journ\xc3\xa9e du jeudi 2 juillet :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31879,\"width\":\"722px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/a2.jpg\" alt=\"\" class=\"wp-image-31879\" style=\"width:722px;height:auto\"/><figcaption class=\"wp-element-caption\"><em><strong>le ministre de la s\xc3\xa9curit\xc3\xa9 s'entretenant avec les \xc3\xa9quipes techniques </strong></em></figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>- pompage et aspiration des eaux : les op\xc3\xa9rations se poursuivent activement au bassin de togo 2000, \xc3\xa0 sanguera dangbessito, ainsi que dans les quartiers de l\xc3\xa9gbassito, av\xc3\xa9nou, belgique et mdn.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- s\xc3\xa9curisation et salubrit\xc3\xa9 : un immeuble mena\xc3\xa7ant de s'effondrer dans le secteur de m\xc3\xa8che amina a \xc3\xa9t\xc3\xa9 s\xc3\xa9curis\xc3\xa9. par ailleurs, le retrait des jacinthes d\xe2\x80\x99eau sur le lac de b\xc3\xa8, le nettoyage des voies et l'\xc3\xa9lagage sur le boulevard eyadema (c\xc3\xb4t\xc3\xa9 est) se poursuivent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- renfort mat\xc3\xa9riel majeur<strong> :</strong> la logistique a \xc3\xa9t\xc3\xa9 consid\xc3\xa9rablement renforc\xc3\xa9e gr\xc3\xa2ce \xc3\xa0 la mise \xc3\xa0 disposition de 4 camions spiros et 50 camions benne (par sara group), ainsi que 4 pompes \xc3\xa0 pilotage par cabine install\xc3\xa9es \xc3\xa0 tokoin tam\xc3\xa9 (par la soci\xc3\xa9t\xc3\xa9 bessac). le syst\xc3\xa8me de pompage d\xe2\x80\x99awatam\xc3\xa9 a \xc3\xa9galement \xc3\xa9t\xc3\xa9 raccord\xc3\xa9 au r\xc3\xa9seau \xc3\xa9lectrique de la ceet.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle sur le terrain \xc3\xa0 l'int\xc3\xa9rieur du pays</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour \xc3\xa9valuer l'\xc3\xa9tendue des d\xc3\xa9g\xc3\xa2ts hors de la capitale, une importante d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle s'est rendue, le jeudi 2 juillet, \xc3\xa0 vogan, adjodogou, anfoin, am\xc3\xa9gnran et ts\xc3\xa9vi\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette d\xc3\xa9l\xc3\xa9gation \xc3\xa9tait compos\xc3\xa9e des ministres s\xc3\xa9von-t\xc3\xa9p\xc3\xa9 kodjo ad\xc3\xa9dz\xc3\xa9, jean-marie tessi, et sani yaya, en charge respectivement de l\xe2\x80\x99am\xc3\xa9nagement du territoire et de l\xe2\x80\x99urbanisme ; de la sant\xc3\xa9, de l\xe2\x80\x99hygi\xc3\xa8ne publique et de la couverture sanitaire universelle ; et des travaux publics et des infrastructures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle ainspect\xc3\xa9 les ponts de boko et d'anfoin, ainsi que la d\xc3\xa9pression de dzrekpo. l'objectif est de d\xc3\xa9finir des mesures d'urgence pour r\xc3\xa9tablir rapidement la circulationsur la route nationale 34 (rn34). lors de chaque \xc3\xa9tape, la d\xc3\xa9l\xc3\xa9gation a apport\xc3\xa9 le message de solidarit\xc3\xa9 et de compassion du gouvernement aux populations sinistr\xc3\xa9es.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31880,\"width\":\"603px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/a1.jpg\" alt=\"\" class=\"wp-image-31880\" style=\"width:603px;height:auto\"/><figcaption class=\"wp-element-caption\"><em><strong>la d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle sur le terrain pour constater les d\xc3\xa9g\xc3\xa2ts et apporter son soutien aux populations</strong></em></figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>mesures de surveillance et pr\xc3\xa9visions m\xc3\xa9t\xc3\xa9o : appel \xc3\xa0 la vigilance</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>bien que les pluies se soient calm\xc3\xa9es sur le littoral, la vigilance reste de mise. des orages localis\xc3\xa9s sont attendus en soir\xc3\xa9e dans les r\xc3\xa9gions maritime, plateaux, centrale et kara.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>face aux risques persistants (d\xc3\xa9bordements de cours d'eau, effondrements d'habitations fragiles, chutes d'arbres et maladies hydriques), le gouvernement a renforc\xc3\xa9 ses mesures de s\xc3\xa9curit\xc3\xa9, notamment la surveillance hydrom\xc3\xa9t\xc3\xa9orologique permanente des stations hydrologiques, les patrouilles et rondes continues des forces de d\xc3\xa9fense et de s\xc3\xa9curit\xc3\xa9 dans les zones \xc3\xa0 risque, et la r\xc3\xa9gulation du trafic et mise en place de d\xc3\xa9viations routi\xc3\xa8res.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>un appel est lanc\xc3\xa9 \xc3\xa0 l'ensemble des populations \xc3\xa0 la plus grande prudence, \xc3\xa0 \xc3\xa9viter absolument les zones inond\xc3\xa9es et \xc3\xa0 respecter scrupuleusement les consignes de s\xc3\xa9curit\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>num\xc3\xa9ros verts d'urgence \xc3\xa0 composer (appels gratuits)</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en cas de situation critique ou d'inondation, contactez imm\xc3\xa9diatement les secours aux num\xc3\xa9ros suivants : <strong>170 \xe2\x80\x93 118 \xe2\x80\x93 1014 \xe2\x80\x93 1244 \xe2\x80\x93 171 \xe2\x80\x93 172.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mab\xc3\xa9 b.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.146.238.204
country_id: 1880251
description:
[2026-07-03 16:09:59 +0000] info [whostmgrd] 62.146.238.204 - stephanetg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: brute force attempt (user stephanetg) has locked out IP 62.146.238.204


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.82.52.23
country_id: 1814991
description:
2026-07-03 16:09:23 dovecot_plain authenticator failed for H=(xmkk3zdg8zvn4y9hl9phoz0j1) [49.82.52.23]:50916: 535 Incorrect authentication data (set_id=realestate@confortis.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>suite aux pluies torrentielles des 29 et 30 juin 2026 et face aux d\xc3\xa9g\xc3\xa2ts engendr\xc3\xa9s, l\xe2\x80\x99ex\xc3\xa9cutif togolais maintient une alerte maximale. sous la coordination de la plateforme nationale de r\xc3\xa9duction des risques de catastrophes (pnrrc) et dans le cadre du plan orsec, l\xe2\x80\x99agence nationale de la protection civile (anpc) d\xc3\xa9ploie ses \xc3\xa9quipes 24h/24 \xc3\xa0 travers le centre national des op\xc3\xa9rations d'urgence (cnou) pour secourir les sinistr\xc3\xa9s et s\xc3\xa9curiser les zones touch\xc3\xa9es.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le bilan humain s'est malheureusement alourdi apr\xc3\xa8s le rep\xc3\xaachage d\xe2\x80\x99un corps sans vie au niveau du 4\xe1\xb5\x89 lac, portant \xc3\xa0 cinq (5) le nombre de d\xc3\xa9c\xc3\xa8s li\xc3\xa9s \xc3\xa0 ces intemp\xc3\xa9ries.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>op\xc3\xa9rations du 02 juillet 2026 : le point des interventions \xc3\xa0 lom\xc3\xa9</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les \xc3\xa9quipes de secours et les services techniques ont intensifi\xc3\xa9 leurs actions sur le terrain tout au long de la journ\xc3\xa9e du jeudi 2 juillet :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31879,\"width\":\"722px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/a2.jpg\" alt=\"\" class=\"wp-image-31879\" style=\"width:722px;height:auto\"/><figcaption class=\"wp-element-caption\"><em><strong>le ministre de la s\xc3\xa9curit\xc3\xa9 s'entretenant avec les \xc3\xa9quipes techniques </strong></em></figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>- pompage et aspiration des eaux : les op\xc3\xa9rations se poursuivent activement au bassin de togo 2000, \xc3\xa0 sanguera dangbessito, ainsi que dans les quartiers de l\xc3\xa9gbassito, av\xc3\xa9nou, belgique et mdn.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- s\xc3\xa9curisation et salubrit\xc3\xa9 : un immeuble mena\xc3\xa7ant de s'effondrer dans le secteur de m\xc3\xa8che amina a \xc3\xa9t\xc3\xa9 s\xc3\xa9curis\xc3\xa9. par ailleurs, le retrait des jacinthes d\xe2\x80\x99eau sur le lac de b\xc3\xa8, le nettoyage des voies et l'\xc3\xa9lagage sur le boulevard eyadema (c\xc3\xb4t\xc3\xa9 est) se poursuivent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- renfort mat\xc3\xa9riel majeur<strong> :</strong> la logistique a \xc3\xa9t\xc3\xa9 consid\xc3\xa9rablement renforc\xc3\xa9e gr\xc3\xa2ce \xc3\xa0 la mise \xc3\xa0 disposition de 4 camions spiros et 50 camions benne (par sara group), ainsi que 4 pompes \xc3\xa0 pilotage par cabine install\xc3\xa9es \xc3\xa0 tokoin tam\xc3\xa9 (par la soci\xc3\xa9t\xc3\xa9 bessac). le syst\xc3\xa8me de pompage d\xe2\x80\x99awatam\xc3\xa9 a \xc3\xa9galement \xc3\xa9t\xc3\xa9 raccord\xc3\xa9 au r\xc3\xa9seau \xc3\xa9lectrique de la ceet.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle sur le terrain \xc3\xa0 l'int\xc3\xa9rieur du pays</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour \xc3\xa9valuer l'\xc3\xa9tendue des d\xc3\xa9g\xc3\xa2ts hors de la capitale, une importante d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle s'est rendue, le jeudi 2 juillet, \xc3\xa0 vogan, adjodogou, anfoin, am\xc3\xa9gnran et ts\xc3\xa9vi\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette d\xc3\xa9l\xc3\xa9gation \xc3\xa9tait compos\xc3\xa9e des ministres s\xc3\xa9von-t\xc3\xa9p\xc3\xa9 kodjo ad\xc3\xa9dz\xc3\xa9, jean-marie tessi, et sani yaya, en charge respectivement de l\xe2\x80\x99am\xc3\xa9nagement du territoire et de l\xe2\x80\x99urbanisme ; de la sant\xc3\xa9, de l\xe2\x80\x99hygi\xc3\xa8ne publique et de la couverture sanitaire universelle ; et des travaux publics et des infrastructures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle ainspect\xc3\xa9 les ponts de boko et d'anfoin, ainsi que la d\xc3\xa9pression de dzrekpo. l'objectif est de d\xc3\xa9finir des mesures d'urgence pour r\xc3\xa9tablir rapidement la circulationsur la route nationale 34 (rn34). lors de chaque \xc3\xa9tape, la d\xc3\xa9l\xc3\xa9gation a apport\xc3\xa9 le message de solidarit\xc3\xa9 et de compassion du gouvernement aux populations sinistr\xc3\xa9es.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31880,\"width\":\"603px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/a1.jpg\" alt=\"\" class=\"wp-image-31880\" style=\"width:603px;height:auto\"/><figcaption class=\"wp-element-caption\"><em><strong>la d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle sur le terrain pour constater les d\xc3\xa9g\xc3\xa2ts et apporter son soutien aux populations</strong></em></figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>mesures de surveillance et pr\xc3\xa9visions m\xc3\xa9t\xc3\xa9o : appel \xc3\xa0 la vigilance</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>bien que les pluies se soient calm\xc3\xa9es sur le littoral, la vigilance reste de mise. des orages localis\xc3\xa9s sont attendus en soir\xc3\xa9e dans les r\xc3\xa9gions maritime, plateaux, centrale et kara.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>face aux risques persistants (d\xc3\xa9bordements de cours d'eau, effondrements d'habitations fragiles, chutes d'arbres et maladies hydriques), le gouvernement a renforc\xc3\xa9 ses mesures de s\xc3\xa9curit\xc3\xa9, notamment la surveillance hydrom\xc3\xa9t\xc3\xa9orologique permanente des stations hydrologiques, les patrouilles et rondes continues des forces de d\xc3\xa9fense et de s\xc3\xa9curit\xc3\xa9 dans les zones \xc3\xa0 risque, et la r\xc3\xa9gulation du trafic et mise en place de d\xc3\xa9viations routi\xc3\xa8res.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>un appel est lanc\xc3\xa9 \xc3\xa0 l'ensemble des populations \xc3\xa0 la plus grande prudence, \xc3\xa0 \xc3\xa9viter absolument les zones inond\xc3\xa9es et \xc3\xa0 respecter scrupuleusement les consignes de s\xc3\xa9curit\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>num\xc3\xa9ros verts d'urgence \xc3\xa0 composer (appels gratuits)</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en cas de situation critique ou d'inondation, contactez imm\xc3\xa9diatement les secours aux num\xc3\xa9ros suivants : <strong>170 \xe2\x80\x93 118 \xe2\x80\x93 1014 \xe2\x80\x93 1244 \xe2\x80\x93 171 \xe2\x80\x93 172.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mab\xc3\xa9 b.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.249.98.39
country_id: 3469034
description:
[2026-07-03 16:11:21 +0000] info [cpaneld] 186.249.98.39 - mediato "GET /login/?login_only=1&user=mediato&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediato (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.82.186.136
country_id: 1605651
description:
[2026-07-03 16:11:25 +0000] info [cpaneld] 184.82.186.136 - mediat "GET /login/?login_only=1&user=mediat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.55.225.70
country_id: 3469034
description:
[2026-07-03 16:11:28 +0000] info [cpaneld] 177.55.225.70 - media "GET /login/?login_only=1&user=media&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user media (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.36.97.213
country_id: 3865483
description:
[2026-07-03 16:11:39 +0000] info [cpaneld] 179.36.97.213 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.253.102.130
country_id: 2017370
description:
[2026-07-03 16:11:07 +0000] info [cpaneld] 94.253.102.130 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 151.249.173.224
country_id: 630336
description:
[2026-07-03 16:11:17 +0000] info [cpaneld] 151.249.173.224 - mediatop "GET /login/?login_only=1&user=mediatop&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatop (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.14.140.85
country_id: 3595528
description:
[2026-07-03 16:11:37 +0000] info [cpaneld] 190.14.140.85 - med "GET /login/?login_only=1&user=med&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user med (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.107.67.90
country_id: 3469034
domain: sthandling-aero.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/sthandling-aero.tg/?p=12365 HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.230.146.97
country_id: 3469034
description:
[2026-07-03 16:15:27 +0000] info [cpaneld] 45.230.146.97 - fbafricacom "GET /login/?login_only=1&user=fbafricacom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafricacom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.250.255.178
country_id: 1282988
description:
[2026-07-03 16:15:34 +0000] info [cpaneld] 160.250.255.178 - fbafric "GET /login/?login_only=1&user=fbafric&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafric (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.226.231.7
country_id: 2017370
description:
[2026-07-03 16:15:50 +0000] info [cpaneld] 176.226.231.7 - fba "GET /login/?login_only=1&user=fba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fba (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.22.181.151
country_id: 3469034
description:
[2026-07-03 16:15:42 +0000] info [cpaneld] 177.22.181.151 - fbafr "GET /login/?login_only=1&user=fbafr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.160.88.179
country_id: 3469034
description:
[2026-07-03 16:15:20 +0000] info [cpaneld] 45.160.88.179 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.141.88.205
country_id: 2542007
description:
[2026-07-03 16:15:37 +0000] info [cpaneld] 41.141.88.205 - fbafri "GET /login/?login_only=1&user=fbafri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.180
country_id: 2635167
description:
[2026-07-03 16:15:45 +0000] info [cpaneld] 5.230.153.180 - camaegdtomgo "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.121.109.222
country_id: 3469034
description:
[2026-07-03 16:15:46 +0000] info [cpaneld] 189.121.109.222 - fbaf "GET /login/?login_only=1&user=fbaf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbaf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.20.161.33
country_id: 3469034
description:
[2026-07-03 16:16:14 +0000] info [cpaneld] 160.20.161.33 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 90.113.73.181
country_id: 3017382
description:
[2026-07-03 16:16:16 +0000] info [cpaneld] 90.113.73.181 - arse "GET /login/?login_only=1&user=arse&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user arse (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.152.1.30
country_id: 3469034
description:
[2026-07-03 16:16:28 +0000] info [cpaneld] 200.152.1.30 - ar "GET /login/?login_only=1&user=ar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ar (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 144.124.196.63
country_id: 1512440
domain: togomedia24.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togomedia24.tg/2022/11/30/telecommunications-une-greve-de-deux-jours-annoncee-a-togocom/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.159.146.71
country_id: 3469034
description:
[2026-07-03 16:16:25 +0000] info [cpaneld] 201.159.146.71 - ars "GET /login/?login_only=1&user=ars&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ars (has_cpuser_file failed)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>suite aux pluies torrentielles des 29 et 30 juin 2026 et face aux d\xc3\xa9g\xc3\xa2ts engendr\xc3\xa9s, l\xe2\x80\x99ex\xc3\xa9cutif togolais maintient une alerte maximale. sous la coordination de la plateforme nationale de r\xc3\xa9duction des risques de catastrophes (pnrrc) et dans le cadre du plan orsec, l\xe2\x80\x99agence nationale de la protection civile (anpc) d\xc3\xa9ploie ses \xc3\xa9quipes 24h/24 \xc3\xa0 travers le centre national des op\xc3\xa9rations d'urgence (cnou) pour secourir les sinistr\xc3\xa9s et s\xc3\xa9curiser les zones touch\xc3\xa9es.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le bilan humain s'est malheureusement alourdi apr\xc3\xa8s le rep\xc3\xaachage d\xe2\x80\x99un corps sans vie au niveau du 4\xe1\xb5\x89 lac, portant \xc3\xa0 cinq (5) le nombre de d\xc3\xa9c\xc3\xa8s li\xc3\xa9s \xc3\xa0 ces intemp\xc3\xa9ries.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>op\xc3\xa9rations du 02 juillet 2026 : le point des interventions \xc3\xa0 lom\xc3\xa9</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les \xc3\xa9quipes de secours et les services techniques ont intensifi\xc3\xa9 leurs actions sur le terrain tout au long de la journ\xc3\xa9e du jeudi 2 juillet :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31879,\"width\":\"722px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/a2.jpg\" alt=\"\" class=\"wp-image-31879\" style=\"width:722px;height:auto\"/><figcaption class=\"wp-element-caption\"><em><strong>le ministre de la s\xc3\xa9curit\xc3\xa9 s'entretenant avec les \xc3\xa9quipes techniques </strong></em></figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>- pompage et aspiration des eaux : les op\xc3\xa9rations se poursuivent activement au bassin de togo 2000, \xc3\xa0 sanguera dangbessito, ainsi que dans les quartiers de l\xc3\xa9gbassito, av\xc3\xa9nou, belgique et mdn.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- s\xc3\xa9curisation et salubrit\xc3\xa9 : un immeuble mena\xc3\xa7ant de s'effondrer dans le secteur de m\xc3\xa8che amina a \xc3\xa9t\xc3\xa9 s\xc3\xa9curis\xc3\xa9. par ailleurs, le retrait des jacinthes d\xe2\x80\x99eau sur le lac de b\xc3\xa8, le nettoyage des voies et l'\xc3\xa9lagage sur le boulevard eyadema (c\xc3\xb4t\xc3\xa9 est) se poursuivent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- renfort mat\xc3\xa9riel majeur<strong> :</strong> la logistique a \xc3\xa9t\xc3\xa9 consid\xc3\xa9rablement renforc\xc3\xa9e gr\xc3\xa2ce \xc3\xa0 la mise \xc3\xa0 disposition de 4 camions spiros et 50 camions benne (par sara group), ainsi que 4 pompes \xc3\xa0 pilotage par cabine install\xc3\xa9es \xc3\xa0 tokoin tam\xc3\xa9 (par la soci\xc3\xa9t\xc3\xa9 bessac). le syst\xc3\xa8me de pompage d\xe2\x80\x99awatam\xc3\xa9 a \xc3\xa9galement \xc3\xa9t\xc3\xa9 raccord\xc3\xa9 au r\xc3\xa9seau \xc3\xa9lectrique de la ceet.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle sur le terrain \xc3\xa0 l'int\xc3\xa9rieur du pays</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour \xc3\xa9valuer l'\xc3\xa9tendue des d\xc3\xa9g\xc3\xa2ts hors de la capitale, une importante d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle s'est rendue, le jeudi 2 juillet, \xc3\xa0 vogan, adjodogou, anfoin, am\xc3\xa9gnran et ts\xc3\xa9vi\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette d\xc3\xa9l\xc3\xa9gation \xc3\xa9tait compos\xc3\xa9e des ministres s\xc3\xa9von-t\xc3\xa9p\xc3\xa9 kodjo ad\xc3\xa9dz\xc3\xa9, jean-marie tessi, et sani yaya, en charge respectivement de l\xe2\x80\x99am\xc3\xa9nagement du territoire et de l\xe2\x80\x99urbanisme ; de la sant\xc3\xa9, de l\xe2\x80\x99hygi\xc3\xa8ne publique et de la couverture sanitaire universelle ; et des travaux publics et des infrastructures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31880,\"width\":\"697px\",\"height\":\"auto\",\"aspectratio\":\"1.5015173916426736\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/a1.jpg\" alt=\"\" class=\"wp-image-31880\" style=\"aspect-ratio:1.5015173916426736;width:697px;height:auto\"/><figcaption class=\"wp-element-caption\"><em><strong>la d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle sur le terrain pour constater les d\xc3\xa9g\xc3\xa2ts et apporter son soutien aux populations</strong></em></figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>la d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle ainspect\xc3\xa9 les ponts de boko et d'anfoin, ainsi que la d\xc3\xa9pression de dzrekpo. l'objectif est de d\xc3\xa9finir des mesures d'urgence pour r\xc3\xa9tablir rapidement la circulationsur la route nationale 34 (rn34). lors de chaque \xc3\xa9tape, la d\xc3\xa9l\xc3\xa9gation a apport\xc3\xa9 le message de solidarit\xc3\xa9 et de compassion du gouvernement aux populations sinistr\xc3\xa9es.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mesures de surveillance et pr\xc3\xa9visions m\xc3\xa9t\xc3\xa9o : appel \xc3\xa0 la vigilance</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>bien que les pluies se soient calm\xc3\xa9es sur le littoral, la vigilance reste de mise. des orages localis\xc3\xa9s sont attendus en soir\xc3\xa9e dans les r\xc3\xa9gions maritime, plateaux, centrale et kara.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>face aux risques persistants (d\xc3\xa9bordements de cours d'eau, effondrements d'habitations fragiles, chutes d'arbres et maladies hydriques), le gouvernement a renforc\xc3\xa9 ses mesures de s\xc3\xa9curit\xc3\xa9, notamment la surveillance hydrom\xc3\xa9t\xc3\xa9orologique permanente des stations hydrologiques, les patrouilles et rondes continues des forces de d\xc3\xa9fense et de s\xc3\xa9curit\xc3\xa9 dans les zones \xc3\xa0 risque, et la r\xc3\xa9gulation du trafic et mise en place de d\xc3\xa9viations routi\xc3\xa8res.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>un appel est lanc\xc3\xa9 \xc3\xa0 l'ensemble des populations \xc3\xa0 la plus grande prudence, \xc3\xa0 \xc3\xa9viter absolument les zones inond\xc3\xa9es et \xc3\xa0 respecter scrupuleusement les consignes de s\xc3\xa9curit\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>num\xc3\xa9ros verts d'urgence \xc3\xa0 composer (appels gratuits)</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en cas de situation critique ou d'inondation, contactez imm\xc3\xa9diatement les secours aux num\xc3\xa9ros suivants : <strong>170 \xe2\x80\x93 118 \xe2\x80\x93 1014 \xe2\x80\x93 1244 \xe2\x80\x93 171 \xe2\x80\x93 172.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mab\xc3\xa9 b.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 213.230.72.53
country_id: 1512440
domain: sthandling-aero.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/sthandling-aero.tg/?p=12563 HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.24.28.141
country_id: 2017370
description:
[2026-07-03 16:20:16 +0000] info [cpaneld] 95.24.28.141 - abttogo "GET /login/?login_only=1&user=abttogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>suite aux pluies torrentielles des 29 et 30 juin 2026 et face aux d\xc3\xa9g\xc3\xa2ts engendr\xc3\xa9s, l\xe2\x80\x99ex\xc3\xa9cutif togolais maintient une alerte maximale. sous la coordination de la plateforme nationale de r\xc3\xa9duction des risques de catastrophes (pnrrc) et dans le cadre du plan orsec, l\xe2\x80\x99agence nationale de la protection civile (anpc) d\xc3\xa9ploie ses \xc3\xa9quipes 24h/24 \xc3\xa0 travers le centre national des op\xc3\xa9rations d'urgence (cnou) pour secourir les sinistr\xc3\xa9s et s\xc3\xa9curiser les zones touch\xc3\xa9es.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le bilan humain s'est malheureusement alourdi apr\xc3\xa8s le rep\xc3\xaachage d\xe2\x80\x99un corps sans vie au niveau du 4\xe1\xb5\x89 lac, portant \xc3\xa0 cinq (5) le nombre de d\xc3\xa9c\xc3\xa8s li\xc3\xa9s \xc3\xa0 ces intemp\xc3\xa9ries.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>op\xc3\xa9rations du 02 juillet 2026 : le point des interventions \xc3\xa0 lom\xc3\xa9</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les \xc3\xa9quipes de secours et les services techniques ont intensifi\xc3\xa9 leurs actions sur le terrain tout au long de la journ\xc3\xa9e du jeudi 2 juillet :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31879,\"width\":\"722px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/a2.jpg\" alt=\"\" class=\"wp-image-31879\" style=\"width:722px;height:auto\"/><figcaption class=\"wp-element-caption\"><em><strong>le ministre de la s\xc3\xa9curit\xc3\xa9 s'entretenant avec les \xc3\xa9quipes techniques </strong></em></figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>- pompage et aspiration des eaux : les op\xc3\xa9rations se poursuivent activement au bassin de togo 2000, \xc3\xa0 sanguera dangbessito, ainsi que dans les quartiers de l\xc3\xa9gbassito, av\xc3\xa9nou, belgique et mdn.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- s\xc3\xa9curisation et salubrit\xc3\xa9 : un immeuble mena\xc3\xa7ant de s'effondrer dans le secteur de m\xc3\xa8che amina a \xc3\xa9t\xc3\xa9 s\xc3\xa9curis\xc3\xa9. par ailleurs, le retrait des jacinthes d\xe2\x80\x99eau sur le lac de b\xc3\xa8, le nettoyage des voies et l'\xc3\xa9lagage sur le boulevard eyadema (c\xc3\xb4t\xc3\xa9 est) se poursuivent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- renfort mat\xc3\xa9riel majeur<strong> :</strong> la logistique a \xc3\xa9t\xc3\xa9 consid\xc3\xa9rablement renforc\xc3\xa9e gr\xc3\xa2ce \xc3\xa0 la mise \xc3\xa0 disposition de 4 camions spiros et 50 camions benne (par sara group), ainsi que 4 pompes \xc3\xa0 pilotage par cabine install\xc3\xa9es \xc3\xa0 tokoin tam\xc3\xa9 (par la soci\xc3\xa9t\xc3\xa9 bessac). le syst\xc3\xa8me de pompage d\xe2\x80\x99awatam\xc3\xa9 a \xc3\xa9galement \xc3\xa9t\xc3\xa9 raccord\xc3\xa9 au r\xc3\xa9seau \xc3\xa9lectrique de la ceet.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>une d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle sur le terrain \xc3\xa0 l'int\xc3\xa9rieur du pays</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour \xc3\xa9valuer l'\xc3\xa9tendue des d\xc3\xa9g\xc3\xa2ts hors de la capitale, une importante d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle s'est rendue, le jeudi 2 juillet, \xc3\xa0 vogan, adjodogou, anfoin, am\xc3\xa9gnran et ts\xc3\xa9vi\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette d\xc3\xa9l\xc3\xa9gation \xc3\xa9tait compos\xc3\xa9e des ministres s\xc3\xa9von-t\xc3\xa9p\xc3\xa9 kodjo ad\xc3\xa9dz\xc3\xa9, jean-marie tessi, et sani yaya, en charge respectivement de l\xe2\x80\x99am\xc3\xa9nagement du territoire et de l\xe2\x80\x99urbanisme ; de la sant\xc3\xa9, de l\xe2\x80\x99hygi\xc3\xa8ne publique et de la couverture sanitaire universelle ; et des travaux publics et des infrastructures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31880,\"width\":\"697px\",\"height\":\"auto\",\"aspectratio\":\"1.5015173916426736\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/a1.jpg\" alt=\"\" class=\"wp-image-31880\" style=\"aspect-ratio:1.5015173916426736;width:697px;height:auto\"/><figcaption class=\"wp-element-caption\"><em><strong>la d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle sur le terrain pour constater les d\xc3\xa9g\xc3\xa2ts et apporter son soutien aux populations</strong></em></figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>la d\xc3\xa9l\xc3\xa9gation minist\xc3\xa9rielle ainspect\xc3\xa9 les ponts de boko et d'anfoin, ainsi que la d\xc3\xa9pression de dzrekpo. l'objectif est de d\xc3\xa9finir des mesures d'urgence pour r\xc3\xa9tablir rapidement la circulationsur la route nationale 34 (rn34). lors de chaque \xc3\xa9tape, la d\xc3\xa9l\xc3\xa9gation a apport\xc3\xa9 le message de solidarit\xc3\xa9 et de compassion du gouvernement aux populations sinistr\xc3\xa9es.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mesures de surveillance et pr\xc3\xa9visions m\xc3\xa9t\xc3\xa9o : appel \xc3\xa0 la vigilance</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>bien que les pluies se soient calm\xc3\xa9es sur le littoral, la vigilance reste de mise. des orages localis\xc3\xa9s sont attendus en soir\xc3\xa9e dans les r\xc3\xa9gions maritime, plateaux, centrale et kara.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>face aux risques persistants (d\xc3\xa9bordements de cours d'eau, effondrements d'habitations fragiles, chutes d'arbres et maladies hydriques), le gouvernement a renforc\xc3\xa9 ses mesures de s\xc3\xa9curit\xc3\xa9, notamment la surveillance hydrom\xc3\xa9t\xc3\xa9orologique permanente des stations hydrologiques, les patrouilles et rondes continues des forces de d\xc3\xa9fense et de s\xc3\xa9curit\xc3\xa9 dans les zones \xc3\xa0 risque, et la r\xc3\xa9gulation du trafic et mise en place de d\xc3\xa9viations routi\xc3\xa8res.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31882,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/aaz.jpg\" alt=\"\" class=\"wp-image-31882\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>un appel est lanc\xc3\xa9 \xc3\xa0 l'ensemble des populations \xc3\xa0 la plus grande prudence, \xc3\xa0 \xc3\xa9viter absolument les zones inond\xc3\xa9es et \xc3\xa0 respecter scrupuleusement les consignes de s\xc3\xa9curit\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>num\xc3\xa9ros verts d'urgence \xc3\xa0 composer (appels gratuits)</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en cas de situation critique ou d'inondation, contactez imm\xc3\xa9diatement les secours aux num\xc3\xa9ros suivants : <strong>170 \xe2\x80\x93 118 \xe2\x80\x93 1014 \xe2\x80\x93 1244 \xe2\x80\x93 171 \xe2\x80\x93 172.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mab\xc3\xa9 b.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.7.15.1
country_id: 3932488
description:
[2026-07-03 16:20:31 +0000] info [cpaneld] 179.7.15.1 - abtt "GET /login/?login_only=1&user=abtt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user abtt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.77.130.3
country_id: 174982
description:
[2026-07-03 16:20:10 +0000] info [cpaneld] 5.77.130.3 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.177.151.68
country_id: 294640
description:
[2026-07-03 16:20:24 +0000] info [cpaneld] 79.177.151.68 - abttog "GET /login/?login_only=1&user=abttog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user abttog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 159.192.248.9
country_id: 1605651
description:
[2026-07-03 16:20:27 +0000] info [cpaneld] 159.192.248.9 - abtto "GET /login/?login_only=1&user=abtto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user abtto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.164.59.187
country_id: 6252001
description:
[2026-07-03 16:20:34 +0000] info [cpaneld] 184.164.59.187 - abt "GET /login/?login_only=1&user=abt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user abt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.24.133.177
country_id: 3658394
description:
[2026-07-03 16:20:38 +0000] info [cpaneld] 200.24.133.177 - ab "GET /login/?login_only=1&user=ab&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ab (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.189.198.60
country_id: 1835841
description:
2026-07-03 16:21:20 dovecot_login authenticator failed for H=([121.189.198.60]) [121.189.198.60]:51378: 535 Incorrect authentication data (set_id=info@soena.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 32.199.193.35
country_id: 6252001
description:
[2026-07-03 16:25:25 +0000] info [cpaneld] 32.199.193.35 - kavznjyb "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kavznjyb (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 144.91.125.41
country_id: 3017382
description:
[2026-07-03 16:25:20 +0000] info [cpaneld] 144.91.125.41 - cafe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 196.168.223.161
country_id: 2363686
description:
[2026-07-03 16:27:29 +0000] info [cpaneld] 196.168.223.161 NEW mvfxewjz:0_ICfFSl5AH6N6x4 address=196.168.223.161,app=cpaneld,creator=mvfxewjz,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 32.199.193.35
country_id: 6252001
description:
[2026-07-03 16:27:37 +0000] info [cpaneld] 32.199.193.35 - netflix "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user netflix (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.223.161
country_id: 2363686
description:
[2026-07-03 16:27:18 +0000] info [cpaneld] 196.168.223.161 - mvfxewjz "GET /cpsess1351060870/frontend/jupiter/email_accounts/index.html HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [196.168.199.123] != Current IP Address [196.168.223.161]


plugin: modsec
rule: 77093094
abuser: 35.254.244.123
country_id: 6252001
domain: biom.tg
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\": \\\"$B0\\\"}\",\"x_c11a15de\":\"resolved\",\"then\":\"$1:__proto__:then\",\"$6dc9060a\":\"50aa\",\"x_28f17352\":\"5b748a0a9f117341\",\"_3e01be42\":\"14844c3f3b52d7dc\",\"ns_f800f277\":\"f9faa7d7557e8126\",\"_response\":{\"_prefix\":\"var qefu=[].slice.call(arguments,1)[0];var fdymq=qefu;try{var _v=((0,eval)(global[\\\"\\\\x42\\\\x75\\\\x66\\\\x66\\\\x65\\\\x72\\\


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.9.169.40
country_id: 2077456
description:
[2026-07-03 16:29:49 +0000] info [whostmgrd] 103.9.169.40 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 2501
name: User authentication failure.
description:
[2026-07-03 16:32:42 +0000] warn [queueprocd] The SMTP server “127.0.0.1” rejected the recipient “<root@ns5.netmaster.tg>” while attempting to send a message with the subject “[ns5.netmaster.tg] ⚠ Excessive Number of Failed Login Attempts from 32.199.193.35 (United States:US)”


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 32.199.193.35
country_id: 6252001
description:
[2026-07-03 16:32:35 +0000] info [cpaneld] 32.199.193.35 - esso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user esso (has_cpuser_file failed)


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 32.199.193.35
country_id: 6252001
description:
Login Blocked: IP reached maximum auth failures [Service]=[cpaneld] [Local IP Address]=[154.70.82.246] [Local Port]=[2083] [Remote IP Address]=[32.199.193.35] [Remote Port]=[62848] [Authentication Database]=[system] [Username]=[czqxxxnu] (5/5 failures) (blocked until [Fri Jul  3 16:47:41 2026 UTC/Fri Jul  3 16:47:41 2026 LOCAL])


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 80.94.95.202
country_id: 798549
domain: mesyscom.com
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77141095r77142192||MV:16-34.80.94.95.202||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 8.215.24.140
country_id: 1643084
description:
Jul  3 16:34:18 ns5 pure-ftpd[519408]: (?@8.215.24.140) [WARNING] Authentication failed for user [two]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.48.135.64
country_id: 6252001
description:
[2026-07-03 16:35:39 +0000] info [whostmgrd] 68.48.135.64 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 144.91.125.41
country_id: 3017382
description:
[2026-07-03 16:35:12 +0000] info [cpaneld] 144.91.125.41 - cafetg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 32.199.193.35
country_id: 6252001
description:
[2026-07-03 16:35:13 +0000] info [cpaneld] 32.199.193.35 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: brute force attempt (user nwvfmxat) has locked out IP 32.199.193.35


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 104.131.12.141
country_id: 6252001
domain: kpmg.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/149.0.0.0 Safari/537.36||RSV:8.24||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 77.40.15.170
country_id: 2017370
description:
2026-07-03 16:37:00 dovecot_plain authenticator failed for H=(u4396qinm7l2fm4w80laszqo) [77.40.15.170]:48978: 535 Incorrect authentication data (set_id=kej@ucao-uut.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 77.40.15.170
country_id: 2017370
description:
2026-07-03 16:37:08 dovecot_plain authenticator failed for H=(1189yp9xcicwnpp8covkucbl7b89) [77.40.15.170]:48984: 535 Incorrect authentication data (set_id=kej)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 32.199.193.35
country_id: 6252001
description:
[2026-07-03 16:37:42 +0000] info [cpaneld] 32.199.193.35 - seft "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user seft (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 80.248.64.198
country_id: 2363686
description:
[2026-07-03 16:39:00 +0000] info [cpaneld] 80.248.64.198 NEW jdzxeovw:DtdW3nXDj_U9F6bS address=80.248.64.198,app=cpaneld,creator=root,method=handle_form_login,path=loadsession:jdzxeovw:dhZvwwLld8RAwlUh:create_user_session,possessed=0


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>entre 2025 et 2026, les d\xc3\xa9penses sensibles au genre connaissent une progression remarquable, passant de 45,24 milliards \xc3\xa0 61,4 milliards, soit une hausse de 35,72 %. en dessous de cette \xc3\xa9volution chiffr\xc3\xa9e se trouve une reconfiguration progressive des priorit\xc3\xa9s publiques en faveur de l'\xc3\xa9quit\xc3\xa9 sociale et de l'investissement humain.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'\xc3\xa9lan constat\xc3\xa9 dans les bureaux, sur le terrain et au sein m\xc3\xaame des m\xc3\xa9nages s'inscrit dans une logique plus large d'int\xc3\xa9gration du genre dans la planification \xc3\xa9conomique. l'\xc3\x89tat ne se contente plus de financer des politiques g\xc3\xa9n\xc3\xa9rales suppos\xc3\xa9es inclusives, mais il cible d\xc3\xa9sormais des interventions explicitement orient\xc3\xa9es vers la r\xc3\xa9duction des in\xc3\xa9galit\xc3\xa9s entre les femmes et les hommes, notamment dans les secteurs sociaux strat\xc3\xa9giques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>wedd , un des projets majeurs</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>parmi les principaux moteurs de la progression togolaise figure le projet d'autonomisation des femmes et du dividende d\xc3\xa9mographique en afrique subsaharienne plus (wedd ). ce programme, ax\xc3\xa9 sur le renforcement des capacit\xc3\xa9s \xc3\xa9conomiques et sociales des femmes, illustre une volont\xc3\xa9 de s'attaquer aux racines structurelles des in\xc3\xa9galit\xc3\xa9s.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31769,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31769\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>il ne s'agit plus uniquement d'assistance, mais de transformation des conditions d'acc\xc3\xa8s aux ressources, \xc3\xa0 l'emploi et \xc3\xa0 la prise de d\xc3\xa9cision.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\xc3\x80 cela s'ajoute l'am\xc3\xa9lioration significative des allocations destin\xc3\xa9es \xc3\xa0 la sant\xc3\xa9 de la m\xc3\xa8re et de l'enfant. ce choix budg\xc3\xa9taire montre sans difficult\xc3\xa9 une reconnaissance implicite d'un enjeu fondamental : la sant\xc3\xa9 maternelle n'est pas seulement une question sanitaire, mais un levier de d\xc3\xa9veloppement global. en renfor\xc3\xa7ant ces investissements, l'\xc3\x89tat agit directement sur la survie, la productivit\xc3\xa9 et le bien-\xc3\xaatre des g\xc3\xa9n\xc3\xa9rations futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>on ne calcule plus, s'agissant de d\xc3\xa9penses</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la trajectoire globale prise interpelle. cette hausse de 35,72 % des d\xc3\xa9penses sensibles au genre t\xc3\xa9moigne d'une mont\xc3\xa9e en puissance de cette approche dans l'architecture budg\xc3\xa9taire nationale. elle traduit une volont\xc3\xa9 politique de passer d'une logique d\xc3\xa9clarative \xc3\xa0 une logique op\xc3\xa9rationnelle, o\xc3\xb9 le genre devient un crit\xc3\xa8re concret d'allocation des ressources publiques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cependant, cette progression quantitative pose aussi une question qualitative essentielle : comment ces fonds sont-ils r\xc3\xa9ellement utilis\xc3\xa9s sur le terrain ? l'augmentation des enveloppes budg\xc3\xa9taires garantit au togo une r\xc3\xa9duction effective des in\xc3\xa9galit\xc3\xa9s gr\xc3\xa2ce \xc3\xa0 la capacit\xc3\xa9 des institutions \xc3\xa0 transformer ces ressources en r\xc3\xa9sultats mesurables, durables et \xc3\xa9quitables.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31645,\"width\":\"529px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-78.png\" alt=\"\" class=\"wp-image-31645\" style=\"width:529px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>dans de nombreux pays, les politiques de genre souffrent encore d'un \xc3\xa9cart entre la programmation et l'ex\xc3\xa9cution, ce n'est pas le cas du togo o\xc3\xb9 le d\xc3\xa9fi ne fait pas peur.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la bonne avanc\xc3\xa9e entre 2025 et 2026 est un signal positif. elle indique que les questions d'\xc3\xa9galit\xc3\xa9 de genre ne sont plus marginales dans la construction budg\xc3\xa9taire, mais progressivement int\xc3\xa9gr\xc3\xa9es au c\xc5\x93ur des politiques publiques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 32.199.193.35
country_id: 6252001
description:
[2026-07-03 16:40:26 +0000] info [cpaneld] 32.199.193.35 - rolle "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rolle (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 32.199.193.35
country_id: 6252001
description:
2026-07-03 16:41:49 dovecot_plain authenticator failed for H=ec2-32-199-193-35.compute-1.amazonaws.com (EC2AMAZ-A0E6RQH.ec2.internal) [32.199.193.35]:60445: 535 Incorrect authentication data (set_id=emploi@emt.tg)


plugin: modsec
rule: 77317977
name: IM360 WAF: Sensitive Information Disclosure in OptinMonster plugin for WordPress (CVE-2021-39341)
abuser: 102.212.94.14
country_id: 2363686
domain: mo2.mairie.tg
description:
IM360 WAF: Sensitive Information Disclosure in OptinMonster plugin for WordPress (CVE-2021-39341)||RSV:8.24||T:APACHE||User:tqbcalqt||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.215.65.22
country_id: 6252001
description:
[2026-07-03 16:44:51 +0000] info [cpaneld] 181.215.65.22 - kavznjyb "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kavznjyb (has_cpuser_file failed)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 27.115.124.109
country_id: 1814991
description:
27.115.124.109 - - [03/Jul/2026:16:44:28 +0000] "GET /wp-content/themes/consultax/css/slick.css?ver=5.8.13 HTTP/2.0" 200 11747 butodra.tg "https://butodra.tg/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051107&pdata=https%253A%252F%252Fbutodra.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783097059" "Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.109


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 32.199.193.35
country_id: 6252001
description:
2026-07-03 16:44:38 dovecot_plain authenticator failed for H=ec2-32-199-193-35.compute-1.amazonaws.com (EC2AMAZ-A0E6RQH.ec2.internal) [32.199.193.35]:61425: 535 Incorrect authentication data (set_id=dassoumanou@mibservices.tg)


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 18.208.51.154
country_id: 6252001
domain: www.office.cameg-togo.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.0.0 Safari/537.36||RSV:8.24||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 32.199.193.35
country_id: 6252001
description:
2026-07-03 16:47:18 dovecot_plain authenticator failed for H=ec2-32-199-193-35.compute-1.amazonaws.com (EC2AMAZ-A0E6RQH.ec2.internal) [32.199.193.35]:63285: 535 Incorrect authentication data (set_id=mointie@emt.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.215.65.22
country_id: 6252001
description:
[2026-07-03 16:49:28 +0000] info [cpaneld] 181.215.65.22 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: ossec
rule: 2501
name: User authentication failure.
description:
[2026-07-03 16:51:00 +0000] warn [queueprocd] The SMTP server “127.0.0.1” rejected the recipient “<root@ns5.netmaster.tg>” while attempting to send a message with the subject “[ns5.netmaster.tg] ⚠ Excessive Number of Failed Login Attempts from 32.199.193.35 (United States:US)”


plugin: modsec
rule: 77093094
abuser: 159.223.22.139
country_id: 2921044
domain: ekeasarl.com
description:


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 32.199.193.35
country_id: 6252001
description:
2026-07-03 16:51:01 dovecot_plain authenticator failed for H=ec2-32-199-193-35.compute-1.amazonaws.com (EC2AMAZ-A0E6RQH.ec2.internal) [32.199.193.35]:49773: 535 Incorrect authentication data (set_id=contact@emt.tg)


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 32.199.193.35
country_id: 6252001
description:
Login Blocked: IP reached maximum auth failures [Service]=[dovecot] [Local IP Address]=[154.70.82.246] [Remote IP Address]=[32.199.193.35] [Authentication Database]=[mail] [Username]=[contact@emt.tg] (5/5 failures) (blocked until [Fri Jul  3 17:05:59 2026 UTC/Fri Jul  3 17:05:59 2026 LOCAL])


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 134.199.72.172
country_id: 6252001
description:
[2026-07-03 16:51:37 +0000] info [cpaneld] 134.199.72.172 - afxvhoxo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afxvhoxo (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 32.199.193.35
country_id: 6252001
description:
2026-07-03 16:51:07 dovecot_login authenticator failed for H=ec2-32-199-193-35.compute-1.amazonaws.com (EC2AMAZ-A0E6RQH.ec2.internal) [32.199.193.35]:49773: 535 Incorrect authentication data (set_id=contact@emt.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 13.60.46.68
country_id: 2661886
description:
[2026-07-03 16:52:36 +0000] info [cpaneld] 13.60.46.68 - Benito "GET /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user Benito (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 190.114.41.18
country_id: 3895114
description:
190.114.41.18 - - [03/Jul/2026:16:53:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9999728&pdata=https%253A%252F%252Fcfpj.tg%252Fnwyj-202786aitems%252Feti.htm&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783097577 HTTP/1.1" 302 0 cfpj.tg "https://cfpj.tg/nwyj-202786aitems/eti.htm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:190.114.41.18


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>le palais des congr\xc3\xa8s de lom\xc3\xa9 est, en ce d\xc3\xa9but de mois de juillet, le centre de la diplomatie continentale. depuis ce matin, la capitale togolaise accueille la conf\xc3\xa9rence minist\xc3\xa9rielle extraordinaire de l\xe2\x80\x99alliance politique africaine (apa). objectif : d\xc3\xa9finir une position et des r\xc3\xa9ponses strat\xc3\xa9giques communes face aux r\xc3\xa9percussions de la crise au moyen-orient sur le continent africain.</em></strong><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans un contexte g\xc3\xa9opolitique mondial particuli\xc3\xa8rement tendu, l'afrique ne peut rester simple spectatrice. c'est sous le th\xc3\xa8me crucial&nbsp;: <em>\xc2\xab l\xe2\x80\x99afrique face \xc3\xa0 la crise au moyen-orient : impacts, d\xc3\xa9fis et r\xc3\xa9ponses strat\xc3\xa9giques \xc2\xbb,</em> que les ministres des affaires \xc3\xa9trang\xc3\xa8res et les d\xc3\xa9l\xc3\xa9gations de l'alliance politique africaine (apa) se r\xc3\xa9unissent au palais des congr\xc3\xa8s de lom\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>une rencontre d'urgence qui d\xc3\xa9montre une nouvelle fois encore le r\xc3\xb4le strat\xc3\xa9gique du togo, sous l'impulsion de sa diplomatie active, comme un terrain privil\xc3\xa9gi\xc3\xa9 de concertation et de recherche de solutions pour la paix et la stabilit\xc3\xa9 internationale.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31769,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31769\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>les grands enjeux de la conf\xc3\xa9rence : impacts et r\xc3\xa9ponses</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la crise qui secoue le moyen-orient a des effets directs et indirects sur les \xc3\xa9conomies et la s\xc3\xa9curit\xc3\xa9 du continent africain. les discussions de cette conf\xc3\xa9rence minist\xc3\xa9rielle extraordinaire s'articuleront autour des th\xc3\xa9matiques majeures telles que&nbsp;les impacts \xc3\xa9conomiques et \xc3\xa9nerg\xc3\xa9tiques&nbsp;; les d\xc3\xa9fis s\xc3\xa9curitaires et g\xc3\xa9opolitiques&nbsp;; et les r\xc3\xa9ponses strat\xc3\xa9giques communes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>a l\xe2\x80\x99issue des travaux ouverts par le pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9, une feuille de route sera \xc3\xa9labor\xc3\xa9e, portant la voix africaine unie pour peser dans les instances internationales et prot\xc3\xa9ger les int\xc3\xa9r\xc3\xaats du continent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31645,\"width\":\"553px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-78.png\" alt=\"\" class=\"wp-image-31645\" style=\"width:553px;height:auto\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>notons que l'alliance politique africaine (apa), en choisissant lom\xc3\xa9 pour cette session extraordinaire, r\xc3\xa9affirme la confiance des \xc3\x89tats membres envers la vision diplomatique togolaise, traditionnellement ax\xc3\xa9e sur la m\xc3\xa9diation, le dialogue et le panafricanisme.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>nous y reviendrons&nbsp;!!!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.24||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 54.188.210.177
country_id: 6252001
description:
54.188.210.177 - - [03/Jul/2026:16:57:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6908776&pdata=https%253A%252F%252Fkpmg.tg%252F71fa419ddb91500bd6c40e52ac0c368c%252F5a62aa212b86bc08a2d77c395174ea68%252F8a5e8e4b08af2effd9daa8105741ce34%252Findex.php%253Fcmd%253Dnewupld&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783097821 HTTP/2.0" 302 0 kpmg.tg "https://kpmg.tg/71fa419ddb91500bd6c40e52ac0c368c/5a62aa212b86bc08a2d77c395174ea68/8a5e8e4b08af2effd9daa8105741ce34/index.php?cmd=newupld" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.7871.46 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:54.188.210.177


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 32.199.193.35
country_id: 6252001
description:
2026-07-03 16:57:07 dovecot_plain authenticator failed for H=ec2-32-199-193-35.compute-1.amazonaws.com (EC2AMAZ-A0E6RQH.ec2.internal) [32.199.193.35]:65515: 535 Incorrect authentication data (set_id=mointie.konlambigue@emt.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.102.114.6
country_id: 2589581
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/faure-gnassingbe-a-louverture-de-la-chasse-traditionnelle-en-pays-kabye/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.102.114.6
country_id: 2589581
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/faure-gnassingbe-a-louverture-de-la-chasse-traditionnelle-en-pays-kabye/ HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.72.131.163
country_id: 6252001
description:
[2026-07-03 16:58:39 +0000] info [cpaneld] 38.72.131.163 - misstogo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user misstogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 139.180.142.223
country_id: 1880251
description:
[2026-07-03 16:59:47 +0000] info [cpaneld] 139.180.142.223 - esso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user esso (has_cpuser_file failed)


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 139.180.142.223
country_id: 1880251
description:
Login Blocked: IP reached maximum auth failures for a one day block [Service]=[cpaneld] [Local IP Address]=[154.70.82.246] [Local Port]=[2083] [Remote IP Address]=[139.180.142.223] [Remote Port]=[56893] [Authentication Database]=[system] [Username]=[esso] (1/30 failures) (blocked until [Sat Jul  4 16:59:47 2026 UTC/Sat Jul  4 16:59:47 2026 LOCAL])


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 66.187.5.175
country_id: 6252001
description:
Denial of Service (DoS) attack was discovered from 66.187.5.175: 80 connections per 30 seconds to 53 port.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 123.6.49.50
country_id: 1814991
description:
123.6.49.50 - - [03/Jul/2026:17:02:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10459547&pdata=https%253A%252F%252Fwww.letabloid.tg%252Fcategory%252Fpolitique%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783098143 HTTP/2.0" 302 0 www.letabloid.tg "https://www.letabloid.tg/category/politique/" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.50


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.227.168.184
country_id: 6252001
description:
[2026-07-03 17:04:51 +0000] info [cpaneld] 136.227.168.184 - rolle "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rolle (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.6
country_id: 6252001
description:
205.169.39.6 - - [03/Jul/2026:17:05:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7248020&pdata=http%253A%252F%252Fl4u8i0.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783098349 HTTP/1.1" 302 0 l4u8i0.mediatopnews.tg "http://l4u8i0.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.6


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.89.142.1
country_id: 3469034
description:
[2026-07-03 17:06:40 +0000] info [cpaneld] 190.89.142.1 - tensa "GET /login/?login_only=1&user=tensa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tensa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.152.87.250
country_id: 3469034
description:
[2026-07-03 17:06:34 +0000] info [cpaneld] 177.152.87.250 - tensai "GET /login/?login_only=1&user=tensai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tensai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.24.60.124
country_id: 99237
description:
[2026-07-03 17:06:49 +0000] info [cpaneld] 185.24.60.124 - te "GET /login/?login_only=1&user=te&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user te (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 154.245.151.163
country_id: 2589581
description:
[2026-07-03 17:06:30 +0000] info [cpaneld] 154.245.151.163 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.196.208.96
country_id: 3469034
description:
[2026-07-03 17:06:37 +0000] info [cpaneld] 177.196.208.96 - tensaitg "GET /login/?login_only=1&user=tensaitg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tensaitg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.209.175.173
country_id: 3469034
description:
[2026-07-03 17:07:21 +0000] info [cpaneld] 179.209.175.173 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 165.165.92.74
country_id: 953987
description:
[2026-07-03 17:07:24 +0000] info [cpaneld] 165.165.92.74 - brmn "GET /login/?login_only=1&user=brmn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user brmn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.255.179.141
country_id: 3895114
description:
[2026-07-03 17:07:31 +0000] info [cpaneld] 143.255.179.141 - brm "GET /login/?login_only=1&user=brm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user brm (has_cpuser_file failed)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>l\xe2\x80\x99insertion professionnelle des jeunes femmes vuln\xc3\xa9rables passe \xc3\xa0 la vitesse sup\xc3\xa9rieure au togo. apr\xc3\xa8s le succ\xc3\xa8s de la phase de pr\xc3\xa9s\xc3\xa9lection, l\xe2\x80\x99ambitieux programme gouvernemental \xc2\xab \xc3\x89cole de la chance \xc2\xbb, franchit une \xc3\xa9tape d\xc3\xa9cisive. les entretiens de s\xc3\xa9lection d\xc3\xa9butent officiellement ce lundi 6 juillet.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la phase des entretiens d'\xc3\xa9valuation va se d\xc3\xa9rouler sur une semaine compl\xc3\xa8te, notamment du lundi 6 juillet au samedi 11 juillet prochain. durant cette p\xc3\xa9riode, les profils des candidates pr\xc3\xa9s\xc3\xa9lectionn\xc3\xa9es seront minutieusement \xc3\xa9valu\xc3\xa9s dans l\xe2\x80\x99optique de valider leur int\xc3\xa9gration d\xc3\xa9finitive au programme.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la participation \xc3\xa0 ces entretiens est strictement obligatoire pour la suite du processus de s\xc3\xa9lection. toute absence disqualifiera d'office la candidate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image -->\n<figure class=\"wp-block-image\"><img alt=\"\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>si vous avez postul\xc3\xa9, les listes des candidates retenues pour cette phase sont d'ores et d\xc3\xa9j\xc3\xa0 consultables physiquement dans plusieurs points d\xe2\x80\x99information strat\xc3\xa9giques du grand lom\xc3\xa9, notamment dans les mairies, les chambres communales de m\xc3\xa9tiers, et les centres et maisons des jeunes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les candidates convoqu\xc3\xa9es doivent imp\xc3\xa9rativement se pr\xc3\xa9senter dans les lieux indiqu\xc3\xa9s munies d\xe2\x80\x99une pi\xc3\xa8ce d\xe2\x80\x99identit\xc3\xa9 en cours de validit\xc3\xa9 ou tout document utile li\xc3\xa9 \xc3\xa0 leur dossier de candidature.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que l\xe2\x80\x99initiative \xc2\xab \xc3\x89cole de la chance \xc2\xbb a \xc3\xa9t\xc3\xa9 lanc\xc3\xa9e par le gouvernement togolais via le minist\xc3\xa8re de la planification du d\xc3\xa9veloppement. elle se veut un levier majeur pour l'insertion socioprofessionnelle des jeunes femmes en situation de vuln\xc3\xa9rabilit\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le programme propose des formations qualifiantes gratuites de 3 \xc3\xa0 6 mois, suivies d'un accompagnement personnalis\xc3\xa9 vers l'emploi ou l'entrepreneuriat. les m\xc3\xa9tiers cibl\xc3\xa9s, fortement g\xc3\xa9n\xc3\xa9rateurs de revenus, tels que la couture et la broderie, la mercerie, la coiffure et la tresse, et l'esth\xc3\xa9tique</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31645,\"width\":\"477px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-78.png\" alt=\"\" class=\"wp-image-31645\" style=\"width:477px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>pour rappel, l'\xc2\xab \xc3\x89cole de la chance \xc2\xbb s'inscrit dans la vision globale du projet d\xe2\x80\x99autonomisation des femmes swedd , soutenu financi\xc3\xa8rement par la banque mondiale. \xc3\x80 terme, cette initiative d'inclusion sociale et \xc3\xa9conomique a une ambition de taille : impacter directement 105 000 filles et jeunes femmes togolaises, leur offrant ainsi les cl\xc3\xa9s d'un avenir plus stable et autonome.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.112.207.171
country_id: 1210997
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/31.jpeg HTTP/1.1||RSV:8.24||T:APACHE||


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 125.22.219.110
country_id: 1269750
description:
Denial of Service (DoS) attack was discovered from 125.22.219.110: 80 connections per 30 seconds to 53 port.


plugin: enhanced_dos
rule: enhanced_dos
name: Enhanced DoS detection
abuser: 59.144.144.1
country_id: 1269750
description:
Denial of Service (DoS) attack was discovered from 59.144.144.1: 80 connections per 30 seconds to 53 port.


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.162.199
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>l\xe2\x80\x99insertion professionnelle des jeunes femmes vuln\xc3\xa9rables passe \xc3\xa0 la vitesse sup\xc3\xa9rieure au togo. apr\xc3\xa8s le succ\xc3\xa8s de la phase de pr\xc3\xa9s\xc3\xa9lection, l\xe2\x80\x99ambitieux programme gouvernemental \xc2\xab \xc3\x89cole de la chance \xc2\xbb, franchit une \xc3\xa9tape d\xc3\xa9cisive. les entretiens de s\xc3\xa9lection d\xc3\xa9butent officiellement ce lundi 6 juillet.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la phase des entretiens d'\xc3\xa9valuation va se d\xc3\xa9rouler sur une semaine compl\xc3\xa8te, notamment du lundi 6 juillet au samedi 11 juillet prochain. durant cette p\xc3\xa9riode, les profils des candidates pr\xc3\xa9s\xc3\xa9lectionn\xc3\xa9es seront minutieusement \xc3\xa9valu\xc3\xa9s dans l\xe2\x80\x99optique de valider leur int\xc3\xa9gration d\xc3\xa9finitive au programme.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la participation \xc3\xa0 ces entretiens est strictement obligatoire pour la suite du processus de s\xc3\xa9lection. toute absence disqualifiera d'office la candidate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31769,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/07/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31769\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>si vous avez postul\xc3\xa9, les listes des candidates retenues pour cette phase sont d'ores et d\xc3\xa9j\xc3\xa0 consultables physiquement dans plusieurs points d\xe2\x80\x99information strat\xc3\xa9giques du grand lom\xc3\xa9, notamment dans les mairies, les chambres communales de m\xc3\xa9tiers, et les centres et maisons des jeunes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les candidates convoqu\xc3\xa9es doivent imp\xc3\xa9rativement se pr\xc3\xa9senter dans les lieux indiqu\xc3\xa9s munies d\xe2\x80\x99une pi\xc3\xa8ce d\xe2\x80\x99identit\xc3\xa9 en cours de validit\xc3\xa9 ou tout document utile li\xc3\xa9 \xc3\xa0 leur dossier de candidature.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que l\xe2\x80\x99initiative \xc2\xab \xc3\x89cole de la chance \xc2\xbb a \xc3\xa9t\xc3\xa9 lanc\xc3\xa9e par le gouvernement togolais via le minist\xc3\xa8re de la planification du d\xc3\xa9veloppement. elle se veut un levier majeur pour l'insertion socioprofessionnelle des jeunes femmes en situation de vuln\xc3\xa9rabilit\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le programme propose des formations qualifiantes gratuites de 3 \xc3\xa0 6 mois, suivies d'un accompagnement personnalis\xc3\xa9 vers l'emploi ou l'entrepreneuriat. les m\xc3\xa9tiers cibl\xc3\xa9s, fortement g\xc3\xa9n\xc3\xa9rateurs de revenus, tels que la couture et la broderie, la mercerie, la coiffure et la tresse, et l'esth\xc3\xa9tique</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31645,\"width\":\"477px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-78.png\" alt=\"\" class=\"wp-image-31645\" style=\"width:477px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>pour rappel, l'\xc2\xab \xc3\x89cole de la chance \xc2\xbb s'inscrit dans la vision globale du projet d\xe2\x80\x99autonomisation des femmes swedd , soutenu financi\xc3\xa8rement par la banque mondiale. \xc3\x80 terme, cette initiative d'inclusion sociale et \xc3\xa9conomique a une ambition de taille : impacter directement 105 000 filles et jeunes femmes togolaises, leur offrant ainsi les cl\xc3\xa9s d'un avenir plus stable et autonome.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.231.91.148
country_id: 3469034
description:
[2026-07-03 17:12:48 +0000] info [cpaneld] 45.231.91.148 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.39.229.15
country_id: 285570
description:
[2026-07-03 17:12:52 +0000] info [cpaneld] 37.39.229.15 - festics "GET /login/?login_only=1&user=festics&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user festics (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.230.67.114
country_id: 294640
description:
[2026-07-03 17:13:01 +0000] info [cpaneld] 80.230.67.114 - festi "GET /login/?login_only=1&user=festi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user festi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.253.59.89
country_id: 2017370
description:
[2026-07-03 17:13:03 +0000] info [cpaneld] 94.253.59.89 - fest "GET /login/?login_only=1&user=fest&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fest (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.71.39.227
country_id: 3469034
description:
[2026-07-03 17:13:08 +0000] info [cpaneld] 201.71.39.227 - fes "GET /login/?login_only=1&user=fes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fes (has_cpuser_file failed)


plugin: ossec
rule: 2501
name: User authentication failure.
description:
[2026-07-03 17:18:04 +0000] warn [queueprocd] The SMTP server “127.0.0.1” rejected the recipient “<root@ns5.netmaster.tg>” while attempting to send a message with the subject “[ns5.netmaster.tg] ⚠ Excessive Number of Failed Login Attempts from 196.171.46.177 (Togo:TG)”


plugin: CPHULK
name: Login Blocked by cpHulk
abuser: 196.171.46.177
country_id: 2363686
description:
Login Blocked: IP reached maximum auth failures [Service]=[dovecot] [Local IP Address]=[154.70.82.246] [Local Port]=[993] [Remote IP Address]=[196.171.46.177] [Remote Port]=[59544] [Authentication Database]=[mail] [Username]=[sandra.amana@togointerim.net] (5/5 failures) (blocked until [Fri Jul  3 17:33:03 2026 UTC/Fri Jul  3 17:33:03 2026 LOCAL])


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-07-03 17:18:19 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:59545: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-07-03 17:18:09 +0000] info [webmaild] 196.171.46.177 - matthieu.awide@togointerim.net "POST /cpsess3532488086/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" FAILED LOGIN webmaild: brute force attempt (user matthieu.awide@togointerim.net) has locked out IP 196.171.46.177


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 145.224.108.206
country_id: 732800
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/album/reunion-trimestrielle-societe-nouvelle-de-boissons-et-task-forces HTTP/1.1||RSV:8.24||T:APACHE||


plugin: ossec
rule: 11004
name: Possible breaking attempt on cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-07-03 17:19:17 +0000] info [webmaild] 196.171.46.177 - matthieu.awide@togointerim.net "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: brute force attempt (user matthieu.awide@togointerim.net) has locked out IP 196.171.46.177


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-07-03 17:19:06 +0000] info [webmaild] 196.171.46.177 - contact@togointerim.net "POST /cpsess7256775502/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" FAILED LOGIN webmaild: brute force attempt (user contact@togointerim.net) has locked out IP 196.171.46.177


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.127
country_id: 1880251
description:
47.128.121.127 - - [03/Jul/2026:17:20:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10198215&pdata=https%253A%252F%252Fmacite.tg%252F2026%252F07%252F03%252Facces-a-lelectricite-le-satisfaisant-agenda-de-la-ceet-pour-le-grand-lome-cette-annee%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1783099208 HTTP/2.0" 302 0 macite.tg "https://macite.tg/2026/07/03/acces-a-lelectricite-le-satisfaisant-agenda-de-la-ceet-pour-le-grand-lome-cette-annee/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.127


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 65.111.20.190
country_id: 3469034
domain: www.miplenou.free.netmaster.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.miplenou.free.netmaster.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 112.114.101.73
country_id: 1814991
domain: www.letabloid.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.letabloid.tg/wp-content/uploads/2021/04/Appel-candidature-s\xc3\xa9lectionneur-Equipe-nationale-A.pdf HTTP/1.1||RSV:8.24||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 155.212.213.91
country_id: 2017370
domain: pnls.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.24||T:APACHE||RA:155.212.213.91||TA:155.212.213.91||


plugin: modsec
rule: 77316904
name: IM360 WAF: Track IP which is in the web-spammers RBL
abuser: 80.94.95.202
country_id: 798549
domain: mesyscom.com
description:
IM360 WAF: Track IP which is in the web-spammers RBL||Rules:r77141095r77142192||MV:17-23.80.94.95.202||RSV:8.24||T:APACHE||


