# incident

plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.78.137
country_id: 6252001
description:
[2026-06-06 10:43:56 +0000] info [cpaneld] 82.40.78.137 - ucaouut "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 10:44:16 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:4096: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.183.157.214
country_id: 2921044
description:
185.183.157.214 - glfmqhlj [06/Jun/2026:10:44:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10263189&pdata=https%253A%252F%252Fafriquerevelation.tg%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780742677 HTTP/2.0" 302 0 afriquerevelation.tg "https://afriquerevelation.tg:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.183.157.214


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.95.144
country_id: 2635167
description:
[2026-06-06 10:44:54 +0000] info [cpaneld] 217.181.95.144 - xflhqsmv "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.95.169.119
country_id: 3202326
description:
[2026-06-06 10:45:14 +0000] info [cpaneld] 45.95.169.119 - ubwmytwf "GET /execute/DomainInfo/domains_data HTTP/1.1" FAILED LOGIN cpaneld: User ubwmytwf has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 54.244.56.127
country_id: 6252001
description:
[2026-06-06 10:45:35 +0000] info [cpaneld] 54.244.56.127 - antasadmin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.95.169.119
country_id: 3202326
description:
45.95.169.119 - ubwmytwf [06/Jun/2026:10:45:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10012514&pdata=https%253A%252F%252Fameak.co%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780742712 HTTP/2.0" 302 0 ameak.co "https://ameak.co:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.95.169.119


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.95.169.119
country_id: 3202326
description:
[2026-06-06 10:45:52 +0000] info [cpaneld] 45.95.169.119 - ubwmytwf "GET /execute/DomainInfo/domains_data HTTP/1.1" FAILED LOGIN cpaneld: User ubwmytwf has their account suspended. Login blocked.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.95.169.119
country_id: 3202326
description:
45.95.169.119 - ubwmytwf [06/Jun/2026:10:45:52 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6670277&pdata=https%253A%252F%252Fameak.co%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780742750 HTTP/2.0" 302 0 ameak.co "https://ameak.co:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.95.169.119


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.95.50
country_id: 2635167
description:
[2026-06-06 10:47:37 +0000] info [cpaneld] 217.181.95.50 - apicafe "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 41.63.170.141
country_id: 3351879
description:
2026-06-06 10:48:09 H=([41.63.170.141]) [41.63.170.141]:60613 F=<John@4452.com> rejected RCPT <info@sigm.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.18.246
country_id: 6251999
description:
[2026-06-06 10:48:11 +0000] info [cpaneld] 195.63.18.246 - arsetg "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 10:48:32 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:9985: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 10:49:33 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:9986: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 104.167.25.183
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:10-50.104.167.25.183||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.80.246
country_id: 6251999
description:
[2026-06-06 10:50:57 +0000] info [cpaneld] 217.181.80.246 - himcuijv "GET / HTTP/1.1" FAILED LOGIN cpaneld: User himcuijv has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.18.85
country_id: 6251999
description:
[2026-06-06 10:51:05 +0000] info [cpaneld] 195.63.18.85 - hsufgiqg "GET / HTTP/1.1" FAILED LOGIN cpaneld: User hsufgiqg has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.82.108
country_id: 6251999
description:
[2026-06-06 10:52:36 +0000] info [cpaneld] 217.181.82.108 - zgqykfsi "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.72.229
country_id: 6252001
description:
[2026-06-06 10:54:10 +0000] info [cpaneld] 217.181.72.229 - assedderetrm "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.79.5
country_id: 6252001
description:
[2026-06-06 10:55:45 +0000] info [cpaneld] 217.181.79.5 - muzsajnk "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.78.48
country_id: 6252001
description:
[2026-06-06 10:55:50 +0000] info [cpaneld] 217.181.78.48 - centif "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 34.29.83.234
country_id: 6252001
description:
[2026-06-06 10:56:22 +0000] info [whostmgrd] 34.29.83.234 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 200.71.124.192
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:10-56.200.71.124.192||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.77.37
country_id: 6252001
description:
[2026-06-06 10:56:03 +0000] info [cpaneld] 217.181.77.37 - afdim "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.79.245
country_id: 6252001
description:
[2026-06-06 10:56:08 +0000] info [cpaneld] 217.181.79.245 - cfpjusti "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 82.139.195.11
country_id: 357994
description:
82.139.195.11 - - [06/Jun/2026:10:56:08 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9608039&pdata=https%253A%252F%252Fwww.togosnb.snb.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780743366 HTTP/2.0" 302 0 www.togosnb.snb.tg "https://www.togosnb.snb.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:82.139.195.11


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 23.108.48.61
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:10-56.23.108.48.61||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 34.29.83.234
country_id: 6252001
description:
[2026-06-06 10:56:24 +0000] info [whostmgrd] 34.29.83.234 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 152.232.13.87
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:10-56.152.232.13.87||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 176.215.25.144
country_id: 2017370
description:
2026-06-06 10:57:28 H=([176.215.25.144]) [176.215.25.144]:29409 F=<John@4452.com> rejected RCPT <agounkej@ucao-uut.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.93.118
country_id: 2635167
description:
[2026-06-06 10:57:59 +0000] info [cpaneld] 217.181.93.118 - cloudetracks "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 103.191.119.216
country_id: 1168579
description:
2026-06-06 10:59:41 H=([103.191.119.220]) [103.191.119.216]:63563 F=<John@4452.com> rejected RCPT <info@cndh-togo.org>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.25.59
country_id: 2635167
description:
[2026-06-06 10:58:58 +0000] info [cpaneld] 195.63.25.59 - fnnjmavs "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.23.121
country_id: 2635167
description:
[2026-06-06 11:00:01 +0000] info [cpaneld] 195.63.23.121 - wcdxbboq "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.126
country_id: 1880251
description:
47.128.96.126 - - [06/Jun/2026:11:00:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9934790&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fua%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780743614 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/ua/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.126


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.95.149
country_id: 2635167
description:
[2026-06-06 11:01:21 +0000] info [cpaneld] 217.181.95.149 - myxlsnta "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.190.76.4
country_id: 6252001
description:
[2026-06-06 11:01:16 +0000] info [cpaneld] 64.190.76.4 - crrhuemo "GET /execute/DomainInfo/domains_data HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.190.76.4
country_id: 6252001
description:
[2026-06-06 11:01:55 +0000] info [cpaneld] 64.190.76.4 - mvfxewjz "GET /execute/DomainInfo/domains_data HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.24.206
country_id: 2635167
description:
[2026-06-06 11:01:59 +0000] info [cpaneld] 195.63.24.206 - davetkoo "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 41.78.136.107
country_id: 2363686
description:
[2026-06-06 11:02:09 +0000] info [webmaild] 41.78.136.107 - raouf.damtare@togointerim.net "POST /cpsess7887054902/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [41.78.138.31] != Current IP Address [41.78.136.107]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.86.250
country_id: 2921044
description:
[2026-06-06 11:03:19 +0000] info [cpaneld] 217.181.86.250 - dgdntogo "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.255.212.30
country_id: 732800
description:
Jun  6 11:03:37 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.255.212.30 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.104.127.16
country_id: 1269750
description:
Jun  6 11:03:42 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.104.127.16 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 185.250.30.21
country_id: 1522867
description:
2026-06-06 11:03:03 H=([0.0.0.0]) [185.250.30.21]:21986 F=<John@4452.com> rejected RCPT <contact@emt.tg>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.39.142.61
country_id: 3469034
description:
Jun  6 11:03:40 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.39.142.61 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.238.106.158
country_id: 3865483
description:
Jun  6 11:03:43 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.238.106.158 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.85.23
country_id: 2921044
description:
[2026-06-06 11:04:40 +0000] info [cpaneld] 217.181.85.23 - uubplgpf "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.22.203
country_id: 2921044
description:
[2026-06-06 11:04:46 +0000] info [cpaneld] 195.63.22.203 - kygyhxkc "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.238.106.158
country_id: 3865483
description:
Jun  6 11:03:51 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.238.106.158 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.104.127.16
country_id: 1269750
description:
Jun  6 11:03:50 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.104.127.16 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 197.220.72.23
country_id: 51537
description:
Jun  6 11:04:03 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 197.220.72.23 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.20.174
country_id: 2921044
description:
[2026-06-06 11:04:43 +0000] info [cpaneld] 195.63.20.174 - vodvpozo "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.19.153
country_id: 2921044
description:
[2026-06-06 11:03:49 +0000] info [cpaneld] 195.63.19.153 - zmfpejke "GET / HTTP/1.1" FAILED LOGIN cpaneld: User zmfpejke has their account suspended. Login blocked.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 171.25.193.79
country_id: 2661886
description:
171.25.193.79 - edjatiapougloe [06/Jun/2026:11:03:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9869670&pdata=https%253A%252F%252Fekeasarl.com%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780743835 HTTP/2.0" 302 0 ekeasarl.com "https://ekeasarl.com:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:171.25.193.79


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.84.122
country_id: 2921044
description:
[2026-06-06 11:04:48 +0000] info [cpaneld] 217.181.84.122 - afgqjhmw "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.84.107.33
country_id: 2661886
description:
45.84.107.33 - tgkkwsvr [06/Jun/2026:11:05:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10326935&pdata=https%253A%252F%252Ffomda.tg%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780743947 HTTP/2.0" 302 0 fomda.tg "https://fomda.tg:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.84.107.33


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.84.107.33
country_id: 2661886
description:
[2026-06-06 11:06:37 +0000] info [cpaneld] 45.84.107.33 - tubobkfl "GET /execute/DomainInfo/domains_data HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.84.107.33
country_id: 2661886
description:
45.84.107.33 - tubobkfl [06/Jun/2026:11:06:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12873371&pdata=https%253A%252F%252Fgroup-gci.com%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780744014 HTTP/2.0" 302 0 group-gci.com "https://group-gci.com:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.84.107.33


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.84.107.33
country_id: 2661886
description:
[2026-06-06 11:06:56 +0000] info [cpaneld] 45.84.107.33 - tubobkfl "GET /execute/DomainInfo/domains_data HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:07:56 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:15488: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.66.26
country_id: 6252001
description:
[2026-06-06 11:08:50 +0000] info [cpaneld] 217.181.66.26 - jvrzfkho "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:09:08 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:16640: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:10:18 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:16768: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 218.203.179.228
country_id: 1814991
description:
Jun  6 11:10:26 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 218.203.179.228 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 112.133.27.34
country_id: 1835841
description:
Jun  6 11:09:47 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 112.133.27.34 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:11:28 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:14080: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 196.170.66.202
country_id: 2363686
description:
[2026-06-06 11:12:34 +0000] info [cpaneld] 196.170.66.202 NEW ingertgsarl:9eDYojx8WzKZuAEk address=196.170.66.202,app=cpaneld,creator=ingertgsarl,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:13:42 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:6784: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 185.250.30.21
country_id: 1522867
description:
2026-06-06 11:12:53 H=([0.0.0.0]) [185.250.30.21]:21987 F=<John@4452.com> rejected RCPT <contact@emt.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.28.30
country_id: 2750405
description:
[2026-06-06 11:14:11 +0000] info [cpaneld] 195.63.28.30 - nwvfmxat "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:14:42 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:13186: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 193.189.100.196
country_id: 2661886
description:
193.189.100.196 - wcnyaruu [06/Jun/2026:11:15:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10393703&pdata=https%253A%252F%252Flcr-adem.org%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780744506 HTTP/2.0" 302 0 lcr-adem.org "https://lcr-adem.org:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:193.189.100.196


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.87.224
country_id: 2750405
description:
[2026-06-06 11:15:17 +0000] info [cpaneld] 217.181.87.224 - lhxhatyj "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:15:43 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:13187: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 195.98.68.19
country_id: 2017370
description:
2026-06-06 11:14:54 H=([195.98.68.19]) [195.98.68.19]:49473 F=<John@4452.com> rejected RCPT <kpip@emt.tg>: Sender verify failed


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 114.119.140.217
country_id: 1880251
domain: sia-togo.tg
description:
IM360 WAF: Bad file extension||RSV:8.14||T:APACHE||MVN:REQUEST_FILENAME||MV:/wp-content/plugins/wp-stats-manager/js/custom_admin.js.bak||User:qfaclpeg||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:15:55 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:13188: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.248.232.17
country_id: 2542007
description:
2026-06-06 11:16:29 dovecot_plain authenticator failed for H=(doyxnkurhcb09lcp) [41.248.232.17]:31621: 535 Incorrect authentication data (set_id=admin@togocarrierebetons.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:17:46 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:17408: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:18:46 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:4738: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.21.182
country_id: 2921044
description:
[2026-06-06 11:19:23 +0000] info [cpaneld] 195.63.21.182 - dxsiclpd "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:19:47 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:4740: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.112.251
country_id: 1880251
description:
47.128.112.251 - - [06/Jun/2026:11:20:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7249508&pdata=https%253A%252F%252Fmisstogo.tg%252Fproduct-category%252Fwoman%252F%253Forderby%253Ddate&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780744825 HTTP/2.0" 302 0 misstogo.tg "https://misstogo.tg/product-category/woman/?orderby=date" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.112.251


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.162.175.5
country_id: 2750405
description:
[2026-06-06 11:21:11 +0000] info [cpaneld] 178.162.175.5 - jmtctoni "GET /execute/DomainInfo/domains_data HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:20:48 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:4741: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.0.182.9
country_id: 1562822
description:
Jun  6 11:21:41 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.0.182.9 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 117.0.182.9
country_id: 1562822
description:
2026-06-06 11:21:43 dovecot_login authenticator failed for H=(p5098eb3c.dip0.t-ipconnect.de) [117.0.182.9]:44116: 535 Incorrect authentication data (set_id=support@soena.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.11.59.28
country_id: 6252001
description:
45.11.59.28 - ttfuehop [06/Jun/2026:11:22:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13015447&pdata=https%253A%252F%252Fmftogo.tg%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780744930 HTTP/2.0" 302 0 mftogo.tg "https://mftogo.tg:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.11.59.28


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.230.199.173
country_id: 298795
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/career HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.10.183.46
country_id: 1643084
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/siteweb/public/videos/ HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:22:58 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:2306: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 92.49.219.252
country_id: 1522867
description:
2026-06-06 11:23:59 H=([0.0.0.0]) [92.49.219.252]:16491 F=<John@4452.com> rejected RCPT <welldrive@confortis.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:24:07 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:12672: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:24:49 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:9346: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.21.92
country_id: 2921044
description:
[2026-06-06 11:26:27 +0000] info [cpaneld] 195.63.21.92 - neliam "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:26:18 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:10624: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 92.49.219.252
country_id: 1522867
description:
2026-06-06 11:27:10 H=([0.0.0.0]) [92.49.219.252]:16789 F=<John@4452.com> rejected RCPT <welldrive@confortis.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.209.216.167
country_id: 2287781
description:
2026-06-06 11:27:24 dovecot_login authenticator failed for H=(ELISABETH) [102.209.216.167]:8192: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 11:27:42 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:9857: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 11:28:26 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:9984: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 45.153.61.100
country_id: 1512440
description:
2026-06-06 11:28:38 H=([45.153.61.100]) [45.153.61.100]:4914 F=<John@4452.com> rejected RCPT <ag@togointerim.net>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.6.111
country_id: 6252001
description:
[2026-06-06 11:29:06 +0000] info [cpaneld] 195.63.6.111 - pmalabvi "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 11:29:29 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:15360: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 88.183.222.99
country_id: 3017382
description:
[2026-06-06 11:30:23 +0000] info [cpaneld] 88.183.222.99 NEW utkxprkk:4oa_gGRzh4_7_EGR address=88.183.222.99,app=cpaneld,creator=root,method=handle_form_login,path=loadsession:utkxprkk:IYuhOIEgAXb5bZmq:create_user_session,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 11:30:29 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:7936: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.15.238
country_id: 6252001
description:
[2026-06-06 11:31:17 +0000] info [cpaneld] 195.63.15.238 - pnls "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.13.160
country_id: 6252001
description:
[2026-06-06 11:31:38 +0000] info [cpaneld] 195.63.13.160 - qjzcsoob "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 120.131.12.248
country_id: 1814991
description:
Jun  6 11:30:56 ns5 pure-ftpd[2695147]: (?@120.131.12.248) [INFO] New connection from 120.131.12.248


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 11:31:30 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:15872: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 120.131.12.248
country_id: 1814991
description:
Jun  6 11:31:01 ns5 pure-ftpd[2695147]: (?@120.131.12.248) [WARNING] Authentication failed for user [speau]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 188.166.179.34
country_id: 1880251
description:
Jun  6 11:32:08 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 188.166.179.34 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 11:32:30 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:13440: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.80.170
country_id: 6251999
description:
[2026-06-06 11:33:46 +0000] info [cpaneld] 217.181.80.170 - bighostingsnbd "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 11:33:32 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:26880: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 107.189.13.253
country_id: 2960313
description:
107.189.13.253 - zauwogvk [06/Jun/2026:11:33:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6790804&pdata=https%253A%252F%252Fscafricaplc.com%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780745581 HTTP/2.0" 302 0 scafricaplc.com "https://scafricaplc.com:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:107.189.13.253


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.81.110
country_id: 6251999
description:
[2026-06-06 11:34:45 +0000] info [cpaneld] 217.181.81.110 - sxoyfjqv "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 11:34:33 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:21504: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.84.107.74
country_id: 2661886
description:
45.84.107.74 - pkyvzjjc [06/Jun/2026:11:34:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12806768&pdata=https%253A%252F%252Fsocial-infos.tg%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780745670 HTTP/2.0" 302 0 social-infos.tg "https://social-infos.tg:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.84.107.74


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 171.25.193.82
country_id: 2661886
description:
171.25.193.82 - frtwilql [06/Jun/2026:11:35:26 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6843541&pdata=https%253A%252F%252Fsoeurndetogo.com%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780745724 HTTP/2.0" 302 0 soeurndetogo.com "https://soeurndetogo.com:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:171.25.193.82


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:11-36.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Acquire Your Uninterrupted Prize sepoladi.blogspot.ca cF||Email:mzsippidabrandllc@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 185.163.26.68
country_id: 1512440
description:
2026-06-06 11:37:22 H=([185.163.26.68]) [185.163.26.68]:24809 F=<John@4452.com> rejected RCPT <netflix@emt.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.17.149
country_id: 6251999
description:
[2026-06-06 11:38:11 +0000] info [cpaneld] 195.63.17.149 - waywcbyw "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.83.77
country_id: 6251999
description:
[2026-06-06 11:39:16 +0000] info [cpaneld] 217.181.83.77 - ulduzncs "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.81.110
country_id: 6251999
description:
[2026-06-06 11:40:10 +0000] info [cpaneld] 217.181.81.110 - wttzshhf "GET / HTTP/1.1" FAILED LOGIN cpaneld: User wttzshhf has their account suspended. Login blocked.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 192.42.116.143
country_id: 2750405
description:
192.42.116.143 - wgqhqbem [06/Jun/2026:11:40:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10066539&pdata=https%253A%252F%252Ftogocarrierebetons.tg%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780746033 HTTP/2.0" 302 0 togocarrierebetons.tg "https://togocarrierebetons.tg:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:192.42.116.143


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 192.204.97.62
country_id: 6252001
description:
[2026-06-06 11:41:03 +0000] info [cpaneld] 192.204.97.62 - AWADI "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user AWADI (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.117.200
country_id: 6252001
description:
[2026-06-06 11:41:03 +0000] info [cpaneld] 82.40.117.200 - admin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 45.153.61.100
country_id: 1512440
description:
2026-06-06 11:41:08 H=([45.153.61.100]) [45.153.61.100]:4993 F=<John@4452.com> rejected RCPT <ag@togointerim.net>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.116.84
country_id: 6252001
description:
[2026-06-06 11:41:03 +0000] info [cpaneld] 82.40.116.84 - czqxxxnu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User czqxxxnu has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.16.128
country_id: 6251999
description:
[2026-06-06 11:40:53 +0000] info [cpaneld] 195.63.16.128 - cipvzfnv "GET / HTTP/1.1" FAILED LOGIN cpaneld: User cipvzfnv has their account suspended. Login blocked.


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.178
country_id: 1880251
description:
47.128.96.178 - - [06/Jun/2026:11:42:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12819307&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Ffawe-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780746127 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/fawe-togo/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.178


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.120.189.68
country_id: 1269750
description:
[2026-06-06 11:42:47 +0000] info [whostmgrd] 103.120.189.68 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.120.189.68
country_id: 1269750
description:
[2026-06-06 11:42:51 +0000] info [whostmgrd] 103.120.189.68 - root "GET /cpsess1848354437/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.85.241
country_id: 2921044
description:
[2026-06-06 11:43:44 +0000] info [cpaneld] 217.181.85.241 - aogodmm "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.86.135
country_id: 2921044
description:
[2026-06-06 11:43:47 +0000] info [cpaneld] 217.181.86.135 - vtytmwmz "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 103.120.189.68
country_id: 1269750
description:
[2026-06-06 11:42:49 +0000] info [whostmgrd] 103.120.189.68 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 171.25.193.78
country_id: 2661886
description:
[2026-06-06 11:44:17 +0000] info [cpaneld] 171.25.193.78 - xdkbrmjc "GET /execute/DomainInfo/domains_data HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 171.25.193.78
country_id: 2661886
description:
171.25.193.78 - xdkbrmjc [06/Jun/2026:11:44:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7039171&pdata=https%253A%252F%252Ftps.tg%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780746256 HTTP/2.0" 302 0 tps.tg "https://tps.tg:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:171.25.193.78


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.176.3.23
country_id: 2658434
description:
[2026-06-06 11:43:55 +0000] info [cpaneld] 195.176.3.23 - xdkbrmjc "GET /execute/DomainInfo/domains_data HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 195.176.3.23
country_id: 2658434
description:
195.176.3.23 - xdkbrmjc [06/Jun/2026:11:43:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7170154&pdata=https%253A%252F%252Ftps.tg%253A2083%252Fexecute%252FDomainInfo%252Fdomains_data&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780746233 HTTP/2.0" 302 0 tps.tg "https://tps.tg:2083/execute/DomainInfo/domains_data" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:195.176.3.23


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.13.225.78
country_id: 2921044
description:
[2026-06-06 11:44:33 +0000] info [cpaneld] 45.13.225.78 - xdkbrmjc "GET /execute/DomainInfo/domains_data HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.111.157.8
country_id: 6252001
description:
[2026-06-06 11:45:06 +0000] info [cpaneld] 172.111.157.8 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.236
country_id: 130758
description:
Jun  6 11:46:31 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.236 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.236
country_id: 130758
description:
2026-06-06 11:46:33 dovecot_login authenticator failed for H=(localhost) [62.60.130.236]:58845: 535 Incorrect authentication data (set_id=qasplunk)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.230.184
country_id: 1269750
description:
Jun  6 11:49:58 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.230.184 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.187.230.184
country_id: 1269750
description:
2026-06-06 11:50:00 dovecot_login authenticator failed for H=(nsg-corporate-184.230.187.122.airtel.in) [122.187.230.184]:39146: 535 Incorrect authentication data (set_id=no-reply@togosem.com)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.103.115.115
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-51.146.103.115.115||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 136.0.177.37
country_id: 6252001
domain: belali.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:belencollazo97||Email:meirdacnrr@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 47.84.199.24
country_id: 1880251
description:
Jun  6 11:52:13 ns5 pure-ftpd[2712517]: (?@47.84.199.24) [WARNING] Authentication failed for user [aneos]


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 136.0.177.37
country_id: 6252001
domain: belali.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:11-52.136.0.177.37||RSV:8.14||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 46.250.170.156
country_id: 3996063
description:
46.250.170.156 - - [06/Jun/2026:11:53:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13068951&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fpaged%253D98%2526cat%253D1&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780746795 HTTP/2.0" 302 0 mediatopnews.tg "https://mediatopnews.tg/?paged=98&cat=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:46.250.170.156


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.92.163
country_id: 6252001
description:
[2026-06-06 11:54:39 +0000] info [cpaneld] 82.40.92.163 - BEWELL "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user BEWELL (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 103.76.88.37
country_id: 1733045
description:
2026-06-06 11:53:59 H=([103.76.88.37]) [103.76.88.37]:53431 F=<info@sample.com> rejected RCPT <millionsbox@protonmail.com>: SMTP AUTH is required for message submission on port 587


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.111.157.8
country_id: 6252001
description:
[2026-06-06 11:54:10 +0000] info [cpaneld] 172.111.157.8 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 149.88.111.23
country_id: 3686110
description:
149.88.111.23 - - [06/Jun/2026:11:54:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10052507&pdata=http%253A%252F%252Fappflutter.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780746890 HTTP/1.1" 302 0 appflutter.free.netmaster.tg "http://appflutter.free.netmaster.tg/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:149.88.111.23


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 84.54.72.33
country_id: 1512440
description:
2026-06-06 11:55:16 H=([84.54.72.33]) [84.54.72.33]:28989 F=<John@4452.com> rejected RCPT <egnassingbe@golfe3.mairie.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 11:58:43 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:8320: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 14.250.105.87
country_id: 1562822
description:
2026-06-06 11:59:06 dovecot_plain authenticator failed for H=(wdhzqiul64yfl4lwu69zv8r8m) [14.250.105.87]:53684: 535 Incorrect authentication data (set_id=ptitrikou@mesyscom.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 11:58:54 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:8321: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.250.105.87
country_id: 1562822
description:
Jun  6 11:59:04 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.250.105.87 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:12-00.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 11:59:53 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:23168: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.103.115.115
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-59.146.103.115.115||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Swiftly Receive Your Bonus eropolik.blogspot.pt tv||Email:calebkey90@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 20.193.129.98
country_id: 1269750
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-59.20.193.129.98||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 5.125.212.89
country_id: 130758
description:
2026-06-06 12:00:13 H=([5.125.212.89]) [5.125.212.89]:44631 F=<John@4452.com> rejected RCPT <j.delbegue@tps.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 31.131.78.74
country_id: 690791
description:
2026-06-06 12:01:38 H=([31.131.78.74]) [31.131.78.74]:5115 F=<John@4452.com> rejected RCPT <majed.zammouri@soroubat.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 200.12.36.60
country_id: 3595528
description:
2026-06-06 12:01:24 H=([200.12.36.60]) [200.12.36.60]:2881 F=<John@4452.com> rejected RCPT <netflix@emt.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 12:00:54 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:14336: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.110.79
country_id: 1880251
description:
47.128.110.79 - - [06/Jun/2026:12:02:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7115161&pdata=https%253A%252F%252Fletabloid.tg%252Ftag%252Fsillicon-valley%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780747366 HTTP/2.0" 302 0 letabloid.tg "https://letabloid.tg/tag/sillicon-valley/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.110.79


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 12:01:53 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:13440: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 84.54.72.33
country_id: 1512440
description:
2026-06-06 12:03:14 H=([84.54.72.33]) [84.54.72.33]:43965 F=<John@4452.com> rejected RCPT <egnassingbe@golfe3.mairie.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 12:02:57 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:3200: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.111.157.8
country_id: 6252001
description:
[2026-06-06 12:03:32 +0000] info [cpaneld] 172.111.157.8 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 12:03:57 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:11392: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.236
country_id: 130758
description:
Jun  6 12:03:48 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.236 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.236
country_id: 130758
description:
2026-06-06 12:03:50 dovecot_login authenticator failed for H=(localhost) [62.60.130.236]:51864: 535 Incorrect authentication data (set_id=centos001)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 12:04:58 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:9728: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 12:05:58 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:13824: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 213.32.21.59
country_id: 3017382
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:12-06.213.32.21.59||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.111.157.8
country_id: 6252001
description:
[2026-06-06 12:07:39 +0000] info [cpaneld] 172.111.157.8 - yvwaocrr "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yvwaocrr (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.207.8.167
country_id: 2287781
description:
2026-06-06 12:08:01 dovecot_login authenticator failed for H=(ELISABETH) [102.207.8.167]:27008: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.111.157.8
country_id: 6252001
description:
[2026-06-06 12:08:05 +0000] info [cpaneld] 172.111.157.8 - yxhnfwxr "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 20.193.129.98
country_id: 1269750
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:12-08.20.193.129.98||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.111.157.8
country_id: 6252001
description:
[2026-06-06 12:09:14 +0000] info [cpaneld] 172.111.157.8 - bighostingsnbd "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 198.163.195.61
country_id: 1512440
description:
2026-06-06 12:09:52 H=([198.163.195.61]) [198.163.195.61]:9693 F=<John@4452.com> rejected RCPT <welldrive@confortis.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 31.131.78.74
country_id: 690791
description:
2026-06-06 12:10:37 H=([31.131.78.74]) [31.131.78.74]:4902 F=<John@4452.com> rejected RCPT <majed.zammouri@soroubat.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.124.152.240
country_id: 1733045
description:
2026-06-06 12:11:38 dovecot_login authenticator failed for H=([218.95.124.232]) [49.124.152.240]:48876: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 198.163.195.61
country_id: 1512440
description:
2026-06-06 12:10:50 H=([198.163.195.61]) [198.163.195.61]:28708 F=<John@4452.com> rejected RCPT <welldrive@confortis.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.111.157.8
country_id: 6252001
description:
[2026-06-06 12:12:33 +0000] info [cpaneld] 172.111.157.8 - czqxxxnu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User czqxxxnu has their account suspended. Login blocked.


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 120.131.12.248
country_id: 1814991
description:
Jun  6 12:14:55 ns5 pure-ftpd[2729841]: (?@120.131.12.248) [INFO] New connection from 120.131.12.248


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 120.131.12.248
country_id: 1814991
description:
Jun  6 12:15:00 ns5 pure-ftpd[2729841]: (?@120.131.12.248) [WARNING] Authentication failed for user [admin]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.166.171
country_id: 99237
description:
2026-06-06 12:16:30 dovecot_login authenticator failed for H=(vipturbo.com.br) [65.20.166.171]:46933: 535 Incorrect authentication data (set_id=admin@soena.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 65.20.166.171
country_id: 99237
description:
Jun  6 12:16:28 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 65.20.166.171 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.1.213.160
country_id: 1562822
description:
Jun  6 12:19:08 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.1.213.160 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 117.1.213.160
country_id: 1562822
description:
2026-06-06 12:19:10 dovecot_plain authenticator failed for H=(8blntq8zan3f0avgnd1tx8p012zx) [117.1.213.160]:46503: 535 Incorrect authentication data (set_id=contact@emt.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 31.215.48.152
country_id: 290557
description:
[2026-06-06 12:20:26 +0000] info [whostmgrd] 31.215.48.152 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.201.79.82
country_id: 6252001
description:
[2026-06-06 12:23:05 +0000] info [whostmgrd] 71.201.79.82 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.72.144.86
country_id: 6252001
description:
[2026-06-06 12:23:11 +0000] info [whostmgrd] 71.72.144.86 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:12-24.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Secure Your Promising Extra bonotdamvam.blogspot.ca Uz||Email:swagzarau@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 213.230.92.249
country_id: 1512440
description:
2026-06-06 12:24:49 H=([213.230.92.249]) [213.230.92.249]:57642 F=<John@4452.com> rejected RCPT <majed.zammouri@soroubat.tg>: Sender verify failed


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 113.173.185.211
country_id: 1562822
domain: shekina.tensai.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:Turbolte.shekina.tensai.tg||ServerName:shekina.tensai.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:aec365823a92cd7ab7daef2de7615d77518eb63c||Title:tc-check-https://dddscom.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 187.200.185.61
country_id: 3996063
domain: www.shekina.tensai.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:Turbolte.www.shekina.tensai.tg||ServerName:www.shekina.tensai.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:aec365823a92cd7ab7daef2de7615d77518eb63c||Title:tc-check-https://dddscom.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 146.190.126.213
country_id: 6252001
description:
Jun  6 12:26:21 ns5 pure-ftpd[2738348]: (?@146.190.126.213) [INFO] New connection from 146.190.126.213


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 146.190.126.213
country_id: 6252001
description:
Jun  6 12:26:26 ns5 pure-ftpd[2738348]: (?@146.190.126.213) [WARNING] Authentication failed for user [tontonedouardtogo]


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 118.195.135.48
country_id: 1814991
description:
Jun  6 12:26:56 ns5 pure-ftpd[2738737]: (?@118.195.135.48) [INFO] New connection from 118.195.135.48


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 118.195.135.48
country_id: 1814991
description:
Jun  6 12:27:01 ns5 pure-ftpd[2738737]: (?@118.195.135.48) [WARNING] Authentication failed for user [admin]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 98.48.178.139
country_id: 6252001
description:
Jun  6 12:27:47 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 98.48.178.139 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 98.48.178.139
country_id: 6252001
description:
2026-06-06 12:27:49 dovecot_plain authenticator failed for H=c-98-48-178-139.hsd1.sc.comcast.net (hancoty) [98.48.178.139]:34212: 535 Incorrect authentication data (set_id=contact@cloud-et-racks.tg)


plugin: modsec
rule: 77093094
abuser: 34.122.16.212
country_id: 6252001
domain: kics.kpmg.tg
description:


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.173
country_id: 1880251
description:
47.128.96.173 - - [06/Jun/2026:12:32:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7313860&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fresultats-du-bac-1-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780749142 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/resultats-du-bac-1-togo/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.173


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 88.203.220.178
country_id: 732800
description:
Jun  6 12:33:03 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 88.203.220.178 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 8.213.131.12
country_id: 1835841
description:
Jun  6 12:33:03 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 8.213.131.12 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.91.164.131
country_id: 3469034
description:
Jun  6 12:33:06 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.91.164.131 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 223.171.94.75
country_id: 1835841
description:
Jun  6 12:33:15 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 223.171.94.75 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.230.173
country_id: 1269750
description:
Jun  6 12:33:35 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.230.173 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.247.239.202
country_id: 1269750
description:
Jun  6 12:33:35 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.247.239.202 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 125.227.99.87
country_id: 1668284
description:
Jun  6 12:33:35 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 125.227.99.87 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 60.250.215.200
country_id: 1668284
description:
Jun  6 12:33:36 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 60.250.215.200 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.200.6.38
country_id: 3469034
description:
Jun  6 12:33:40 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.200.6.38 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 80.51.44.46
country_id: 798544
description:
Jun  6 12:33:46 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 80.51.44.46 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.52.211.184
country_id: 1694008
description:
Jun  6 12:33:53 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.52.211.184 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 88.203.220.178
country_id: 732800
description:
Jun  6 12:34:10 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 88.203.220.178 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 125.227.99.87
country_id: 1668284
description:
Jun  6 12:33:51 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 125.227.99.87 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 218.203.179.228
country_id: 1814991
description:
Jun  6 12:34:01 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 218.203.179.228 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.91.164.131
country_id: 3469034
description:
Jun  6 12:34:13 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.91.164.131 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.200.6.38
country_id: 3469034
description:
Jun  6 12:33:49 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.200.6.38 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 112.133.27.34
country_id: 1835841
description:
Jun  6 12:34:13 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 112.133.27.34 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 61.136.142.13
country_id: 1814991
description:
Jun  6 12:34:13 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 61.136.142.13 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 61.136.142.13
country_id: 1814991
description:
Jun  6 12:35:05 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 61.136.142.13 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 212.36.194.131
country_id: 272103
description:
Jun  6 12:35:26 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 212.36.194.131 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.200.6.38
country_id: 3469034
description:
Jun  6 12:34:48 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.200.6.38 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.91.164.131
country_id: 3469034
description:
Jun  6 12:34:49 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.91.164.131 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 125.227.99.87
country_id: 1668284
description:
Jun  6 12:34:55 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 125.227.99.87 has been locked due to Imunify RBL


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 206.162.244.24
country_id: 6252001
description:
Jun  6 12:36:26 ns5 pure-ftpd[2746685]: (?@206.162.244.24) [WARNING] Authentication failed for user [admin]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 223.171.94.75
country_id: 1835841
description:
Jun  6 12:36:29 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 223.171.94.75 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 61.136.142.13
country_id: 1814991
description:
Jun  6 12:35:49 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 61.136.142.13 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 183.182.99.92
country_id: 1655842
description:
Jun  6 12:35:49 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 183.182.99.92 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.53.42.101
country_id: 3469034
description:
Jun  6 12:36:23 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.53.42.101 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 94.25.169.118
country_id: 2017370
domain: direct7.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.direct7.tg||ServerName:direct7.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:278edbb3de9c1bd98dfa15e2f8cc0a7833921a74||Title:17miv9uu5e9alt||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 206.162.244.24
country_id: 6252001
description:
Jun  6 12:36:21 ns5 pure-ftpd[2746685]: (?@206.162.244.24) [INFO] New connection from 206.162.244.24


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 197.38.191.50
country_id: 357994
description:
Jun  6 12:36:48 ns5 pure-ftpd[2747012]: (?@197.38.191.50) [WARNING] Authentication failed for user [crepsad]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 218.203.179.228
country_id: 1814991
description:
Jun  6 12:36:52 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 218.203.179.228 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 88.203.220.178
country_id: 732800
description:
Jun  6 12:38:24 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 88.203.220.178 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 183.182.99.92
country_id: 1655842
description:
Jun  6 12:38:20 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 183.182.99.92 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.91.164.131
country_id: 3469034
description:
Jun  6 12:38:58 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.91.164.131 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 88.203.220.178
country_id: 732800
description:
Jun  6 12:39:11 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 88.203.220.178 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 23.150.44.61
country_id: 6252001
description:
[2026-06-06 12:41:34 +0000] info [cpaneld] 23.150.44.61 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 162.19.240.233
country_id: 3017382
description:
Jun  6 12:44:31 ns5 auth[2491973]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 162.19.240.233 has been locked due to Imunify RBL


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Enjoy Your Sharp Spins bonotdamvam.blogspot.ro kK||Email:colugbuo@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 110.10.168.41
country_id: 1835841
description:
Jun  6 12:50:40 ns5 pure-ftpd[2757106]: (?@110.10.168.41) [WARNING] Authentication failed for user [speau]


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 59.6.41.4
country_id: 1835841
description:
Jun  6 12:51:35 ns5 pure-ftpd[2757749]: (?@59.6.41.4) [WARNING] Authentication failed for user [www-data]


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 114.119.155.122
country_id: 1880251
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/formation-des-artisans-de-lome-etape-ii-pour-les-couturiers/<script async src||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 8.213.81.38
country_id: 102358
description:
Jun  6 12:55:46 ns5 pure-ftpd[2760892]: (?@8.213.81.38) [WARNING] Authentication failed for user [cafeit]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.60.130.231
country_id: 130758
description:
[2026-06-06 12:56:50 +0000] info [whostmgrd] 62.60.130.231 - root "GET /cpsess5043156589/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.97.237.28
country_id: 6252001
description:
[2026-06-06 12:57:19 +0000] info [whostmgrd] 68.97.237.28 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 160.250.133.162
country_id: 1562822
description:
Jun  6 12:57:21 ns5 pure-ftpd[2762347]: (?@160.250.133.162) [INFO] New connection from 160.250.133.162


plugin: ossec
rule: 11004
name: Possible breaking attempt on cpanel service
abuser: 62.60.130.231
country_id: 130758
description:
[2026-06-06 12:57:27 +0000] info [whostmgrd] 62.60.130.231 - root "GET /cpsess9070590528/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 62.60.130.231
country_id: 130758
description:
[2026-06-06 12:56:49 +0000] info [whostmgrd] 62.60.130.231 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 213.230.86.39
country_id: 1512440
description:
2026-06-06 12:57:00 H=([213.230.86.39]) [213.230.86.39]:6532 F=<John@4452.com> rejected RCPT <development@confortis.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 171.217.180.177
country_id: 1814991
description:
2026-06-06 12:57:12 H=([171.217.180.177]) [171.217.180.177]:31200 F=<John@4452.com> rejected RCPT <netflix@emt.tg>: Sender verify failed


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 160.250.133.162
country_id: 1562822
description:
Jun  6 12:57:26 ns5 pure-ftpd[2762347]: (?@160.250.133.162) [WARNING] Authentication failed for user [www-data]


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 128.199.82.9
country_id: 1880251
description:
Jun  6 12:59:09 ns5 pure-ftpd[2763545]: (?@128.199.82.9) [WARNING] Authentication failed for user [admin]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.97.237.28
country_id: 6252001
description:
[2026-06-06 12:59:48 +0000] info [whostmgrd] 68.97.237.28 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 62.60.130.231
country_id: 130758
description:
[2026-06-06 13:02:52 +0000] info [whostmgrd] 62.60.130.231 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.60.130.231
country_id: 130758
description:
[2026-06-06 13:02:53 +0000] info [whostmgrd] 62.60.130.231 - root "GET /cpsess9449687679/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 200.68.165.94
country_id: 3996063
description:
2026-06-06 13:03:40 H=([200.68.165.94]) [200.68.165.94]:14704 F=<John@4452.com> rejected RCPT <netflix@emt.tg>: Sender verify failed


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 47.214.241.161
country_id: 6252001
domain: derou.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/derou.tg/en/services HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 62.60.130.231
country_id: 130758
description:
[2026-06-06 13:03:49 +0000] info [whostmgrd] 62.60.130.231 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.60.130.231
country_id: 130758
description:
[2026-06-06 13:03:49 +0000] info [whostmgrd] 62.60.130.231 - root "GET /cpsess7049971914/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11004
name: Possible breaking attempt on cpanel service
abuser: 62.60.130.231
country_id: 130758
description:
[2026-06-06 13:03:56 +0000] info [whostmgrd] 62.60.130.231 - root "GET /cpsess6958846634/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.13.8
country_id: 3469034
description:
Jun  6 13:06:39 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.13.8 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 191.53.13.8
country_id: 3469034
description:
2026-06-06 13:06:41 dovecot_login authenticator failed for H=(191-53-13-8.lna-wr.soumaster.com.br) [191.53.13.8]:50318: 535 Incorrect authentication data (set_id=adegunle.bikounle@togosem.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.225.217.4
country_id: 3865483
domain: www.cloud-et-racks.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.cloud-et-racks.tg/?trk=public_post-text HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 213.230.86.39
country_id: 1512440
description:
2026-06-06 13:08:03 H=([213.230.86.39]) [213.230.86.39]:3502 F=<John@4452.com> rejected RCPT <development@confortis.tg>: Sender verify failed


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.225.217.4
country_id: 3865483
domain: www.cloud-et-racks.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.cloud-et-racks.tghttp/www.cloud-et-racks.tg/?trk=public_post-text HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 213.230.86.39
country_id: 1512440
description:
2026-06-06 13:11:18 H=([213.230.86.39]) [213.230.86.39]:1152 F=<John@4452.com> rejected RCPT <development@confortis.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.80.237.48
country_id: 3469034
description:
[2026-06-06 13:11:31 +0000] info [whostmgrd] 170.80.237.48 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.65.216
country_id: 6252001
description:
[2026-06-06 13:11:55 +0000] info [cpaneld] 82.40.65.216 - pduusmyf "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Open Your Salary Day Prize sepoladi.blogspot.hk vi||Email:dzoolez@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.206.41.123
country_id: 2542007
description:
2026-06-06 13:13:31 dovecot_plain authenticator failed for H=adsl196-123-41-206-196.adsl196-2.iam.net.ma (2z2yvqnd6xbpb8e6) [196.206.41.123]:55541: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.248.236.125
country_id: 2542007
description:
2026-06-06 13:13:24 dovecot_plain authenticator failed for H=(gg29guaphleebkbx9tt) [41.248.236.125]:38195: 535 Incorrect authentication data (set_id=arse@arse.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 196.206.41.123
country_id: 2542007
description:
Jun  6 13:13:29 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 196.206.41.123 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 65.111.3.111
country_id: 6252001
domain: bawasongroup.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/bawasongroup.com/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.8.26.93
country_id: 1733045
description:
[2026-06-06 13:14:13 +0000] info [cpaneld] 103.8.26.93 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 37.150.2.32
country_id: 1522867
description:
2026-06-06 13:14:43 H=([37.150.2.32]) [37.150.2.32]:12026 F=<John@4452.com> rejected RCPT <agounkej@ucao-uut.tg>: Sender verify failed


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.150
country_id: 1880251
description:
47.128.96.150 - - [06/Jun/2026:13:15:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9856453&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fdv-lottery%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780751748 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/dv-lottery/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.150


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 206.189.44.19
country_id: 1880251
description:
[2026-06-06 13:18:50 +0000] info [whostmgrd] 206.189.44.19 - masfloy "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 121.229.156.69
country_id: 1814991
domain: cafe.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/index.php?add-to-cart=2333||QS:add-to-cart=2333||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.162.85.5
country_id: 3017382
description:
[2026-06-06 13:23:49 +0000] info [whostmgrd] 92.162.85.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.31.176.186
country_id: 2464461
description:
[2026-06-06 13:25:14 +0000] info [cpaneld] 102.31.176.186 - cafetg "GET /execute/Fileman/list_files?dir=/ HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.119.126
country_id: 6252001
description:
[2026-06-06 13:26:24 +0000] info [cpaneld] 82.40.119.126 - Turbolte "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user Turbolte (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 72.11.147.188
country_id: 6251999
description:
2026-06-06 13:29:55 dovecot_plain authenticator failed for H=(5pxnrclb3vegvxrkqk6e23yi4u3jwcy) [72.11.147.188]:52762: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.171.11.166
country_id: 2363686
domain: civilemagazine.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.14||T:APACHE||MV:/wp-json/wp/v2/users/10?context=view&_fields=id%2Cname&_locale=user||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 113.8.33.232
country_id: 1814991
description:
2026-06-06 13:35:09 H=([113.8.33.232]) [113.8.33.232]:33928 F=<John@4452.com> rejected RCPT <development@confortis.tg>: Sender verify failed


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Enjoy Lightning-Fast Withdrawal bonotdamvam.blogspot.be qc||Email:sjmcroberts89@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 74.7.243.232
country_id: 6252001
domain: chuso.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.14||T:APACHE||MV:/wp-json/wp/v2/users/10||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 203.83.39.5
country_id: 1643084
description:
[2026-06-06 13:35:51 +0000] info [whostmgrd] 203.83.39.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.197
country_id: 1880251
description:
47.128.96.197 - - [06/Jun/2026:13:38:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6581704&pdata=https%253A%252F%252Fmail.stephane.free.netmaster.tg%252Fcgi-sys%252Fdefaultwebpage.cgi&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780753082 HTTP/2.0" 302 0 mail.stephane.free.netmaster.tg "https://mail.stephane.free.netmaster.tg/cgi-sys/defaultwebpage.cgi" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.197


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 113.8.33.232
country_id: 1814991
description:
2026-06-06 13:40:40 H=([113.8.33.232]) [113.8.33.232]:34665 F=<John@4452.com> rejected RCPT <development@confortis.tg>: Sender verify failed


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 47.250.190.125
country_id: 1733045
description:
Jun  6 13:39:59 ns5 pure-ftpd[2794544]: (?@47.250.190.125) [INFO] New connection from 47.250.190.125


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 188.113.235.73
country_id: 1512440
description:
2026-06-06 13:41:52 H=([188.113.252.171]) [188.113.235.73]:26827 F=<John@4452.com> rejected RCPT <welldrive@confortis.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 113.8.33.232
country_id: 1814991
description:
2026-06-06 13:42:03 H=([113.8.33.232]) [113.8.33.232]:34712 F=<John@4452.com> rejected RCPT <development@confortis.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 78.37.169.39
country_id: 2017370
description:
2026-06-06 13:42:16 dovecot_login authenticator failed for H=(94.154.35.215) [78.37.169.39]:51488: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-06 13:44:18 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:51558: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.26.164.145
country_id: 3865483
description:
[2026-06-06 13:46:57 +0000] info [whostmgrd] 181.26.164.145 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 109.75.50.46
country_id: 1220409
description:
2026-06-06 13:48:26 H=([109.75.50.46]) [109.75.50.46]:51771 F=<John@4452.com> rejected RCPT <info@soena.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 118.46.239.44
country_id: 1835841
description:
2026-06-06 13:49:22 dovecot_login authenticator failed for H=(94.154.35.215) [118.46.239.44]:56945: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 188.113.235.73
country_id: 1512440
description:
2026-06-06 13:49:50 H=([188.113.252.171]) [188.113.235.73]:26638 F=<John@4452.com> rejected RCPT <welldrive@confortis.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 213.230.93.20
country_id: 1512440
description:
2026-06-06 13:50:24 H=([213.230.86.176]) [213.230.93.20]:44036 F=<John@4452.com> rejected RCPT <pibno@zephyr.tg>: Sender verify failed


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 216.26.235.140
country_id: 6252001
domain: daula.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/daula.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Claim Your Peak Reward sepoladi.blogspot.ro Fe||Email:lionelbrister1234@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77350582
name: IM360 WAF: Bytedancewebview detected
abuser: 104.232.222.55
country_id: 2802361
domain: wellcity.tg
description:
IM360 WAF: Bytedancewebview detected||UA:Mozilla/5.0 (Linux; Android 12; M2102J20SG Build/SKQ1.211006.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/118.0.0.0 Mobile Safari/537.36 musical_ly_2023002030 JsSdk/1.0 NetType/WIFI Channel/googleplay AppName/musical_ly app_version/30.2.3 ByteLocale/ru-RU ByteFullLocale/ru-RU Region/US Spark/1.3.5.7-bugfix AppVersion/30.2.3 BytedanceWebview/d8a21c6||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:14-00.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 125.227.99.87
country_id: 1668284
description:
Jun  6 14:00:57 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 125.227.99.87 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 115.227.178.59
country_id: 1814991
description:
2026-06-06 14:03:45 H=([115.227.178.59]) [115.227.178.59]:19396 F=<John@4452.com> rejected RCPT <contact@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 86.98.154.192
country_id: 290557
description:
[2026-06-06 14:04:57 +0000] info [whostmgrd] 86.98.154.192 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 130.12.180.90
country_id: 2750405
description:
[2026-06-06 14:05:20 +0000] info [whostmgrd] 130.12.180.90 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 130.12.180.90
country_id: 2750405
description:
[2026-06-06 14:05:21 +0000] info [whostmgrd] 130.12.180.90 - root "GET /cpsess0607347501/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 110.6.161.64
country_id: 1814991
description:
2026-06-06 14:05:29 H=([110.6.161.64]) [110.6.161.64]:14316 F=<John@4452.com> rejected RCPT <agounkej@ucao-uut.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 105.157.227.96
country_id: 2542007
description:
2026-06-06 14:05:40 dovecot_plain authenticator failed for H=(oluw5axxda5q2ke47q0y2u2j) [105.157.227.96]:65181: 535 Incorrect authentication data (set_id=ptitrikou@mesyscom.com)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 115.227.178.59
country_id: 1814991
description:
2026-06-06 14:05:48 H=([115.227.178.59]) [115.227.178.59]:26061 F=<John@4452.com> rejected RCPT <contact@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 188.113.218.201
country_id: 1512440
description:
2026-06-06 14:06:54 H=([188.113.218.201]) [188.113.218.201]:1046 F=<John@4452.com> rejected RCPT <contact@emt.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.122.183.34
country_id: 6252001
description:
[2026-06-06 14:10:22 +0000] info [whostmgrd] 98.122.183.34 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.81.176.101
country_id: 2510769
description:
[2026-06-06 14:11:36 +0000] info [whostmgrd] 66.81.176.101 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 54.197.137.35
country_id: 6252001
description:
[2026-06-06 14:13:09 +0000] info [cpaneld] 54.197.137.35 - dev03 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dev03 (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 61.136.142.13
country_id: 1814991
description:
Jun  6 14:16:08 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 61.136.142.13 has been locked due to Imunify RBL


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 35.165.215.140
country_id: 6252001
domain: 24heureinfo.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 93.174.224.51
country_id: 2017370
description:
2026-06-06 14:16:22 H=([93.174.224.51]) [93.174.224.51]:27932 F=<John@4452.com> rejected RCPT <contractor@confortis.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 93.174.224.51
country_id: 2017370
description:
2026-06-06 14:18:22 H=([93.174.224.51]) [93.174.224.51]:12327 F=<John@4452.com> rejected RCPT <contractor@confortis.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 210.104.222.189
country_id: 1835841
description:
2026-06-06 14:20:35 dovecot_login authenticator failed for H=([113.53.251.101]) [210.104.222.189]:51397: 535 Incorrect authentication data (set_id=i.sy@ucao-uut.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 210.104.222.189
country_id: 1835841
description:
Jun  6 14:20:33 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 210.104.222.189 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.66.55.78
country_id: 6252001
description:
[2026-06-06 14:21:29 +0000] info [whostmgrd] 174.66.55.78 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 213.230.93.80
country_id: 1512440
description:
2026-06-06 14:21:53 H=([213.230.92.102]) [213.230.93.80]:5256 F=<John@4452.com> rejected RCPT <majed.zammouri@soroubat.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 93.174.224.51
country_id: 2017370
description:
2026-06-06 14:23:23 H=([93.174.224.51]) [93.174.224.51]:22647 F=<John@4452.com> rejected RCPT <contractor@confortis.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 31.130.76.58
country_id: 2017370
description:
[2026-06-06 14:23:38 +0000] info [whostmgrd] 31.130.76.58 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 120.225.204.179
country_id: 1814991
description:
2026-06-06 14:23:47 H=([120.225.204.179]) [120.225.204.179]:15011 F=<John@4452.com> rejected RCPT <contact@dany2.mairie.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 93.174.224.51
country_id: 2017370
description:
2026-06-06 14:24:33 H=([93.174.224.51]) [93.174.224.51]:25039 F=<John@4452.com> rejected RCPT <contractor@confortis.tg>: Sender verify failed


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Collect Your First-Class Reward sepoladi.blogspot.pt SZ||Email:cao.vtuan93@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:14-23.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 120.225.204.179
country_id: 1814991
description:
2026-06-06 14:24:53 H=([120.225.204.179]) [120.225.204.179]:15238 F=<John@4452.com> rejected RCPT <contact@dany2.mairie.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 93.174.224.51
country_id: 2017370
description:
2026-06-06 14:28:36 H=([93.174.224.51]) [93.174.224.51]:13620 F=<John@4452.com> rejected RCPT <contractor@confortis.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 93.174.224.51
country_id: 2017370
description:
2026-06-06 14:28:56 H=([93.174.224.51]) [93.174.224.51]:14330 F=<John@4452.com> rejected RCPT <contractor@confortis.tg>: Sender verify failed


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 102.214.208.245
country_id: 2378080
domain: snb.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:63678.snb.tg||ServerName:snb.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:e6d3e1bd81ac9c2dcbc8da0424ecffc508d357ae||Title:0xe7dbb214||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:36:41 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:55558: 535 Incorrect authentication data (set_id=recruitment@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:36:39 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:37:11 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:37:13 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:51441: 535 Incorrect authentication data (set_id=claims@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.17.12.27
country_id: 1269750
description:
Jun  6 14:36:48 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.17.12.27 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.17.12.27
country_id: 1269750
description:
2026-06-06 14:36:50 dovecot_plain authenticator failed for H=(lital) [103.17.12.27]:33152: 535 Incorrect authentication data (set_id=hr@cameg-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:38:05 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:38:07 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:51982: 535 Incorrect authentication data (set_id=legal@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 112.32.52.137
country_id: 1814991
description:
[2026-06-06 14:39:18 +0000] info [whostmgrd] 112.32.52.137 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.25.194
country_id: 2635167
domain: www.wellcity.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:HEAD http:/www.wellcity.tg/ HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.47.134.26
country_id: 1643084
description:
[2026-06-06 14:39:31 +0000] info [whostmgrd] 103.47.134.26 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.131
country_id: 1880251
description:
47.128.96.131 - - [06/Jun/2026:14:40:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000231&pdata=https%253A%252F%252Fca-togo.org%252Fimp%252Fenglish%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780756828 HTTP/2.0" 302 0 ca-togo.org "https://ca-togo.org/imp/english/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.131


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 39.52.40.18
country_id: 1168579
domain: sodigaz.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:76847.sodigaz.tg||ServerName:sodigaz.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:e9dc2a2c6d04cf3961824e4f0e2513a39f826120||Title:0x345ebda6||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:41:04 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:41:06 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:58133: 535 Incorrect authentication data (set_id=testing1@cafe.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 95.221.137.30
country_id: 2017370
description:
2026-06-06 14:41:13 H=([95.221.137.30]) [95.221.137.30]:61427 F=<John@4452.com> rejected RCPT <visite@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 120.29.98.145
country_id: 1694008
description:
[2026-06-06 14:42:55 +0000] info [whostmgrd] 120.29.98.145 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:42:55 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:42:57 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:62918: 535 Incorrect authentication data (set_id=testing123@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:44:16 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:44:18 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:61391: 535 Incorrect authentication data (set_id=sales1@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:44:48 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:44:50 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:58702: 535 Incorrect authentication data (set_id=sales2@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:46:04 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:46:06 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:51645: 535 Incorrect authentication data (set_id=itd@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:47:16 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:54280: 535 Incorrect authentication data (set_id=lab@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:47:14 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:47:57 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:63242: 535 Incorrect authentication data (set_id=laboratory@cafe.tg)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:14-47.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Reach Your Best-Level Prize sepoladi.blogspot.ca QR||Email:jrocero2013@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:47:55 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 81.171.74.68
country_id: 2635167
description:
Jun  6 14:49:32 ns5 pure-ftpd[2845229]: (?@81.171.74.68) [WARNING] Authentication failed for user [nwvfmxat]


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 185.16.38.146
country_id: 798544
domain: 154.70.82.246
description:
IM360 WAF: Possible XSS in arguments||MV:\"1.0\"?>\n<soap:envelope xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\">\n<soap:header>\n<wsse:security xmlns:wsse=\"http://schemas.xmlsoap.org/ws/2002/04/secext\">\n<wsse:usernametoken soap:mustunderstand=\"false\">\n<wsse:username>admin</wsse:username>\n<wsse:password>*****</wsse:password>\n</wsse:usernametoken>\n</wsse:security>\n</soap:header>\n<soap:body>\n<request correlator=\"exec1\" xmlns=\"urn:cisco:wsma-exec\">\n<execcli xsd=\"false\">\n<cmd>sh run</cmd>\n<dialogue><expect></expect><reply></reply></dialogue>\n</execcli>\n</request>\n</soap:body>\n</soap:envelope>||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 14.127.5.238
country_id: 1814991
description:
2026-06-06 14:50:43 H=([0.0.0.0]) [14.127.5.238]:55848 F=<John@4452.com> rejected RCPT <reseaux@soena.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:51:01 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:55421: 535 Incorrect authentication data (set_id=order@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:50:59 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.190.158.237
country_id: 3469034
description:
45.190.158.237 - - [06/Jun/2026:14:50:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10186088&pdata=https%253A%252F%252Feducplusmedia.tg%252F2025%252F10%252F15%252Fmme-agouze-akossiwa-une-femme-de-terrain-a-la-tete-de-la-commune-dagoe-nyive-1%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780757452 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/2025/10/15/mme-agouze-akossiwa-une-femme-de-terrain-a-la-tete-de-la-commune-dagoe-nyive-1/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.8162.1700 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.190.158.237


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.240.97.74
country_id: 3469034
description:
Jun  6 14:52:05 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.240.97.74 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 20.193.129.98
country_id: 1269750
domain: civilemagazine.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:14-52.20.193.129.98||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 14.127.5.238
country_id: 1814991
description:
2026-06-06 14:52:41 H=([0.0.0.0]) [14.127.5.238]:55335 F=<John@4452.com> rejected RCPT <reseaux@soena.tg>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:53:08 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:53:10 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:56382: 535 Incorrect authentication data (set_id=print@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:54:20 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:60920: 535 Incorrect authentication data (set_id=recruitment@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:54:18 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:54:58 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:55:00 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:50658: 535 Incorrect authentication data (set_id=claims@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:56:13 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:53779: 535 Incorrect authentication data (set_id=legal@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:56:11 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:57:12 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:57:14 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:63648: 535 Incorrect authentication data (set_id=testing123@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 14:57:55 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 14:57:57 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:60212: 535 Incorrect authentication data (set_id=test123@cafe.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 85.193.125.74
country_id: 1522867
description:
2026-06-06 14:58:49 H=([85.193.125.74]) [85.193.125.74]:15227 F=<John@4452.com> rejected RCPT <contact@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.34.238.116
country_id: 2017370
description:
[2026-06-06 15:00:44 +0000] info [cpaneld] 77.34.238.116 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 194.44.140.217
country_id: 690791
description:
Jun  6 15:01:27 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 194.44.140.217 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 93.123.109.128
country_id: 732800
description:
Jun  6 15:00:52 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 93.123.109.128 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.123.109.128
country_id: 732800
description:
2026-06-06 15:00:54 dovecot_login authenticator failed for H=(ADMIN) [93.123.109.128]:49435: 535 Incorrect authentication data (set_id=sales1@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.178.118.31
country_id: 2017370
description:
[2026-06-06 15:00:57 +0000] info [cpaneld] 178.178.118.31 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.189.205.253
country_id: 3469034
description:
Jun  6 15:01:07 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.189.205.253 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.105.201.68
country_id: 6252001
description:
[2026-06-06 15:00:49 +0000] info [whostmgrd] 68.105.201.68 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.216.23.105
country_id: 6251999
description:
185.216.23.105 - - [06/Jun/2026:15:02:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7248022&pdata=https%253A%252F%252Fcloud-et-racks.tg%252Fcontact&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780758126 HTTP/2.0" 302 0 cloud-et-racks.tg "https://cloud-et-racks.tg/contact" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.7632.6 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.216.23.105


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.200.6.38
country_id: 3469034
description:
Jun  6 15:02:48 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.200.6.38 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.228.102.165
country_id: 1835841
description:
Jun  6 15:03:13 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.228.102.165 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.64.147.96
country_id: 2363686
description:
2026-06-06 15:04:32 dovecot_login authenticator failed for H=(Yoga) [102.64.147.96]:62675: 535 Incorrect authentication data (set_id=contactcert@certlogisticstogo.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.85.105.233
country_id: 3469034
description:
Jun  6 15:03:55 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.85.105.233 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.36.209.21
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:49240818d7d92f5108543c5b6848ef8968d832b5||Title:9ns4v0xupboa3gm8c||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.205.82.115
country_id: 290557
description:
[2026-06-06 15:03:50 +0000] info [whostmgrd] 176.205.82.115 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.36.209.21
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:13615ac3671d417db30de82d09897768e84866c0||Title:l3ajr1yi3olt79d7||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.228.33.17
country_id: 798544
description:
Jun  6 15:06:19 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.228.33.17 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.36.209.21
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f36da278ac819420119b0a2552427f15b5c5bd89||Title:q330ayh4egn5wv||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 176.103.7.17
country_id: 690791
description:
Jun  6 15:05:50 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 176.103.7.17 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.36.209.21
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0e120622b3f06d577e46ce77dd33fef86e8d0946||Title:ftonk5xq4kq4sp||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.231.35.18
country_id: 285570
description:
[2026-06-06 15:07:25 +0000] info [whostmgrd] 37.231.35.18 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.36.209.21
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:13914d1f91e65463fad762a3f47eafd8bba72c30||Title:8fw7z3ko6hvrf4vh||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.193.21.191
country_id: 290557
description:
[2026-06-06 15:08:03 +0000] info [whostmgrd] 5.193.21.191 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 103.245.236.231
country_id: 1562822
description:
Jun  6 15:08:22 ns5 pure-ftpd[2858476]: (?@103.245.236.231) [INFO] New connection from 103.245.236.231


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 103.245.236.231
country_id: 1562822
description:
Jun  6 15:08:28 ns5 pure-ftpd[2858476]: (?@103.245.236.231) [WARNING] Authentication failed for user [admin]


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.36.209.21
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0c25419403be87edb522cc73bd3b1e0352369242||Title:52omhb4qyjw8hedjj||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 100.54.96.0
country_id: 6252001
description:
Jun  6 15:09:09 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 100.54.96.0 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 100.54.96.0
country_id: 6252001
description:
2026-06-06 15:09:11 dovecot_plain authenticator failed for H=ec2-100-54-96-0.compute-1.amazonaws.com (EC2AMAZ-DNRI12Q.ec2.internal) [100.54.96.0]:49340: 535 Incorrect authentication data (set_id=emploi@emt.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.36.209.21
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7bd559e4880cca62c59dbf43c3c7a4349a31097f||Title:t2dj2fl5bo41x4nzd||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.36.209.21
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:8687df3ac2b2e42436ead5a4497b5bf1407c41e6||Title:2ai4v53yqnmw3i5d||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.247.240.61
country_id: 1835841
description:
Jun  6 15:11:13 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.247.240.61 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.169.24.3
country_id: 2363686
description:
[2026-06-06 15:11:24 +0000] info [cpaneld] 196.169.24.3 - ohuuvcqw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.37.218
country_id: 2300660
description:
Jun  6 15:11:43 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.37.218 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.71.42
country_id: 3469034
description:
Jun  6 15:11:24 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.71.42 has been locked due to Imunify RBL


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Delight in Your Component Extra eropolik.blogspot.no 5Y||Email:naradech@windowslive.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 14.206.12.13
country_id: 1835841
description:
Jun  6 15:12:43 ns5 pure-ftpd[2861334]: (?@14.206.12.13) [WARNING] Authentication failed for user [www-data]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.37.218
country_id: 2300660
description:
Jun  6 15:11:50 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.37.218 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.36.209.21
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:feb3f1b76c0b33f545d959c9b7467c5845bde0f7||Title:y3fggs7onvi2bp88||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:15-12.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 49.36.209.21
country_id: 1269750
domain: ekeasarl.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:ekeasarl.ekeasarl.com||ServerName:ekeasarl.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ace5bb0c9b3551eb01a0f610b786d5843a147b79||Title:eib8ak4ednmw9xgc||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 100.54.96.0
country_id: 6252001
description:
Jun  6 15:13:32 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 100.54.96.0 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 100.54.96.0
country_id: 6252001
description:
2026-06-06 15:13:34 dovecot_plain authenticator failed for H=ec2-100-54-96-0.compute-1.amazonaws.com (EC2AMAZ-DNRI12Q.ec2.internal) [100.54.96.0]:49268: 535 Incorrect authentication data (set_id=mointie@emt.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 109.248.204.42
country_id: 2017370
domain: butodra.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:109.248.204.42||TA:109.248.204.42||


plugin: modsec
rule: 77316736
name: IM360 WAF: Request body parsing error
abuser: 79.117.162.193
country_id: 2510769
domain: sia-togo.tg
description:
IM360 WAF: Request body parsing error||err_msg:XML parser error: XML: Failed to parse document.||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 182.10.97.122
country_id: 1643084
description:
[2026-06-06 15:16:12 +0000] info [whostmgrd] 182.10.97.122 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 61.191.145.123
country_id: 1814991
description:
Jun  6 15:17:04 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 61.191.145.123 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-06 15:18:42 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:43924: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 94.100.52.46
country_id: 783754
description:
Jun  6 15:22:39 ns5 pure-ftpd[2868476]: (?@94.100.52.46) [WARNING] Authentication failed for user [rolle]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 89.253.90.113
country_id: 2661886
description:
Jun  6 15:28:32 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 89.253.90.113 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 89.253.90.113
country_id: 2661886
description:
2026-06-06 15:28:34 dovecot_login authenticator failed for H=89-253-90-113.customers.ownit.se [89.253.90.113]:58025: 535 Incorrect authentication data (set_id=sales@togosem.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.144.89.42
country_id: 2542007
description:
[2026-06-06 15:31:24 +0000] info [cpaneld] 197.144.89.42 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.80.43.143
country_id: 3469034
description:
[2026-06-06 15:31:40 +0000] info [cpaneld] 170.80.43.143 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.60.97.45
country_id: 2017370
description:
[2026-06-06 15:31:17 +0000] info [cpaneld] 2.60.97.45 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.237.78.162
country_id: 3686110
description:
[2026-06-06 15:31:29 +0000] info [cpaneld] 181.237.78.162 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.196.138.96
country_id: 3895114
description:
[2026-06-06 15:31:48 +0000] info [cpaneld] 190.196.138.96 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.209.45.89
country_id: 3469034
description:
[2026-06-06 15:31:51 +0000] info [cpaneld] 179.209.45.89 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 14.206.12.13
country_id: 1835841
description:
Jun  6 15:34:00 ns5 pure-ftpd[2877391]: (?@14.206.12.13) [WARNING] Authentication failed for user [www-data]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 102.64.46.176
country_id: 953987
description:
Jun  6 15:35:39 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 102.64.46.176 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 186.81.58.59
country_id: 3686110
description:
2026-06-06 15:35:44 dovecot_plain authenticator failed for H=([91.92.243.93]) [186.81.58.59]:7453: 535 Incorrect authentication data (set_id=info@inger.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, cannetes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99activit\xc3\xa9 s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans les cours d\xe2\x80\x99eau, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 182.9.161.20
country_id: 1643084
description:
[2026-06-06 15:35:05 +0000] info [whostmgrd] 182.9.161.20 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:15-36.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 179.60.73.33
country_id: 3895114
description:
2026-06-06 15:36:44 dovecot_plain authenticator failed for H=([91.92.243.93]) [179.60.73.33]:29098: 535 Incorrect authentication data (set_id=contact@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 102.64.46.176
country_id: 953987
description:
Jun  6 15:35:52 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 102.64.46.176 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.117.219.89
country_id: 2542007
description:
2026-06-06 15:36:29 dovecot_plain authenticator failed for H=([91.92.243.93]) [196.117.219.89]:43160: 535 Incorrect authentication data (set_id=marketing@inger.tg)


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Collect Your Extra Bet Reward bonotdamvam.blogspot.ro Gk||Email:alirmd007@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.164.246.209
country_id: 1269750
description:
Jun  6 15:35:58 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.164.246.209 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 216.28.215.2
country_id: 3686110
description:
2026-06-06 15:36:16 dovecot_plain authenticator failed for H=([91.92.243.93]) [216.28.215.2]:34308: 535 Incorrect authentication data (set_id=support@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 186.81.58.59
country_id: 3686110
description:
2026-06-06 15:35:51 dovecot_login authenticator failed for H=([91.92.243.93]) [186.81.58.59]:7453: 535 Incorrect authentication data (set_id=info@inger.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans les cours d\xe2\x80\x99eau, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 88.242.201.78
country_id: 298795
description:
2026-06-06 15:36:03 dovecot_plain authenticator failed for H=([91.92.243.93]) [88.242.201.78]:18086: 535 Incorrect authentication data (set_id=admin@inger.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cellule communication commune des lacs </p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.204.174.107
country_id: 290557
description:
2026-06-06 15:36:59 dovecot_plain authenticator failed for H=([91.92.243.93]) [94.204.174.107]:46682: 535 Incorrect authentication data (set_id=contato@inger.tg)


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.14||T:APACHE||MV:/wp-json/wp/v2/users?context=view&search=&_locale=user||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 176.57.207.118
country_id: 3686110
description:
2026-06-06 15:37:13 dovecot_plain authenticator failed for H=([91.92.243.93]) [176.57.207.118]:58266: 535 Incorrect authentication data (set_id=contacto@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 89.93.82.70
country_id: 3017382
description:
2026-06-06 15:37:27 dovecot_plain authenticator failed for H=89-93-82-70.hfc.dyn.abo.bbox.fr ([91.92.243.93]) [89.93.82.70]:62342: 535 Incorrect authentication data (set_id=financeiro@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 187.189.149.175
country_id: 3996063
description:
2026-06-06 15:37:41 dovecot_plain authenticator failed for H=fixed-187-189-149-175.totalplay.net ([91.92.243.93]) [187.189.149.175]:53888: 535 Incorrect authentication data (set_id=comercial@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 179.60.73.33
country_id: 3895114
description:
2026-06-06 15:36:51 dovecot_login authenticator failed for H=([91.92.243.93]) [179.60.73.33]:29098: 535 Incorrect authentication data (set_id=contact@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 77.247.90.181
country_id: 783754
description:
2026-06-06 15:38:23 dovecot_plain authenticator failed for H=([91.92.243.93]) [77.247.90.181]:47224: 535 Incorrect authentication data (set_id=suporte@inger.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cellule communication commune des lacs 1</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.177.223.61
country_id: 2017370
description:
2026-06-06 15:37:56 dovecot_plain authenticator failed for H=([91.92.243.93]) [178.177.223.61]:1269: 535 Incorrect authentication data (set_id=it@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.66.135.253
country_id: 953987
description:
2026-06-06 15:38:38 dovecot_plain authenticator failed for H=([91.92.243.93]) [102.66.135.253]:47594: 535 Incorrect authentication data (set_id=hr@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 5.42.45.172
country_id: 2017370
description:
2026-06-06 15:38:10 dovecot_plain authenticator failed for H=([91.92.243.93]) [5.42.45.172]:34700: 535 Incorrect authentication data (set_id=accounts@inger.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 18.224.139.173
country_id: 6252001
description:
[2026-06-06 15:39:01 +0000] info [cpaneld] 18.224.139.173 - pduusmyf "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 80.130.60.159
country_id: 2921044
description:
2026-06-06 15:39:34 dovecot_plain authenticator failed for H=p50823c9f.dip0.t-ipconnect.de ([91.92.243.93]) [80.130.60.159]:61512: 535 Incorrect authentication data (set_id=clients@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 86.125.53.51
country_id: 798549
description:
2026-06-06 15:38:52 dovecot_plain authenticator failed for H=([91.92.243.93]) [86.125.53.51]:35310: 535 Incorrect authentication data (set_id=office@inger.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 38.253.137.86
country_id: 3932488
description:
2026-06-06 15:39:05 dovecot_plain authenticator failed for H=([91.92.243.93]) [38.253.137.86]:57968: 535 Incorrect authentication data (set_id=soporte@inger.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 201.179.173.221
country_id: 3865483
description:
2026-06-06 15:39:21 dovecot_plain authenticator failed for H=([91.92.243.93]) [201.179.173.221]:57384: 535 Incorrect authentication data (set_id=ventas@inger.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 130.12.180.90
country_id: 2750405
description:
[2026-06-06 15:40:38 +0000] info [whostmgrd] 130.12.180.90 - root "GET /cpsess2352054792/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 190.130.136.119
country_id: 3658394
description:
2026-06-06 15:39:49 dovecot_plain authenticator failed for H=([91.92.243.93]) [190.130.136.119]:56967: 535 Incorrect authentication data (set_id=info@inger.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 130.12.180.90
country_id: 2750405
description:
[2026-06-06 15:40:37 +0000] info [whostmgrd] 130.12.180.90 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image -->\n<figure class=\"wp-block-image\"><img alt=\"\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.79.72.106
country_id: 953987
description:
[2026-06-06 15:41:00 +0000] info [whostmgrd] 197.79.72.106 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 188.113.247.58
country_id: 1512440
description:
2026-06-06 15:41:07 H=([188.113.247.58]) [188.113.247.58]:13827 F=<John@4452.com> rejected RCPT <emploi@emt.tg>: Sender verify failed


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.185.66.215
country_id: 1562822
domain: www.cafe.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.cafe.tg/ HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.185.66.215
country_id: 1562822
domain: www.cafe.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.cafe.tghttp/www.cafe.tg/ HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image -->\n<figure class=\"wp-block-image\"><img alt=\"\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.170.29.120
country_id: 2363686
description:
[2026-06-06 15:45:44 +0000] info [webmaild] 196.170.29.120 - directiondesecoles@emt.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.170.29.120
country_id: 2363686
description:
[2026-06-06 15:46:18 +0000] info [webmaild] 196.170.29.120 - directiondes\x{c3}\x{a9}coles@emt.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: invalid user name specified


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 102.132.29.102
country_id: 2233387
description:
2026-06-06 15:45:59 H=([102.132.29.102]) [102.132.29.102]:59165 F=<John@4452.com> rejected RCPT <kpip@emt.tg>: Sender verify failed


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13316,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.16-1024x577.jpeg\" alt=\"\" class=\"wp-image-13316\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.170.29.120
country_id: 2363686
description:
[2026-06-06 15:47:16 +0000] info [webmaild] 196.170.29.120 - directiondesecoles@emt.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13316,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.16-1024x577.jpeg\" alt=\"\" class=\"wp-image-13316\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13317,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-08.45.52-1024x577.jpeg\" alt=\"\" class=\"wp-image-13317\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 106.245.246.26
country_id: 1835841
description:
2026-06-06 15:48:18 dovecot_login authenticator failed for H=([49.124.148.195]) [106.245.246.26]:54529: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 218.92.251.198
country_id: 1814991
description:
2026-06-06 15:48:24 dovecot_login authenticator failed for H=([112.194.142.167]) [218.92.251.198]:41701: 535 Incorrect authentication data (set_id=delbegue.j@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.128.240.47
country_id: 2017370
description:
Jun  6 15:48:42 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.128.240.47 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 196.28.226.125
country_id: 1036973
description:
Jun  6 15:47:59 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 196.28.226.125 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13316,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.16-1024x577.jpeg\" alt=\"\" class=\"wp-image-13316\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13317,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-08.45.52-1024x577.jpeg\" alt=\"\" class=\"wp-image-13317\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13318,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.17-1024x577.jpeg\" alt=\"\" class=\"wp-image-13318\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13319,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.10-1024x577.jpeg\" alt=\"\" class=\"wp-image-13319\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.28.226.125
country_id: 1036973
description:
2026-06-06 15:48:01 dovecot_login authenticator failed for H=([184.181.178.35]) [196.28.226.125]:51714: 535 Incorrect authentication data (set_id=delbegue_j@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 218.92.251.198
country_id: 1814991
description:
Jun  6 15:48:22 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 218.92.251.198 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 37.128.240.47
country_id: 2017370
description:
2026-06-06 15:48:44 dovecot_login authenticator failed for H=([211.228.92.253]) [37.128.240.47]:50080: 535 Incorrect authentication data (set_id=j.delbegue)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.178
country_id: 1880251
description:
47.128.96.178 - - [06/Jun/2026:15:49:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6317719&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fsamuel-umtiti%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780760950 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/samuel-umtiti/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.178


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 20.193.129.98
country_id: 1269750
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:15-50.20.193.129.98||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13316,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.16-1024x577.jpeg\" alt=\"\" class=\"wp-image-13316\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13317,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-08.45.52-1024x577.jpeg\" alt=\"\" class=\"wp-image-13317\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants pour prot\xc3\xa9ger la plage et la mer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13318,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.17-1024x577.jpeg\" alt=\"\" class=\"wp-image-13318\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13319,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.10-1024x577.jpeg\" alt=\"\" class=\"wp-image-13319\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 64.64.117.17
country_id: 3572887
description:
2026-06-06 15:50:36 H=([192.168.0.56]) [64.64.117.17]:13146 F=<info@magnarx.mx> rejected RCPT <info@magnarx.mx>: SMTP AUTH is required for message submission on port 587


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 103.245.236.231
country_id: 1562822
description:
Jun  6 15:51:12 ns5 pure-ftpd[2890181]: (?@103.245.236.231) [INFO] New connection from 103.245.236.231


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 103.245.236.231
country_id: 1562822
description:
Jun  6 15:51:15 ns5 pure-ftpd[2890181]: (?@103.245.236.231) [WARNING] Authentication failed for user [root]


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 213.230.92.53
country_id: 1512440
description:
2026-06-06 15:51:39 H=([213.230.92.53]) [213.230.92.53]:62352 F=<John@4452.com> rejected RCPT <info@soena.tg>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.8.159
country_id: 3175395
description:
Jun  6 15:52:40 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.8.159 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 213.230.92.53
country_id: 1512440
description:
2026-06-06 15:51:51 H=([213.230.92.53]) [213.230.92.53]:5809 F=<John@4452.com> rejected RCPT <info@soena.tg>: Sender verify failed


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13316,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.16-1024x577.jpeg\" alt=\"\" class=\"wp-image-13316\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13317,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-08.45.52-1024x577.jpeg\" alt=\"\" class=\"wp-image-13317\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants pour prot\xc3\xa9ger la plage et la mer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13318,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.17-1024x577.jpeg\" alt=\"\" class=\"wp-image-13318\"/><figcaption class=\"wp-element-caption\">mr lar\xc3\xa9 penn, directeur de cabinet hcm</figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13319,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.10-1024x577.jpeg\" alt=\"\" class=\"wp-image-13319\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.14.128
country_id: 3469034
description:
Jun  6 15:53:00 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.14.128 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13316,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.16-1024x577.jpeg\" alt=\"\" class=\"wp-image-13316\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13317,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-08.45.52-1024x577.jpeg\" alt=\"\" class=\"wp-image-13317\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants pour prot\xc3\xa9ger la plage et la mer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13318,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.17-1024x577.jpeg\" alt=\"\" class=\"wp-image-13318\"/><figcaption class=\"wp-element-caption\"><strong>mr lar\xc3\xa9 penn, directeur de cabinet hcm</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13319,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.10-1024x577.jpeg\" alt=\"\" class=\"wp-image-13319\"/><figcaption class=\"wp-element-caption\"><strong>photo de famille des participants \xc3\xa0 la fin de l'op\xc3\xa9ration</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.8.159
country_id: 3175395
description:
Jun  6 15:52:47 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.8.159 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13316,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.16-1024x577.jpeg\" alt=\"\" class=\"wp-image-13316\"/><figcaption class=\"wp-element-caption\"><strong>la dp de l'environnement a mis en terre un plant de cocotier \xc3\xa0 la plage d'av\xc3\xa9m\xc3\xa9</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13317,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-08.45.52-1024x577.jpeg\" alt=\"\" class=\"wp-image-13317\"/><figcaption class=\"wp-element-caption\">le chef servi</figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants pour prot\xc3\xa9ger la plage et la mer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13318,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.17-1024x577.jpeg\" alt=\"\" class=\"wp-image-13318\"/><figcaption class=\"wp-element-caption\"><strong>mr lar\xc3\xa9 penn, directeur de cabinet hcm</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13319,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.10-1024x577.jpeg\" alt=\"\" class=\"wp-image-13319\"/><figcaption class=\"wp-element-caption\"><strong>photo de famille des participants \xc3\xa0 la fin de l'op\xc3\xa9ration</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/><figcaption class=\"wp-element-caption\">des agents de la mair</figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13316,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.16-1024x577.jpeg\" alt=\"\" class=\"wp-image-13316\"/><figcaption class=\"wp-element-caption\"><strong>la dp de l'environnement a mis en terre un plant de cocotier \xc3\xa0 la plage d'av\xc3\xa9m\xc3\xa9</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13317,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-08.45.52-1024x577.jpeg\" alt=\"\" class=\"wp-image-13317\"/><figcaption class=\"wp-element-caption\"><strong>le chef service technique de la mairie a \xc3\xa9galement plant\xc3\xa9</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants pour prot\xc3\xa9ger la plage et la mer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13318,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.17-1024x577.jpeg\" alt=\"\" class=\"wp-image-13318\"/><figcaption class=\"wp-element-caption\"><strong>mr lar\xc3\xa9 penn, directeur de cabinet hcm</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13319,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.10-1024x577.jpeg\" alt=\"\" class=\"wp-image-13319\"/><figcaption class=\"wp-element-caption\"><strong>photo de famille des participants \xc3\xa0 la fin de l'op\xc3\xa9ration</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 37.99.123.37
country_id: 1522867
description:
2026-06-06 15:55:04 H=([37.99.123.37]) [37.99.123.37]:63150 F=<John@4452.com> rejected RCPT <kpip@emt.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.189.185.195
country_id: 3865483
description:
[2026-06-06 15:55:41 +0000] info [cpaneld] 45.189.185.195 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.179.236.218
country_id: 3469034
description:
[2026-06-06 15:55:46 +0000] info [cpaneld] 45.179.236.218 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 142.113.241.220
country_id: 6251999
description:
[2026-06-06 15:55:52 +0000] info [cpaneld] 142.113.241.220 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.25.17.208
country_id: 3932488
description:
[2026-06-06 15:55:56 +0000] info [cpaneld] 38.25.17.208 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.235.158.247
country_id: 934292
description:
[2026-06-06 15:55:59 +0000] info [cpaneld] 105.235.158.247 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/><figcaption class=\"wp-element-caption\"><strong>des agents de la mairie ont r\xc3\xa9pondu \xc3\xa0 l'appel du hcm</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/><figcaption class=\"wp-element-caption\">munis</figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13316,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.16-1024x577.jpeg\" alt=\"\" class=\"wp-image-13316\"/><figcaption class=\"wp-element-caption\"><strong>la dp de l'environnement a mis en terre un plant de cocotier \xc3\xa0 la plage d'av\xc3\xa9m\xc3\xa9</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13317,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-08.45.52-1024x577.jpeg\" alt=\"\" class=\"wp-image-13317\"/><figcaption class=\"wp-element-caption\"><strong>le chef service technique de la mairie a \xc3\xa9galement plant\xc3\xa9</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants pour prot\xc3\xa9ger la plage et la mer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13318,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.17-1024x577.jpeg\" alt=\"\" class=\"wp-image-13318\"/><figcaption class=\"wp-element-caption\"><strong>mr lar\xc3\xa9 penn, directeur de cabinet hcm</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13319,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.10-1024x577.jpeg\" alt=\"\" class=\"wp-image-13319\"/><figcaption class=\"wp-element-caption\"><strong>photo de famille des participants \xc3\xa0 la fin de l'op\xc3\xa9ration</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.160
country_id: 1880251
description:
47.128.121.160 - - [06/Jun/2026:15:56:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13147286&pdata=https%253A%252F%252Fdirect7.tg%252Ftag%252Ffoire-baguida%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780761390 HTTP/2.0" 302 0 direct7.tg "https://direct7.tg/tag/foire-baguida/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.160


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.205.152.205
country_id: 3469034
description:
[2026-06-06 15:55:49 +0000] info [cpaneld] 168.205.152.205 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.57.54
country_id: 1269750
description:
2026-06-06 15:57:18 dovecot_plain authenticator failed for H=(sickikered) [182.95.57.54]:40968: 535 Incorrect authentication data (set_id=tps@tps.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munit de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/><figcaption class=\"wp-element-caption\"><strong>des agents de la mairie ont r\xc3\xa9pondu \xc3\xa0 l'appel du hcm</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/><figcaption class=\"wp-element-caption\"><strong>muni de pique \xc3\xa0 sachets, ils ont nettoy\xc3\xa9 la plage</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13316,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.16-1024x577.jpeg\" alt=\"\" class=\"wp-image-13316\"/><figcaption class=\"wp-element-caption\"><strong>la dp de l'environnement a mis en terre un plant de cocotier \xc3\xa0 la plage d'av\xc3\xa9m\xc3\xa9</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13317,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-08.45.52-1024x577.jpeg\" alt=\"\" class=\"wp-image-13317\"/><figcaption class=\"wp-element-caption\"><strong>le chef service technique de la mairie a \xc3\xa9galement plant\xc3\xa9</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants pour prot\xc3\xa9ger la plage et la mer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13318,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.17-1024x577.jpeg\" alt=\"\" class=\"wp-image-13318\"/><figcaption class=\"wp-element-caption\"><strong>mr lar\xc3\xa9 penn, directeur de cabinet du hcm</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13319,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.10-1024x577.jpeg\" alt=\"\" class=\"wp-image-13319\"/><figcaption class=\"wp-element-caption\"><strong>photo de famille des participants \xc3\xa0 la fin de l'op\xc3\xa9ration</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.107.104.227
country_id: 3865483
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/actualite/detail/assemblee-generale-ordinaire-et-budgetaire-du-cat-04-mars-2025 HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.0.142.95
country_id: 3865483
description:
Jun  6 15:58:47 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.0.142.95 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 171.8.42.112
country_id: 1814991
description:
2026-06-06 15:57:57 dovecot_login authenticator failed for H=(mission-web-hosting.com) [171.8.42.112]:46727: 535 Incorrect authentication data (set_id=i.sy@ucao-uut.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.8.227
country_id: 3469034
description:
Jun  6 15:59:09 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.8.227 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-06 15:59:34 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:48158: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.149.93
country_id: 99237
description:
2026-06-06 15:58:51 dovecot_plain authenticator failed for H=(sarthaid) [65.20.149.93]:56915: 535 Incorrect authentication data (set_id=tps@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.0.142.95
country_id: 3865483
description:
Jun  6 15:58:55 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.0.142.95 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:16-00.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Receive Your Alternative Coin Funds sepoladi.blogspot.ca UC||Email:youanbibo04@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la journ\xc3\xa9e mondiale des oc\xc3\xa9ans, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munis de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/><figcaption class=\"wp-element-caption\"><strong>des agents de la mairie ont r\xc3\xa9pondu \xc3\xa0 l'appel du hcm</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/><figcaption class=\"wp-element-caption\"><strong>muni de pique \xc3\xa0 sachets, ils ont nettoy\xc3\xa9 la plage</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13316,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.16-1024x577.jpeg\" alt=\"\" class=\"wp-image-13316\"/><figcaption class=\"wp-element-caption\"><strong>la dp de l'environnement a mis en terre un plant de cocotier \xc3\xa0 la plage d'av\xc3\xa9m\xc3\xa9</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13317,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-08.45.52-1024x577.jpeg\" alt=\"\" class=\"wp-image-13317\"/><figcaption class=\"wp-element-caption\"><strong>le chef service technique de la mairie a \xc3\xa9galement plant\xc3\xa9</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants pour prot\xc3\xa9ger la plage et la mer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13318,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.17-1024x577.jpeg\" alt=\"\" class=\"wp-image-13318\"/><figcaption class=\"wp-element-caption\"><strong>mr lar\xc3\xa9 penn, directeur de cabinet du hcm</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13319,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.10-1024x577.jpeg\" alt=\"\" class=\"wp-image-13319\"/><figcaption class=\"wp-element-caption\"><strong>photo de famille des participants \xc3\xa0 la fin de l'op\xc3\xa9ration</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 37.99.123.37
country_id: 1522867
description:
2026-06-06 16:02:00 H=([37.99.123.37]) [37.99.123.37]:59430 F=<John@4452.com> rejected RCPT <kpip@emt.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 64.64.117.17
country_id: 3572887
description:
2026-06-06 16:02:09 H=([192.168.0.56]) [64.64.117.17]:6262 F=<ventas@empresasmexico.com> rejected RCPT <ventas@empresasmexico.com>: SMTP AUTH is required for message submission on port 587


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.96.255.42
country_id: 6252001
description:
[2026-06-06 16:02:33 +0000] info [whostmgrd] 191.96.255.42 - 2087cpsess1180574521scripts5account_copy_input "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: invalid user name specified


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 176.103.11.113
country_id: 690791
description:
Jun  6 16:03:31 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 176.103.11.113 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.219.100.180
country_id: 798544
description:
Jun  6 16:03:48 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.219.100.180 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 116.149.80.70
country_id: 1814991
description:
2026-06-06 16:05:30 H=([0.0.0.0]) [116.149.80.70]:8588 F=<John@4452.com> rejected RCPT <visite@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 116.149.80.70
country_id: 1814991
description:
2026-06-06 16:06:35 H=([0.0.0.0]) [116.149.80.70]:8533 F=<John@4452.com> rejected RCPT <visite@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.157
country_id: 1880251
description:
47.128.96.157 - - [06/Jun/2026:16:07:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10012519&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fmaryse-lawson%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780762057 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/maryse-lawson/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.157


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.206
country_id: 1880251
description:
47.128.96.206 - - [06/Jun/2026:16:07:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001095&pdata=https%253A%252F%252Fca-togo.org%252Fimp%252Fenglish%252Findex1.php%253FpageID%253D18&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780762072 HTTP/2.0" 302 0 ca-togo.org "https://ca-togo.org/imp/english/index1.php?pageID=18" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.206


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.96.125
country_id: 3469034
description:
Jun  6 16:08:50 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.96.125 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13313,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.18-1024x577.jpeg\" alt=\"\" class=\"wp-image-13313\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>pour marquer la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e mondiale des oc\xc3\xa9ans qui aura lieu le 8 juin, le haut conseil pour la mer en collaboration avec la commune des lacs 1 a organis\xc3\xa9 le samedi 6 juin, une op\xc3\xa9ration de salubrit\xc3\xa9 sur la plage d\xe2\x80\x99an\xc3\xa9ho.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">sur le front de la propret\xc3\xa9, on pouvait noter la pr\xc3\xa9sence du directeur de cabinet du hcm, mr lar\xc3\xa9 penn, de la directrice pr\xc3\xa9fectorale de l\xe2\x80\x99environnement, capitaine abibatou, sounka amadou, du sg de la commune des lacs 1, mr komi noumonvi, et des agents de la mairie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">munis de pique \xc3\xa0 sachets et des sacs poubelles, les participants ont sillonn\xc3\xa9 la plage \xc3\xa0 partir de l\xe2\x80\x99h\xc3\xb4tel miajoe jusqu\xe2\x80\x99au point de chute \xc3\xa0 la mairie. ils ont ramass\xc3\xa9 les herbes, canettes et sachets plastiques jonchant le sol, donnant un nouveau look \xc3\xa0 la plage.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13314,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.23-1024x577.jpeg\" alt=\"\" class=\"wp-image-13314\"/><figcaption class=\"wp-element-caption\"><strong>des agents de la mairie ont r\xc3\xa9pondu \xc3\xa0 l'appel du hcm</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13315,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.19-1024x577.jpeg\" alt=\"\" class=\"wp-image-13315\"/><figcaption class=\"wp-element-caption\"><strong>muni de pique \xc3\xa0 sachets, ils ont nettoy\xc3\xa9 la plage</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr lar\xc3\xa9 penn a invit\xc3\xa9 les habitants de la commune des lacs 1 \xc3\xa0 p\xc3\xa9renniser cette activit\xc3\xa9, et \xc3\xa0 se mobiliser pour la protection de la mer qui joue un r\xc3\xb4le essentiel dans l\xe2\x80\x99\xc3\xa9conomie nationale et dans la r\xc3\xa9gulation des effets li\xc3\xa9s au changement climatique. l\xe2\x80\x99op\xc3\xa9ration s\xe2\x80\x99est conclue par un reboisement \xc3\xa0 la plage d\xe2\x80\x99av\xc3\xa9m\xc3\xa9. une vingtaine de plants de cocotier ont \xc3\xa9t\xc3\xa9 mis en terre pour lutter contre l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13316,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.16-1024x577.jpeg\" alt=\"\" class=\"wp-image-13316\"/><figcaption class=\"wp-element-caption\"><strong>la dp de l'environnement a mis en terre un plant de cocotier \xc3\xa0 la plage d'av\xc3\xa9m\xc3\xa9</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13317,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-08.45.52-1024x577.jpeg\" alt=\"\" class=\"wp-image-13317\"/><figcaption class=\"wp-element-caption\"><strong>le chef service technique de la mairie a \xc3\xa9galement plant\xc3\xa9</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la commune des lacs 1 est situ\xc3\xa9e sur le littoral et dispose d\xe2\x80\x99une vaste plage qui repr\xc3\xa9sente un atout pour le tourisme. mais les habitants font peu de cas de la propret\xc3\xa9. plastiques, canettes de bi\xc3\xa8re et d\xc3\xa9chets divers sont abandonn\xc3\xa9s sur le sable. et les services de nettoyage de la mairie ne peuvent \xc3\xaatre mobilis\xc3\xa9s 24/24. chaque citoyen peut agir \xc3\xa0 son niveau \xc3\xa0 travers des gestes simples mais importants pour prot\xc3\xa9ger la plage et la mer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13318,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.17-1024x577.jpeg\" alt=\"\" class=\"wp-image-13318\"/><figcaption class=\"wp-element-caption\"><strong>mr lar\xc3\xa9 penn, directeur de cabinet du hcm</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13319,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-06.36.10-1024x577.jpeg\" alt=\"\" class=\"wp-image-13319\"/><figcaption class=\"wp-element-caption\"><strong>photo de famille des participants \xc3\xa0 la fin de l'op\xc3\xa9ration</strong></figcaption></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par exemple, \xc3\xa9viter de jeter les d\xc3\xa9chets dans la nature ou dans la mer, r\xc3\xa9duire l\xe2\x80\x99utilisation des plastiques \xc3\xa0 usage unique, participer aux activit\xc3\xa9s de nettoyage des plages ou encore sensibiliser son entourage \xc3\xa0 la protection de l\xe2\x80\x99environnement. ces actions, m\xc3\xaame modestes, peuvent avoir un impact significatif lorsqu\xe2\x80\x99elles sont adopt\xc3\xa9es par un grand nombre de personnes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"20px\"}}} -->\n<p style=\"font-size:20px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.30.146.82
country_id: 783754
description:
185.30.146.82 - - [06/Jun/2026:16:10:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10196329&pdata=https%253A%252F%252Feducplusmedia.tg%252F2025%252F04%252Fpage%252F3%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780762255 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/2025/04/page/3/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.8241.1437 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.30.146.82


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.243
country_id: 1643084
description:
[2026-06-06 16:14:41 +0000] info [cpaneld] 185.213.83.243 - mouss "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mouss (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 152.52.243.30
country_id: 1269750
description:
Jun  6 16:14:47 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 152.52.243.30 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 152.52.243.30
country_id: 1269750
description:
2026-06-06 16:14:49 dovecot_login authenticator failed for H=(n112120115152.netvigator.com) [152.52.243.30]:53620: 535 Incorrect authentication data (set_id=awa.ouedraogo@sodigaz.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.243
country_id: 1643084
description:
[2026-06-06 16:14:50 +0000] info [cpaneld] 185.213.83.243 - tqttxcvn "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tqttxcvn (has_cpuser_file failed)


plugin: ossec
rule: 11004
name: Possible breaking attempt on cpanel service
abuser: 185.213.83.243
country_id: 1643084
description:
[2026-06-06 16:14:54 +0000] info [cpaneld] 185.213.83.243 - admin@togocarrierebetons.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.23.28.24
country_id: 2361809
description:
[2026-06-06 16:18:08 +0000] info [cpaneld] 102.23.28.24 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.1.186.75
country_id: 1733045
description:
[2026-06-06 16:18:24 +0000] info [cpaneld] 14.1.186.75 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.158.95.46
country_id: 2542007
description:
[2026-06-06 16:18:28 +0000] info [cpaneld] 105.158.95.46 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.96.255.42
country_id: 6252001
description:
[2026-06-06 16:18:12 +0000] info [whostmgrd] 191.96.255.42 - 2087cpsess8814244347scripts5transfer-cpanel-account "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: invalid user name specified


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.124.96.190
country_id: 1282988
description:
[2026-06-06 16:18:19 +0000] info [cpaneld] 103.124.96.190 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.100.242.238
country_id: 3469034
description:
[2026-06-06 16:18:42 +0000] info [cpaneld] 131.100.242.238 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 119.184.123.24
country_id: 1814991
description:
2026-06-06 16:24:10 H=([119.184.123.24]) [119.184.123.24]:53899 F=<John@4452.com> rejected RCPT <majed.zammouri@soroubat.tg>: Sender verify failed


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Accept a Gift with No Obligations vamvozmviigr.blogspot.se Kl||Email:clementyannick61@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77093094
abuser: 34.122.16.212
country_id: 6252001
domain: www.biom.tensai.tg
description:


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.121.4.25
country_id: 690791
description:
[2026-06-06 16:25:12 +0000] info [cpaneld] 176.121.4.25 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:16-25.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 58.42.81.32
country_id: 1814991
description:
2026-06-06 16:25:22 H=([58.42.81.32]) [58.42.81.32]:52224 F=<John@4452.com> rejected RCPT <kpip@emt.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 175.107.208.72
country_id: 1168579
description:
[2026-06-06 16:25:30 +0000] info [cpaneld] 175.107.208.72 - mesysco "GET /login/?login_only=1&user=mesysco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 155.138.92.105
country_id: 102358
description:
[2026-06-06 16:25:39 +0000] info [cpaneld] 155.138.92.105 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.118.45.21
country_id: 3573591
description:
[2026-06-06 16:25:45 +0000] info [cpaneld] 181.118.45.21 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.87.237.193
country_id: 3469034
description:
[2026-06-06 16:25:48 +0000] info [cpaneld] 201.87.237.193 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.40.147.230
country_id: 3469034
description:
[2026-06-06 16:29:31 +0000] info [whostmgrd] 201.40.147.230 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.71.201.21
country_id: 285570
description:
[2026-06-06 16:30:30 +0000] info [cpaneld] 188.71.201.21 - inge "GET /login/?login_only=1&user=inge&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user inge (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 101.109.237.248
country_id: 1605651
description:
[2026-06-06 16:30:38 +0000] info [cpaneld] 101.109.237.248 - in "GET /login/?login_only=1&user=in&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user in (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 175.138.132.43
country_id: 1733045
description:
[2026-06-06 16:30:16 +0000] info [cpaneld] 175.138.132.43 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.222.60.119
country_id: 99237
description:
[2026-06-06 16:30:19 +0000] info [cpaneld] 176.222.60.119 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.59.51.181
country_id: 290557
description:
[2026-06-06 16:30:22 +0000] info [cpaneld] 94.59.51.181 - inger "GET /login/?login_only=1&user=inger&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user inger (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.254.238.147
country_id: 3865483
description:
[2026-06-06 16:30:34 +0000] info [cpaneld] 201.254.238.147 - ing "GET /login/?login_only=1&user=ing&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ing (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.169.146
country_id: 3175395
description:
Jun  6 16:31:54 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.169.146 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 131.100.138.60
country_id: 3469034
description:
Jun  6 16:37:04 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 131.100.138.60 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 194.60.212.126
country_id: 3175395
description:
Jun  6 16:37:24 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 194.60.212.126 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 58.42.81.32
country_id: 1814991
description:
2026-06-06 16:38:06 H=([58.42.81.32]) [58.42.81.32]:59447 F=<John@4452.com> rejected RCPT <kpip@emt.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 80.242.56.80
country_id: 2750405
description:
2026-06-06 16:42:34 dovecot_plain authenticator failed for H=(qljbujgih1fezsiozcyqoz0e9) [80.242.56.80]:49412: 535 Incorrect authentication data (set_id=info@sigm.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 198.163.195.74
country_id: 1512440
description:
2026-06-06 16:45:15 H=([198.163.195.74]) [198.163.195.74]:27602 F=<John@4452.com> rejected RCPT <contact@emt.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 125.165.108.238
country_id: 1643084
description:
[2026-06-06 16:48:46 +0000] info [whostmgrd] 125.165.108.238 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.20.146
country_id: 2921044
domain: www.arse.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.arse.tg/robots.txt HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.27.11
country_id: 2750405
domain: www.arse.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.arse.tg/ HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 198.163.195.74
country_id: 1512440
description:
2026-06-06 16:48:06 H=([198.163.195.74]) [198.163.195.74]:2760 F=<John@4452.com> rejected RCPT <contact@emt.tg>: Sender verify failed


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Receive Your Personally Crafted Financial Gift eropolik.blogspot.cz uW||Email:aminasheriff0977@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:16-49.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 179.104.18.144
country_id: 3469034
description:
2026-06-06 16:52:13 dovecot_plain authenticator failed for H=(yygs0fsfhe894kmee8txlej1e) [179.104.18.144]:44043: 535 Incorrect authentication data (set_id=info@soena.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.238.63.168
country_id: 798544
description:
Jun  6 16:52:34 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.238.63.168 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.104.18.144
country_id: 3469034
description:
Jun  6 16:52:11 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.104.18.144 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.118.34.79
country_id: 1269750
description:
Jun  6 16:53:04 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.118.34.79 has been locked due to Imunify RBL


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 64.145.79.75
country_id: 3865483
domain: 154.70.82.246
description:
IM360 WAF: Bad file extension||RSV:8.14||T:APACHE||MVN:REQUEST_FILENAME||MV:/.env.backup||User:root||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 95.214.211.240
country_id: 1512440
description:
2026-06-06 16:58:26 H=([95.214.211.240]) [95.214.211.240]:15929 F=<John@4452.com> rejected RCPT <j.delbegue@tps.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.31.176.186
country_id: 2464461
description:
[2026-06-06 17:00:01 +0000] info [cpaneld] 102.31.176.186 - AWADI "GET /execute/Fileman/list_files?dir=%2Fpublic_html HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 204.154.201.222
country_id: 99237
description:
[2026-06-06 17:00:37 +0000] info [cpaneld] 204.154.201.222 - cpsess8573661731 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cpsess8573661731 (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 95.214.211.240
country_id: 1512440
description:
2026-06-06 17:05:23 H=([95.214.211.240]) [95.214.211.240]:44915 F=<John@4452.com> rejected RCPT <j.delbegue@tps.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.57.241.24
country_id: 1880251
description:
[2026-06-06 17:09:00 +0000] info [cpaneld] 2.57.241.24 - acvahvhw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.81.79.217
country_id: 3469034
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/www.gtaassurances.net HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Celebrate Your Cash Event bonotdamvam.blogspot.ch P7||Email:1unique1ps.ps@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:17-13.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 43.135.88.109
country_id: 1819730
description:
43.135.88.109 - - [06/Jun/2026:17:12:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12808547&pdata=https%253A%252F%252Fmacite.tg%252F2025%252F07%252F28%252Frdc-debut-du-proces-de-lex-president-congolais-joseph-kabila%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780765971 HTTP/2.0" 302 0 macite.tg "https://macite.tg/2025/07/28/rdc-debut-du-proces-de-lex-president-congolais-joseph-kabila/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.135.88.109


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.172
country_id: 1880251
description:
47.128.121.172 - - [06/Jun/2026:17:14:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6986342&pdata=https%253A%252F%252Fdirect7.tg%252Ftag%252Fdovi-senaya%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780766071 HTTP/2.0" 302 0 direct7.tg "https://direct7.tg/tag/dovi-senaya/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.172


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.185
country_id: 1880251
description:
47.128.96.185 - - [06/Jun/2026:17:14:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10078320&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fauguste-yao-dogbo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780766040 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/auguste-yao-dogbo/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.185


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 89.23.153.159
country_id: 2017370
description:
2026-06-06 17:16:40 H=([89.23.153.159]) [89.23.153.159]:28620 F=<John@4452.com> rejected RCPT <kpip@emt.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 113.191.6.220
country_id: 1562822
description:
2026-06-06 17:19:37 H=([113.191.6.220]) [113.191.6.220]:49424 F=<John@4452.com> rejected RCPT <visite@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 113.191.6.220
country_id: 1562822
description:
2026-06-06 17:19:51 H=([113.191.6.220]) [113.191.6.220]:49596 F=<John@4452.com> rejected RCPT <visite@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 54.159.211.126
country_id: 6252001
description:
[2026-06-06 17:21:05 +0000] info [cpaneld] 54.159.211.126 - rolle "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rolle (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 154.72.161.225
country_id: 2233387
description:
2026-06-06 17:22:37 H=([143.105.152.155]) [154.72.161.225]:16551 F=<John@4452.com> rejected RCPT <evendeur@soena.tg>: Sender verify failed


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 188.241.62.57
country_id: 1269750
description:
[2026-06-06 17:22:15 +0000] info [whostmgrd] 188.241.62.57 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 204.154.201.222
country_id: 99237
description:
[2026-06-06 17:22:38 +0000] info [cpaneld] 204.154.201.222 - cpsess8573661731 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cpsess8573661731 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.241.62.57
country_id: 1269750
description:
[2026-06-06 17:22:13 +0000] info [whostmgrd] 188.241.62.57 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.182.137.174
country_id: 1562822
domain: fbafrica.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/fbafrica.com/the-basics- fashion-supply- chain-structures/ HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 38.55.146.153
country_id: 6252001
description:
2026-06-06 17:28:30 dovecot_login authenticator failed for H=(inger.tg) [38.55.146.153]:54230: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.0.17.9
country_id: 192950
description:
[2026-06-06 17:30:58 +0000] info [whostmgrd] 102.0.17.9 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.100.37.119
country_id: 2589581
description:
[2026-06-06 17:34:41 +0000] info [whostmgrd] 41.100.37.119 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 84.233.216.247
country_id: 2921044
description:
84.233.216.247 - - [06/Jun/2026:17:36:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6514582&pdata=https%253A%252F%252Fcrepsad.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780767398 HTTP/2.0" 302 0 crepsad.tg "https://crepsad.tg/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16_0 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:84.233.216.247


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:17-37.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Start Your Clear Money bonotdamvam.blogspot.in CS||Email:irvinecrystal90@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 180.125.21.15
country_id: 1814991
description:
2026-06-06 17:43:26 H=([0.0.0.0]) [180.125.21.15]:63588 F=<John@4452.com> rejected RCPT <contact@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 180.125.21.15
country_id: 1814991
description:
2026-06-06 17:43:52 H=([0.0.0.0]) [180.125.21.15]:62242 F=<John@4452.com> rejected RCPT <contact@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 14.233.20.247
country_id: 1562822
description:
2026-06-06 17:45:16 H=([14.233.20.247]) [14.233.20.247]:57560 F=<John@4452.com> rejected RCPT <admin@togocarrierebetons.com>: Sender verify failed


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.218.129
country_id: 2363686
description:
102.64.218.129 - - [06/Jun/2026:17:45:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6920090&pdata=https%253A%252F%252Flaunetogo.tg%252Fenvironnement-le-togo-dote-ses-parcs-dequipements-pour-verrouiller-la-protection-des-aires-protegees%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780767953 HTTP/2.0" 302 0 launetogo.tg "https://launetogo.tg/environnement-le-togo-dote-ses-parcs-dequipements-pour-verrouiller-la-protection-des-aires-protegees/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.218.129


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 131.255.183.217
country_id: 3865483
description:
Jun  6 17:50:02 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 131.255.183.217 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.70.167.33
country_id: 3469034
description:
[2026-06-06 17:52:31 +0000] info [whostmgrd] 45.70.167.33 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 14.233.20.247
country_id: 1562822
description:
2026-06-06 17:55:49 H=([14.233.20.247]) [14.233.20.247]:61565 F=<John@4452.com> rejected RCPT <admin@togocarrierebetons.com>: Sender verify failed


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 205.210.31.245
country_id: 6252001
description:
Jun  6 17:57:02 ns5 pure-ftpd[2980668]: (?@205.210.31.245) [INFO] New connection from 205.210.31.245


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 209.50.174.191
country_id: 6252001
domain: sp-eau.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/sp-eau.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.3.48.28
country_id: 6252001
domain: tchambainvest.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tchambainvest.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.123.176.98
country_id: 3017382
domain: pub.soena.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/pub.soena.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.3.42.116
country_id: 2635167
domain: sightofgood.free.netmaster.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/sightofgood.free.netmaster.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.3.52.90
country_id: 3469034
domain: sahamtg.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/sahamtg.com/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.53.12.133
country_id: 3469034
description:
Jun  6 17:57:50 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.53.12.133 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 45.144.212.134
country_id: 690791
description:
2026-06-06 17:57:51 H=([45.144.212.134]) [45.144.212.134]:58678 F=<joya@ybfso.org> rejected RCPT <contact@sthandling-aero.tg>: The mail server could not deliver mail to contact@sthandling-aero.tg.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 104.167.25.111
country_id: 6252001
domain: sproca.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/sproca.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 194.44.140.201
country_id: 690791
description:
Jun  6 17:58:12 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 194.44.140.201 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 104.207.59.99
country_id: 6251999
domain: soroubat.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/soroubat.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.73.189.123
country_id: 6252001
description:
[2026-06-06 17:59:11 +0000] info [whostmgrd] 76.73.189.123 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.3.55.207
country_id: 2921044
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.217.243.0
country_id: 953987
description:
[2026-06-06 18:01:34 +0000] info [whostmgrd] 102.217.243.0 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Assume Command of Your Prize eropolik.blogspot.hk y4||Email:mtaylor8806@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:18-01.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.139
country_id: 130758
description:
Jun  6 18:01:46 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.139 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 98.195.138.52
country_id: 6252001
description:
2026-06-06 18:01:56 dovecot_plain authenticator failed for H=c-98-195-138-52.hsd1.tx.comcast.net (deval) [98.195.138.52]:44244: 535 Incorrect authentication data (set_id=tps@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 68.83.181.181
country_id: 6252001
description:
Jun  6 18:02:00 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 68.83.181.181 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-06 18:01:48 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:38154: 535 Incorrect authentication data (set_id=rmc)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.96.193
country_id: 3469034
description:
Jun  6 18:01:52 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.96.193 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 68.83.181.181
country_id: 6252001
description:
2026-06-06 18:02:02 dovecot_plain authenticator failed for H=c-68-83-181-181.hsd1.pa.comcast.net (sheol) [68.83.181.181]:43988: 535 Incorrect authentication data (set_id=tps@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.184.180.205
country_id: 3469034
description:
Jun  6 18:02:24 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.184.180.205 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 98.195.138.52
country_id: 6252001
description:
Jun  6 18:01:54 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 98.195.138.52 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.69.88
country_id: 6252001
description:
[2026-06-06 18:02:06 +0000] info [cpaneld] 82.40.69.88 - sprocaadmin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.181.92.241
country_id: 2921044
domain: soena.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/soena.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 65.111.22.206
country_id: 2635167
domain: soeurndetogo.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/soeurndetogo.com/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.213.158.158
country_id: 6252001
description:
[2026-06-06 18:04:48 +0000] info [cpaneld] 129.213.158.158 - ingertgsarl "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 82.165.129.145
country_id: 3017382
description:
Jun  6 18:05:15 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 82.165.129.145 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 82.165.129.145
country_id: 3017382
description:
2026-06-06 18:05:17 dovecot_plain authenticator failed for H=ip82-165-129-145.pbiaas.com [82.165.129.145]:52366: 535 Incorrect authentication data (set_id=crepsad)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.113.112.14
country_id: 1269750
description:
Jun  6 18:05:33 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.113.112.14 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.113.112.14
country_id: 1269750
description:
Jun  6 18:05:47 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.113.112.14 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 138.122.43.59
country_id: 3469034
description:
Jun  6 18:05:53 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 138.122.43.59 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 85.121.183.197
country_id: 798549
description:
[2026-06-06 18:06:22 +0000] info [whostmgrd] 85.121.183.197 - netmastersarl "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.119.44
country_id: 6252001
description:
[2026-06-06 18:08:10 +0000] info [whostmgrd] 82.40.119.44 - masfloy "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.139
country_id: 130758
description:
Jun  6 18:08:33 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.139 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-06 18:08:35 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:21734: 535 Incorrect authentication data (set_id=engin)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.26.69
country_id: 2635167
domain: matosshop.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/matosshop.tg/robots.txt HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 113.78.6.43
country_id: 1814991
description:
2026-06-06 18:10:32 H=([113.78.6.43]) [113.78.6.43]:42907 F=<John@4452.com> rejected RCPT <visite@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 83.143.30.67
country_id: 933860
description:
Jun  6 18:12:32 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 83.143.30.67 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.79.166.101
country_id: 1562822
description:
2026-06-06 18:12:37 dovecot_login authenticator failed for H=([49.124.146.40]) [27.79.166.101]:48989: 535 Incorrect authentication data (set_id=info@soena.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.1.224.45
country_id: 3865483
description:
Jun  6 18:12:55 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.1.224.45 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 206.62.136.109
country_id: 3686110
description:
Jun  6 18:13:00 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 206.62.136.109 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 206.62.136.109
country_id: 3686110
description:
2026-06-06 18:13:02 dovecot_login authenticator failed for H=([149.54.62.210]) [206.62.136.109]:42474: 535 Incorrect authentication data (set_id=info@soena.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 89.198.17.240
country_id: 130758
description:
2026-06-06 18:14:13 H=([89.198.17.240]) [89.198.17.240]:29887 F=<John@4452.com> rejected RCPT <contact@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.19.187.70
country_id: 3469034
description:
[2026-06-06 18:15:03 +0000] info [whostmgrd] 187.19.187.70 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.139
country_id: 130758
description:
Jun  6 18:15:05 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.139 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.200.124.39
country_id: 6252001
description:
[2026-06-06 18:15:06 +0000] info [whostmgrd] 68.200.124.39 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-06 18:15:07 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:63411: 535 Incorrect authentication data (set_id=fsm)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.111.157.139
country_id: 6252001
description:
[2026-06-06 18:19:27 +0000] info [cpaneld] 172.111.157.139 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.139
country_id: 130758
description:
Jun  6 18:21:49 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.139 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-06 18:21:51 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:58746: 535 Incorrect authentication data (set_id=psicologia)


plugin: modsec
rule: 77277976
name: IM360 WAF: XMLRPC getUsersBlogs RBL infectors
abuser: 104.207.36.212
country_id: 6252001
domain: civilemagazine.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL infectors||Username:pIXVf74h8#tW.civilemagazine.tg||Method:wp.getUsersBlogs


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.3.40.64
country_id: 3469034
domain: www.brasseriesnb.snb.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.brasseriesnb.snb.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.139
country_id: 130758
description:
Jun  6 18:28:38 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.139 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-06 18:28:40 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:56275: 535 Incorrect authentication data (set_id=checkout)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.111.157.139
country_id: 6252001
description:
[2026-06-06 18:29:01 +0000] info [cpaneld] 172.111.157.139 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 20.193.129.98
country_id: 1269750
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:18-27.20.193.129.98||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.25.50.11
country_id: 3932488
description:
[2026-06-06 18:29:28 +0000] info [whostmgrd] 38.25.50.11 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.3.53.14
country_id: 3469034
domain: www.in.crepsad.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.in.crepsad.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.139
country_id: 130758
description:
Jun  6 18:35:10 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.139 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-06 18:35:12 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:31136: 535 Incorrect authentication data (set_id=natalija)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 216.26.243.22
country_id: 2635167
domain: www.snbtogo.snb.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.snbtogo.snb.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 104.207.55.195
country_id: 2921044
domain: www.pnlstogo.pnls.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.pnlstogo.pnls.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 104.207.59.188
country_id: 6251999
domain: www.sigm.cadastreminier.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.sigm.cadastreminier.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 5.125.40.66
country_id: 130758
description:
2026-06-06 18:39:44 H=([5.125.40.66]) [5.125.40.66]:5482 F=<John@4452.com> rejected RCPT <reseaux@soena.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 193.46.192.20
country_id: 2510769
description:
2026-06-06 18:41:31 dovecot_login authenticator failed for H=([72.207.113.126]) [193.46.192.20]:59534: 535 Incorrect authentication data (set_id=admin@soena.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-06 18:42:01 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:57143: 535 Incorrect authentication data (set_id=malotedigital)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.139
country_id: 130758
description:
Jun  6 18:41:59 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.139 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.28.158.123
country_id: 6252001
description:
2026-06-06 18:43:22 dovecot_login authenticator failed for H=(inger.tg) [104.28.158.123]:30898: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 94.20.234.161
country_id: 587116
description:
Jun  6 18:44:52 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 94.20.234.161 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.20.234.161
country_id: 587116
description:
2026-06-06 18:44:54 dovecot_login authenticator failed for H=(host-45-145-203-68.mywic.eu) [94.20.234.161]:37971: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 176.111.152.79
country_id: 798544
description:
2026-06-06 18:45:20 dovecot_login authenticator failed for H=([111.36.152.14]) [176.111.152.79]:51325: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 197.155.225.93
country_id: 878675
description:
2026-06-06 18:45:38 dovecot_login authenticator failed for H=(173-9-42-13-NewEngland.hfc.comcastbusiness.net) [197.155.225.93]:45416: 535 Incorrect authentication data (set_id=j.delbegue@tps.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 197.155.225.93
country_id: 878675
description:
Jun  6 18:45:36 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 197.155.225.93 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 13.220.3.185
country_id: 6252001
description:
2026-06-06 18:46:06 dovecot_plain authenticator failed for H=ec2-13-220-3-185.compute-1.amazonaws.com (EC2AMAZ-HH6R947.ec2.internal) [13.220.3.185]:60381: 535 Incorrect authentication data (set_id=dassoumanou@mibservices.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 133.207.151.96
country_id: 1861060
description:
[2026-06-06 18:46:41 +0000] info [whostmgrd] 133.207.151.96 - sprocaadmin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 104.207.43.174
country_id: 6252001
domain: zephyr.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/zephyr.tg/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.139
country_id: 130758
description:
Jun  6 18:48:32 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.139 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-06 18:48:34 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:14389: 535 Incorrect authentication data (set_id=walid)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.138
country_id: 1880251
description:
47.128.96.138 - - [06/Jun/2026:18:49:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6972006&pdata=https%253A%252F%252Fchuso.tg%252Fservice_chuso%252Fpharmacie%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780771752 HTTP/2.0" 302 0 chuso.tg "https://chuso.tg/service_chuso/pharmacie/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.138


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.163
country_id: 3469034
description:
Jun  6 18:50:36 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.163 has been locked due to Imunify RBL


plugin: modsec
rule: 77142201
name: IM360 WAF: Possible enumeration of sensitive data (dirb)
abuser: 20.203.153.53
country_id: 2658434
domain: 154.70.82.246
description:
IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||RSV:8.14||T:APACHE||MV:.env.swp||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.234
country_id: 3469034
description:
Jun  6 18:50:14 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.234 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 36.68.55.122
country_id: 1643084
description:
[2026-06-06 18:51:39 +0000] info [whostmgrd] 36.68.55.122 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.163
country_id: 3469034
description:
Jun  6 18:50:51 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.163 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 38.86.221.125
country_id: 1643084
description:
2026-06-06 18:52:15 dovecot_plain authenticator failed for H=(MehdyH4.mtm-router) [38.86.221.125]:56147: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 111.61.176.243
country_id: 1814991
description:
Jun  6 18:52:49 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 111.61.176.243 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.61.176.243
country_id: 1814991
description:
2026-06-06 18:52:51 dovecot_login authenticator failed for H=([111.61.176.243]) [111.61.176.243]:31048: 535 Incorrect authentication data (set_id=info@togosem.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.50.206.188
country_id: 2510769
description:
[2026-06-06 18:54:31 +0000] info [whostmgrd] 185.50.206.188 - ingertgsarl "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.139
country_id: 130758
description:
Jun  6 18:55:31 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.139 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 54.159.211.126
country_id: 6252001
description:
[2026-06-06 18:55:25 +0000] info [cpaneld] 54.159.211.126 - heroes "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user heroes (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-06 18:55:33 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:23363: 535 Incorrect authentication data (set_id=rimma)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.136.179
country_id: 3469034
description:
Jun  6 18:55:58 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.136.179 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.59.160.96
country_id: 1643084
description:
[2026-06-06 18:56:41 +0000] info [cpaneld] 103.59.160.96 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77277976
name: IM360 WAF: XMLRPC getUsersBlogs RBL infectors
abuser: 104.207.43.182
country_id: 6252001
domain: tchambainvest.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL infectors||Username:uOo0Xquvr$xl.tchambainvest.tg||Method:wp.getUsersBlogs


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 120.229.66.41
country_id: 1814991
description:
2026-06-06 18:56:07 H=([120.229.66.41]) [120.229.66.41]:13651 F=<John@4452.com> rejected RCPT <home@white-ways.com>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.45.34.97
country_id: 357994
description:
[2026-06-06 18:56:58 +0000] info [whostmgrd] 197.45.34.97 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 196.75.174.197
country_id: 2542007
description:
Jun  6 18:59:51 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 196.75.174.197 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.75.174.197
country_id: 2542007
description:
2026-06-06 18:59:53 dovecot_plain authenticator failed for H=(3rb32wx55p694n3n2buo) [196.75.174.197]:54847: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.203.52.22
country_id: 2963597
description:
Jun  6 19:03:41 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.203.52.22 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.226.114.192
country_id: 3057568
description:
Jun  6 19:03:24 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.226.114.192 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-06 19:03:46 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:40668: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.211.4.211
country_id: 2300660
description:
Jun  6 19:04:42 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.211.4.211 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.203.52.22
country_id: 2963597
description:
Jun  6 19:03:48 ns5 auth[2764885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.203.52.22 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.107.237
country_id: 6252001
description:
[2026-06-06 19:04:05 +0000] info [whostmgrd] 82.40.107.237 - netmast "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.211.4.211
country_id: 2300660
description:
Jun  6 19:04:49 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.211.4.211 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 217.26.179.91
country_id: 3175395
description:
Jun  6 19:04:59 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 217.26.179.91 has been locked due to Imunify RBL


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 65.108.232.153
country_id: 660013
domain: lepoint-actu.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.14||T:APACHE||MV:/wp-json/wp/v2/users?per_page=100&_fields=id,slug||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.70
country_id: 3469034
description:
Jun  6 19:09:11 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.70 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 20.193.129.98
country_id: 1269750
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-09.20.193.129.98||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.59.160.96
country_id: 1643084
description:
[2026-06-06 19:10:43 +0000] info [cpaneld] 103.59.160.96 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 196.179.7.81
country_id: 2464461
description:
Jun  6 19:14:34 ns5 pure-ftpd[3029105]: (?@196.179.7.81) [WARNING] Authentication failed for user [masfloy]


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 84.247.178.42
country_id: 3017382
domain: mail.sthandling-aero.tg
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.14||T:APACHE||MV:/images/cloud.php||SC:/var/www/html/images||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 43.173.73.78
country_id: 6252001
description:
43.173.73.78 - - [06/Jun/2026:19:21:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10184393&pdata=https%253A%252F%252Flaunetogo.tg%252Ftogo-laccessibilite-a-linternet-mobile-un-atout-pour-le-developpement%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780773679 HTTP/2.0" 302 0 launetogo.tg "https://launetogo.tg/togo-laccessibilite-a-linternet-mobile-un-atout-pour-le-developpement/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.173.73.78


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 20.193.129.98
country_id: 1269750
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-22.20.193.129.98||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.25.209.202
country_id: 1643084
description:
2026-06-06 19:25:13 dovecot_plain authenticator failed for H=(dgdn-togo.tg) [103.25.209.202]:42574: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 109.207.35.178
country_id: 6290252
description:
Jun  6 19:26:30 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 109.207.35.178 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.18.166.107
country_id: 1269750
description:
Jun  6 19:26:11 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.18.166.107 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 79.137.171.23
country_id: 1522867
description:
2026-06-06 19:28:19 H=([0.0.0.0]) [79.137.171.23]:29070 F=<John@4452.com> rejected RCPT <info@cndh-togo.org>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.216.215.213
country_id: 933860
description:
Jun  6 19:29:28 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.216.215.213 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.170.46
country_id: 3175395
description:
Jun  6 19:29:02 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.170.46 has been locked due to Imunify RBL


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 84.247.178.42
country_id: 3017382
domain: soenatechno.soena.tg
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.14||T:APACHE||MV:/images/cloud.php||SC:/home/expirefreenetmas/public_html/images||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.173.64.38
country_id: 298795
description:
[2026-06-06 19:34:04 +0000] info [whostmgrd] 78.173.64.38 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 181.192.106.240
country_id: 3469034
description:
Jun  6 19:34:31 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 181.192.106.240 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 85.113.15.146
country_id: 1527747
description:
2026-06-06 19:34:35 H=([85.113.15.146]) [85.113.15.146]:50581 F=<John@4452.com> rejected RCPT <egnassingbe@golfe3.mairie.tg>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.101.160
country_id: 3865483
description:
Jun  6 19:34:54 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.101.160 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 128.185.219.54
country_id: 1269750
description:
Jun  6 19:35:48 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 128.185.219.54 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 128.185.219.54
country_id: 1269750
description:
2026-06-06 19:35:50 dovecot_login authenticator failed for H=(123202225098.ctinets.com) [128.185.219.54]:39518: 535 Incorrect authentication data (set_id=i.sy@ucao-uut.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.71.45.143
country_id: 953987
description:
[2026-06-06 19:35:58 +0000] info [whostmgrd] 41.71.45.143 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 125.167.51.106
country_id: 1643084
description:
[2026-06-06 19:36:53 +0000] info [whostmgrd] 125.167.51.106 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 20.193.129.98
country_id: 1269750
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-38.20.193.129.98||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:19-39.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Get to Your Lucky Break Funds vamvozmviigr.blogspot.hk M4||Email:teresathabella@fmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.58.231.139
country_id: 357994
description:
[2026-06-06 19:39:00 +0000] info [whostmgrd] 197.58.231.139 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.233.76.150
country_id: 2921044
description:
[2026-06-06 19:41:13 +0000] info [cpaneld] 167.233.76.150 - AWADI "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user AWADI (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.197.8.253
country_id: 3175395
description:
Jun  6 19:41:33 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.197.8.253 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 85.113.15.146
country_id: 1527747
description:
2026-06-06 19:42:32 H=([85.113.15.146]) [85.113.15.146]:49700 F=<John@4452.com> rejected RCPT <egnassingbe@golfe3.mairie.tg>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 91.234.138.58
country_id: 690791
description:
Jun  6 19:41:54 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 91.234.138.58 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.85.26
country_id: 6252001
description:
[2026-06-06 19:42:12 +0000] info [cpaneld] 82.40.85.26 - admin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.168.67.138
country_id: 6252001
description:
[2026-06-06 19:45:15 +0000] info [cpaneld] 103.168.67.138 - czqxxxnu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User czqxxxnu has their account suspended. Login blocked.


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 212.175.55.5
country_id: 298795
description:
2026-06-06 19:45:32 dovecot_plain authenticator failed for H=(dgdn-togo.tg) [212.175.55.5]:37177: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.180
country_id: 1880251
description:
47.128.96.180 - - [06/Jun/2026:19:47:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7181468&pdata=https%253A%252F%252Fca-togo.org%252Fimp%252Fenglish%252Findex1.php%253FpageID%253D7&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780775259 HTTP/2.0" 302 0 ca-togo.org "https://ca-togo.org/imp/english/index1.php?pageID=7" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.180


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 20.193.129.98
country_id: 1269750
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-47.20.193.129.98||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.0.93
country_id: 2300660
description:
Jun  6 19:53:43 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.0.93 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.8
country_id: 6252001
description:
205.169.39.8 - - [06/Jun/2026:19:53:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9749659&pdata=http%253A%252F%252Fwebmail.moodle.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780775626 HTTP/1.1" 302 0 webmail.moodle.free.netmaster.tg "http://webmail.moodle.free.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.8


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.0
country_id: 6252001
description:
205.169.39.0 - - [06/Jun/2026:19:53:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10184292&pdata=http%253A%252F%252Fcpcontacts.moodle.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780775626 HTTP/1.1" 302 0 cpcontacts.moodle.free.netmaster.tg "http://cpcontacts.moodle.free.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.28
country_id: 6252001
description:
205.169.39.28 - - [06/Jun/2026:19:53:52 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10252394&pdata=http%253A%252F%252Fmail.moodle.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780775626 HTTP/1.1" 302 0 mail.moodle.free.netmaster.tg "http://mail.moodle.free.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.28


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.139.0.93
country_id: 2300660
description:
Jun  6 19:53:51 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.139.0.93 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.27
country_id: 6252001
description:
205.169.39.27 - - [06/Jun/2026:19:53:52 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6789782&pdata=http%253A%252F%252Fautodiscover.moodle.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780775626 HTTP/1.1" 302 0 autodiscover.moodle.free.netmaster.tg "http://autodiscover.moodle.free.netmaster.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.27


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 109.207.35.191
country_id: 6290252
description:
Jun  6 19:53:52 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 109.207.35.191 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 41.216.215.154
country_id: 933860
description:
Jun  6 19:54:14 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 41.216.215.154 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.81.51
country_id: 6252001
description:
[2026-06-06 19:54:44 +0000] info [whostmgrd] 82.40.81.51 - anadebfreenetmas "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.85.223
country_id: 6252001
description:
[2026-06-06 19:55:35 +0000] info [whostmgrd] 82.40.85.223 - Turblote "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 5.127.99.233
country_id: 130758
description:
2026-06-06 19:56:02 H=([5.127.99.233]) [5.127.99.233]:15033 F=<John@4452.com> rejected RCPT <contact@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 5.127.99.233
country_id: 130758
description:
2026-06-06 19:57:56 H=([5.127.99.233]) [5.127.99.233]:15034 F=<John@4452.com> rejected RCPT <contact@cloud-et-racks.tg>: Sender verify failed


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 20.193.129.98
country_id: 1269750
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-59.20.193.129.98||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 54.159.211.126
country_id: 6252001
description:
[2026-06-06 19:58:54 +0000] info [cpaneld] 54.159.211.126 - arsetg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 170.106.180.246
country_id: 6252001
domain: matosshop.tg
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/index.php?add-to-cart=1535||QS:add-to-cart=1535||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Find Your Chance Money bonotdamvam.blogspot.ch 0q||Email:charmanh1@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:20-03.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.3.49.212
country_id: 6252001
description:
[2026-06-06 20:04:17 +0000] info [cpaneld] 45.3.49.212 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 83.110.99.152
country_id: 290557
description:
[2026-06-06 20:05:07 +0000] info [whostmgrd] 83.110.99.152 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 20.193.129.98
country_id: 1269750
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:20-06.20.193.129.98||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 85.19.195.12
country_id: 3144096
description:
Jun  6 20:08:47 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 85.19.195.12 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.95.167
country_id: 6252001
description:
[2026-06-06 20:08:01 +0000] info [whostmgrd] 82.40.95.167 - c1565738c "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 95.86.42.129
country_id: 831053
description:
95.86.42.129 - - [06/Jun/2026:20:09:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10340505&pdata=https%253A%252F%252Feducplusmedia.tg%252F2025%252F05%252F26%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780776583 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/2025/05/26/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.5482.1074 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:95.86.42.129


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 85.19.195.12
country_id: 3144096
description:
2026-06-06 20:08:49 dovecot_login authenticator failed for H=(85-19-195-12.telia-isp.no) [85.19.195.12]:49322: 535 Incorrect authentication data (set_id=no-reply@togosem.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 76.132.238.43
country_id: 6252001
description:
2026-06-06 20:09:05 dovecot_login authenticator failed for H=c-76-132-238-43.hsd1.ca.comcast.net [76.132.238.43]:54498: 535 Incorrect authentication data (set_id=no-reply@togosem.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.144.243.93
country_id: 2542007
description:
2026-06-06 20:09:47 dovecot_login authenticator failed for H=([154.144.243.93]) [154.144.243.93]:35536: 535 Incorrect authentication data (set_id=no-reply@togosem.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 76.132.238.43
country_id: 6252001
description:
Jun  6 20:09:03 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 76.132.238.43 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.29.185.162
country_id: 1643084
description:
2026-06-06 20:09:14 dovecot_login authenticator failed for H=(ip-103-29-185-162.pascalwave.com) [103.29.185.162]:55434: 535 Incorrect authentication data (set_id=no-reply)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 222.120.176.6
country_id: 1835841
description:
Jun  6 20:10:23 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 222.120.176.6 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 222.120.176.6
country_id: 1835841
description:
2026-06-06 20:10:25 dovecot_login authenticator failed for H=([222.120.176.6]) [222.120.176.6]:53882: 535 Incorrect authentication data (set_id=no-reply)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 175.206.113.91
country_id: 1835841
description:
2026-06-06 20:10:23 dovecot_login authenticator failed for H=([175.206.113.91]) [175.206.113.91]:35278: 535 Incorrect authentication data


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 1.212.225.99
country_id: 1835841
description:
Jun  6 20:10:50 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 1.212.225.99 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 1.212.225.99
country_id: 1835841
description:
2026-06-06 20:10:52 dovecot_login authenticator failed for H=([1.212.225.99]) [1.212.225.99]:35168: 535 Incorrect authentication data (set_id=it@togosem.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 69.172.79.198
country_id: 1819730
description:
2026-06-06 20:12:20 dovecot_login authenticator failed for H=69-172-79-198.static.imsbiz.com (173-248-234-145.static.imsbiz.com) [69.172.79.198]:50797: 535 Incorrect authentication data (set_id=no-reply@togosem.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.144.243.93
country_id: 2542007
description:
2026-06-06 20:13:48 dovecot_login authenticator failed for H=([154.144.243.93]) [154.144.243.93]:60372: 535 Incorrect authentication data (set_id=office)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.216.81.126
country_id: 49518
description:
2026-06-06 20:13:39 dovecot_login authenticator failed for H=([196.216.81.126]) [196.216.81.126]:52682: 535 Incorrect authentication data (set_id=office@togosem.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 196.216.81.126
country_id: 49518
description:
Jun  6 20:13:37 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 196.216.81.126 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.208.195.210
country_id: 2017370
description:
Jun  6 20:14:19 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.208.195.210 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 101.13.5.195
country_id: 1668284
description:
2026-06-06 20:14:26 dovecot_login authenticator failed for H=([222.111.148.83]) [101.13.5.195]:34886: 535 Incorrect authentication data (set_id=info@soena.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 58.222.72.182
country_id: 1814991
description:
Jun  6 20:14:36 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 58.222.72.182 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 176.57.76.206
country_id: 2017370
description:
2026-06-06 20:14:38 dovecot_login authenticator failed for H=([70.166.167.33]) [176.57.76.206]:49720: 535 Incorrect authentication data (set_id=info@soena.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.208.195.210
country_id: 2017370
description:
2026-06-06 20:14:21 dovecot_login authenticator failed for H=(45-181-101-92.plugartelecom.net.br) [185.208.195.210]:33671: 535 Incorrect authentication data (set_id=info@soena.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 58.222.72.182
country_id: 1814991
description:
2026-06-06 20:14:38 dovecot_login authenticator failed for H=(distribution05-10gb.1560.la3.switches.zerolag.com) [58.222.72.182]:40488: 535 Incorrect authentication data (set_id=info@soena.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.20.246.106
country_id: 1269750
description:
2026-06-06 20:14:42 dovecot_login authenticator failed for H=([183.171.9.22]) [125.20.246.106]:59444: 535 Incorrect authentication data (set_id=info@soena.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 131.108.162.24
country_id: 3469034
description:
2026-06-06 20:15:02 dovecot_login authenticator failed for H=([182.95.181.214]) [131.108.162.24]:52380: 535 Incorrect authentication data (set_id=info)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 177.207.248.5
country_id: 3469034
description:
2026-06-06 20:15:05 dovecot_login authenticator failed for H=(syn-024-097-253-246.biz.spectrum.com) [177.207.248.5]:36279: 535 Incorrect authentication data (set_id=info)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.207.248.5
country_id: 3469034
description:
Jun  6 20:15:03 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.207.248.5 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.163.44.10
country_id: 1269750
description:
2026-06-06 20:15:06 dovecot_login authenticator failed for H=(syn-071-012-241-225.res.spectrum.com) [103.163.44.10]:42326: 535 Incorrect authentication data (set_id=info)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.175.220.112
country_id: 6252001
description:
[2026-06-06 20:15:46 +0000] info [whostmgrd] 70.175.220.112 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.155.146.33
country_id: 2017370
description:
2026-06-06 20:14:57 dovecot_login authenticator failed for H=([94.16.17.140]) [45.155.146.33]:58684: 535 Incorrect authentication data (set_id=info@soena.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 131.108.162.24
country_id: 3469034
description:
Jun  6 20:15:00 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 131.108.162.24 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.29.185.162
country_id: 1643084
description:
2026-06-06 20:16:39 dovecot_login authenticator failed for H=([103.29.185.162]) [103.29.185.162]:56812: 535 Incorrect authentication data (set_id=contact@togosem.com)


