# incident

plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.71.62.95
country_id: 6252001
description:
[2026-06-16 18:42:34 +0000] info [cpaneld] 74.71.62.95 - togocar "GET /login/?login_only=1&user=togocar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 87.250.204.11
country_id: 2017370
description:
[2026-06-16 18:42:24 +0000] info [cpaneld] 87.250.204.11 - togoca "GET /login/?login_only=1&user=togoca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.108.78.188
country_id: 3686110
description:
[2026-06-16 18:42:26 +0000] info [cpaneld] 190.108.78.188 - togocarrie "GET /login/?login_only=1&user=togocarrie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.117.85.28
country_id: 3686110
description:
[2026-06-16 18:42:33 +0000] info [cpaneld] 138.117.85.28 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.172.104.131
country_id: 1562822
description:
[2026-06-16 18:42:33 +0000] info [cpaneld] 113.172.104.131 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.231.229.51
country_id: 6252001
description:
[2026-06-16 18:42:38 +0000] info [cpaneld] 69.231.229.51 - togoc "GET /login/?login_only=1&user=togoc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.0.109.49
country_id: 3686110
description:
[2026-06-16 18:42:27 +0000] info [cpaneld] 167.0.109.49 - togoc "GET /login/?login_only=1&user=togoc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.245.177.135
country_id: 3996063
description:
[2026-06-16 18:42:31 +0000] info [cpaneld] 177.245.177.135 - togocarr "GET /login/?login_only=1&user=togocarr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.223.206.192
country_id: 3895114
description:
[2026-06-16 18:42:33 +0000] info [cpaneld] 201.223.206.192 - togocar "GET /login/?login_only=1&user=togocar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.56.109.113
country_id: 3595528
description:
[2026-06-16 18:42:42 +0000] info [cpaneld] 190.56.109.113 - togoc "GET /login/?login_only=1&user=togoc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 81.222.186.68
country_id: 2017370
description:
[2026-06-16 18:42:26 +0000] info [cpaneld] 81.222.186.68 - togom "GET /login/?login_only=1&user=togom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.26.180.50
country_id: 3865483
description:
[2026-06-16 18:42:29 +0000] info [cpaneld] 181.26.180.50 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.105.133.212
country_id: 2287781
description:
[2026-06-16 18:42:33 +0000] info [cpaneld] 143.105.133.212 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.18.96.236
country_id: 3865483
description:
[2026-06-16 18:42:49 +0000] info [cpaneld] 186.18.96.236 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 51.235.39.168
country_id: 102358
description:
[2026-06-16 18:42:54 +0000] info [cpaneld] 51.235.39.168 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:43:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.252.69.112
country_id: 2017370
description:
[2026-06-16 18:42:24 +0000] info [cpaneld] 109.252.69.112 - togoca "GET /login/?login_only=1&user=togoca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.33.87.178
country_id: 3469034
description:
[2026-06-16 18:42:28 +0000] info [cpaneld] 177.33.87.178 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.75.84.219
country_id: 290557
description:
[2026-06-16 18:42:29 +0000] info [cpaneld] 91.75.84.219 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.224.124.46
country_id: 99237
description:
[2026-06-16 18:42:34 +0000] info [cpaneld] 169.224.124.46 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.124.15.220
country_id: 1269750
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/le-mcc-fait-le-point-de-letat-davancement-de-la-mise-en-oeuvre-du-programme-seuil-au-togo/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 170.199.224.250
country_id: 6252001
domain: butodra.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:170.199.224.250||TA:170.199.224.250||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:18:45:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9739720&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbWluZHlAZXVyZXMuY29tLnNn&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635515 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bWluZHlAZXVyZXMuY29tLnNn" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.122.208.31
country_id: 2017370
description:
[2026-06-16 18:45:36 +0000] info [cpaneld] 62.122.208.31 - benatex "GET /login/?login_only=1&user=benatex&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benatex (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.129.164.162
country_id: 285570
description:
[2026-06-16 18:45:40 +0000] info [cpaneld] 94.129.164.162 - benatextg "GET /login/?login_only=1&user=benatextg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benatextg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 153.67.183.41
country_id: 3865483
description:
[2026-06-16 18:45:41 +0000] info [cpaneld] 153.67.183.41 - benatex "GET /login/?login_only=1&user=benatex&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benatex (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.131.139.132
country_id: 3469034
description:
[2026-06-16 18:45:45 +0000] info [cpaneld] 177.131.139.132 - benate "GET /login/?login_only=1&user=benate&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benate (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.160.218.217
country_id: 6252001
description:
[2026-06-16 18:45:53 +0000] info [cpaneld] 67.160.218.217 - benat "GET /login/?login_only=1&user=benat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.80.25.64
country_id: 102358
description:
[2026-06-16 18:45:45 +0000] info [cpaneld] 178.80.25.64 - benatextg "GET /login/?login_only=1&user=benatextg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benatextg (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:45:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10263663&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY3MyQGludGVncml0eWxvZ2lzdGljcy5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635547 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y3MyQGludGVncml0eWxvZ2lzdGljcy5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 194.247.22.154
country_id: 2017370
description:
[2026-06-16 18:45:56 +0000] info [cpaneld] 194.247.22.154 - be "GET /login/?login_only=1&user=be&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user be (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 151.77.95.245
country_id: 3175395
description:
[2026-06-16 18:45:55 +0000] info [cpaneld] 151.77.95.245 - bena "GET /login/?login_only=1&user=bena&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bena (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.73.116.230
country_id: 2017370
description:
[2026-06-16 18:45:34 +0000] info [cpaneld] 217.73.116.230 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.226.1.18
country_id: 3686110
description:
[2026-06-16 18:45:48 +0000] info [cpaneld] 38.226.1.18 - benat "GET /login/?login_only=1&user=benat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.226.149.31
country_id: 3932488
description:
[2026-06-16 18:46:02 +0000] info [cpaneld] 38.226.149.31 - be "GET /login/?login_only=1&user=be&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user be (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:18:46:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10052511&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbnByX3NpbmdhcG9yZUBucHIuY28uanA%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635563 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bnByX3NpbmdhcG9yZUBucHIuY28uanA=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.198.128.204
country_id: 1835841
description:
Jun 16 18:46:41 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.198.128.204 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:18:47:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051677&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcHJvY3VyZW1lbnQwMUBwbHRzY2llbnRpZmljLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635636 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cHJvY3VyZW1lbnQwMUBwbHRzY2llbnRpZmljLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 218.92.201.254
country_id: 1814991
description:
Jun 16 18:46:32 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 218.92.201.254 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:46:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515558&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdGFtQG5ld2FzaWEuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635596 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dGFtQG5ld2FzaWEuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.20.57.100
country_id: 1210997
description:
[2026-06-16 18:48:17 +0000] info [cpaneld] 157.20.57.100 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 123.113.175.30
country_id: 1814991
description:
Jun 16 18:48:18 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 123.113.175.30 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.41.136.239
country_id: 3865483
description:
[2026-06-16 18:48:18 +0000] info [cpaneld] 179.41.136.239 - mftogo "GET /login/?login_only=1&user=mftogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftogo (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 62.192.110.75
country_id: 1819730
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/12/IMG-20211230-WA0197-768x512.jpg HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:48:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6711657&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635694 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:48:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515353&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635695 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.113.175.30
country_id: 1814991
description:
2026-06-16 18:48:20 dovecot_plain authenticator failed for H=(vl2h6y0gwct86r48dzci2u8nu4) [123.113.175.30]:34212: 535 Incorrect authentication data (set_id=welldrive@confortis.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 213.171.0.184
country_id: 2017370
description:
[2026-06-16 18:48:29 +0000] info [cpaneld] 213.171.0.184 - mfto "GET /login/?login_only=1&user=mfto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mfto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.231.74.101
country_id: 3932488
description:
[2026-06-16 18:48:23 +0000] info [cpaneld] 45.231.74.101 - mftogotg "GET /login/?login_only=1&user=mftogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftogotg (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 192.42.116.116
country_id: 2750405
description:
192.42.116.116 - - [16/Jun/2026:18:48:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6790293&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdG9yZC5sdW5kc3Ryb21AdmlydHVhbHJvYWQub3Jn&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635700 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dG9yZC5sdW5kc3Ryb21AdmlydHVhbHJvYWQub3Jn" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:192.42.116.116


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.243.43.96
country_id: 2017370
description:
[2026-06-16 18:48:26 +0000] info [cpaneld] 94.243.43.96 - mftog "GET /login/?login_only=1&user=mftog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.130.109.225
country_id: 6252001
description:
[2026-06-16 18:48:32 +0000] info [cpaneld] 24.130.109.225 - mf "GET /login/?login_only=1&user=mf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.125.10.132
country_id: 298795
description:
[2026-06-16 18:48:37 +0000] info [cpaneld] 212.125.10.132 - mf "GET /login/?login_only=1&user=mf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.117.198.217
country_id: 2510769
description:
[2026-06-16 18:48:28 +0000] info [cpaneld] 79.117.198.217 - mfto "GET /login/?login_only=1&user=mfto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mfto (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 93.185.33.44
country_id: 174982
description:
2026-06-16 18:49:01 H=([93.185.33.44]) [93.185.33.44]:62270 F=<John@4452.com> rejected RCPT <info@cndh-togo.org>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.116.142.179
country_id: 3686110
description:
[2026-06-16 18:48:24 +0000] info [cpaneld] 186.116.142.179 - mftog "GET /login/?login_only=1&user=mftog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mftog (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:50:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6451098&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2FsZXNAcmV4LWluc3RydW1lbnRzLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635816 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2FsZXNAcmV4LWluc3RydW1lbnRzLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:18:50:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10460008&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaGFydW1pLXlvc2hpbmFnYUBtZXMuY28uanA%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635833 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aGFydW1pLXlvc2hpbmFnYUBtZXMuY28uanA=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.34.240.56
country_id: 1168579
domain: www.mediatopnews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.mediatopnews.tghttp/www.mediatopnews.tg/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:18:52:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6973587&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYW5hQGFtY3NiLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635942 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YW5hQGFtY3NiLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:52:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119024&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2FuZHlAYWxhbWdyb3VwLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635944 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2FuZHlAYWxhbWdyb3VwLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.57
country_id: 6252001
description:
205.169.39.57 - - [16/Jun/2026:18:53:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7037296&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Da2F0c3Vub3JpLWthdG9AbWVzLmNvLmpw&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781635990 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=a2F0c3Vub3JpLWthdG9AbWVzLmNvLmpw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.57


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.174.149.112
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/a4a1a0 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 138.121.10.183
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/presidence-de-la-boad-christian-adovelande-passe-la-main-a-serge-ekue/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.43.38.190
country_id: 3895114
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/can-total-egypte-2019-un-match-cele-par-le-sort/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:18:53:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7235784&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636022 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:53:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051887&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636022 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:18:54:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10196585&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2VwYW5nZ29sQHNwc2IuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636079 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2VwYW5nZ29sQHNwc2IuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.187.229.151
country_id: 1269750
description:
2026-06-16 18:55:38 dovecot_login authenticator failed for H=(nsg-corporate-151.229.187.122.airtel.in) [122.187.229.151]:51973: 535 Incorrect authentication data (set_id=sales@cameg-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.229.151
country_id: 1269750
description:
Jun 16 18:55:36 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.229.151 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.33.230
country_id: 6251999
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.239.33.230||TA:104.239.33.230||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 152.232.100.212
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:152.232.100.212||TA:152.232.100.212||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.35.145
country_id: 6251999
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.239.35.145||TA:104.239.35.145||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 67.227.112.173
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:67.227.112.173||TA:67.227.112.173||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.173.150.225
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:107.173.150.225||TA:107.173.150.225||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.33.127
country_id: 6251999
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.239.33.127||TA:104.239.33.127||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 206.206.69.231
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:206.206.69.231||TA:206.206.69.231||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.52.110.176
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/diplomatie-barros-bacar-banjai-nouveau-representant-permanent-de-la-cedeao-au-togo/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 108.165.218.86
country_id: 3469034
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:108.165.218.86||TA:108.165.218.86||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:59:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:18:59:17 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:59:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:18:59:16 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 45.144.212.221
country_id: 690791
description:
2026-06-16 19:00:15 H=([45.144.212.221]) [45.144.212.221]:64502 F=<dpr@priv8shop.com> rejected RCPT <ablacklion@hotmail.com>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 176.61.149.165
country_id: 2264397
description:
2026-06-16 18:59:34 dovecot_plain authenticator failed for H=(k79la5vjq8o6re35u) [176.61.149.165]:32776: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:02:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13211806&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYXppbS5hcmFobWFuQHlvbmdtaW5vZmZpY2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636527 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YXppbS5hcmFobWFuQHlvbmdtaW5vZmZpY2UuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 174.62.158.14
country_id: 6252001
description:
2026-06-16 19:01:39 dovecot_plain authenticator failed for H=c-174-62-158-14.hsd1.il.comcast.net (fcgubppolmto21asiigpeqjjx1nizc) [174.62.158.14]:39376: 535 Incorrect authentication data (set_id=admin@togocarrierebetons.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.161.55.7
country_id: 3996063
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-les-eleves-arrivent-ils-a-achever-le-cours-primaire/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:19:02:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6709404&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Da2F0c3Vub3JpLWthdG9AbWVzLmNvLmpw&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636551 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=a2F0c3Vub3JpLWthdG9AbWVzLmNvLmpw" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-16 19:03:41 +0000] info [webmaild] 196.171.46.177 - direction@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:03:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6921160&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcG9oY2hvb0BnZXdpcmFzaGlwcGluZy5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636626 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cG9oY2hvb0BnZXdpcmFzaGlwcGluZy5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:03:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10011590&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636638 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:04:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7379355&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636639 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:05:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10275224&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaGFmaXp1bEBnZXdpcmFzaGlwcGluZy5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636715 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aGFmaXp1bEBnZXdpcmFzaGlwcGluZy5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 19:04:27 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:37754: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:05:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10187414&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZXZhaW5lQHlvbmdtaW5vZmZpY2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636725 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZXZhaW5lQHlvbmdtaW5vZmZpY2UuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 8.210.147.41
country_id: 1819730
description:
Jun 16 19:06:07 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 8.210.147.41 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 123.17.15.28
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/4eme-reunion-du-bureau-de-la-ccr-uemoa-le-processus-de-developpement-de-leconomie-des-etats-de-lunion-au-coeur-des-travaux/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.209.18.106
country_id: 192950
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/campagne-nationale-de-reboisement-2023-la-presidence-dans-une-dynamique-de-mobilisation-2/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 186.238.242.194
country_id: 3469034
description:
2026-06-16 19:09:30 dovecot_login authenticator failed for H=(193.210.177.45.fronteirainternet.com.br) [186.238.242.194]:55424: 535 Incorrect authentication data (set_id=contact@cameg-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.46
country_id: 6252001
description:
205.169.39.46 - - [16/Jun/2026:19:09:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10055326&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2hhc2VAZW1haWwuY2hhc2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781636976 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2hhc2VAZW1haWwuY2hhc2UuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.46


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.136.40
country_id: 3469034
description:
Jun 16 19:09:56 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.136.40 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:19:10:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119834&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZWRkaWV2c3ByaW1lc2VhZm9vZEBlLmVkZGlldi5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637005 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZWRkaWV2c3ByaW1lc2VhZm9vZEBlLmVkZGlldi5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:10:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6514844&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2hpcHBpbmdAdGFuc2lubGlhbi5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637013 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2hpcHBpbmdAdGFuc2lubGlhbi5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.238.242.194
country_id: 3469034
description:
Jun 16 19:09:28 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.238.242.194 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:19:10:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6450586&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637043 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:10:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7380381&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637046 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.216.214.226
country_id: 933860
description:
Jun 16 19:11:25 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.216.214.226 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.1.185.52
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/c7bcbd HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 170.254.163.179
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/tag/au-business-forum-du-commonwealth HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 19:12:45 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:46392: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:14:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:14:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:14:05 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 19:14:19 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:56458: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:14:07 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:19:14:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6450586&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637043 HTTP/1.1" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:15:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10196322&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZmFyYWhAYWNvbGl0ZS5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637311 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZmFyYWhAYWNvbGl0ZS5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 95.0.32.31
country_id: 298795
description:
Jun 16 19:15:14 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 95.0.32.31 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 170.64.241.20
country_id: 2077456
description:
170.64.241.20 - - [16/Jun/2026:19:14:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6450586&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637043 HTTP/1.1" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.241.20


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 170.64.241.20
country_id: 2077456
description:
170.64.241.20 - - [16/Jun/2026:19:15:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6450586&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637043 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.241.20


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 191.241.200.12
country_id: 3469034
description:
191.241.200.12 - - [16/Jun/2026:19:15:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7127916&pdata=https%253A%252F%252Ftogodailynews.tg%252Fnoel-2025-faure-gnassingbe-apporte-la-joie-et-le-reconfort-aux-enfants-de-lhopital-de-be%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637345 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/noel-2025-faure-gnassingbe-apporte-la-joie-et-le-reconfort-aux-enfants-de-lhopital-de-be/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.5056.1319 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:191.241.200.12


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.116.242.211
country_id: 1269750
description:
[2026-06-16 19:16:11 +0000] info [cpaneld] 66.116.242.211 - emt "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emt (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:19:16:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10076818&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2hhc2VAZW1haWwuY2hhc2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637372 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2hhc2VAZW1haWwuY2hhc2UuY29t" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:16:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9858201&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdnRtc0BzcHNiLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637384 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dnRtc0BzcHNiLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 35.254.209.97
country_id: 6252001
domain: ca-togo.org
description:
IM360 WAF: Bad file extension||RSV:8.18||T:APACHE||MVN:REQUEST_FILENAME||MV:/www.sanlam.com||User:egjvuiox||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:17:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13146471&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaW5mb0BzdGF0cy5nb3Yuc2E%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637430 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aW5mb0BzdGF0cy5nb3Yuc2E=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.61.130.187
country_id: 6252001
description:
[2026-06-16 19:17:52 +0000] info [cpaneld] 45.61.130.187 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 75.167.172.82
country_id: 6252001
description:
Jun 16 19:18:31 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 75.167.172.82 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 75.167.172.82
country_id: 6252001
description:
2026-06-16 19:18:33 dovecot_plain authenticator failed for H=(8ohf1yl8i7s88as4lbch) [75.167.172.82]:53243: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.156.118.140
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/ecobank-signale-une-hausse-de-194-des-prets-aux-entreprises-dirigees-par-des-femmes-les-programmes-axes-sur-legalite-des-sexes-stimulant-la-croissance-locale-a-travers-lafrique/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:19:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7037338&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637538 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:18:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6776984&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637537 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 71.172.154.91
country_id: 6252001
description:
Jun 16 19:18:24 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 71.172.154.91 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 71.172.154.91
country_id: 6252001
description:
2026-06-16 19:18:26 dovecot_plain authenticator failed for H=pool-71-172-154-91.nwrknj.fios.verizon.net (95u234a6tuwmxr9h1sgl20hdreogjb) [71.172.154.91]:48495: 535 Incorrect authentication data (set_id=david.ayivi@mesyscom.com)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 170.64.241.20
country_id: 2077456
description:
170.64.241.20 - - [16/Jun/2026:19:19:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6450586&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637043 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.241.20


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 170.64.241.20
country_id: 2077456
description:
170.64.241.20 - - [16/Jun/2026:19:19:51 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6450586&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637043" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.241.20


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.97.223
country_id: 3865483
description:
Jun 16 19:20:56 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.97.223 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.44
country_id: 6252001
description:
205.169.39.44 - - [16/Jun/2026:19:20:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7115412&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Da2luc3RvcmVtYW5hZ2Vyc0BtZWdhbWFydC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637644 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=a2luc3RvcmVtYW5hZ2Vyc0BtZWdhbWFydC5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.44


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:20:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13147291&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dcm9taW5hLnBpbnRvQGhvc3BpdGFscHJpdmFkb3NhLmNvbS5hcg%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637648 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cm9taW5hLnBpbnRvQGhvc3BpdGFscHJpdmFkb3NhLmNvbS5hcg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 123.6.49.12
country_id: 1814991
description:
123.6.49.12 - - [16/Jun/2026:19:21:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7365233&pdata=https%253A%252F%252Ftdn.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637693 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/" "Mozilla/5.0 (Linux; Android 11; CPH2185) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.12


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.175.5.84
country_id: 6252001
description:
[2026-06-16 19:21:44 +0000] info [cpaneld] 107.175.5.84 - camaegdtomgo "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:19:22:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6723434&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Da2luc3RvcmVtYW5hZ2Vyc0BtZWdhbWFydC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637729 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=a2luc3RvcmVtYW5hZ2Vyc0BtZWdhbWFydC5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.61.130.187
country_id: 6252001
description:
[2026-06-16 19:23:12 +0000] info [cpaneld] 45.61.130.187 - kwbcfbmo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kwbcfbmo (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:19:24:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7064218&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbmFtYnVAbWVzLmNvLmpw&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637843 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bmFtYnVAbWVzLmNvLmpw" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:24:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10393498&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2VjaWxpYS5nYXJyZXJhQGhvc3BpdGFscHJpdmFkb3NhLmNvbS5hcg%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637852 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2VjaWxpYS5nYXJyZXJhQGhvc3BpdGFscHJpdmFkb3NhLmNvbS5hcg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:25:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6843503&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYWdlbmN5LnNpbGxhbWFlQGV1cm9jaGVtLmVl&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637913 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YWdlbmN5LnNpbGxhbWFlQGV1cm9jaGVtLmVl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 195.132.35.238
country_id: 3017382
description:
195.132.35.238 - - [16/Jun/2026:19:25:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862 HTTP/1.1" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.132.35.238


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:24:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12804554&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637863 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:19:24:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.16
country_id: 6252001
description:
205.169.39.16 - - [16/Jun/2026:19:28:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000230&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYW1lcmlwcmlzZWZpbmFuY2lhbEBub3RpZnkuYW1lcmlwcmlzZS5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638124 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YW1lcmlwcmlzZWZpbmFuY2lhbEBub3RpZnkuYW1lcmlwcmlzZS5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.16


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.7
country_id: 6252001
description:
205.169.39.7 - - [16/Jun/2026:19:29:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000237&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZGlhQGUuZGlhLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638148 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZGlhQGUuZGlhLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.7


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 195.132.35.238
country_id: 3017382
description:
195.132.35.238 - - [16/Jun/2026:19:30:01 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.132.35.238


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 195.132.35.238
country_id: 3017382
description:
195.132.35.238 - - [16/Jun/2026:19:30:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.132.35.238


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:29:29 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.14
country_id: 6252001
description:
205.169.39.14 - - [16/Jun/2026:19:29:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6867044&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdGhlY2hpbGRyZW5zcGxhY2VAZW1haWwuY2hpbGRyZW5zcGxhY2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638160 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dGhlY2hpbGRyZW5zcGxhY2VAZW1haWwuY2hpbGRyZW5zcGxhY2UuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.14


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:29:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:29:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:29:32 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 109.206.121.185
country_id: 6290252
description:
Jun 16 19:31:09 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 109.206.121.185 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 109.206.121.185
country_id: 6290252
description:
Jun 16 19:31:22 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 109.206.121.185 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.217.140.140
country_id: 2635167
description:
[2026-06-16 19:31:22 +0000] info [whostmgrd] 2.217.140.140 - netmast "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.57
country_id: 6252001
description:
205.169.39.57 - - [16/Jun/2026:19:32:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9987737&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaHl1bmRhaV9tb3Rvcl9hbWVyaWNhQGh5dW5kYWkubXl2ZWhpY2xlLWVtYWlsLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638323 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aHl1bmRhaV9tb3Rvcl9hbWVyaWNhQGh5dW5kYWkubXl2ZWhpY2xlLWVtYWlsLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.57


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 154.73.250.106
country_id: 357994
domain: educplusmedia.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:154.73.250.106||TA:154.73.250.106||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:32:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10381156&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcG9zdG1hc3RlckBldnJhei5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638363 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cG9zdG1hc3RlckBldnJhei5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:34:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12949704&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638457 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:34:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9881201&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638458 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 37.159.23.70
country_id: 3175395
description:
37.159.23.70 - - [16/Jun/2026:19:35:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.159.23.70


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 37.159.23.70
country_id: 3175395
description:
37.159.23.70 - - [16/Jun/2026:19:35:10 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.159.23.70


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:19:34:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515093&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYW1lcmlwcmlzZWZpbmFuY2lhbEBub3RpZnkuYW1lcmlwcmlzZS5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638467 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YW1lcmlwcmlzZWZpbmFuY2lhbEBub3RpZnkuYW1lcmlwcmlzZS5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.100
country_id: 3469034
description:
2026-06-16 19:34:30 dovecot_plain authenticator failed for H=([192.168.15.9]) [104.28.152.100]:32910: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:19:34:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7129496&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2FyZGhvbGRlckBlLnN5bmNocm9ueWZpbmFuY2lhbC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638475 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2FyZGhvbGRlckBlLnN5bmNocm9ueWZpbmFuY2lhbC5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.181.141.115
country_id: 2635167
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:107.181.141.115||TA:107.181.141.115||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 103.114.59.142
country_id: 1269750
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:103.114.59.142||TA:103.114.59.142||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 209.242.201.243
country_id: 3190538
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:209.242.201.243||TA:209.242.201.243||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 195.132.35.238
country_id: 3017382
description:
195.132.35.238 - - [16/Jun/2026:19:35:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862 HTTP/1.1" 404 561 afrique-distribution.net "http://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515097&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781637862" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.132.35.238


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - contact@ciieeinternational.org [06/16/2026:19:36:31 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: contact@ciieeinternational.org


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 94.176.212.123
country_id: 3175395
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:94.176.212.123||TA:94.176.212.123||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 92.113.119.229
country_id: 798544
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:92.113.119.229||TA:92.113.119.229||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:38:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9738132&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dbm9yaW50YW5Ac3BzYi5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638687 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bm9yaW50YW5Ac3BzYi5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:19:37:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10132377&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdGhlY2hpbGRyZW5zcGxhY2VAZW1haWwuY2hpbGRyZW5zcGxhY2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638647 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dGhlY2hpbGRyZW5zcGxhY2VAZW1haWwuY2hpbGRyZW5zcGxhY2UuY29t" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 62.201.244.100
country_id: 99237
description:
62.201.244.100 - - [16/Jun/2026:19:37:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9805156&pdata=https%253A%252F%252Fcpanel.batika.free.netmaster.tg%252F%253Flocale%253Dzh&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638662 HTTP/2.0" 302 0 cpanel.batika.free.netmaster.tg "https://cpanel.batika.free.netmaster.tg/?locale=zh" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:62.201.244.100


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 140.99.199.176
country_id: 3017382
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:140.99.199.176||TA:140.99.199.176||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.165.202.121
country_id: 2782113
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2023/12/otr-banque-mondiale.jpg 1280w, http:/togodailynews.tg/wp-content/uploads/2023/12/otr-banque-mondiale-300x188.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2023/12/otr-banque-mondiale-1024x640.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2023/12/otr-banque-mondiale-768x480.jpg 768w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:38:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7247767&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZGlhcnNhLmRAbHBzLmdvLmlk&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638715 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZGlhcnNhLmRAbHBzLmdvLmlk" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:39:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051930&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638762 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:19:39:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6985880&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638766 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.57
country_id: 6252001
description:
205.169.39.57 - - [16/Jun/2026:19:39:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10132841&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcmVzZXJ2YXRpb25zQHJlcy1tYXJyaW90dC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638780 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cmVzZXJ2YXRpb25zQHJlcy1tYXJyaW90dC5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.57


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.57
country_id: 6252001
description:
205.169.39.57 - - [16/Jun/2026:19:41:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7521994&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbXVmdGkuaW5kcmFAb2prLmdvLmlk&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638868 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bXVmdGkuaW5kcmFAb2prLmdvLmlk" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.57


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.20
country_id: 6252001
description:
205.169.39.20 - - [16/Jun/2026:19:41:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6866538&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYXV0b3pvbmVAZW0uYXV0b3pvbmUuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638872 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YXV0b3pvbmVAZW0uYXV0b3pvbmUuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.20


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 74.244.119.37
country_id: 2300660
description:
[2026-06-16 19:40:35 +0000] info [webmaild] 74.244.119.37 - contact@ave2.mairie.tg "POST /cpsess4905992182/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [41.207.181.198] != Current IP Address [74.244.119.37]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:19:40:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9922673&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYXZlbnVlQGUuYXZlbnVlLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638836 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YXZlbnVlQGUuYXZlbnVlLmNvbQ==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:19:40:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13277080&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaHl1bmRhaV9tb3Rvcl9hbWVyaWNhQGh5dW5kYWkubXl2ZWhpY2xlLWVtYWlsLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638844 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aHl1bmRhaV9tb3Rvcl9hbWVyaWNhQGh5dW5kYWkubXl2ZWhpY2xlLWVtYWlsLmNvbQ==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 73.154.183.93
country_id: 6252001
description:
Jun 16 19:40:47 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 73.154.183.93 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 73.154.183.93
country_id: 6252001
description:
2026-06-16 19:40:49 dovecot_plain authenticator failed for H=(jaknyso4tmjo38hq1y3b0lgp3itz2zsv) [73.154.183.93]:51664: 535 Incorrect authentication data (set_id=ptitrikou@mesyscom.com)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.20
country_id: 6252001
description:
205.169.39.20 - - [16/Jun/2026:19:41:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10274204&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Db3JkZXJzQGVtLmF1dG96b25lLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638904 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=b3JkZXJzQGVtLmF1dG96b25lLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.20


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.5
country_id: 6252001
description:
205.169.39.5 - - [16/Jun/2026:19:41:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9790870&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc3lod2FuZzNAbmFub2xveS5jby5rcg%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638893 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c3lod2FuZzNAbmFub2xveS5jby5rcg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.5


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.30
country_id: 6252001
description:
205.169.39.30 - - [16/Jun/2026:19:41:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6722501&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbnQuZ2lhbmdAbmFub2xveS5jby5rcg%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638893 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bnQuZ2lhbmdAbmFub2xveS5jby5rcg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.30


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:19:43:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9868953&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZGlhQGUuZGlhLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638994 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZGlhQGUuZGlhLmNvbQ==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 24.144.77.78
country_id: 2750405
description:
24.144.77.78 - - [16/Jun/2026:19:42:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7365482&pdata=https%253A%252F%252Fcrepsad.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781638941 HTTP/2.0" 302 0 crepsad.tg "https://crepsad.tg/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:24.144.77.78


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:43:27 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 91.134.142.216
country_id: 3017382
description:
91.134.142.216 - - [16/Jun/2026:19:43:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6591384&pdata=https%253A%252F%252Fceni.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639013 HTTP/2.0" 302 0 ceni.tg "https://ceni.tg/" "Mozilla/5.0 (Linux; arm_64; Android 14; TECNO KL5n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7680.115 YaBrowser/26.4.4.115.00 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:91.134.142.216


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.30.33.139
country_id: 2510769
description:
212.30.33.139 - - [16/Jun/2026:19:43:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10195863&pdata=http%253A%252F%252Fcrepsad.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639018 HTTP/1.1" 302 0 crepsad.tg "http://crepsad.tg/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.37 Mobile/O6ZM6Z Safari/620.31" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.30.33.139


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:43:24 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:43:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:43:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.2.107.246
country_id: 6252001
domain: cafe.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/cafe.tg/jimi-hope-cafe-informatique-offre-une-journee-hommage-memorable/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 69.17.103.209
country_id: 6252001
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/09/Photo-RRR-600x375-1.jpg HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:19:46:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9989275&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Db3JkZXJzQGVtLmF1dG96b25lLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639217 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=b3JkZXJzQGVtLmF1dG96b25lLmNvbQ==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:19:46:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7106670&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcmVzZXJ2YXRpb25zQHJlcy1tYXJyaW90dC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639218 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cmVzZXJ2YXRpb25zQHJlcy1tYXJyaW90dC5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:47:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7040155&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZGFuZXNoQGR5bmFjaWF0ZS5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639227 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZGFuZXNoQGR5bmFjaWF0ZS5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.245
country_id: 1643084
description:
[2026-06-16 19:47:06 +0000] info [cpaneld] 185.213.83.245 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:48:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6515046&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbW9oZG5hemlydWxub3JtYW5AZHluYWNpYXRlLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639292 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bW9oZG5hemlydWxub3JtYW5AZHluYWNpYXRlLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:19:48:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7171479&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbXVmdGkuaW5kcmFAb2prLmdvLmlk&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639296 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bXVmdGkuaW5kcmFAb2prLmdvLmlk" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.78.6.44
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/a4aa6f HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:48:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9737882&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbW9oYW1hZGZpcmRhdXNyb3NsYW5AZHluYWNpYXRlLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639324 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bW9oYW1hZGZpcmRhdXNyb3NsYW5AZHluYWNpYXRlLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:48:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9749607&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639309 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:48:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7311974&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639310 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.226.8.40
country_id: 3865483
description:
[2026-06-16 19:50:19 +0000] info [cpaneld] 190.226.8.40 - leade "GET /login/?login_only=1&user=leade&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leade (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:49:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6920855&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYW5hbmRhQGR5bmFjaWF0ZS5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639364 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YW5hbmRhQGR5bmFjaWF0ZS5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.12.180
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/767177 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.104.48.230
country_id: 3865483
description:
[2026-06-16 19:50:01 +0000] info [cpaneld] 190.104.48.230 - leadelles "GET /login/?login_only=1&user=leadelles&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadelles (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.92.100.102
country_id: 2542007
description:
[2026-06-16 19:50:05 +0000] info [cpaneld] 41.92.100.102 - leadellestg "GET /login/?login_only=1&user=leadellestg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadellestg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.111.245.54
country_id: 1210997
description:
[2026-06-16 19:50:07 +0000] info [cpaneld] 37.111.245.54 - leadelle "GET /login/?login_only=1&user=leadelle&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadelle (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 27.125.250.238
country_id: 1733045
description:
[2026-06-16 19:50:08 +0000] info [cpaneld] 27.125.250.238 - leadelle "GET /login/?login_only=1&user=leadelle&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadelle (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.105.29.180
country_id: 3996063
description:
[2026-06-16 19:50:15 +0000] info [cpaneld] 143.105.29.180 - leadel "GET /login/?login_only=1&user=leadel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadel (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:19:50:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13134535&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYXV0b3pvbmVAZW0uYXV0b3pvbmUuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639415 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YXV0b3pvbmVAZW0uYXV0b3pvbmUuY29t" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:49:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10263493&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYW11dGhhQHR1bmFzYXNhbC5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639373 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YW11dGhhQHR1bmFzYXNhbC5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 90.151.82.219
country_id: 2017370
description:
[2026-06-16 19:50:02 +0000] info [cpaneld] 90.151.82.219 - leadellestg "GET /login/?login_only=1&user=leadellestg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadellestg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.7.162.26
country_id: 3508796
description:
[2026-06-16 19:50:10 +0000] info [cpaneld] 186.7.162.26 - leadell "GET /login/?login_only=1&user=leadell&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadell (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.236.55.89
country_id: 3469034
description:
[2026-06-16 19:50:19 +0000] info [cpaneld] 45.236.55.89 - leade "GET /login/?login_only=1&user=leade&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leade (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.181.161.87
country_id: 2921044
description:
[2026-06-16 19:50:29 +0000] info [cpaneld] 95.181.161.87 - le "GET /login/?login_only=1&user=le&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user le (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.145.164.162
country_id: 2542007
description:
[2026-06-16 19:50:38 +0000] info [cpaneld] 197.145.164.162 - chusotg "GET /login/?login_only=1&user=chusotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user chusotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.185.80.186
country_id: 6252001
description:
[2026-06-16 19:50:41 +0000] info [cpaneld] 89.185.80.186 - chus "GET /login/?login_only=1&user=chus&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user chus (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.177.89.193
country_id: 2542007
description:
[2026-06-16 19:50:43 +0000] info [cpaneld] 160.177.89.193 - chu "GET /login/?login_only=1&user=chu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user chu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.77.198.16
country_id: 3617476
description:
[2026-06-16 19:50:47 +0000] info [cpaneld] 186.77.198.16 - ch "GET /login/?login_only=1&user=ch&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ch (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 85.174.202.248
country_id: 2017370
description:
[2026-06-16 19:50:22 +0000] info [cpaneld] 85.174.202.248 - lead "GET /login/?login_only=1&user=lead&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lead (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.84.59.178
country_id: 3469034
description:
[2026-06-16 19:50:25 +0000] info [cpaneld] 189.84.59.178 - lea "GET /login/?login_only=1&user=lea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lea (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.60.64.104
country_id: 3895114
description:
[2026-06-16 19:50:35 +0000] info [cpaneld] 179.60.64.104 - chuso "GET /login/?login_only=1&user=chuso&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user chuso (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.62.89.145
country_id: 3585968
description:
[2026-06-16 19:50:41 +0000] info [cpaneld] 190.62.89.145 - chus "GET /login/?login_only=1&user=chus&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user chus (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.163.95.221
country_id: 3895114
description:
[2026-06-16 19:50:25 +0000] info [cpaneld] 190.163.95.221 - lea "GET /login/?login_only=1&user=lea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lea (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.244.135.29
country_id: 3865483
description:
[2026-06-16 19:50:32 +0000] info [cpaneld] 74.244.135.29 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.204.121.52
country_id: 3469034
description:
[2026-06-16 19:50:37 +0000] info [cpaneld] 138.204.121.52 - chusotg "GET /login/?login_only=1&user=chusotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user chusotg (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.46.69.196
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/988076236 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.249.97.247
country_id: 2542007
description:
[2026-06-16 19:50:46 +0000] info [cpaneld] 41.249.97.247 - ch "GET /login/?login_only=1&user=ch&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ch (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.50.148.209
country_id: 2017370
description:
[2026-06-16 19:50:22 +0000] info [cpaneld] 185.50.148.209 - lead "GET /login/?login_only=1&user=lead&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lead (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.184.110.11
country_id: 953987
description:
[2026-06-16 19:50:28 +0000] info [cpaneld] 105.184.110.11 - le "GET /login/?login_only=1&user=le&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user le (has_cpuser_file failed)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>la vie de ma\xc3\xaetre jean yaovi d\xc3\xa9gli, avocat, pr\xc3\xa9sident de \xc2\xab b\xc3\xa2tir le togo \xc2\xbb et ancien ministre et de ses proches serait en danger \xc3\xa0 kpalim\xc3\xa9.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>&nbsp;en effet, le 8 novembre 2025, un drone s\xe2\x80\x99est pr\xc3\xa9sent\xc3\xa9 dans la r\xc3\xa9sidence de l\xe2\x80\x99avocat dans le quartier kligue kondji \xc3\xa0 kpalim\xc3\xa9. les bras du drone qui faisait environ un m\xc3\xa8tre \xc3\xa9taient porteurs de sachets plastiques contenant du poison sous forme de poudre blanche. le mode op\xc3\xa9ratoire&nbsp;utilis\xc3\xa9 par les inconnus serait digne du grand banditisme et des films de fiction.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;</strong>malgr\xc3\xa9 des plaintes d\xc3\xa9pos\xc3\xa9es par ma\xc3\xaetre jean yaovi d\xc3\xa9gli au parquet de kpalim\xc3\xa9, les choses ne semblent pas aller comme l\xe2\x80\x99aurait souhait\xc3\xa9 le plaignant. bien que l\xe2\x80\x99information ait surpris,&nbsp;glac\xc3\xa9 et choqu\xc3\xa9 aussi bien magistrats et agents des forces de s\xc3\xa9curit\xc3\xa9 et de la police judiciaire.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans un communiqu\xc3\xa9 en date du 8 juin 2026, ma\xc3\xaetre jean yaovi d\xc3\xa9gli proteste contre cette situation et demande que ses droits de citoyen togolais et plus particuli\xc3\xa8rement son droit \xc3\xa0 la justice soit respect\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31006,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31006\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong><u>lire l\xe2\x80\x99integralite du communique</u></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le 8 novembre 2025, un drone qui \xc3\xa9tait pr\xc3\xa9alablement venu faire du rep\xc3\xa9rage la veille vers 20 heures, s\xe2\x80\x99est pr\xc3\xa9sent\xc3\xa9 dans ma r\xc3\xa9sidence dans le quartier kligue kondji \xc3\xa0 kpalim\xc3\xa9. les bras de ce drone qui faisait environ un m\xc3\xa8tre \xc3\xa9taient porteurs de sachets plastiques contenant du poison sous forme de poudre blanche.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>se positionnant au-dessus des palmiers qui surplombent les bacs \xc3\xa0 poissons qui sont dans la r\xc3\xa9sidence et en faisant des mouvements de haut en bas lui permettant de frotter les sachets contre les piquants des palmiers, il a d\xc3\xa9vers\xc3\xa9 du poison aussi bien dans les bacs \xc3\xa0 poissons que sur les noix de palmes, les foug\xc3\xa8res et les spadices qui les couvrent. plus de 1300 poissons sont morts et d\xe2\x80\x99autres animaux mourront dans la r\xc3\xa9sidence les jours et semaines qui suivirent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>inform\xc3\xa9 de la situation par le gardien, j\xe2\x80\x99ai imm\xc3\xa9diatement saisi le parquet de kpalim\xc3\xa9 d\xe2\x80\x99une plainte verbale, et ledit parquet a saisi les forces de l\xe2\x80\x99ordre et la police judiciaire qui se sont rendues sur place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l\xe2\x80\x99information a surpris et choqu\xc3\xa9 aussi bien magistrats et agent des forces de s\xc3\xa9curit\xc3\xa9 qui n\xe2\x80\x99ont pas compris comme dans un pays comme le n\xc3\xb4tre des gens peuvent se permettre de prendre un drone pour aller commettre des infractions dans une r\xc3\xa9sidence priv\xc3\xa9e, ce qui met la vie de tout citoyen en danger.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour confirmer ma plainte orale du 8 novembre 2025, j\xe2\x80\x99ai d\xc3\xa9pos\xc3\xa9 une plainte \xc3\xa9crite le&nbsp;<strong>10 novembre 2025</strong> en fournissant tous les \xc3\xa9l\xc3\xa9ments (poissons morts, sachet de poison tomb\xc3\xa9 dans la r\xc3\xa9sidence, photos et enregistrements vid\xc3\xa9o, noix de palmes, foug\xc3\xa8res et spadices couverts du poison, etc.) ainsi que d\xe2\x80\x99autres indices qui doivent permettre de faciliter les enqu\xc3\xaates polici\xc3\xa8res et judiciaires. ayant re\xc3\xa7u quelques temps auparavant des informations assez pr\xc3\xa9cises sur les menaces contre ma personne et la pr\xc3\xa9paration d\xe2\x80\x99actes de repr\xc3\xa9sailles et de r\xc3\xa8glement de compte contre ma personne \xc3\xa0 cause de mes prises de position sur les probl\xc3\xa8mes de quartiers et de cantons \xc3\xa0 kpalim\xc3\xa9, j\xe2\x80\x99ai personnellement pu donner des noms de certains suspects. ce sont d\xe2\x80\x99ailleurs ces informations port\xc3\xa9es \xc3\xa0 ma connaissance quelques semaines avant qui m\xe2\x80\x99ont amen\xc3\xa9 \xc3\xa0 prendre des dispositions pr\xc3\xa9ventives et notamment \xc3\xa0 courir certains des bacs \xc3\xa0 poissons et d\xe2\x80\x99abris d\xe2\x80\x99animaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"622px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:622px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>les personnes suspect\xc3\xa9es de cet odieux acte sont de deux cat\xc3\xa9gories. de simples citoyens qui peuvent \xc3\xaatre poursuivies dans le cadre de proc\xc3\xa9dure judiciaire habituelle et des responsables politico-administratifs qui b\xc3\xa9n\xc3\xa9ficient d\xe2\x80\x99une immunit\xc3\xa9 de juridiction et qui ne peuvent donc \xc3\xaatre poursuivies qu\xe2\x80\x99apr\xc3\xa8s la lev\xc3\xa9e de leur immunit\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour cette raison, j\xe2\x80\x99ai scind\xc3\xa9 ma plainte en deux et ai donc d\xc3\xa9pos\xc3\xa9 la premi\xc3\xa8re contre les personnes ne jouissant pas d\xe2\x80\x99immunit\xc3\xa9 afin de faciliter la mise en route et la c\xc3\xa9l\xc3\xa9rit\xc3\xa9 des enqu\xc3\xaates dans une affaire o\xc3\xb9 le mode op\xc3\xa9ratoire digne du grand banditisme et des films de fiction ne pouvait en r\xc3\xa9alit\xc3\xa9 que conduire \xc3\xa0 la prise des d\xc3\xa9cisions diligentes dans un pays comme le n\xc3\xb4tre qui est tr\xc3\xa8s \xc3\xa0 cheval sur les question de s\xc3\xa9curit\xc3\xa9 et qui est justement menac\xc3\xa9 par un terrorisme qui use de drone pour agir. h\xc3\xa9las, le silence qu\xe2\x80\x99il m\xe2\x80\x99a \xc3\xa9t\xc3\xa9 demand\xc3\xa9 de garder pour faciliter les enqu\xc3\xaates est devenu aujourd\xe2\x80\x99hui un v\xc3\xa9ritable gu\xc3\xaapier.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en effet, un certain nombre de personnes du monde politique et judiciaire qui m\xe2\x80\x99en veulent et pensent pouvoir profiter de cette affaire pour r\xc3\xa9gler des comptes personnels, ou qui veulent prot\xc3\xa9ger les malfrats ont d\xc3\xa9cid\xc3\xa9 d\xe2\x80\x99\xc3\xa9touffer l\xe2\x80\x99affaire et de me faire subir <strong>un d\xc3\xa9ni de justice</strong>. certains ont d\xe2\x80\x99ailleurs d\xc3\xa9j\xc3\xa0 bloqu\xc3\xa9 ou tent\xc3\xa9 de bloquer d\xe2\x80\x99autres proc\xc3\xa9dures ou d\xe2\x80\x99autres saisines d\xe2\x80\x99autres institutions dans l\xe2\x80\x99int\xc3\xa9r\xc3\xaat de mes clients ou des membres de ma communaut\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99est ainsi que depuis le d\xc3\xa9but de la proc\xc3\xa9dure, tous les actes \xc3\xa9mis et destin\xc3\xa9s aux divers services de l\xe2\x80\x99etat qui doivent conduire les enqu\xc3\xaates sont syst\xc3\xa9matiquement bloqu\xc3\xa9s par le canal ou la voie hi\xc3\xa9rarchique qui doit les leur faire parvenir.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pire, d\xc3\xa8s que j\xe2\x80\x99ai plus tard, d\xc3\xa9pos\xc3\xa9 la deuxi\xc3\xa8me plainte contre les personnes suspect\xc3\xa9es mais b\xc3\xa9n\xc3\xa9ficiant d\xe2\x80\x99une immunit\xc3\xa9 de juridiction, au lieu que la proc\xc3\xa9dure permettant la lev\xc3\xa9e de leur immunit\xc3\xa9 soit enclench\xc3\xa9e en vue de permettre l\xe2\x80\x99ouverture des enqu\xc3\xaates \xc3\xa0 leur encontre, il a plut\xc3\xb4t \xc3\xa9t\xc3\xa9 demand\xc3\xa9 au rouage de la justice en charge de la premi\xc3\xa8re plainte se d\xc3\xa9clarer incomp\xc3\xa9tent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>or en mati\xc3\xa8re judiciaire, il ne peut jamais \xc3\xaatre demand\xc3\xa9 \xc3\xa0 une juridiction ou \xc3\xa0 un magistrat de d\xc3\xa9cliner sa comp\xc3\xa9tence tant qu\xe2\x80\x99une juridiction n\xe2\x80\x99est pas saisie de la m\xc3\xaame affaire ou qu\xe2\x80\x99on ne lui indique pas la juridiction comp\xc3\xa9tente qui doit se saisir de l\xe2\x80\x99affaire.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la cons\xc3\xa9quence en est qu\xe2\x80\x99\xc3\xa0 ce jour, soit plus de sept (07) mois apr\xc3\xa8s la survenance de ces \xc3\xa9v\xc3\xa9nements graves et la saisine de la justice, aucune enqu\xc3\xaate n\xe2\x80\x99a \xc3\xa9t\xc3\xa9 men\xc3\xa9e. m\xc3\xaame les analyses d\xe2\x80\x99\xc3\xa9chantillons de poissons pr\xc3\xa9lev\xc3\xa9s et du poison utilis\xc3\xa9 n\xe2\x80\x99ont pas \xc3\xa9t\xc3\xa9 faites. pire, on vient de nous informer que les \xc3\xa9chantillons qui ont \xc3\xa9t\xc3\xa9 pr\xc3\xa9lev\xc3\xa9es \xc3\xa0 deux dates diff\xc3\xa9rentes des poissons tu\xc3\xa9s et des produits consommables (noix de palmes, foug\xc3\xa8res et spadices) souill\xc3\xa9s par le poison ont disparu comme par enchantement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>et pendant ce temps les autres preuves s\xe2\x80\x99effritent, les malfrats se prom\xc3\xa8nent et des animaux continuent de mourir dans ma r\xc3\xa9sidence o\xc3\xb9 la vie du gardien et de sa famille, la mienne et celle de mes proches sont constamment menac\xc3\xa9es et nous emp\xc3\xaachent de pouvoir jouir sereinement des lieux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image -->\n<figure class=\"wp-block-image\"><img alt=\"\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>il est inadmissible que des personnes cens\xc3\xa9es prot\xc3\xa9ger les citoyens et/ou faire appliquer la loi se servent de leur position pour violer les droits des citoyens.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>je proteste contre cette situation et demande que mes droits de citoyens togolais et plus particuli\xc3\xa8rement mon droit \xc3\xa0 la justice soit respect\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>je me r\xc3\xa9serve le droit, dans les jours \xc3\xa0 venir, d\xe2\x80\x99engager diverses actions et de donner plus de d\xc3\xa9tails sur les noms des diverses personnes impliqu\xc3\xa9es dans cette machination dont je prends ici les plus hautes autorit\xc3\xa9s togolaises, le peuple togolais et la communaut\xc3\xa9 internationale \xc3\xa0 t\xc3\xa9moin.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;fait \xc3\xa0 lom\xc3\xa9, le 08 juin 2026</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>ma\xc3\xaetre jean yaovi d\xc3\xa9gli</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;&nbsp; avocat</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pr\xc3\xa9sident de \xc2\xab <strong>b\xc3\xa2tir le togo</strong>&nbsp;\xc2\xbb</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ancien ministre</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>(in le medium n\xc2\xb0707 du 16 au 22 juin 2026)</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>la vie de ma\xc3\xaetre jean yaovi d\xc3\xa9gli, avocat, pr\xc3\xa9sident de \xc2\xab b\xc3\xa2tir le togo \xc2\xbb et ancien ministre et de ses proches serait en danger \xc3\xa0 kpalim\xc3\xa9.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>&nbsp;en effet, le 8 novembre 2025, un drone s\xe2\x80\x99est pr\xc3\xa9sent\xc3\xa9 dans la r\xc3\xa9sidence de l\xe2\x80\x99avocat dans le quartier kligue kondji \xc3\xa0 kpalim\xc3\xa9. les bras du drone qui faisait environ un m\xc3\xa8tre \xc3\xa9taient porteurs de sachets plastiques contenant du poison sous forme de poudre blanche. le mode op\xc3\xa9ratoire&nbsp;utilis\xc3\xa9 par les inconnus serait digne du grand banditisme et des films de fiction.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;</strong>malgr\xc3\xa9 des plaintes d\xc3\xa9pos\xc3\xa9es par ma\xc3\xaetre jean yaovi d\xc3\xa9gli au parquet de kpalim\xc3\xa9, les choses ne semblent pas aller comme l\xe2\x80\x99aurait souhait\xc3\xa9 le plaignant. bien que l\xe2\x80\x99information ait surpris,&nbsp;glac\xc3\xa9 et choqu\xc3\xa9 aussi bien magistrats et agents des forces de s\xc3\xa9curit\xc3\xa9 et de la police judiciaire.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans un communiqu\xc3\xa9 en date du 8 juin 2026, ma\xc3\xaetre jean yaovi d\xc3\xa9gli proteste contre cette situation et demande que ses droits de citoyen togolais et plus particuli\xc3\xa8rement son droit \xc3\xa0 la justice soit respect\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31006,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31006\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong><u>lire l\xe2\x80\x99integralite du communique</u></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le 8 novembre 2025, un drone qui \xc3\xa9tait pr\xc3\xa9alablement venu faire du rep\xc3\xa9rage la veille vers 20 heures, s\xe2\x80\x99est pr\xc3\xa9sent\xc3\xa9 dans ma r\xc3\xa9sidence dans le quartier kligue kondji \xc3\xa0 kpalim\xc3\xa9. les bras de ce drone qui faisait environ un m\xc3\xa8tre \xc3\xa9taient porteurs de sachets plastiques contenant du poison sous forme de poudre blanche.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>se positionnant au-dessus des palmiers qui surplombent les bacs \xc3\xa0 poissons qui sont dans la r\xc3\xa9sidence et en faisant des mouvements de haut en bas lui permettant de frotter les sachets contre les piquants des palmiers, il a d\xc3\xa9vers\xc3\xa9 du poison aussi bien dans les bacs \xc3\xa0 poissons que sur les noix de palmes, les foug\xc3\xa8res et les spadices qui les couvrent. plus de 1300 poissons sont morts et d\xe2\x80\x99autres animaux mourront dans la r\xc3\xa9sidence les jours et semaines qui suivirent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>inform\xc3\xa9 de la situation par le gardien, j\xe2\x80\x99ai imm\xc3\xa9diatement saisi le parquet de kpalim\xc3\xa9 d\xe2\x80\x99une plainte verbale, et ledit parquet a saisi les forces de l\xe2\x80\x99ordre et la police judiciaire qui se sont rendues sur place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l\xe2\x80\x99information a surpris et choqu\xc3\xa9 aussi bien magistrats et agent des forces de s\xc3\xa9curit\xc3\xa9 qui n\xe2\x80\x99ont pas compris comme dans un pays comme le n\xc3\xb4tre des gens peuvent se permettre de prendre un drone pour aller commettre des infractions dans une r\xc3\xa9sidence priv\xc3\xa9e, ce qui met la vie de tout citoyen en danger.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour confirmer ma plainte orale du 8 novembre 2025, j\xe2\x80\x99ai d\xc3\xa9pos\xc3\xa9 une plainte \xc3\xa9crite le&nbsp;<strong>10 novembre 2025</strong> en fournissant tous les \xc3\xa9l\xc3\xa9ments (poissons morts, sachet de poison tomb\xc3\xa9 dans la r\xc3\xa9sidence, photos et enregistrements vid\xc3\xa9o, noix de palmes, foug\xc3\xa8res et spadices couverts du poison, etc.) ainsi que d\xe2\x80\x99autres indices qui doivent permettre de faciliter les enqu\xc3\xaates polici\xc3\xa8res et judiciaires. ayant re\xc3\xa7u quelques temps auparavant des informations assez pr\xc3\xa9cises sur les menaces contre ma personne et la pr\xc3\xa9paration d\xe2\x80\x99actes de repr\xc3\xa9sailles et de r\xc3\xa8glement de compte contre ma personne \xc3\xa0 cause de mes prises de position sur les probl\xc3\xa8mes de quartiers et de cantons \xc3\xa0 kpalim\xc3\xa9, j\xe2\x80\x99ai personnellement pu donner des noms de certains suspects. ce sont d\xe2\x80\x99ailleurs ces informations port\xc3\xa9es \xc3\xa0 ma connaissance quelques semaines avant qui m\xe2\x80\x99ont amen\xc3\xa9 \xc3\xa0 prendre des dispositions pr\xc3\xa9ventives et notamment \xc3\xa0 courir certains des bacs \xc3\xa0 poissons et d\xe2\x80\x99abris d\xe2\x80\x99animaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"622px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:622px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>les personnes suspect\xc3\xa9es de cet odieux acte sont de deux cat\xc3\xa9gories. de simples citoyens qui peuvent \xc3\xaatre poursuivies dans le cadre de proc\xc3\xa9dure judiciaire habituelle et des responsables politico-administratifs qui b\xc3\xa9n\xc3\xa9ficient d\xe2\x80\x99une immunit\xc3\xa9 de juridiction et qui ne peuvent donc \xc3\xaatre poursuivies qu\xe2\x80\x99apr\xc3\xa8s la lev\xc3\xa9e de leur immunit\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour cette raison, j\xe2\x80\x99ai scind\xc3\xa9 ma plainte en deux et ai donc d\xc3\xa9pos\xc3\xa9 la premi\xc3\xa8re contre les personnes ne jouissant pas d\xe2\x80\x99immunit\xc3\xa9 afin de faciliter la mise en route et la c\xc3\xa9l\xc3\xa9rit\xc3\xa9 des enqu\xc3\xaates dans une affaire o\xc3\xb9 le mode op\xc3\xa9ratoire digne du grand banditisme et des films de fiction ne pouvait en r\xc3\xa9alit\xc3\xa9 que conduire \xc3\xa0 la prise des d\xc3\xa9cisions diligentes dans un pays comme le n\xc3\xb4tre qui est tr\xc3\xa8s \xc3\xa0 cheval sur les question de s\xc3\xa9curit\xc3\xa9 et qui est justement menac\xc3\xa9 par un terrorisme qui use de drone pour agir. h\xc3\xa9las, le silence qu\xe2\x80\x99il m\xe2\x80\x99a \xc3\xa9t\xc3\xa9 demand\xc3\xa9 de garder pour faciliter les enqu\xc3\xaates est devenu aujourd\xe2\x80\x99hui un v\xc3\xa9ritable gu\xc3\xaapier.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en effet, un certain nombre de personnes du monde politique et judiciaire qui m\xe2\x80\x99en veulent et pensent pouvoir profiter de cette affaire pour r\xc3\xa9gler des comptes personnels, ou qui veulent prot\xc3\xa9ger les malfrats ont d\xc3\xa9cid\xc3\xa9 d\xe2\x80\x99\xc3\xa9touffer l\xe2\x80\x99affaire et de me faire subir <strong>un d\xc3\xa9ni de justice</strong>. certains ont d\xe2\x80\x99ailleurs d\xc3\xa9j\xc3\xa0 bloqu\xc3\xa9 ou tent\xc3\xa9 de bloquer d\xe2\x80\x99autres proc\xc3\xa9dures ou d\xe2\x80\x99autres saisines d\xe2\x80\x99autres institutions dans l\xe2\x80\x99int\xc3\xa9r\xc3\xaat de mes clients ou des membres de ma communaut\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99est ainsi que depuis le d\xc3\xa9but de la proc\xc3\xa9dure, tous les actes \xc3\xa9mis et destin\xc3\xa9s aux divers services de l\xe2\x80\x99etat qui doivent conduire les enqu\xc3\xaates sont syst\xc3\xa9matiquement bloqu\xc3\xa9s par le canal ou la voie hi\xc3\xa9rarchique qui doit les leur faire parvenir.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pire, d\xc3\xa8s que j\xe2\x80\x99ai plus tard, d\xc3\xa9pos\xc3\xa9 la deuxi\xc3\xa8me plainte contre les personnes suspect\xc3\xa9es mais b\xc3\xa9n\xc3\xa9ficiant d\xe2\x80\x99une immunit\xc3\xa9 de juridiction, au lieu que la proc\xc3\xa9dure permettant la lev\xc3\xa9e de leur immunit\xc3\xa9 soit enclench\xc3\xa9e en vue de permettre l\xe2\x80\x99ouverture des enqu\xc3\xaates \xc3\xa0 leur encontre, il a plut\xc3\xb4t \xc3\xa9t\xc3\xa9 demand\xc3\xa9 au rouage de la justice en charge de la premi\xc3\xa8re plainte se d\xc3\xa9clarer incomp\xc3\xa9tent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>or en mati\xc3\xa8re judiciaire, il ne peut jamais \xc3\xaatre demand\xc3\xa9 \xc3\xa0 une juridiction ou \xc3\xa0 un magistrat de d\xc3\xa9cliner sa comp\xc3\xa9tence tant qu\xe2\x80\x99une juridiction n\xe2\x80\x99est pas saisie de la m\xc3\xaame affaire ou qu\xe2\x80\x99on ne lui indique pas la juridiction comp\xc3\xa9tente qui doit se saisir de l\xe2\x80\x99affaire.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la cons\xc3\xa9quence en est qu\xe2\x80\x99\xc3\xa0 ce jour, soit plus de sept (07) mois apr\xc3\xa8s la survenance de ces \xc3\xa9v\xc3\xa9nements graves et la saisine de la justice, aucune enqu\xc3\xaate n\xe2\x80\x99a \xc3\xa9t\xc3\xa9 men\xc3\xa9e. m\xc3\xaame les analyses d\xe2\x80\x99\xc3\xa9chantillons de poissons pr\xc3\xa9lev\xc3\xa9s et du poison utilis\xc3\xa9 n\xe2\x80\x99ont pas \xc3\xa9t\xc3\xa9 faites. pire, on vient de nous informer que les \xc3\xa9chantillons qui ont \xc3\xa9t\xc3\xa9 pr\xc3\xa9lev\xc3\xa9es \xc3\xa0 deux dates diff\xc3\xa9rentes des poissons tu\xc3\xa9s et des produits consommables (noix de palmes, foug\xc3\xa8res et spadices) souill\xc3\xa9s par le poison ont disparu comme par enchantement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>et pendant ce temps les autres preuves s\xe2\x80\x99effritent, les malfrats se prom\xc3\xa8nent et des animaux continuent de mourir dans ma r\xc3\xa9sidence o\xc3\xb9 la vie du gardien et de sa famille, la mienne et celle de mes proches sont constamment menac\xc3\xa9es et nous emp\xc3\xaachent de pouvoir jouir sereinement des lieux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31157,\"width\":\"612px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/18d98b1d-0295-41c7-afab-fc9c13606bd0-724x1024.jpg\" alt=\"\" class=\"wp-image-31157\" style=\"width:612px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>il est inadmissible que des personnes cens\xc3\xa9es prot\xc3\xa9ger les citoyens et/ou faire appliquer la loi se servent de leur position pour violer les droits des citoyens.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>je proteste contre cette situation et demande que mes droits de citoyens togolais et plus particuli\xc3\xa8rement mon droit \xc3\xa0 la justice soit respect\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>je me r\xc3\xa9serve le droit, dans les jours \xc3\xa0 venir, d\xe2\x80\x99engager diverses actions et de donner plus de d\xc3\xa9tails sur les noms des diverses personnes impliqu\xc3\xa9es dans cette machination dont je prends ici les plus hautes autorit\xc3\xa9s togolaises, le peuple togolais et la communaut\xc3\xa9 internationale \xc3\xa0 t\xc3\xa9moin.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;fait \xc3\xa0 lom\xc3\xa9, le 08 juin 2026</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>ma\xc3\xaetre jean yaovi d\xc3\xa9gli</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;&nbsp; avocat</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pr\xc3\xa9sident de \xc2\xab <strong>b\xc3\xa2tir le togo</strong>&nbsp;\xc2\xbb</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ancien ministre</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>(in le medium n\xc2\xb0707 du 16 au 22 juin 2026)</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.16
country_id: 6252001
description:
205.169.39.16 - - [16/Jun/2026:19:51:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9933259&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dd2VuZHlAbWlsbGlvbmF1dG8uY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639482 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=d2VuZHlAbWlsbGlvbmF1dG8uY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.16


plugin: modsec
rule: 77142104
name: IM360 WAF: Elementor Page Builder < 2.9.6 - Authenticated Safe Mode Privilege Escalation
abuser: 102.211.168.154
country_id: 2363686
domain: camilliens.tg
description:
IM360 WAF: Elementor Page Builder < 2.9.6 - Authenticated Safe Mode Privilege Escalation||RSV:8.18||T:APACHE||MVN:ARGS:actions||MV:{\"enable_safe_mode\":{\"action\":\"enable_safe_mode\",\"data\":{\"editor_post_id\":\"2\"}}}||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:19:55:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7050608&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbnQuZ2lhbmdAbmFub2xveS5jby5rcg%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639736 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bnQuZ2lhbmdAbmFub2xveS5jby5rcg==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:19:55:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7105434&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dd2VuZHlAbWlsbGlvbmF1dG8uY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639736 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=d2VuZHlAbWlsbGlvbmF1dG8uY29t" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:56:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9596827&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2hhaWt5QGN0Y2RldmVsb3BtZW50LmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639768 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2hhaWt5QGN0Y2RldmVsb3BtZW50LmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.177
country_id: 1880251
description:
47.128.96.177 - - [16/Jun/2026:19:56:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6724245&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fdangote-cement%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639771 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/dangote-cement/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.177


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:55:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6526358&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639719 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:19:55:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7246742&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639719 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:57:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13158509&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZGlhbkBwYXJhZGlnbWEuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639837 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZGlhbkBwYXJhZGlnbWEuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:19:58:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9727341&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbGlwc3Rhbm9rMUBsaXBldHNrLnJ1&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639897 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bGlwc3Rhbm9rMUBsaXBldHNrLnJ1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.148
country_id: 2635167
description:
[2026-06-16 19:57:45 +0000] info [cpaneld] 5.230.133.148 NEW wwayrzpl:jkpkIM8Dt01MD8UV address=5.230.133.148,app=cpaneld,creator=wwayrzpl,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:19:59:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10185065&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaHIxQGRleG9uLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781639948 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aHIxQGRleG9uLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:59:55 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:59:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.255.233
country_id: 3017382
domain: test.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/hphhdcxi/public_html/.185353019149974.php||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:19:59:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:19:59:57 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 184.162.107.158
country_id: 6251999
description:
184.162.107.158 - - [16/Jun/2026:20:01:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9858459&pdata=https%253A%252F%252Fdirect7.tg%252Ftag%252Fong-canaan-village&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781640082 HTTP/1.1" 302 0 direct7.tg "https://direct7.tg/tag/ong-canaan-village" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:184.162.107.158


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:20:03:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6986949&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781640209 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:20:03:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9999511&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781640215 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.26
country_id: 2635167
description:
[2026-06-16 20:03:44 +0000] info [cpaneld] 5.230.153.26 NEW qfaclpeg:spjSaahR0sJFMniF address=5.230.153.26,app=cpaneld,creator=qfaclpeg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.95.212.63
country_id: 6252001
description:
[2026-06-16 20:04:08 +0000] info [cpaneld] 143.95.212.63 - mesyscom "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 5.202.234.35
country_id: 130758
description:
Jun 16 20:05:26 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 5.202.234.35 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.82.254.163
country_id: 3469034
description:
[2026-06-16 20:07:09 +0000] info [cpaneld] 170.82.254.163 - bes "GET /login/?login_only=1&user=bes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bes (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:20:07:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7301530&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcG9zdG1hc3RlckBkaXQuZ28udGg%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781640438 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cG9zdG1hc3RlckBkaXQuZ28udGg=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.141.222.112
country_id: 2921044
description:
[2026-06-16 20:06:46 +0000] info [cpaneld] 80.141.222.112 - besteva1 "GET /login/?login_only=1&user=besteva1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user besteva1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 84.54.120.205
country_id: 1512440
description:
[2026-06-16 20:06:51 +0000] info [cpaneld] 84.54.120.205 - besteva1 "GET /login/?login_only=1&user=besteva1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user besteva1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.52.211.156
country_id: 3439705
description:
[2026-06-16 20:06:52 +0000] info [cpaneld] 186.52.211.156 - besteva "GET /login/?login_only=1&user=besteva&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user besteva (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.174.23.51
country_id: 3865483
description:
[2026-06-16 20:07:13 +0000] info [cpaneld] 45.174.23.51 - best "GET /login/?login_only=1&user=best&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user best (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 49.228.248.108
country_id: 1605651
description:
[2026-06-16 20:07:18 +0000] info [cpaneld] 49.228.248.108 - bes "GET /login/?login_only=1&user=bes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bes (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.57.97.134
country_id: 1522867
description:
[2026-06-16 20:06:57 +0000] info [cpaneld] 2.57.97.134 - bestev "GET /login/?login_only=1&user=bestev&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bestev (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.226.242.103
country_id: 3895114
description:
[2026-06-16 20:07:00 +0000] info [cpaneld] 181.226.242.103 - beste "GET /login/?login_only=1&user=beste&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user beste (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.224.120.181
country_id: 3469034
description:
[2026-06-16 20:07:24 +0000] info [cpaneld] 45.224.120.181 - be "GET /login/?login_only=1&user=be&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user be (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:20:08:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9855946&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781640510 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:20:08:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6974365&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781640511 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:20:09:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212528&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZ2FuanVucGVuZ0BkeW5hY2lhdGUuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781640549 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Z2FuanVucGVuZ0BkeW5hY2lhdGUuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:20:09:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9804957&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dbm16QHlhcm9zbGF2bC5ydQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781640569 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bm16QHlhcm9zbGF2bC5ydQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 185.213.230.80
country_id: 1512440
description:
2026-06-16 20:09:39 H=([185.213.230.80]) [185.213.230.80]:30712 F=<John@4452.com> rejected RCPT <j.delbegue@tps.tg>: Sender verify failed


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:20:09:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9803925&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYXZpbmFzaGhhcmlkYXNzQGR5bmFjaWF0ZS5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781640592 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YXZpbmFzaGhhcmlkYXNzQGR5bmFjaWF0ZS5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 121.188.233.158
country_id: 1835841
description:
Jun 16 20:11:02 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 121.188.233.158 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 191.101.114.29
country_id: 290557
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:20-13.191.101.114.29||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 102.165.53.252
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:20-13.102.165.53.252||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.224.191.2
country_id: 3865483
description:
[2026-06-16 20:13:11 +0000] info [cpaneld] 181.224.191.2 - direct7tg "GET /login/?login_only=1&user=direct7tg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user direct7tg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.193.96.194
country_id: 2017370
description:
[2026-06-16 20:13:14 +0000] info [cpaneld] 176.193.96.194 - direct "GET /login/?login_only=1&user=direct&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user direct (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 196.198.13.152
country_id: 241170
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:20-13.196.198.13.152||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.185.55.191
country_id: 3469034
description:
[2026-06-16 20:13:07 +0000] info [cpaneld] 177.185.55.191 - direct7 "GET /login/?login_only=1&user=direct7&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user direct7 (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:20:12:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 181.215.16.161
country_id: 290557
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:20-12.181.215.16.161||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:20:13:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7380074&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcG9zdG1hc3RlckBkaXQuZ28udGg%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781640786 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cG9zdG1hc3RlckBkaXQuZ28udGg=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.71.193.112
country_id: 285570
description:
[2026-06-16 20:13:17 +0000] info [cpaneld] 188.71.193.112 - direct "GET /login/?login_only=1&user=direct&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user direct (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.133.203.96
country_id: 1522867
description:
[2026-06-16 20:13:18 +0000] info [cpaneld] 2.133.203.96 - direc "GET /login/?login_only=1&user=direc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user direc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.53.75.155
country_id: 3469034
description:
[2026-06-16 20:13:21 +0000] info [cpaneld] 177.53.75.155 - direc "GET /login/?login_only=1&user=direc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user direc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.132.249.153
country_id: 1210997
description:
[2026-06-16 20:13:06 +0000] info [cpaneld] 103.132.249.153 - direct7 "GET /login/?login_only=1&user=direct7&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user direct7 (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:20:12:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:20:12:53 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:20:12:54 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 90.134.23.93
country_id: 597427
description:
[2026-06-16 20:13:02 +0000] info [cpaneld] 90.134.23.93 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.177.153.177
country_id: 294640
description:
[2026-06-16 20:13:22 +0000] info [cpaneld] 79.177.153.177 - dire "GET /login/?login_only=1&user=dire&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dire (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 144.48.52.169
country_id: 783754
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:20-13.144.48.52.169||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.18.229.211
country_id: 2017370
description:
[2026-06-16 20:13:29 +0000] info [cpaneld] 188.18.229.211 - dir "GET /login/?login_only=1&user=dir&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dir (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.130.138.144
country_id: 3658394
description:
[2026-06-16 20:13:26 +0000] info [cpaneld] 190.130.138.144 - dire "GET /login/?login_only=1&user=dire&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dire (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.188.33.102
country_id: 2542007
description:
[2026-06-16 20:13:28 +0000] info [cpaneld] 105.188.33.102 - di "GET /login/?login_only=1&user=di&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user di (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:20:15:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10208609&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaW5mb0BzZXZlcnN0YWxtZXRpei5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781640934 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aW5mb0BzZXZlcnN0YWxtZXRpei5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 185.213.230.80
country_id: 1512440
description:
2026-06-16 20:15:49 H=([185.213.230.80]) [185.213.230.80]:29332 F=<John@4452.com> rejected RCPT <j.delbegue@tps.tg>: Sender verify failed


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.24
country_id: 6252001
description:
205.169.39.24 - - [16/Jun/2026:20:15:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7052696&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaGVsZW5fZGluZ0BhbHBoYW5ldHdvcmtzLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781640946 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aGVsZW5fZGluZ0BhbHBoYW5ldHdvcmtzLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.24


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:20:16:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10198471&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781641013 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:20:16:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9856104&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781641017 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.146.112.63
country_id: 587116
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/togo-le-soja-et-lananas-bios-togolais-tres-apprecies-par-les-consommateurs/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:20:16:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9791124&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYWhtYWQuYWxyYWJhYmFoQHRyYWdzZW5naW5lZXJpbmcuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781640990 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YWhtYWQuYWxyYWJhYmFoQHRyYWdzZW5naW5lZXJpbmcuY29t" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 119.155.167.128
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/un-nouveau-programme-de-subventions-ue-ifc-pour-aider-a-restaurer-les-maisons-endommagees-par-la-guerre/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.254.31.106
country_id: 3658394
description:
[2026-06-16 20:20:20 +0000] info [cpaneld] 170.254.31.106 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.78.195.242
country_id: 2017370
description:
[2026-06-16 20:21:22 +0000] info [cpaneld] 37.78.195.242 - ciie "GET /login/?login_only=1&user=ciie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 144.48.133.150
country_id: 1168579
description:
[2026-06-16 20:20:59 +0000] info [cpaneld] 144.48.133.150 - ciieeinterna "GET /login/?login_only=1&user=ciieeinterna&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinterna (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.199.233.198
country_id: 1282988
description:
[2026-06-16 20:20:27 +0000] info [cpaneld] 113.199.233.198 - ciieeinternational "GET /login/?login_only=1&user=ciieeinternational&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternational (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.59.3.151
country_id: 3686110
description:
[2026-06-16 20:20:45 +0000] info [cpaneld] 181.59.3.151 - ciieeinternatio "GET /login/?login_only=1&user=ciieeinternatio&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternatio (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.186.104.48
country_id: 2017370
description:
[2026-06-16 20:20:48 +0000] info [cpaneld] 188.186.104.48 - ciieeinternati "GET /login/?login_only=1&user=ciieeinternati&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternati (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.226.249.168
country_id: 2921044
description:
[2026-06-16 20:21:14 +0000] info [cpaneld] 217.226.249.168 - ciieeint "GET /login/?login_only=1&user=ciieeint&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeint (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.186.251.89
country_id: 248816
description:
[2026-06-16 20:21:20 +0000] info [cpaneld] 91.186.251.89 - ciieein "GET /login/?login_only=1&user=ciieein&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieein (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 141.179.102.102
country_id: 102358
description:
[2026-06-16 20:20:30 +0000] info [cpaneld] 141.179.102.102 - ciieeinternationalorg "GET /login/?login_only=1&user=ciieeinternationalorg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternationalorg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 23.17.49.100
country_id: 6251999
description:
[2026-06-16 20:20:38 +0000] info [cpaneld] 23.17.49.100 - ciieeinternationa "GET /login/?login_only=1&user=ciieeinternationa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternationa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.110.50.154
country_id: 2589581
description:
[2026-06-16 20:20:58 +0000] info [cpaneld] 105.110.50.154 - ciieeinterna "GET /login/?login_only=1&user=ciieeinterna&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinterna (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.76.150.5
country_id: 2017370
description:
[2026-06-16 20:21:12 +0000] info [cpaneld] 37.76.150.5 - ciieeinte "GET /login/?login_only=1&user=ciieeinte&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinte (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.176.220.76
country_id: 3865483
description:
[2026-06-16 20:20:34 +0000] info [cpaneld] 201.176.220.76 - ciieeinternationalorg "GET /login/?login_only=1&user=ciieeinternationalorg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternationalorg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.51.102.6
country_id: 3686110
description:
[2026-06-16 20:20:45 +0000] info [cpaneld] 179.51.102.6 - ciieeinternatio "GET /login/?login_only=1&user=ciieeinternatio&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternatio (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 86.235.102.241
country_id: 3017382
description:
[2026-06-16 20:20:51 +0000] info [cpaneld] 86.235.102.241 - ciieeinternati "GET /login/?login_only=1&user=ciieeinternati&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternati (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.232.85.156
country_id: 3996063
description:
[2026-06-16 20:20:53 +0000] info [cpaneld] 177.232.85.156 - ciieeinternat "GET /login/?login_only=1&user=ciieeinternat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.194.61.181
country_id: 3686110
description:
[2026-06-16 20:20:54 +0000] info [cpaneld] 186.194.61.181 - ciieeinternat "GET /login/?login_only=1&user=ciieeinternat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.224.26.118
country_id: 99237
description:
[2026-06-16 20:21:03 +0000] info [cpaneld] 169.224.26.118 - ciieeintern "GET /login/?login_only=1&user=ciieeintern&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeintern (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.212.139.152
country_id: 2017370
description:
[2026-06-16 20:21:05 +0000] info [cpaneld] 178.212.139.152 - ciieeinter "GET /login/?login_only=1&user=ciieeinter&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinter (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.95.86.180
country_id: 3508796
description:
[2026-06-16 20:21:08 +0000] info [cpaneld] 38.95.86.180 - ciieeinter "GET /login/?login_only=1&user=ciieeinter&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinter (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.151.75.214
country_id: 1210997
description:
[2026-06-16 20:20:22 +0000] info [cpaneld] 103.151.75.214 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.8.235.162
country_id: 3625428
description:
[2026-06-16 20:21:09 +0000] info [cpaneld] 200.8.235.162 - ciieeinte "GET /login/?login_only=1&user=ciieeinte&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinte (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.171.110.152
country_id: 3658394
description:
[2026-06-16 20:21:26 +0000] info [cpaneld] 45.171.110.152 - ciiee "GET /login/?login_only=1&user=ciiee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciiee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.240.140.181
country_id: 3686110
description:
[2026-06-16 20:21:30 +0000] info [cpaneld] 190.240.140.181 - ciie "GET /login/?login_only=1&user=ciie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.153.48.243
country_id: 1210997
description:
[2026-06-16 20:21:40 +0000] info [cpaneld] 103.153.48.243 - ci "GET /login/?login_only=1&user=ci&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ci (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.209.173.162
country_id: 2921044
description:
[2026-06-16 20:21:22 +0000] info [cpaneld] 92.209.173.162 - ciieei "GET /login/?login_only=1&user=ciieei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieei (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.110.110.163
country_id: 3895114
description:
[2026-06-16 20:21:30 +0000] info [cpaneld] 190.110.110.163 - ci "GET /login/?login_only=1&user=ci&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ci (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.210.74.11
country_id: 2921044
description:
[2026-06-16 20:21:33 +0000] info [cpaneld] 79.210.74.11 - cii "GET /login/?login_only=1&user=cii&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cii (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 189.113.74.162
country_id: 3469034
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:direct7tv.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:61a5598b6319c8b6a110662aa58c018fe25d130e||Title:taw5o8lkor79iyj||RSV:8.18||T:APACHE||


plugin: modsec
rule: 33375
name: IM360 WAF: XMLRPC fault response
abuser: 189.113.74.162
country_id: 3469034
domain: direct7.tg
description:
IM360 WAF: XMLRPC fault response||MV:<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<methodResponse>\n  <fault>\n    <value>\n      <struct>\n        <member>\n          <name>faultCode</name>\n          <value><int>403</int></value>\n        </member>\n        <member>\n          <name>faultString</name>\n          <value><string>Votre IP (189.113.74.162) a \xc3\xa9t\xc3\xa9 signal\xc3\xa9e pour de potentielles violations de s\xc3\xa9curit\xc3\xa9.</string></value>\n        </member>\n      </struct>\n    </value>\n  </fault>\n</methodResponse>\n||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:20:25:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10341487&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781641496 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:20:25:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7249559&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781641500 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 189.113.74.162
country_id: 3469034
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:direct7tv.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d5360e7dc1cb483a360e68afb7dbe17e1bb1f9c7||Title:ojjeywm4oia2zc||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 189.113.74.162
country_id: 3469034
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:direct7tv.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:dbae91344cdeb2b17f8dec13a3c03d013c65eca8||Title:9hsrfxaywtkp1mbr||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:20:26:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9791431&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaXJpbmEuYnVybWlzdHJvdmFAc3ZlemEuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781641615 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aXJpbmEuYnVybWlzdHJvdmFAc3ZlemEuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 123.6.49.12
country_id: 1814991
description:
123.6.49.12 - - [16/Jun/2026:20:27:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9791134&pdata=https%253A%252F%252Ftdn.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781641619 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/" "Mozilla/5.0 (Linux; Android 11; V2055A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.12


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:20:27:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6592664&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZC5kZW5pc292QGZpc2hkdi5ydQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781641646 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZC5kZW5pc292QGZpc2hkdi5ydQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 189.113.74.162
country_id: 3469034
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:direct7tv.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0f48ec18377778781496f5f2d9885dd0b2ff6682||Title:fl075cpv7d8vv31||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:20:27:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10209430&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaGVsZW5fZGluZ0BhbHBoYW5ldHdvcmtzLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781641673 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aGVsZW5fZGluZ0BhbHBoYW5ldHdvcmtzLmNvbQ==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:20:28:24 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 189.113.74.162
country_id: 3469034
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:direct7tv.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:69bf5a272c3e5430da7a901d9640035f3b3d603f||Title:magxn9k018wdnn||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:20:28:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:20:28:26 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:20:28:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 189.113.74.162
country_id: 3469034
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:direct7tv.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:45f47e647d51e4981700a22240ac3a0cc2d2b7a8||Title:sx4rh7hczsrfmdh||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 20:29:38 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:35484: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:20:30:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7367526&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2FsZXNAd2xjdGVjaG5vbG9neS5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781641799 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2FsZXNAd2xjdGVjaG5vbG9neS5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:20:30:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9597546&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781641841 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:20:30:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9923480&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781641842 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.116
country_id: 6252001
description:
2026-06-16 20:31:22 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.152.116]:22832: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:20:30:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001303&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcHJvY3VyZW1lbnRAZHluYWNpYXRlLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781641840 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cHJvY3VyZW1lbnRAZHluYWNpYXRlLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 189.113.74.162
country_id: 3469034
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:direct7tv.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:da7ce4e30cffa664cac2de71e3834ac5062b932b||Title:pqt3hp29jmygvezn||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 189.113.74.162
country_id: 3469034
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:direct7tv.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:2d01c4501d5eeb7fe45c15eb66362300b63ca407||Title:c8ih5oa7haq717qy||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.116
country_id: 6252001
description:
2026-06-16 20:31:30 dovecot_login authenticator failed for H=(mail.inger.tg) [104.28.152.116]:22832: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 156.38.84.59
country_id: 2363686
description:
[2026-06-16 20:31:43 +0000] info [cpaneld] 156.38.84.59 NEW zephyradmin:TURsueDh9UAnFJTk address=156.38.84.59,app=cpaneld,creator=zephyradmin,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.165.175
country_id: 1861060
description:
2026-06-16 20:33:13 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.165.175]:47968: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.159.44
country_id: 1880251
description:
2026-06-16 20:32:30 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.159.44]:20648: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.137
country_id: 3017382
description:
2026-06-16 20:32:43 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.155.137]:48300: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 104.28.165.175
country_id: 1861060
description:
Jun 16 20:33:11 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 104.28.165.175 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.195
country_id: 2750405
description:
2026-06-16 20:34:13 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.163.195]:25154: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.8.159
country_id: 3175395
description:
Jun 16 20:34:13 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.8.159 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 47.230.78.150
country_id: 6252001
description:
2026-06-16 20:33:27 dovecot_plain authenticator failed for H=(z23arhtha2whhzsd15a) [47.230.78.150]:5634: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 31.76.113.9
country_id: 3175395
description:
2026-06-16 20:33:59 dovecot_plain authenticator failed for H=vm675.akenai.wtf (mail.inger.tg) [31.76.113.9]:47740: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:20:33:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6919879&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcGFuZ0B0dW5hc2FzYWwuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781642036 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cGFuZ0B0dW5hc2FzYWwuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.8.159
country_id: 3175395
description:
Jun 16 20:34:26 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.8.159 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.225.181.81
country_id: 2464461
domain: cafe.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/cafe.tg/femmes-tics-et-promotrices-denfants-genies-informatiques-au-cameroun/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.153.124
country_id: 6252001
description:
2026-06-16 20:34:28 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.153.124]:60940: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.225.181.81
country_id: 2464461
domain: cafe.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/cafe.tghttp/cafe.tg/femmes-tics-et-promotrices-denfants-genies-informatiques-au-cameroun/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.153.121
country_id: 6252001
description:
2026-06-16 20:34:42 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.153.121]:24286: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.154.12
country_id: 6252001
description:
2026-06-16 20:36:06 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.154.12]:18152: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 8.210.147.41
country_id: 1819730
description:
Jun 16 20:36:17 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 8.210.147.41 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 193.151.108.143
country_id: 2017370
description:
2026-06-16 20:35:22 dovecot_plain authenticator failed for H=(mail.inger.tg) [193.151.108.143]:43670: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 176.53.176.20
country_id: 2300660
description:
2026-06-16 20:36:31 dovecot_plain authenticator failed for H=(mail.inger.tg) [176.53.176.20]:4545: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.200.36.5
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/03/IMG-20210329-WA0189.jpg 1080w, http:/togodailynews.tg/wp-content/uploads/2021/03/IMG-20210329-WA0189-300x226.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2021/03/IMG-20210329-WA0189-768x577.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2021/03/IMG-20210329-WA0189-1024x770.jpg 1024w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.219.204.64
country_id: 3703430
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/06/2cd52091756750cb4d466107b44105e7_L.webp 500w, http:/togodailynews.tg/wp-content/uploads/2025/06/2cd52091756750cb4d466107b44105e7_L-300x169.webp 300w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 89.223.95.63
country_id: 1819730
description:
2026-06-16 20:38:07 dovecot_plain authenticator failed for H=(mail.inger.tg) [89.223.95.63]:35842: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 78.17.147.65
country_id: 2921044
description:
2026-06-16 20:37:33 dovecot_plain authenticator failed for H=(mail.inger.tg) [78.17.147.65]:38186: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.96.176.59
country_id: 3996063
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/73af82 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 89.223.95.63
country_id: 1819730
description:
Jun 16 20:38:05 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 89.223.95.63 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 54.184.242.113
country_id: 6252001
description:
Jun 16 20:38:51 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 54.184.242.113 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 54.184.242.113
country_id: 6252001
description:
2026-06-16 20:38:53 dovecot_plain authenticator failed for H=ec2-54-184-242-113.us-west-2.compute.amazonaws.com (inger.tg) [54.184.242.113]:58596: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 37.140.242.53
country_id: 298795
description:
2026-06-16 20:38:36 dovecot_plain authenticator failed for H=saasci.com.tr (mail.inger.tg) [37.140.242.53]:53604: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.157.42
country_id: 1861060
description:
2026-06-16 20:39:52 dovecot_plain authenticator failed for H=(inger.tg) [104.28.157.42]:60801: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:20:40:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9793893&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781642396 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.175
country_id: 6252001
description:
2026-06-16 20:40:07 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.175]:40695: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.154.2
country_id: 6252001
description:
2026-06-16 20:40:21 dovecot_plain authenticator failed for H=(inger.tg) [104.28.154.2]:15436: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 179.60.65.220
country_id: 3895114
description:
2026-06-16 20:39:24 dovecot_plain authenticator failed for H=(t04tftgn77la8qusdy) [179.60.65.220]:24925: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.158.23
country_id: 2750405
description:
2026-06-16 20:39:38 dovecot_plain authenticator failed for H=(inger.tg) [104.28.158.23]:19079: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.154.2
country_id: 6252001
description:
2026-06-16 20:40:28 dovecot_login authenticator failed for H=(inger.tg) [104.28.154.2]:15436: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 116.203.69.142
country_id: 2921044
description:
2026-06-16 20:40:35 dovecot_plain authenticator failed for H=static.142.69.203.116.clients.your-server.de (inger.tg) [116.203.69.142]:38562: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.159.219
country_id: 2750405
description:
2026-06-16 20:42:04 dovecot_plain authenticator failed for H=(inger.tg) [104.28.159.219]:30887: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.159.221
country_id: 2750405
description:
2026-06-16 20:42:15 dovecot_plain authenticator failed for H=(inger.tg) [104.28.159.221]:47936: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.96.133
country_id: 2363686
description:
[2026-06-16 20:43:03 +0000] info [webmaild] 196.171.96.133 - tlemou@caissederetraites.tg "POST /cpsess7521432962/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [160.242.199.70] != Current IP Address [196.171.96.133]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 104.28.152.129
country_id: 6252001
description:
Jun 16 20:43:12 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 104.28.152.129 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.152.129
country_id: 6252001
description:
2026-06-16 20:43:14 dovecot_plain authenticator failed for H=(inger.tg) [104.28.152.129]:49443: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 193.200.16.127
country_id: 798544
description:
2026-06-16 20:42:45 dovecot_plain authenticator failed for H=(inger.tg) [193.200.16.127]:46214: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.176
country_id: 6252001
description:
2026-06-16 20:44:14 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.176]:65162: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 51.83.4.60
country_id: 3017382
description:
[2026-06-16 20:44:49 +0000] info [cpaneld] 51.83.4.60 NEW wcnyaruu:j1qpdTd0F4K1hC8_ address=51.83.4.60,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.181.209.206
country_id: 298795
description:
2026-06-16 20:44:59 dovecot_plain authenticator failed for H=(inger.tg) [185.181.209.206]:46550: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 193.29.139.151
country_id: 2750405
description:
2026-06-16 20:45:11 dovecot_plain authenticator failed for H=(inger.tg) [193.29.139.151]:16934: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.239.84.6
country_id: 3865483
description:
Jun 16 20:45:20 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.239.84.6 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.160.216
country_id: 1835841
description:
2026-06-16 20:44:30 dovecot_plain authenticator failed for H=(inger.tg) [104.28.160.216]:33201: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.154.5
country_id: 6252001
description:
2026-06-16 20:44:45 dovecot_plain authenticator failed for H=(inger.tg) [104.28.154.5]:21535: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.156.107
country_id: 1880251
description:
2026-06-16 20:45:40 dovecot_plain authenticator failed for H=(inger.tg) [104.28.156.107]:39191: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.158.27
country_id: 2750405
description:
2026-06-16 20:45:51 dovecot_plain authenticator failed for H=(inger.tg) [104.28.158.27]:30257: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.210.172.147
country_id: 3017382
description:
Jun 16 20:46:00 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.210.172.147 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.210.172.147
country_id: 3017382
description:
2026-06-16 20:46:02 dovecot_plain authenticator failed for H=31345b93-2100-4d92-96eb-93c7a75c0875.fr-par-1.baremetal.scw.cloud (inger.tg) [62.210.172.147]:54104: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 57.180.22.236
country_id: 1861060
description:
Jun 16 20:46:13 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 57.180.22.236 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 57.180.22.236
country_id: 1861060
description:
2026-06-16 20:46:15 dovecot_plain authenticator failed for H=ec2-57-180-22-236.ap-northeast-1.compute.amazonaws.com (inger.tg) [57.180.22.236]:58476: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.239.84.6
country_id: 3865483
description:
Jun 16 20:45:28 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.239.84.6 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 57.180.22.236
country_id: 1861060
description:
2026-06-16 20:46:23 dovecot_login authenticator failed for H=ec2-57-180-22-236.ap-northeast-1.compute.amazonaws.com (inger.tg) [57.180.22.236]:58476: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 13.38.52.163
country_id: 3017382
description:
[2026-06-16 20:46:22 +0000] info [cpaneld] 13.38.52.163 NEW wcnyaruu:iMyR_htYeYXzatqe address=13.38.52.163,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:20:46:24 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 172.235.51.82
country_id: 6252001
description:
[2026-06-16 20:46:45 +0000] info [cpaneld] 172.235.51.82 NEW wcnyaruu:nr7q3VEMxTEdSgHz address=172.235.51.82,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 5.188.190.252
country_id: 298795
description:
2026-06-16 20:46:29 dovecot_plain authenticator failed for H=(inger.tg) [5.188.190.252]:54248: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 13.38.52.163
country_id: 3017382
description:
[2026-06-16 20:47:14 +0000] info [whostmgrd] 13.38.52.163 - wcnyaruu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: login attempt to whm by a non-reseller/root


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:20:47:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13069972&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc3VwcG9ydEBzd2ViLnJ1&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781642829 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c3VwcG9ydEBzd2ViLnJ1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:20:46:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:20:48:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6317933&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781642886 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.54.17.95
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/01/Gestion-de-la-Covid19-le-Togo-parmi-le-Top-des-meilleurs-pays-1.jpg 1080w, http:/togodailynews.tg/wp-content/uploads/2021/01/Gestion-de-la-Covid19-le-Togo-parmi-le-Top-des-meilleurs-pays-1-300x183.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2021/01/Gestion-de-la-Covid19-le-Togo-parmi-le-Top-des-meilleurs-pays-1-768x469.jpg 768w, http:/togodailynews.tg/wp-content/uploads/2021/01/Gestion-de-la-Covid19-le-Togo-parmi-le-Top-des-meilleurs-pays-1-1024x626.jpg 1024w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:20:53:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7246741&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaXlhbkBpbnRhbmNvZW5naW5lZXJpbmcuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643186 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aXlhbkBpbnRhbmNvZW5naW5lZXJpbmcuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.37.43.99
country_id: 1269750
domain: matwtogo.org
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:20320.matwtogo.org||ServerName:matwtogo.org||Method:metaWeblog.newPost||BlogID:1||TitleSHA:874035040bdff73823ee61c38442a2477a43d773||Title:0x6c96f86c||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:20:54:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10208920&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643286 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 27.123.98.22
country_id: 1269750
description:
Jun 16 20:56:18 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 27.123.98.22 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.123.98.22
country_id: 1269750
description:
2026-06-16 20:56:20 dovecot_login authenticator failed for H=([174.75.211.217]) [27.123.98.22]:45798: 535 Incorrect authentication data (set_id=admin@cameg-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:20:56:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10274668&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZC52aWxsYW51ZXZhX3BlQG1jYmFuay5ydQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643380 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZC52aWxsYW51ZXZhX3BlQG1jYmFuay5ydQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:20:57:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9608856&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbWN0YW5AYW1jc2IuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643427 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bWN0YW5AYW1jc2IuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:20:58:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6908261&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYWRhbUBzaW5jb2F1dG9tYXNpLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643487 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YWRhbUBzaW5jb2F1dG9tYXNpLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:20:59:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7169949&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbnVyYWlzaGFoQGR5bmFjaWF0ZS5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643544 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bnVyYWlzaGFoQGR5bmFjaWF0ZS5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.130.203.55
country_id: 357994
description:
45.130.203.55 - - [16/Jun/2026:20:58:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6973037&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcGV0ZXJwZXJlaXJhQGFsYW1ncm91cC5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643504 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cGV0ZXJwZXJlaXJhQGFsYW1ncm91cC5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.130.203.55


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:20:58:51 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:20:58:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.221.147.228
country_id: 690791
description:
Jun 16 20:59:39 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.221.147.228 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.236
country_id: 130758
description:
Jun 16 20:59:45 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.236 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.236
country_id: 130758
description:
2026-06-16 20:59:47 dovecot_login authenticator failed for H=(localhost) [81.30.98.236]:54384: 535 Incorrect authentication data (set_id=devservice)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.207.231.17
country_id: 2245662
domain: belali.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/belali.tg/inscription-2020-2021/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.207.231.17
country_id: 2245662
domain: belali.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/belali.tghttp/belali.tg/inscription-2020-2021/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 189.28.74.114
country_id: 3923057
description:
189.28.74.114 - - [16/Jun/2026:21:00:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10275478&pdata=https%253A%252F%252Fcivilemagazine.tg%252Ftag%252Fcooperation-france-togo%252F%253Famp%253D1&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643639 HTTP/2.0" 302 0 civilemagazine.tg "https://civilemagazine.tg/tag/cooperation-france-togo/?amp=1" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.7323.1823 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:189.28.74.114


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.57
country_id: 6252001
description:
205.169.39.57 - - [16/Jun/2026:21:00:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9858204&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Da2hhamEuYWhtZWRAdHJhZ3NlbmdpbmVlcmluZy5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643640 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=a2hhamEuYWhtZWRAdHJhZ3NlbmdpbmVlcmluZy5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.57


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:21:01:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7300970&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643684 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.249.115.2
country_id: 3996063
description:
[2026-06-16 21:02:47 +0000] info [cpaneld] 187.249.115.2 - universcomtg "GET /login/?login_only=1&user=universcomtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user universcomtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.69.170.68
country_id: 3686110
description:
[2026-06-16 21:03:00 +0000] info [cpaneld] 181.69.170.68 - unive "GET /login/?login_only=1&user=unive&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user unive (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:21:02:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051160&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaW5mb0BtYXJyaW90dC1sb2NhbC1uZXdzLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643742 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aW5mb0BtYXJyaW90dC1sb2NhbC1uZXdzLmNvbQ==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 87.177.28.3
country_id: 2921044
description:
[2026-06-16 21:02:55 +0000] info [cpaneld] 87.177.28.3 - univer "GET /login/?login_only=1&user=univer&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user univer (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.158.233.102
country_id: 2542007
description:
[2026-06-16 21:02:59 +0000] info [cpaneld] 105.158.233.102 - univ "GET /login/?login_only=1&user=univ&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user univ (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.190.240.155
country_id: 2017370
description:
[2026-06-16 21:03:01 +0000] info [cpaneld] 89.190.240.155 - uni "GET /login/?login_only=1&user=uni&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user uni (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 83.142.10.238
country_id: 2017370
description:
[2026-06-16 21:03:02 +0000] info [cpaneld] 83.142.10.238 - univ "GET /login/?login_only=1&user=univ&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user univ (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.134.213.38
country_id: 2510769
description:
[2026-06-16 21:03:06 +0000] info [webmaild] 45.134.213.38 - netflix@emt.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password hash is missing from system (user probably does not exist)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.152.213.141
country_id: 1210997
description:
[2026-06-16 21:03:07 +0000] info [cpaneld] 103.152.213.141 - un "GET /login/?login_only=1&user=un&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user un (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 23.119.89.197
country_id: 6252001
description:
[2026-06-16 21:02:36 +0000] info [cpaneld] 23.119.89.197 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.71.63.46
country_id: 6251999
description:
[2026-06-16 21:02:38 +0000] info [cpaneld] 76.71.63.46 - universcom "GET /login/?login_only=1&user=universcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user universcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.39.17.144
country_id: 3865483
description:
[2026-06-16 21:02:44 +0000] info [cpaneld] 186.39.17.144 - universcom "GET /login/?login_only=1&user=universcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user universcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.29.24.216
country_id: 2017370
description:
[2026-06-16 21:02:53 +0000] info [cpaneld] 37.29.24.216 - univers "GET /login/?login_only=1&user=univers&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user univers (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.148.186.47
country_id: 3469034
description:
[2026-06-16 21:02:54 +0000] info [cpaneld] 201.148.186.47 - univer "GET /login/?login_only=1&user=univer&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user univer (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.109.20.220
country_id: 2589581
description:
[2026-06-16 21:02:57 +0000] info [cpaneld] 41.109.20.220 - unive "GET /login/?login_only=1&user=unive&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user unive (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:21:03:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9803975&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2FsZXMxQGFsdW5veC5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643796 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2FsZXMxQGFsdW5veC5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.191.171.220
country_id: 1562822
description:
[2026-06-16 21:02:38 +0000] info [cpaneld] 14.191.171.220 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.44
country_id: 6252001
description:
205.169.39.44 - - [16/Jun/2026:21:02:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131862&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaW5mb0BtYXJyaW90dC1sb2NhbC1uZXdzLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643759 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aW5mb0BtYXJyaW90dC1sb2NhbC1uZXdzLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.44


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.113.52.149
country_id: 3469034
description:
[2026-06-16 21:02:44 +0000] info [cpaneld] 189.113.52.149 - universcomtg "GET /login/?login_only=1&user=universcomtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user universcomtg (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 173.239.240.17
country_id: 6252001
description:
173.239.240.17 - - [16/Jun/2026:21:03:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13014427&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2FsZXMxN0BwbWpzdXBwbHlzYi5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643807 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2FsZXMxN0BwbWpzdXBwbHlzYi5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:173.239.240.17


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 85.227.82.3
country_id: 2661886
description:
Jun 16 21:03:35 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 85.227.82.3 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.234.86.189
country_id: 3437598
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/famille-300x200.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/famille.webp 600w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 196.168.104.97
country_id: 2363686
description:
[2026-06-16 21:04:21 +0000] info [cpaneld] 196.168.104.97 NEW gemwjxuz:klyTh_nzUBg3F3_P address=196.168.104.97,app=cpaneld,creator=root,method=handle_form_login,path=loadsession:gemwjxuz:F2ns8W7njTHb3RC4:create_user_session,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.19
country_id: 1880251
description:
47.128.96.19 - - [16/Jun/2026:21:04:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935261&pdata=https%253A%252F%252Ftdn.tg%252Ftogo-resultats-concours-enseignants%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781643892 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/togo-resultats-concours-enseignants/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.19


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-16 21:04:57 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:48974: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.170.7.229
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/Diplomatie-Lome-et-Nouakchott-se-concertent-sur-les-enjeux-africains-et-internationaux-768x563.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/06/Diplomatie-Lome-et-Nouakchott-se-concertent-sur-les-enjeux-africains-et-internationaux-300x220.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/Diplomatie-Lome-et-Nouakchott-se-concertent-sur-les-enjeux-africains-et-internationaux-1024x751.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/06/Diplomatie-Lome-et-Nouakchott-se-concertent-sur-les-enjeux-africains-et-internationaux.webp 1280w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 218.13.214.18
country_id: 1814991
description:
2026-06-16 21:07:08 dovecot_login authenticator failed for H=([103.154.64.185]) [218.13.214.18]:39782: 535 Incorrect authentication data (set_id=hr@anrtogo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 218.13.214.18
country_id: 1814991
description:
Jun 16 21:07:06 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 218.13.214.18 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.26.124.124
country_id: 3624060
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/01/t\xc3\xa9l\xc3\xa9chargement.jpg 276w, http:/togodailynews.tg/wp-content/uploads/2021/01/t\xc3\xa9l\xc3\xa9chargement-272x182.jpg 272w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 213.200.31.45
country_id: 614540
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/07/IMG-20240729-WA0051.jpg 1080w, http:/togodailynews.tg/wp-content/uploads/2024/07/IMG-20240729-WA0051-300x140.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2024/07/IMG-20240729-WA0051-1024x477.jpg 1024w, http:/togodailynews.tg/wp-content/uploads/2024/07/IMG-20240729-WA0051-768x358.jpg 768w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.157.5.100
country_id: 453733
description:
[2026-06-16 21:08:11 +0000] info [webmaild] 5.157.5.100 - hilaire.mensah@mesyscom.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password hash is missing from system (user probably does not exist)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:21:08:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9986199&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZW5xdWlyeTYxNkB0YmouY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644097 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZW5xdWlyeTYxNkB0YmouY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 72.230.214.112
country_id: 6252001
description:
2026-06-16 21:09:18 dovecot_plain authenticator failed for H=(qhmnq1xbxjua4ecjho) [72.230.214.112]:50292: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:21:09:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10329748&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdHNsQHRhbnNpbmxpYW4uY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644159 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dHNsQHRhbnNpbmxpYW4uY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:21:10:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13068181&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYW1pbGlhLnRob3dAbXRtYXJpbmUuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644210 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YW1pbGlhLnRob3dAbXRtYXJpbmUuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 149.34.252.80
country_id: 2921044
description:
[2026-06-16 21:09:38 +0000] info [webmaild] 149.34.252.80 - ygnabik@otr.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password hash is missing from system (user probably does not exist)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:21:11:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6778777&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644275 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.150.71.30
country_id: 6252001
description:
[2026-06-16 21:12:12 +0000] info [webmaild] 107.150.71.30 - spr@ccit.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password hash is missing from system (user probably does not exist)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 170.64.241.17
country_id: 2077456
description:
170.64.241.17 - - [16/Jun/2026:21:11:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6778777&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644275 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.241.17


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 195.132.35.238
country_id: 3017382
description:
195.132.35.238 - - [16/Jun/2026:21:11:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6778777&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644275 HTTP/2.0" 404 159 afrique-distribution.net "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0.1 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.132.35.238


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:21:12:52 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13133409&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbW9oLmZhcmVzQHRyYWdzZW5naW5lZXJpbmcuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644369 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bW9oLmZhcmVzQHRyYWdzZW5naW5lZXJpbmcuY29t" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:21:12:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6778266&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Da2hhamEuYWhtZWRAdHJhZ3NlbmdpbmVlcmluZy5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644371 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=a2hhamEuYWhtZWRAdHJhZ3NlbmdpbmVlcmluZy5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:21:12:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6855834&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcGxhbmRlcEBzdGFsLnJ1&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644375 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cGxhbmRlcEBzdGFsLnJ1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 46.203.228.116
country_id: 2077456
domain: togointerim.net
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:46.203.228.116||TA:46.203.228.116||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:21:13:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9791386&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Da2hhamEuYWhtZWRAdHJhZ3NlbmdpbmVlcmluZy5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644413 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=a2hhamEuYWhtZWRAdHJhZ3NlbmdpbmVlcmluZy5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:21:14:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:21:14:06 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:21:15:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13002137&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZXJkZW0uZ3VuZHV6QHVyc2FzaGlweWFyZC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644501 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZXJkZW0uZ3VuZHV6QHVyc2FzaGlweWFyZC5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 89.43.135.76
country_id: 719819
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2022/06/IMG-20220618-WA0087.jpg 640w, http:/togodailynews.tg/wp-content/uploads/2022/06/IMG-20220618-WA0087-150x150.jpg 150w, http:/togodailynews.tg/wp-content/uploads/2022/06/IMG-20220618-WA0087-300x300.jpg 300w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77350374
name: IM360 WAF: Scan attempt by bytespider crawler
abuser: 110.249.201.29
country_id: 1814991
domain: cafe.tg
description:
IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:21:15:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7169435&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dbm8tcmVwbHlAZWNhbXBhaWducy5kZWxsLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644547 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bm8tcmVwbHlAZWNhbXBhaWducy5kZWxsLmNvbQ==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:21:17:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9592985&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2h5ZWp1bnhpYW5AZHluYWNpYXRlLmNvbS5teQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644642 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2h5ZWp1bnhpYW5AZHluYWNpYXRlLmNvbS5teQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 203.17.245.213
country_id: 2750405
description:
[2026-06-16 21:17:35 +0000] info [webmaild] 203.17.245.213 - development@confortis.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password hash is missing from system (user probably does not exist)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:21:17:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7301276&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644654 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.137
country_id: 1880251
description:
47.128.96.137 - - [16/Jun/2026:21:18:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6919372&pdata=https%253A%252F%252Fvitrinenews.tg%252F2026%252F06%252F16%252Fculture-festival-mawazine-ancestors-groove-fait-decouvrir-la-culture-togolaise-au-maroc%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644695 HTTP/2.0" 302 0 vitrinenews.tg "https://vitrinenews.tg/2026/06/16/culture-festival-mawazine-ancestors-groove-fait-decouvrir-la-culture-togolaise-au-maroc/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.137


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 170.64.241.17
country_id: 2077456
description:
170.64.241.17 - - [16/Jun/2026:21:19:21 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6778777&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644275" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.241.17


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 170.64.241.17
country_id: 2077456
description:
170.64.241.17 - - [16/Jun/2026:21:19:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6778777&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644275 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.241.17


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.236
country_id: 130758
description:
Jun 16 21:20:13 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.236 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.236
country_id: 130758
description:
2026-06-16 21:20:15 dovecot_login authenticator failed for H=(localhost) [81.30.98.236]:53964: 535 Incorrect authentication data (set_id=redis01)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:21:22:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9672294&pdata=http%253A%252F%252Fceni.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781644940 HTTP/1.1" 404 561 ceni.tg "http://ceni.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 149.40.49.227
country_id: 6252001
description:
[2026-06-16 21:25:11 +0000] info [webmaild] 149.40.49.227 - infos@mesyscom.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password hash is missing from system (user probably does not exist)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.48.24.184
country_id: 3865483
domain: www.cafe.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.cafe.tg/?page_id=6 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.48.24.184
country_id: 3865483
domain: www.cafe.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.cafe.tghttp/www.cafe.tg/?page_id=6 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.169.45
country_id: 3175395
description:
Jun 16 21:26:14 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.169.45 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:21:26:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935984&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781645202 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.169.45
country_id: 3175395
description:
Jun 16 21:26:22 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.169.45 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.182.59.217
country_id: 1814991
description:
2026-06-16 21:26:44 dovecot_login authenticator failed for H=(psmhpk) [123.182.59.217]:62081: 535 Incorrect authentication data (set_id=sales)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:21:27:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6735769&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dbm92b3NpYkBiaW5hZ3JvdXAucnU%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781645239 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bm92b3NpYkBiaW5hZ3JvdXAucnU=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 37.212.55.125
country_id: 630336
description:
37.212.55.125 - - [16/Jun/2026:21:28:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6604694&pdata=https%253A%252F%252Feducplusmedia.tg%252Fauthor%252Fadmin_165s3qb0%252Fpage%252F15%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781645290 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/author/admin_165s3qb0/page/15/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.4006.1324 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.212.55.125


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:21:28:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12830357&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcGV0ZXJidXJnQGJpbmFncm91cC5ydQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781645293 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cGV0ZXJidXJnQGJpbmFncm91cC5ydQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 142.147.132.142
country_id: 6252001
domain: civilemagazine.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:142.147.132.142||TA:142.147.132.142||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.59.108
country_id: 6252001
domain: civilemagazine.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.253.59.108||TA:104.253.59.108||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.255.163
country_id: 3017382
domain: togofarm.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ifxmoxbf/public_html/.702886455330399.php||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:21:29:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:21:29:05 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 80.248.72.20
country_id: 2363686
description:
[2026-06-16 21:29:12 +0000] info [webmaild] 80.248.72.20 - support@cloud-et-racks.tg "POST /cpsess5425321516/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [80.248.64.198] != Current IP Address [80.248.72.20]


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.62.169
country_id: 6252001
description:
[2026-06-16 21:28:50 +0000] info [cpaneld] 64.44.62.169 NEW ifxmoxbf:nmTRkw1ZGSdgfKPn address=64.44.62.169,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.65.237.227
country_id: 1643084
description:
[2026-06-16 21:29:12 +0000] info [cpaneld] 103.65.237.227 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 212.15.82.143
country_id: 6252001
description:
Jun 16 21:33:07 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 212.15.82.143 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 212.15.82.143
country_id: 6252001
description:
2026-06-16 21:33:09 dovecot_plain authenticator failed for H=(i2utakqjeahexaorrw) [212.15.82.143]:22781: 535 Incorrect authentication data (set_id=admin@togocarrierebetons.com)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:21:33:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9726405&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781645605 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 187.191.36.33
country_id: 3996063
description:
187.191.36.33 - - [16/Jun/2026:21:33:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7366805&pdata=https%253A%252F%252Feducplusmedia.tg%252Fauthor%252Fediteurmarcel%252Fpage%252F15%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781645607 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/author/editeurmarcel/page/15/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.7187.1373 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:187.191.36.33


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.172.116.134
country_id: 6252001
domain: civilemagazine.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:107.172.116.134||TA:107.172.116.134||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 94.129.169.245
country_id: 285570
domain: www.cafe.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.cafe.tg/kanalfm HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 94.129.169.245
country_id: 285570
domain: www.cafe.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.cafe.tghttp/www.cafe.tg/kanalfm HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 142.111.245.76
country_id: 6252001
domain: civilemagazine.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:142.111.245.76||TA:142.111.245.76||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 31.46.115.4
country_id: 719819
description:
31.46.115.4 - - [16/Jun/2026:21:36:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13329099&pdata=https%253A%252F%252Feducplusmedia.tg%252Fauthor%252Fediteurmarcel%252Fpage%252F17%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781645777 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/author/editeurmarcel/page/17/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.5977.1989 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:31.46.115.4


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.185.68.197
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/670371666 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 216.132.131.129
country_id: 6252001
description:
216.132.131.129 - - [16/Jun/2026:21:35:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13200024&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZGtvc2dleUBjaGFzZWJhbmsuY28%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781645749 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZGtvc2dleUBjaGFzZWJhbmsuY28=" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:216.132.131.129


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 108.165.181.197
country_id: 1861060
domain: civilemagazine.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:108.165.181.197||TA:108.165.181.197||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.177.227.46
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/07/photo-haho-2.jpg 600w, http:/togodailynews.tg/wp-content/uploads/2024/07/photo-haho-2-300x225.jpg 300w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 172.120.112.135
country_id: 6252001
domain: civilemagazine.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:172.120.112.135||TA:172.120.112.135||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>la vie de ma\xc3\xaetre jean yaovi d\xc3\xa9gli, avocat, pr\xc3\xa9sident de \xc2\xab b\xc3\xa2tir le togo \xc2\xbb et ancien ministre et de ses proches serait en danger \xc3\xa0 kpalim\xc3\xa9.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>&nbsp;en effet, le 8 novembre 2025, un drone s\xe2\x80\x99est pr\xc3\xa9sent\xc3\xa9 dans la r\xc3\xa9sidence de l\xe2\x80\x99avocat dans le quartier kligue kondji \xc3\xa0 kpalim\xc3\xa9. les bras du drone qui faisait environ un m\xc3\xa8tre \xc3\xa9taient porteurs de sachets plastiques contenant du poison sous forme de poudre blanche. le mode op\xc3\xa9ratoire&nbsp;utilis\xc3\xa9 par les inconnus serait digne du grand banditisme et des films de fiction.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;</strong>malgr\xc3\xa9 des plaintes d\xc3\xa9pos\xc3\xa9es par ma\xc3\xaetre jean yaovi d\xc3\xa9gli au parquet de kpalim\xc3\xa9, les choses ne semblent pas aller comme l\xe2\x80\x99aurait souhait\xc3\xa9 le plaignant. bien que l\xe2\x80\x99information ait surpris,&nbsp;glac\xc3\xa9 et choqu\xc3\xa9 aussi bien magistrats et agents des forces de s\xc3\xa9curit\xc3\xa9 et de la police judiciaire.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans un communiqu\xc3\xa9 en date du 8 juin 2026, ma\xc3\xaetre jean yaovi d\xc3\xa9gli proteste contre cette situation et demande que ses droits de citoyen togolais et plus particuli\xc3\xa8rement son droit \xc3\xa0 la justice soit respect\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31006,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31006\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong><u>lire l\xe2\x80\x99integralite du communique</u></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le 8 novembre 2025, un drone qui \xc3\xa9tait pr\xc3\xa9alablement venu faire du rep\xc3\xa9rage la veille vers 20 heures, s\xe2\x80\x99est pr\xc3\xa9sent\xc3\xa9 dans ma r\xc3\xa9sidence dans le quartier kligue kondji \xc3\xa0 kpalim\xc3\xa9. les bras de ce drone qui faisait environ un m\xc3\xa8tre \xc3\xa9taient porteurs de sachets plastiques contenant du poison sous forme de poudre blanche.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>se positionnant au-dessus des palmiers qui surplombent les bacs \xc3\xa0 poissons qui sont dans la r\xc3\xa9sidence et en faisant des mouvements de haut en bas lui permettant de frotter les sachets contre les piquants des palmiers, il a d\xc3\xa9vers\xc3\xa9 du poison aussi bien dans les bacs \xc3\xa0 poissons que sur les noix de palmes, les foug\xc3\xa8res et les spadices qui les couvrent. plus de 1300 poissons sont morts et d\xe2\x80\x99autres animaux mourront dans la r\xc3\xa9sidence les jours et semaines qui suivirent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>inform\xc3\xa9 de la situation par le gardien, j\xe2\x80\x99ai imm\xc3\xa9diatement saisi le parquet de kpalim\xc3\xa9 d\xe2\x80\x99une plainte verbale, et ledit parquet a saisi les forces de l\xe2\x80\x99ordre et la police judiciaire qui se sont rendues sur place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l\xe2\x80\x99information a surpris et choqu\xc3\xa9 aussi bien magistrats et agent des forces de s\xc3\xa9curit\xc3\xa9 qui n\xe2\x80\x99ont pas compris comme dans un pays comme le n\xc3\xb4tre des gens peuvent se permettre de prendre un drone pour aller commettre des infractions dans une r\xc3\xa9sidence priv\xc3\xa9e, ce qui met la vie de tout citoyen en danger.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour confirmer ma plainte orale du 8 novembre 2025, j\xe2\x80\x99ai d\xc3\xa9pos\xc3\xa9 une plainte \xc3\xa9crite le&nbsp;<strong>10 novembre 2025</strong> en fournissant tous les \xc3\xa9l\xc3\xa9ments (poissons morts, sachet de poison tomb\xc3\xa9 dans la r\xc3\xa9sidence, photos et enregistrements vid\xc3\xa9o, noix de palmes, foug\xc3\xa8res et spadices couverts du poison, etc.) ainsi que d\xe2\x80\x99autres indices qui doivent permettre de faciliter les enqu\xc3\xaates polici\xc3\xa8res et judiciaires. ayant re\xc3\xa7u quelques temps auparavant des informations assez pr\xc3\xa9cises sur les menaces contre ma personne et la pr\xc3\xa9paration d\xe2\x80\x99actes de repr\xc3\xa9sailles et de r\xc3\xa8glement de compte contre ma personne \xc3\xa0 cause de mes prises de position sur les probl\xc3\xa8mes de quartiers et de cantons \xc3\xa0 kpalim\xc3\xa9, j\xe2\x80\x99ai personnellement pu donner des noms de certains suspects. ce sont d\xe2\x80\x99ailleurs ces informations port\xc3\xa9es \xc3\xa0 ma connaissance quelques semaines avant qui m\xe2\x80\x99ont amen\xc3\xa9 \xc3\xa0 prendre des dispositions pr\xc3\xa9ventives et notamment \xc3\xa0 courir certains des bacs \xc3\xa0 poissons et d\xe2\x80\x99abris d\xe2\x80\x99animaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"622px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:622px;height:auto\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>les personnes suspect\xc3\xa9es de cet odieux acte sont de deux cat\xc3\xa9gories. de simples citoyens qui peuvent \xc3\xaatre poursuivies dans le cadre de proc\xc3\xa9dure judiciaire habituelle et des responsables politico-administratifs qui b\xc3\xa9n\xc3\xa9ficient d\xe2\x80\x99une immunit\xc3\xa9 de juridiction et qui ne peuvent donc \xc3\xaatre poursuivies qu\xe2\x80\x99apr\xc3\xa8s la lev\xc3\xa9e de leur immunit\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour cette raison, j\xe2\x80\x99ai scind\xc3\xa9 ma plainte en deux et ai donc d\xc3\xa9pos\xc3\xa9 la premi\xc3\xa8re contre les personnes ne jouissant pas d\xe2\x80\x99immunit\xc3\xa9 afin de faciliter la mise en route et la c\xc3\xa9l\xc3\xa9rit\xc3\xa9 des enqu\xc3\xaates dans une affaire o\xc3\xb9 le mode op\xc3\xa9ratoire digne du grand banditisme et des films de fiction ne pouvait en r\xc3\xa9alit\xc3\xa9 que conduire \xc3\xa0 la prise des d\xc3\xa9cisions diligentes dans un pays comme le n\xc3\xb4tre qui est tr\xc3\xa8s \xc3\xa0 cheval sur les question de s\xc3\xa9curit\xc3\xa9 et qui est justement menac\xc3\xa9 par un terrorisme qui use de drone pour agir. h\xc3\xa9las, le silence qu\xe2\x80\x99il m\xe2\x80\x99a \xc3\xa9t\xc3\xa9 demand\xc3\xa9 de garder pour faciliter les enqu\xc3\xaates est devenu aujourd\xe2\x80\x99hui un v\xc3\xa9ritable gu\xc3\xaapier.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en effet, un certain nombre de personnes du monde politique et judiciaire qui m\xe2\x80\x99en veulent et pensent pouvoir profiter de cette affaire pour r\xc3\xa9gler des comptes personnels, ou qui veulent prot\xc3\xa9ger les malfrats ont d\xc3\xa9cid\xc3\xa9 d\xe2\x80\x99\xc3\xa9touffer l\xe2\x80\x99affaire et de me faire subir <strong>un d\xc3\xa9ni de justice</strong>. certains ont d\xe2\x80\x99ailleurs d\xc3\xa9j\xc3\xa0 bloqu\xc3\xa9 ou tent\xc3\xa9 de bloquer d\xe2\x80\x99autres proc\xc3\xa9dures ou d\xe2\x80\x99autres saisines d\xe2\x80\x99autres institutions dans l\xe2\x80\x99int\xc3\xa9r\xc3\xaat de mes clients ou des membres de ma communaut\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99est ainsi que depuis le d\xc3\xa9but de la proc\xc3\xa9dure, tous les actes \xc3\xa9mis et destin\xc3\xa9s aux divers services de l\xe2\x80\x99etat qui doivent conduire les enqu\xc3\xaates sont syst\xc3\xa9matiquement bloqu\xc3\xa9s par le canal ou la voie hi\xc3\xa9rarchique qui doit les leur faire parvenir.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pire, d\xc3\xa8s que j\xe2\x80\x99ai plus tard, d\xc3\xa9pos\xc3\xa9 la deuxi\xc3\xa8me plainte contre les personnes suspect\xc3\xa9es mais b\xc3\xa9n\xc3\xa9ficiant d\xe2\x80\x99une immunit\xc3\xa9 de juridiction, au lieu que la proc\xc3\xa9dure permettant la lev\xc3\xa9e de leur immunit\xc3\xa9 soit enclench\xc3\xa9e en vue de permettre l\xe2\x80\x99ouverture des enqu\xc3\xaates \xc3\xa0 leur encontre, il a plut\xc3\xb4t \xc3\xa9t\xc3\xa9 demand\xc3\xa9 au rouage de la justice en charge de la premi\xc3\xa8re plainte se d\xc3\xa9clarer incomp\xc3\xa9tent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>or en mati\xc3\xa8re judiciaire, il ne peut jamais \xc3\xaatre demand\xc3\xa9 \xc3\xa0 une juridiction ou \xc3\xa0 un magistrat de d\xc3\xa9cliner sa comp\xc3\xa9tence tant qu\xe2\x80\x99une juridiction n\xe2\x80\x99est pas saisie de la m\xc3\xaame affaire ou qu\xe2\x80\x99on ne lui indique pas la juridiction comp\xc3\xa9tente qui doit se saisir de l\xe2\x80\x99affaire.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la cons\xc3\xa9quence en est qu\xe2\x80\x99\xc3\xa0 ce jour, soit plus de sept (07) mois apr\xc3\xa8s la survenance de ces \xc3\xa9v\xc3\xa9nements graves et la saisine de la justice, aucune enqu\xc3\xaate n\xe2\x80\x99a \xc3\xa9t\xc3\xa9 men\xc3\xa9e. m\xc3\xaame les analyses d\xe2\x80\x99\xc3\xa9chantillons de poissons pr\xc3\xa9lev\xc3\xa9s et du poison utilis\xc3\xa9 n\xe2\x80\x99ont pas \xc3\xa9t\xc3\xa9 faites. pire, on vient de nous informer que les \xc3\xa9chantillons qui ont \xc3\xa9t\xc3\xa9 pr\xc3\xa9lev\xc3\xa9es \xc3\xa0 deux dates diff\xc3\xa9rentes des poissons tu\xc3\xa9s et des produits consommables (noix de palmes, foug\xc3\xa8res et spadices) souill\xc3\xa9s par le poison ont disparu comme par enchantement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>et pendant ce temps les autres preuves s\xe2\x80\x99effritent, les malfrats se prom\xc3\xa8nent et des animaux continuent de mourir dans ma r\xc3\xa9sidence o\xc3\xb9 la vie du gardien et de sa famille, la mienne et celle de mes proches sont constamment menac\xc3\xa9es et nous emp\xc3\xaachent de pouvoir jouir sereinement des lieux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31157,\"width\":\"612px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/18d98b1d-0295-41c7-afab-fc9c13606bd0-724x1024.jpg\" alt=\"\" class=\"wp-image-31157\" style=\"width:612px;height:auto\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>il est inadmissible que des personnes cens\xc3\xa9es prot\xc3\xa9ger les citoyens et/ou faire appliquer la loi se servent de leur position pour violer les droits des citoyens.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>je proteste contre cette situation et demande que mes droits de citoyens togolais et plus particuli\xc3\xa8rement mon droit \xc3\xa0 la justice soit respect\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>je me r\xc3\xa9serve le droit, dans les jours \xc3\xa0 venir, d\xe2\x80\x99engager diverses actions et de donner plus de d\xc3\xa9tails sur les noms des diverses personnes impliqu\xc3\xa9es dans cette machination dont je prends ici les plus hautes autorit\xc3\xa9s togolaises, le peuple togolais et la communaut\xc3\xa9 internationale \xc3\xa0 t\xc3\xa9moin.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;fait \xc3\xa0 lom\xc3\xa9, le 08 juin 2026</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>ma\xc3\xaetre jean yaovi d\xc3\xa9gli</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;&nbsp; avocat</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pr\xc3\xa9sident de \xc2\xab <strong>b\xc3\xa2tir le togo</strong>&nbsp;\xc2\xbb</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ancien ministre</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>(in le medium n\xc2\xb0707 du 16 au 22 juin 2026)</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:21:38:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6449258&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbXV0aHVAa3Nsc2IuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781645905 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bXV0aHVAa3Nsc2IuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.81.227
country_id: 3077311
domain: pnls.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.253.81.227||TA:104.253.81.227||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 216.132.131.129
country_id: 6252001
description:
216.132.131.129 - - [16/Jun/2026:21:40:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13200024&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZGtvc2dleUBjaGFzZWJhbmsuY28%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781645749 HTTP/2.0" 404 159 tdn.tg "https://tdn.tg/june/?worker=ZGtvc2dleUBjaGFzZWJhbmsuY28=" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15A372 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:216.132.131.129


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - info@case-afrique.tg [06/16/2026:21:41:22 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: info@case-afrique.tg


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 213.169.229.221
country_id: 6252001
domain: pnls.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:213.169.229.221||TA:213.169.229.221||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 64.137.100.183
country_id: 2661886
domain: pnls.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:64.137.100.183||TA:64.137.100.183||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:21:40:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9857989&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781646033 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 196.168.125.175
country_id: 2363686
description:
[2026-06-16 21:41:02 +0000] info [cpaneld] 196.168.125.175 NEW prbthzuj:QBNpfuos07aNiD_a address=196.168.125.175,app=cpaneld,creator=prbthzuj,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 34.27.42.6
country_id: 6252001
description:
[2026-06-16 21:42:14 +0000] info [cpaneld] 34.27.42.6 - cafetg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - joelpolo@case-afrique.tg [06/16/2026:21:42:20 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: joelpolo@case-afrique.tg


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.125.223.229
country_id: 3469034
domain: cloud-et-racks.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/cloud-et-racks.tg/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.125.223.229
country_id: 3469034
domain: cloud-et-racks.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/cloud-et-racks.tghttp/cloud-et-racks.tg/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 24.61.199.212
country_id: 6252001
description:
Jun 16 21:42:27 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 24.61.199.212 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 24.61.199.212
country_id: 6252001
description:
2026-06-16 21:42:29 dovecot_plain authenticator failed for H=c-24-61-199-212.hsd1.ct.comcast.net (upmatic) [24.61.199.212]:45720: 535 Incorrect authentication data (set_id=admin@zephyr.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:21:42:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9999767&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYm9kaG5hdGhAbWVkZ3VsZmNvbnN0cnVjdGlvbi5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781646154 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Ym9kaG5hdGhAbWVkZ3VsZmNvbnN0cnVjdGlvbi5jb20=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:21:44:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:21:44:17 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.35.225.197
country_id: 3996063
description:
[2026-06-16 21:44:44 +0000] info [cpaneld] 38.35.225.197 - cafe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.123.94.242
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/772261318 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 185.170.109.13
country_id: 2635167
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:request_uri||MV:togo-systeme-public-renforce-et-protection-sociale-accrue/||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:21:48:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9881451&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781646497 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.3
country_id: 6252001
description:
205.169.39.3 - - [16/Jun/2026:21:49:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9792411&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcG9zdG1hc3RlckBqcG8uY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781646564 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cG9zdG1hc3RlckBqcG8uY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.3


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:21:52:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10065814&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DaW5mb0B5YW1hZnVybml0dXJlLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781646762 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=aW5mb0B5YW1hZnVybml0dXJlLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 138.99.198.146
country_id: 3469034
domain: sia-togo.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/sia-togo.tg/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 8.210.147.41
country_id: 1819730
description:
Jun 16 21:53:55 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 8.210.147.41 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 113.203.193.106
country_id: 1168579
description:
2026-06-16 21:55:39 dovecot_login authenticator failed for H=([125.143.209.68]) [113.203.193.106]:5981: 535 Incorrect authentication data (set_id=netmaster@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 113.203.193.106
country_id: 1168579
description:
Jun 16 21:55:37 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 113.203.193.106 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:21:56:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6581612&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781646978 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.6.44.194
country_id: 3625428
description:
Jun 16 21:56:43 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.6.44.194 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 190.6.44.194
country_id: 3625428
description:
2026-06-16 21:56:45 dovecot_plain authenticator failed for H=(25thjirbatiroyh3h0f6fx0) [190.6.44.194]:49245: 535 Incorrect authentication data (set_id=contact@cloud-et-racks.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:21:58:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9737158&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcG9zdG1hc3RlckBqcG8uY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781647108 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cG9zdG1hc3RlckBqcG8uY29t" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.157.194.141
country_id: 2542007
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/07/WhatsApp-Image-2024-07-17-at-19.36.48.jpeg 720w, http:/togodailynews.tg/wp-content/uploads/2024/07/WhatsApp-Image-2024-07-17-at-19.36.48-300x232.jpeg 300w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 165.22.212.32
country_id: 1269750
description:
[2026-06-16 21:59:17 +0000] info [cpaneld] 165.22.212.32 - cafe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:22:00:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:22:00:05 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:22:00:24 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6985368&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZGlsYXJhLnNla2VyQHVyc2FzaGlweWFyZC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781647222 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZGlsYXJhLnNla2VyQHVyc2FzaGlweWFyZC5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 3.142.241.24
country_id: 6252001
description:
[2026-06-16 22:02:50 +0000] info [cpaneld] 3.142.241.24 - Link ----t.me+GcNM68MuRKNkZmM5---- "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 160.179.186.97
country_id: 2542007
description:
160.179.186.97 - - [16/Jun/2026:22:02:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10144409&pdata=https%253A%252F%252F24heureinfo.tg%252Fa-la-une%252Fpresidence-kouessan-yovodevi-nouveau-directeur-de-la-communication%252Fattachment%252Fmg9202%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781647373 HTTP/2.0" 302 0 24heureinfo.tg "https://24heureinfo.tg/a-la-une/presidence-kouessan-yovodevi-nouveau-directeur-de-la-communication/attachment/mg9202/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.4561.1795 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:160.179.186.97


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:22:04:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9607580&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781647462 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 49.124.152.229
country_id: 1733045
description:
Jun 16 22:05:59 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 49.124.152.229 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.124.152.229
country_id: 1733045
description:
2026-06-16 22:06:01 dovecot_login authenticator failed for H=([58.47.137.190]) [49.124.152.229]:44534: 535 Incorrect authentication data (set_id=no-reply@cameg-togo.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 217.117.165.60
country_id: 6252001
domain: vitrinenews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:217.117.165.60||TA:217.117.165.60||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 103.75.230.148
country_id: 2802361
domain: vitrinenews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:103.75.230.148||TA:103.75.230.148||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 177.234.138.26
country_id: 1269750
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:22-08.177.234.138.26||RSV:8.18||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 92.112.238.228
country_id: 3077311
domain: vitrinenews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:92.112.238.228||TA:92.112.238.228||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 176.103.25.83
country_id: 690791
description:
Jun 16 22:10:44 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 176.103.25.83 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:22:11:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12818025&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781647892 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:22:12:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12951189&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dcm96aXRhX2VzdHNiZ0BhbWNzYi5jb20ubXk%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781647946 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cm96aXRhX2VzdHNiZ0BhbWNzYi5jb20ubXk=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:22:14:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:22:14:08 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:22:14:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7062935&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2VsaW5lQHBwYmMuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781648070 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2VsaW5lQHBwYmMuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.85.3.237
country_id: 3469034
description:
[2026-06-16 22:17:07 +0000] info [cpaneld] 177.85.3.237 - fastsol "GET /login/?login_only=1&user=fastsol&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsol (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.226.159.123
country_id: 3932488
description:
[2026-06-16 22:17:13 +0000] info [cpaneld] 38.226.159.123 - fast "GET /login/?login_only=1&user=fast&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fast (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.115.211.208
country_id: 3923057
description:
[2026-06-16 22:16:59 +0000] info [cpaneld] 181.115.211.208 - fastsol "GET /login/?login_only=1&user=fastsol&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsol (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.64.37.10
country_id: 3865483
description:
[2026-06-16 22:17:00 +0000] info [cpaneld] 179.64.37.10 - fastsolu "GET /login/?login_only=1&user=fastsolu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsolu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.181.73.219
country_id: 2635167
description:
[2026-06-16 22:17:13 +0000] info [cpaneld] 109.181.73.219 - fasts "GET /login/?login_only=1&user=fasts&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fasts (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.203.26.97
country_id: 3144096
description:
[2026-06-16 22:17:16 +0000] info [cpaneld] 80.203.26.97 - fas "GET /login/?login_only=1&user=fas&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fas (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.6.18.207
country_id: 3625428
description:
[2026-06-16 22:17:22 +0000] info [cpaneld] 190.6.18.207 - fas "GET /login/?login_only=1&user=fas&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fas (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.24.108.81
country_id: 2017370
description:
[2026-06-16 22:16:52 +0000] info [cpaneld] 95.24.108.81 - fastsolutiontg "GET /login/?login_only=1&user=fastsolutiontg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsolutiontg (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 47.143.40.134
country_id: 6252001
description:
2026-06-16 22:18:07 dovecot_login authenticator failed for H=(47.143.40.134) [47.143.40.134]:40051: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:22:18:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7236811&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781648287 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.189.187.201
country_id: 3865483
description:
[2026-06-16 22:17:25 +0000] info [cpaneld] 45.189.187.201 - fa "GET /login/?login_only=1&user=fa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.245
country_id: 1643084
description:
[2026-06-16 22:17:47 +0000] info [cpaneld] 185.213.83.245 - contactmairieaneho "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user contactmairieaneho (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.207.4.58
country_id: 1269750
description:
Jun 16 22:18:33 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.207.4.58 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 73.180.216.163
country_id: 6252001
description:
2026-06-16 22:21:26 dovecot_plain authenticator failed for H=c-73-180-216-163.hsd1.md.comcast.net (s99jxp7gj5i9hzocflx0j6d85) [73.180.216.163]:45435: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.0.174.42
country_id: 3144096
description:
Jun 16 22:21:50 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.0.174.42 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.0.174.42
country_id: 3144096
description:
2026-06-16 22:21:52 dovecot_login authenticator failed for H=(ADMIN) [81.0.174.42]:56710: 535 Incorrect authentication data (set_id=supporthosting@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 116.111.186.118
country_id: 1562822
description:
[2026-06-16 22:25:08 +0000] info [cpaneld] 116.111.186.118 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.81.226.179
country_id: 2017370
description:
[2026-06-16 22:25:08 +0000] info [cpaneld] 78.81.226.179 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.163.80.184
country_id: 1643084
description:
[2026-06-16 22:25:12 +0000] info [cpaneld] 103.163.80.184 - djama "GET /login/?login_only=1&user=djama&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user djama (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.146.50.176
country_id: 2542007
description:
[2026-06-16 22:25:19 +0000] info [cpaneld] 197.146.50.176 - djam "GET /login/?login_only=1&user=djam&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user djam (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.49.115.215
country_id: 1210997
description:
[2026-06-16 22:25:19 +0000] info [cpaneld] 103.49.115.215 - djam "GET /login/?login_only=1&user=djam&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user djam (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 130.193.197.210
country_id: 99237
description:
[2026-06-16 22:25:26 +0000] info [cpaneld] 130.193.197.210 - dj "GET /login/?login_only=1&user=dj&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dj (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.240.37.62
country_id: 2464461
description:
[2026-06-16 22:26:02 +0000] info [cpaneld] 197.240.37.62 - ist "GET /login/?login_only=1&user=ist&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ist (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.148.78.246
country_id: 6252001
description:
[2026-06-16 22:25:53 +0000] info [cpaneld] 47.148.78.246 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.69.107.132
country_id: 2542007
description:
[2026-06-16 22:25:56 +0000] info [cpaneld] 105.69.107.132 - istm "GET /login/?login_only=1&user=istm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user istm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.40.78.90
country_id: 3437598
description:
[2026-06-16 22:25:59 +0000] info [cpaneld] 181.40.78.90 - istmtg "GET /login/?login_only=1&user=istmtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user istmtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.171.101.43
country_id: 3996063
description:
[2026-06-16 22:25:59 +0000] info [cpaneld] 189.171.101.43 - istmtg "GET /login/?login_only=1&user=istmtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user istmtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.187.194.157
country_id: 3996063
description:
[2026-06-16 22:25:22 +0000] info [cpaneld] 187.187.194.157 - dja "GET /login/?login_only=1&user=dja&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dja (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.239.205.242
country_id: 3686110
description:
[2026-06-16 22:25:21 +0000] info [cpaneld] 170.239.205.242 - dja "GET /login/?login_only=1&user=dja&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dja (has_cpuser_file failed)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 141.98.9.92
country_id: 597427
description:
Jun 16 22:26:50 ns5 pure-ftpd[1376302]: (?@141.98.9.92) [WARNING] Authentication failed for user [jeffery.a]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 141.98.9.92
country_id: 597427
description:
Jun 16 22:26:36 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 141.98.9.92 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 141.98.9.92
country_id: 597427
description:
2026-06-16 22:26:38 dovecot_plain authenticator failed for H=([141.98.9.92]) [141.98.9.92]:55420: 535 Incorrect authentication data (set_id=jeffery.a@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.35.67.110
country_id: 831053
description:
[2026-06-16 22:26:40 +0000] info [whostmgrd] 37.35.67.110 - masfloy "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:22:27:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10250951&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781648841 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.100.226
country_id: 2363686
description:
[2026-06-16 22:28:05 +0000] info [webmaild] 196.168.100.226 - wiyao.g@inger.tg "POST /cpsess6375438600/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.66.202] != Current IP Address [196.168.100.226]


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 155.254.38.189
country_id: 2635167
domain: belali.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:155.254.38.189||TA:155.254.38.189||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 152.232.122.23
country_id: 6252001
domain: belali.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:152.232.122.23||TA:152.232.122.23||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 198.163.193.152
country_id: 1512440
description:
[2026-06-16 22:29:21 +0000] info [cpaneld] 198.163.193.152 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 209.242.203.251
country_id: 3190538
domain: belali.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:209.242.203.251||TA:209.242.203.251||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.233.26.102
country_id: 6252001
domain: belali.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.233.26.102||TA:104.233.26.102||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 172.121.159.104
country_id: 6252001
domain: belali.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:172.121.159.104||TA:172.121.159.104||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 74.7.227.28
country_id: 6252001
domain: civilemagazine.tg
description:
IM360 WAF: Bad file extension||RSV:8.18||T:APACHE||MVN:REQUEST_FILENAME||MV:/groupe-bmi-consulting-recrute-des-consultants-en-suivi-et-evaluation/www.recrutement@groupebmi.com||User:aifkjzqm||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.156.229.155
country_id: 3686110
description:
[2026-06-16 22:29:25 +0000] info [cpaneld] 38.156.229.155 - tpstg "GET /login/?login_only=1&user=tpstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tpstg (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 172.102.222.12
country_id: 660013
domain: belali.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:172.102.222.12||TA:172.102.222.12||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 145.223.41.148
country_id: 3017382
domain: belali.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:145.223.41.148||TA:145.223.41.148||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.250.205.214
country_id: 3144096
domain: belali.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.250.205.214||TA:104.250.205.214||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 46.203.157.190
country_id: 6251999
domain: belali.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:46.203.157.190||TA:46.203.157.190||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 146.158.116.36
country_id: 2017370
description:
[2026-06-16 22:29:32 +0000] info [cpaneld] 146.158.116.36 - tp "GET /login/?login_only=1&user=tp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.231.254.160
country_id: 3469034
description:
[2026-06-16 22:29:24 +0000] info [cpaneld] 45.231.254.160 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 213.55.245.72
country_id: 2658434
description:
[2026-06-16 22:29:29 +0000] info [cpaneld] 213.55.245.72 - tpstg "GET /login/?login_only=1&user=tpstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tpstg (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.252.92.131
country_id: 3469034
domain: belali.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.252.92.131||TA:104.252.92.131||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 123.6.49.18
country_id: 1814991
description:
123.6.49.18 - - [16/Jun/2026:22:29:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9792401&pdata=https%253A%252F%252Fmacite.tg%252F2026%252F06%252F16%252Fdouane-lotr-siffle-la-fin-des-abus-sur-les-cst-pour-les-marchandises-declarees-comme-divers%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781648969 HTTP/2.0" 302 0 macite.tg "https://macite.tg/2026/06/16/douane-lotr-siffle-la-fin-des-abus-sur-les-cst-pour-les-marchandises-declarees-comme-divers/" "Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:123.6.49.18


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:22:30:24 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.14
country_id: 6252001
description:
205.169.39.14 - - [16/Jun/2026:22:30:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7258977&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZ21yZXdhcmRzQGdtbG95YWx0eS5teXZlaGljbGUtZW1haWwuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781649029 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Z21yZXdhcmRzQGdtbG95YWx0eS5teXZlaGljbGUtZW1haWwuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.14


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.124.176
country_id: 6252001
domain: belali.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.18||T:APACHE||RA:104.239.124.176||TA:104.239.124.176||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:22:30:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:22:32:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9804133&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781649127 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:22:31:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12885142&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DbS55YXp1ZGRpbkBuZWIuYWU%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781649088 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=bS55YXp1ZGRpbkBuZWIuYWU=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 72.56.59.233
country_id: 6252001
description:
2026-06-16 22:33:27 dovecot_plain authenticator failed for H=(mail.tps.tg) [72.56.59.233]:6929: 535 Incorrect authentication data (set_id=tps@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 181.46.137.62
country_id: 3865483
description:
181.46.137.62 - - [16/Jun/2026:22:33:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6777798&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fsmic-en-suisse%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781649225 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/smic-en-suisse/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.4696.1054 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:181.46.137.62


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 47.79.205.242
country_id: 1880251
domain: www.togosem.com
description:
IM360 WAF: Bad file extension||RSV:8.18||T:APACHE||MVN:REQUEST_FILENAME||MV:/category/ai-news/www.togosem.com||User:aogodmm||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.74.68.52
country_id: 1733045
description:
[2026-06-16 22:36:15 +0000] info [cpaneld] 180.74.68.52 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.115.154.122
country_id: 2017370
description:
[2026-06-16 22:36:19 +0000] info [cpaneld] 176.115.154.122 - dkfood "GET /login/?login_only=1&user=dkfood&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dkfood (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.85.3.7
country_id: 3469034
description:
[2026-06-16 22:36:16 +0000] info [cpaneld] 177.85.3.7 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.72.99.184
country_id: 2017370
description:
[2026-06-16 22:36:18 +0000] info [cpaneld] 178.72.99.184 - dkfood "GET /login/?login_only=1&user=dkfood&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dkfood (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.171.109.195
country_id: 1562822
description:
[2026-06-16 22:36:34 +0000] info [cpaneld] 14.171.109.195 - dkf "GET /login/?login_only=1&user=dkf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dkf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.183.100.44
country_id: 3658394
description:
[2026-06-16 22:36:37 +0000] info [cpaneld] 45.183.100.44 - dk "GET /login/?login_only=1&user=dk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.138.26.145
country_id: 1210997
description:
[2026-06-16 22:36:40 +0000] info [cpaneld] 103.138.26.145 - dk "GET /login/?login_only=1&user=dk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.57.67.29
country_id: 3686110
description:
[2026-06-16 22:36:22 +0000] info [cpaneld] 181.57.67.29 - dkfoodtg "GET /login/?login_only=1&user=dkfoodtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dkfoodtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.189.107.61
country_id: 3895114
description:
[2026-06-16 22:36:25 +0000] info [cpaneld] 186.189.107.61 - dkfoodtg "GET /login/?login_only=1&user=dkfoodtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dkfoodtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.98.158.231
country_id: 1220409
description:
[2026-06-16 22:36:26 +0000] info [cpaneld] 37.98.158.231 - dkfoo "GET /login/?login_only=1&user=dkfoo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dkfoo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.11.144.123
country_id: 2464461
description:
[2026-06-16 22:36:28 +0000] info [cpaneld] 197.11.144.123 - dkfoo "GET /login/?login_only=1&user=dkfoo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dkfoo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.171.106.86
country_id: 3625428
description:
[2026-06-16 22:37:50 +0000] info [cpaneld] 38.171.106.86 - ameak "GET /login/?login_only=1&user=ameak&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ameak (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.164.104.134
country_id: 3469034
description:
[2026-06-16 22:37:59 +0000] info [cpaneld] 45.164.104.134 - ame "GET /login/?login_only=1&user=ame&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ame (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 73.168.234.135
country_id: 6252001
domain: cafe.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/cafe.tg/wp-json/oembed/1.0/embed?url=http:/cafe.tg/traitement/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.171.91.2
country_id: 298795
description:
[2026-06-16 22:37:54 +0000] info [cpaneld] 185.171.91.2 - ameakco "GET /login/?login_only=1&user=ameakco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ameakco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.83.3.186
country_id: 2017370
description:
[2026-06-16 22:37:55 +0000] info [cpaneld] 77.83.3.186 - amea "GET /login/?login_only=1&user=amea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user amea (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.117.237.155
country_id: 2542007
description:
[2026-06-16 22:37:57 +0000] info [cpaneld] 196.117.237.155 - amea "GET /login/?login_only=1&user=amea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user amea (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.208.171.78
country_id: 2921044
description:
[2026-06-16 22:37:45 +0000] info [cpaneld] 92.208.171.78 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.201.242.232
country_id: 99237
description:
[2026-06-16 22:37:48 +0000] info [cpaneld] 62.201.242.232 - ameak "GET /login/?login_only=1&user=ameak&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ameak (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.149.232.62
country_id: 1210997
description:
[2026-06-16 22:39:11 +0000] info [cpaneld] 180.149.232.62 - fbafr "GET /login/?login_only=1&user=fbafr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 147.235.193.147
country_id: 294640
description:
[2026-06-16 22:38:51 +0000] info [cpaneld] 147.235.193.147 - fbafrica "GET /login/?login_only=1&user=fbafrica&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafrica (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.134.216.55
country_id: 1282988
description:
[2026-06-16 22:39:05 +0000] info [cpaneld] 103.134.216.55 - fbafr "GET /login/?login_only=1&user=fbafr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 144.124.192.138
country_id: 1512440
description:
[2026-06-16 22:39:16 +0000] info [cpaneld] 144.124.192.138 - fbaf "GET /login/?login_only=1&user=fbaf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbaf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.222.60.129
country_id: 99237
description:
[2026-06-16 22:39:20 +0000] info [cpaneld] 176.222.60.129 - fba "GET /login/?login_only=1&user=fba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fba (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.0.208
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/75705d HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.37.41.109
country_id: 2017370
description:
[2026-06-16 22:38:54 +0000] info [cpaneld] 78.37.41.109 - fbafrica "GET /login/?login_only=1&user=fbafrica&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafrica (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.221.58.234
country_id: 149590
description:
[2026-06-16 22:38:56 +0000] info [cpaneld] 41.221.58.234 - fbafricacom "GET /login/?login_only=1&user=fbafricacom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafricacom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.45.61.230
country_id: 3469034
description:
[2026-06-16 22:39:01 +0000] info [cpaneld] 187.45.61.230 - fbafric "GET /login/?login_only=1&user=fbafric&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafric (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.80.204.121
country_id: 3469034
description:
[2026-06-16 22:39:07 +0000] info [cpaneld] 170.80.204.121 - fbafri "GET /login/?login_only=1&user=fbafri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.181.45.122
country_id: 3865483
description:
[2026-06-16 22:38:47 +0000] info [cpaneld] 45.181.45.122 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.14.251.154
country_id: 2464461
description:
[2026-06-16 22:38:46 +0000] info [cpaneld] 197.14.251.154 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 90.209.243.151
country_id: 2635167
description:
[2026-06-16 22:38:58 +0000] info [cpaneld] 90.209.243.151 - fbafric "GET /login/?login_only=1&user=fbafric&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fbafric (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 90.179.85.44
country_id: 3077311
description:
90.179.85.44 - - [16/Jun/2026:22:39:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6710682&pdata=https%253A%252F%252Feducplusmedia.tg%252Fpage%252F38%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781649574 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/page/38/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.1982.1802 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:90.179.85.44


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 69.57.172.207
country_id: 1269750
description:
2026-06-16 22:39:34 dovecot_plain authenticator failed for H=s12716.bom1.stableserver.net (w271l0w8elhppdm5) [69.57.172.207]:39536: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:22:39:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7184024&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZ21yZXdhcmRzQGdtbG95YWx0eS5teXZlaGljbGUtZW1haWwuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781649596 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Z21yZXdhcmRzQGdtbG95YWx0eS5teXZlaGljbGUtZW1haWwuY29t" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.248.40.180
country_id: 2017370
description:
[2026-06-16 22:40:46 +0000] info [cpaneld] 109.248.40.180 - lepopu "GET /login/?login_only=1&user=lepopu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lepopu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.57.227.156
country_id: 2017370
description:
[2026-06-16 22:40:45 +0000] info [cpaneld] 178.57.227.156 - lepopu "GET /login/?login_only=1&user=lepopu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lepopu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.46.154.193
country_id: 298795
description:
[2026-06-16 22:40:51 +0000] info [cpaneld] 195.46.154.193 - lepo "GET /login/?login_only=1&user=lepo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lepo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.124.8.157
country_id: 3437598
description:
[2026-06-16 22:40:57 +0000] info [cpaneld] 181.124.8.157 - lep "GET /login/?login_only=1&user=lep&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lep (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.82.31.182
country_id: 3469034
description:
[2026-06-16 22:40:30 +0000] info [cpaneld] 170.82.31.182 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.159.96.93
country_id: 2017370
description:
[2026-06-16 22:40:39 +0000] info [cpaneld] 46.159.96.93 - lepopuli "GET /login/?login_only=1&user=lepopuli&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lepopuli (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.185.67.58
country_id: 3625428
description:
[2026-06-16 22:40:48 +0000] info [cpaneld] 138.185.67.58 - lepop "GET /login/?login_only=1&user=lepop&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lepop (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.23.136.10
country_id: 3865483
description:
[2026-06-16 22:40:49 +0000] info [cpaneld] 186.23.136.10 - lepop "GET /login/?login_only=1&user=lepop&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lepop (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.0.51.242
country_id: 3469034
description:
[2026-06-16 22:41:00 +0000] info [cpaneld] 138.0.51.242 - le "GET /login/?login_only=1&user=le&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user le (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 141.101.199.95
country_id: 2017370
description:
[2026-06-16 22:40:32 +0000] info [cpaneld] 141.101.199.95 - lepopulistetogo "GET /login/?login_only=1&user=lepopulistetogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lepopulistetogo (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 217.17.108.39
country_id: 6290252
description:
Jun 16 22:40:38 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 217.17.108.39 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.127.85.178
country_id: 2542007
description:
[2026-06-16 22:40:43 +0000] info [cpaneld] 196.127.85.178 - lepopul "GET /login/?login_only=1&user=lepopul&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lepopul (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.4
country_id: 6252001
description:
205.169.39.4 - - [16/Jun/2026:22:42:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10066634&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZGlhQGUuZGlhLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781649719 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZGlhQGUuZGlhLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.4


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:22:41:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9922968&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781649690 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:22:44:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9608807&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZWxzaWxhQGVsc2lsYS5zcGIucnU%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781649852 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZWxzaWxhQGVsc2lsYS5zcGIucnU=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 113.211.212.167
country_id: 1733045
description:
113.211.212.167 - - [16/Jun/2026:22:43:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6909341&pdata=https%253A%252F%252Feducplusmedia.tg%252Fpage%252F32%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781649820 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/page/32/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.5910.1508 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:113.211.212.167


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.58
country_id: 6252001
description:
205.169.39.58 - - [16/Jun/2026:22:44:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9990294&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DeW5vc2VyQG5vbmdzaGltLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781649867 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=eW5vc2VyQG5vbmdzaGltLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.58


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.217.222.212
country_id: 3996063
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/grand-lome-un-guichet-consulaire-pour-les-operateurs-economiques/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.217.222.212
country_id: 3996063
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/grand-lome-un-guichet-consulaire-pour-les-operateurs-economiques/ HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 200.80.180.238
country_id: 3865483
description:
200.80.180.238 - - [16/Jun/2026:22:45:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9815662&pdata=https%253A%252F%252Feducplusmedia.tg%252Fpage%252F34%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781649926 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/page/34/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.7233.1290 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:200.80.180.238


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:22:45:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:22:45:41 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.116.242.211
country_id: 1269750
description:
[2026-06-16 22:47:01 +0000] info [cpaneld] 66.116.242.211 - mesyscom "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 197.204.161.189
country_id: 2589581
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/06/2db3b4eb32e257a6cf4c5006e4f6783d_L.webp 500w, http:/togodailynews.tg/wp-content/uploads/2025/06/2db3b4eb32e257a6cf4c5006e4f6783d_L-300x200.webp 300w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:22:48:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6396819&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781650122 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.73.134.12
country_id: 2017370
description:
[2026-06-16 22:50:17 +0000] info [cpaneld] 95.73.134.12 - bi "GET /login/?login_only=1&user=bi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.58.190.153
country_id: 3686110
description:
[2026-06-16 22:49:27 +0000] info [cpaneld] 181.58.190.153 - lesnidsurbains "GET /login/?login_only=1&user=lesnidsurbains&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesnidsurbains (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.73.89.228
country_id: 102358
description:
[2026-06-16 22:50:12 +0000] info [cpaneld] 178.73.89.228 - bier "GET /login/?login_only=1&user=bier&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bier (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.195.203.207
country_id: 3996063
description:
[2026-06-16 22:49:59 +0000] info [cpaneld] 189.195.203.207 - bieredja "GET /login/?login_only=1&user=bieredja&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredja (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.250.156.161
country_id: 2542007
description:
[2026-06-16 22:49:31 +0000] info [cpaneld] 41.250.156.161 - lesnidsu "GET /login/?login_only=1&user=lesnidsu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesnidsu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 81.215.234.111
country_id: 298795
description:
[2026-06-16 22:49:34 +0000] info [cpaneld] 81.215.234.111 - lesnidsu "GET /login/?login_only=1&user=lesnidsu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesnidsu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.254.92.181
country_id: 2215636
description:
[2026-06-16 22:49:43 +0000] info [cpaneld] 41.254.92.181 - lesni "GET /login/?login_only=1&user=lesni&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesni (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.249.37.207
country_id: 3469034
description:
[2026-06-16 22:49:49 +0000] info [cpaneld] 186.249.37.207 - lesn "GET /login/?login_only=1&user=lesn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.242.90.18
country_id: 2017370
description:
[2026-06-16 22:49:56 +0000] info [cpaneld] 188.242.90.18 - le "GET /login/?login_only=1&user=le&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user le (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.254.69.135
country_id: 2215636
description:
[2026-06-16 22:50:21 +0000] info [cpaneld] 41.254.69.135 - bie "GET /login/?login_only=1&user=bie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.121.207.45
country_id: 2542007
description:
[2026-06-16 22:49:26 +0000] info [cpaneld] 196.121.207.45 - lesnidsurbains "GET /login/?login_only=1&user=lesnidsurbains&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesnidsurbains (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.32.230.96
country_id: 6252001
description:
[2026-06-16 22:49:35 +0000] info [cpaneld] 76.32.230.96 - lesnids "GET /login/?login_only=1&user=lesnids&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesnids (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.244.155.154
country_id: 99237
description:
[2026-06-16 22:49:50 +0000] info [cpaneld] 185.244.155.154 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.45.237.15
country_id: 3895114
description:
[2026-06-16 22:50:09 +0000] info [cpaneld] 190.45.237.15 - biere "GET /login/?login_only=1&user=biere&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user biere (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 223.207.251.51
country_id: 1605651
description:
[2026-06-16 22:50:14 +0000] info [cpaneld] 223.207.251.51 - bie "GET /login/?login_only=1&user=bie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.163.190.187
country_id: 102358
description:
[2026-06-16 22:49:46 +0000] info [cpaneld] 5.163.190.187 - lesn "GET /login/?login_only=1&user=lesn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lesn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 202.36.122.34
country_id: 1210997
description:
[2026-06-16 22:49:53 +0000] info [cpaneld] 202.36.122.34 - bieredjama "GET /login/?login_only=1&user=bieredjama&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredjama (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.231.158.27
country_id: 285570
description:
[2026-06-16 22:49:57 +0000] info [cpaneld] 37.231.158.27 - bieredjamatg "GET /login/?login_only=1&user=bieredjamatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredjamatg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 84.62.167.237
country_id: 2921044
description:
[2026-06-16 22:50:22 +0000] info [cpaneld] 84.62.167.237 - bi "GET /login/?login_only=1&user=bi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bi (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.78.235.58
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/979594 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.83.234
country_id: 6252001
description:
[2026-06-16 22:51:20 +0000] info [cpaneld] 134.195.83.234 NEW wwayrzpl:O1ZjeyHwTqtGpYBW address=134.195.83.234,app=cpaneld,creator=wwayrzpl,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.208.128.234
country_id: 2245662
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/79787f HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:22:53:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7246227&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DeW5vc2VyQG5vbmdzaGltLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781650401 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=eW5vc2VyQG5vbmdzaGltLmNvbQ==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.101.81.2
country_id: 2589581
description:
[2026-06-16 22:53:32 +0000] info [cpaneld] 105.101.81.2 - letabloid "GET /login/?login_only=1&user=letabloid&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabloid (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.252.207.48
country_id: 3996063
description:
[2026-06-16 22:53:57 +0000] info [cpaneld] 187.252.207.48 - le "GET /login/?login_only=1&user=le&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user le (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.233.117.218
country_id: 3996063
description:
[2026-06-16 22:53:28 +0000] info [cpaneld] 189.233.117.218 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 115.76.51.144
country_id: 1562822
description:
[2026-06-16 22:53:42 +0000] info [cpaneld] 115.76.51.144 - letablo "GET /login/?login_only=1&user=letablo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letablo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.61.206.36
country_id: 3686110
description:
[2026-06-16 22:53:54 +0000] info [cpaneld] 181.61.206.36 - let "GET /login/?login_only=1&user=let&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user let (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.41.5.109
country_id: 3625428
description:
[2026-06-16 22:53:42 +0000] info [cpaneld] 38.41.5.109 - letablo "GET /login/?login_only=1&user=letablo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letablo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.247.15.41
country_id: 3865483
description:
[2026-06-16 22:53:45 +0000] info [cpaneld] 190.247.15.41 - letabl "GET /login/?login_only=1&user=letabl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabl (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.120
country_id: 1880251
description:
47.128.121.120 - - [16/Jun/2026:22:53:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9805160&pdata=https%253A%252F%252Ftogomedia24.tg%252F2020%252F12%252F07%252Ftogo-reprise-progressive-des-activites-sportives%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781650426 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/2020/12/07/togo-reprise-progressive-des-activites-sportives/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.120


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.113.16
country_id: 6252001
description:
[2026-06-16 22:53:59 +0000] info [cpaneld] 172.58.113.16 - let "GET /login/?login_only=1&user=let&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user let (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.138.207.160
country_id: 2017370
description:
[2026-06-16 22:53:34 +0000] info [cpaneld] 185.138.207.160 - letabloidtg "GET /login/?login_only=1&user=letabloidtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabloidtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.5.161.110
country_id: 3865483
description:
[2026-06-16 22:53:37 +0000] info [cpaneld] 190.5.161.110 - letabloi "GET /login/?login_only=1&user=letabloi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabloi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 85.106.140.228
country_id: 298795
description:
[2026-06-16 22:53:51 +0000] info [cpaneld] 85.106.140.228 - leta "GET /login/?login_only=1&user=leta&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leta (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:22:53:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9674139&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DeW5vc2VyQG5vbmdzaGltLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781650435 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=eW5vc2VyQG5vbmdzaGltLmNvbQ==" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 149.107.253.237
country_id: 3865483
description:
[2026-06-16 22:53:57 +0000] info [cpaneld] 149.107.253.237 - leta "GET /login/?login_only=1&user=leta&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leta (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.129
country_id: 1880251
description:
47.128.121.129 - - [16/Jun/2026:22:54:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12870299&pdata=https%253A%252F%252Ftogomedia24.tg%252F2025%252F09%252F16%252Fmali-violente-attaque-contre-un-convoi-militaire-a-kayes%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781650495 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/2025/09/16/mali-violente-attaque-contre-un-convoi-militaire-a-kayes/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.129


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:22:55:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10066325&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781650542 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.195.24.147
country_id: 1269750
description:
Jun 16 22:55:33 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.195.24.147 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.70.0.79
country_id: 285570
description:
[2026-06-16 22:57:14 +0000] info [cpaneld] 188.70.0.79 - itstg "GET /login/?login_only=1&user=itstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user itstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.211.105.8
country_id: 1733045
description:
[2026-06-16 22:57:22 +0000] info [cpaneld] 113.211.105.8 - it "GET /login/?login_only=1&user=it&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user it (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.99.174.140
country_id: 2589581
description:
[2026-06-16 22:57:07 +0000] info [cpaneld] 41.99.174.140 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.154.186.116
country_id: 3996063
description:
[2026-06-16 22:57:12 +0000] info [cpaneld] 189.154.186.116 - its "GET /login/?login_only=1&user=its&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user its (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.246.213.41
country_id: 798544
description:
Jun 16 22:59:11 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.246.213.41 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.97.233.169
country_id: 3625428
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1678107990 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.246.213.41
country_id: 798544
description:
Jun 16 22:59:24 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.246.213.41 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.44
country_id: 6252001
description:
205.169.39.44 - - [16/Jun/2026:23:00:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001301&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DY2FyZGhvbGRlckBlLnN5bmNocm9ueWZpbmFuY2lhbC5jb20%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781650829 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=Y2FyZGhvbGRlckBlLnN5bmNocm9ueWZpbmFuY2lhbC5jb20=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.44


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:23:02:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:23:02:12 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.195.24.147
country_id: 1269750
description:
Jun 16 23:02:30 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.195.24.147 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:23:02:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9869159&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc3VwcG9ydC1hZUBrYXNwZXJza3kuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781650967 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c3VwcG9ydC1hZUBrYXNwZXJza3kuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:23:02:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10065771&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781650972 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.49
country_id: 6252001
description:
205.169.39.49 - - [16/Jun/2026:23:04:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13080426&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DdGhlY2hpbGRyZW5zcGxhY2VAZW1haWwuY2hpbGRyZW5zcGxhY2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651054 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=dGhlY2hpbGRyZW5zcGxhY2VAZW1haWwuY2hpbGRyZW5zcGxhY2UuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.49


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 49.157.93.18
country_id: 1694008
description:
49.157.93.18 - - [16/Jun/2026:23:04:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9737628&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fambassade-du-bresil-au-togo-recrute%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651088 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/ambassade-du-bresil-au-togo-recrute/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.8249.1094 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:49.157.93.18


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 193.181.35.196
country_id: 2661886
description:
2026-06-16 23:05:31 dovecot_plain authenticator failed for H=193-181-35-196.cust.norisab.com (owhxtf1c3n4gqvzh6jxgre2y4zmm15gj) [193.181.35.196]:46072: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 193.181.35.196
country_id: 2661886
description:
Jun 16 23:05:29 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 193.181.35.196 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.82.68
country_id: 6252001
description:
[2026-06-16 23:07:21 +0000] info [cpaneld] 134.195.82.68 NEW ttfuehop:CszWFag5UyxaJMSI address=134.195.82.68,app=cpaneld,creator=ttfuehop,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 38.57.2.170
country_id: 6252001
description:
38.57.2.170 - - [16/Jun/2026:23:07:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10186342&pdata=http%253A%252F%252Fafrique-distribution.net&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651262 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.37 Mobile/O6ZM6Z Safari/620.31" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:38.57.2.170


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 37.252.191.29
country_id: 2782113
description:
37.252.191.29 - - [16/Jun/2026:23:09:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10196885&pdata=https%253A%252F%252Fafrique-distribution.net%252Fgh%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651348 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/gh/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.37 Mobile/O6ZM6Z Safari/620.31" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.252.191.29


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.16
country_id: 3469034
description:
Jun 16 23:08:25 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.16 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 57.131.13.108
country_id: 3175395
description:
57.131.13.108 - - [16/Jun/2026:23:08:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7380122&pdata=https%253A%252F%252Fafrique-distribution.net%252Flite.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651329 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/lite.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16_0 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:57.131.13.108


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.120
country_id: 1880251
description:
47.128.121.120 - - [16/Jun/2026:23:10:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10120391&pdata=https%253A%252F%252Ftogomedia24.tg%252F2019%252F07%252F26%252Ftogo-la-ceni-prete-le-vote-partiel-du-15-aout-2019%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651399 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/2019/07/26/togo-la-ceni-prete-le-vote-partiel-du-15-aout-2019/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.120


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.50
country_id: 6252001
description:
205.169.39.50 - - [16/Jun/2026:23:10:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10121365&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DYXZlbnVlQGUuYXZlbnVlLmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651439 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=YXZlbnVlQGUuYXZlbnVlLmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.50


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.195.24.147
country_id: 1269750
description:
Jun 16 23:10:42 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.195.24.147 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:23:11:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10208358&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651465 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 195.132.35.238
country_id: 3017382
description:
195.132.35.238 - - [16/Jun/2026:23:11:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10208358&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651465 HTTP/1.1" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; arm_64; Android 14; TECNO KL5n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7680.115 YaBrowser/26.4.4.115.00 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.132.35.238


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:23:13:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12949350&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcG9zdG1hc3RlckB0cGRjby5vcmc%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651586 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cG9zdG1hc3RlckB0cGRjby5vcmc=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.43
country_id: 6252001
description:
205.169.39.43 - - [16/Jun/2026:23:12:33 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6472859&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcG9zdG1hc3RlckB0cGRjby5vcmc%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651552 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cG9zdG1hc3RlckB0cGRjby5vcmc=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.43


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:23:12:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10381975&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcG9zdG1hc3RlckB0cGRjby5vcmc%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651558 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cG9zdG1hc3RlckB0cGRjby5vcmc=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 62.201.241.243
country_id: 99237
description:
[2026-06-16 23:13:35 +0000] info [whostmgrd] 62.201.241.243 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.201.241.243
country_id: 99237
description:
[2026-06-16 23:13:38 +0000] info [whostmgrd] 62.201.241.243 - root "GET /cpsess5281441622/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.90.7
country_id: 3865483
description:
Jun 16 23:16:11 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.90.7 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.90.7
country_id: 3865483
description:
Jun 16 23:16:25 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.90.7 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.224.168.45
country_id: 3469034
description:
Jun 16 23:16:34 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.224.168.45 has been locked due to Imunify RBL


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 149.88.103.78
country_id: 1861060
domain: clinique-ccl.tg
description:
IM360 WAF: Bad file extension||RSV:8.18||T:APACHE||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/phpunit/phpunit.xsd||User:udxjqqmt||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:23:16:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:23:16:36 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.195.24.147
country_id: 1269750
description:
Jun 16 23:17:38 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.195.24.147 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:23:18:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10274504&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DcG9zdG1hc3RlckB0cGRjby5vcmc%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651896 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=cG9zdG1hc3RlckB0cGRjby5vcmc=" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.66.182.212
country_id: 953987
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/01/0bf402d3628d00fd53156eaae952a508_L.webp 500w, http:/togodailynews.tg/wp-content/uploads/2026/01/0bf402d3628d00fd53156eaae952a508_L-300x200.webp 300w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:23:19:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10118808&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781651949 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.120.104.199
country_id: 3469034
description:
Jun 16 23:22:30 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.120.104.199 has been locked due to Imunify RBL


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 174.118.45.202
country_id: 6251999
domain: tdn.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.18||T:APACHE||MV:/wp-json/wp/v2/users?context=view&who=authors&per_page=100&_fields=id%2Cname&_locale=user||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.195.24.147
country_id: 1269750
description:
Jun 16 23:25:51 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.195.24.147 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.89.68.6
country_id: 2328926
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1144568333 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:23:27:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6933361&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781652440 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 158.173.66.40
country_id: 2077456
description:
158.173.66.40 - - [16/Jun/2026:23:27:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9791637&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781652464 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:158.173.66.40


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:23:27:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10120045&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dam9hbm5hQHlvbmdtaW5vZmZpY2UuY29t&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781652472 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=am9hbm5hQHlvbmdtaW5vZmZpY2UuY29t" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:23:28:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7248839&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253DZXN0Y2xlcmtAYW1jc2IuY29tLm15&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781652523 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=ZXN0Y2xlcmtAYW1jc2IuY29tLm15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 79.127.164.204
country_id: 2802361
description:
[2026-06-16 23:29:14 +0000] info [cpaneld] 79.127.164.204 NEW glfmqhlj:qBFnum7a2mfP8Cly address=79.127.164.204,app=cpaneld,creator=glfmqhlj,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.237.94.84
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/bb9a89 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.181.180.32
country_id: 6252001
description:
[2026-06-16 23:29:35 +0000] info [cpaneld] 70.181.180.32 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 86.127.71.41
country_id: 798549
description:
[2026-06-16 23:29:54 +0000] info [cpaneld] 86.127.71.41 - scafr "GET /login/?login_only=1&user=scafr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafr (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 73.45.114.210
country_id: 6252001
description:
2026-06-16 23:30:06 dovecot_plain authenticator failed for H=c-73-45-114-210.hsd1.il.comcast.net (muf5jkzi2qyysx2t4or5) [73.45.114.210]:49411: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 170.78.40.122
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2021/04/IMG-20210413-WA0024-300x226.jpg HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.137.66.254
country_id: 294640
description:
[2026-06-16 23:29:36 +0000] info [cpaneld] 77.137.66.254 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 54.71.187.124
country_id: 6252001
description:
54.71.187.124 - - [16/Jun/2026:23:29:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6932334&pdata=http%253A%252F%252Fsthandling-aero.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781652576 HTTP/1.1" 302 0 sthandling-aero.tg "http://sthandling-aero.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:54.71.187.124


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.237.121.154
country_id: 99237
description:
[2026-06-16 23:29:41 +0000] info [cpaneld] 212.237.121.154 - scafricaplccom "GET /login/?login_only=1&user=scafricaplccom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafricaplccom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.127.127.205
country_id: 272103
description:
[2026-06-16 23:29:54 +0000] info [cpaneld] 185.127.127.205 - scafr "GET /login/?login_only=1&user=scafr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scafr (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.203.21.9
country_id: 1880251
description:
85.203.21.9 - - [16/Jun/2026:23:29:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9660518&pdata=https%253A%252F%252Ftdn.tg%252Fjune%252F%253Fworker%253Dc2FsZXNAd2Vlc2VuZ2h3LmNvbQ%253D%253D&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781652593 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/june/?worker=c2FsZXNAd2Vlc2VuZ2h3LmNvbQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.203.21.9


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 154.250.15.247
country_id: 2589581
description:
[2026-06-16 23:29:57 +0000] info [cpaneld] 154.250.15.247 - scaf "GET /login/?login_only=1&user=scaf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user scaf (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 80.83.30.117
country_id: 272103
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2023/07/Culture-Rencontre-speciale-entre-le-chef-de-lEtat-et-les-Evala.jpg 800w, http:/togodailynews.tg/wp-content/uploads/2023/07/Culture-Rencontre-speciale-entre-le-chef-de-lEtat-et-les-Evala-300x240.jpg 300w, http:/togodailynews.tg/wp-content/uploads/2023/07/Culture-Rencontre-speciale-entre-le-chef-de-lEtat-et-les-Evala-768x614.jpg 768w HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:23:30:37 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:23:30:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.48.228.219
country_id: 3439705
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1771415718 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 88.167.249.96
country_id: 3017382
description:
[2026-06-16 23:32:01 +0000] info [cpaneld] 88.167.249.96 - libertetogo "GET /login/?login_only=1&user=libertetogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user libertetogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.201.244.122
country_id: 99237
description:
[2026-06-16 23:32:06 +0000] info [cpaneld] 62.201.244.122 - libertetogotg "GET /login/?login_only=1&user=libertetogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user libertetogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 144.48.151.178
country_id: 1210997
description:
[2026-06-16 23:32:10 +0000] info [cpaneld] 144.48.151.178 - libertet "GET /login/?login_only=1&user=libertet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user libertet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.67.246.127
country_id: 2287781
description:
[2026-06-16 23:32:11 +0000] info [cpaneld] 102.67.246.127 - liberte "GET /login/?login_only=1&user=liberte&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user liberte (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.216
country_id: 2635167
description:
[2026-06-16 23:31:30 +0000] info [cpaneld] 5.230.133.216 NEW tgkkwsvr:efnmOH79cD53HbZV address=5.230.133.216,app=cpaneld,creator=tgkkwsvr,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 51.36.76.135
country_id: 102358
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/2112072479 HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.190.185.181
country_id: 3996063
description:
[2026-06-16 23:32:00 +0000] info [cpaneld] 187.190.185.181 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.116.212.140
country_id: 3686110
description:
[2026-06-16 23:32:02 +0000] info [cpaneld] 186.116.212.140 - libertetogo "GET /login/?login_only=1&user=libertetogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user libertetogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.232.252.85
country_id: 3658394
description:
[2026-06-16 23:32:14 +0000] info [cpaneld] 181.232.252.85 - libert "GET /login/?login_only=1&user=libert&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user libert (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.64.148.194
country_id: 2363686
description:
[2026-06-16 23:32:20 +0000] info [cpaneld] 102.64.148.194 - libe "GET /login/?login_only=1&user=libe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user libe (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.48.50.62
country_id: 3439705
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2023/07/Culture-Rencontre-speciale-entre-le-chef-de-lEtat-et-les-Evala.jpg HTTP/1.1||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.195.24.147
country_id: 1269750
description:
Jun 16 23:32:47 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.195.24.147 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 168.0.224.94
country_id: 3469034
description:
Jun 16 23:34:18 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 168.0.224.94 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 168.0.224.94
country_id: 3469034
description:
Jun 16 23:34:27 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 168.0.224.94 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 51.83.4.64
country_id: 3017382
description:
[2026-06-16 23:34:51 +0000] info [cpaneld] 51.83.4.64 NEW wcnyaruu:oJCOIneLedETXfZT address=51.83.4.64,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:23:36:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7234717&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781652998 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.255.174
country_id: 3017382
domain: togofarm.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ifxmoxbf/public_html/.938563381007781.php||RSV:8.18||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.90
country_id: 3469034
description:
Jun 16 23:40:01 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.90 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.156
country_id: 2635167
description:
[2026-06-16 23:39:48 +0000] info [cpaneld] 5.230.133.156 NEW ifxmoxbf:dMosrfwkSexx7rrW address=5.230.133.156,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.195.24.147
country_id: 1269750
description:
Jun 16 23:41:01 ns5 auth[1130641]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.195.24.147 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.245
country_id: 1643084
description:
[2026-06-16 23:42:30 +0000] info [cpaneld] 185.213.83.245 - conseiller "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user conseiller (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 81.53.36.105
country_id: 3017382
description:
81.53.36.105 - - [16/Jun/2026:23:43:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7368091&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781653424 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:81.53.36.105


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 158.173.66.40
country_id: 2077456
description:
158.173.66.40 - - [16/Jun/2026:23:43:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935257&pdata=http%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781653426 HTTP/1.1" 302 0 afrique-distribution.net "http://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:158.173.66.40


