# incident

plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13362,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-12-at-05.16.35.jpeg\" alt=\"\" class=\"wp-image-13362\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>la commune des lacs 1 vous propose de suivre en direct depuis an\xc3\xa9ho, les matchs de la coupe du monde de football 2026 de la fifa qui se d\xc3\xa9roule du 11 juin au 19 juillet aux etats-unis, au canada et au mexique. les d\xc3\xa9tails \xc3\xa0 lire dans le communiqu\xc3\xa9 ci-dessu. </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:file {\"id\":13363,\"href\":\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/communique-n\xc2\xb0015.pdf\",\"displaypreview\":true} -->\n<div class=\"wp-block-file\"><object class=\"wp-block-file__embed\" data=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/communique-n\xc2\xb0015.pdf\" type=\"application/pdf\" style=\"width:100%;height:600px\" aria-label=\"communique n\xc2\xb0015\"></object><a id=\"wp-block-file--media-236ad831-4986-4973-82b6-a0e68bfab81a\" href=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/communique-n\xc2\xb0015.pdf\">communique n\xc2\xb0015</a><a href=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/communique-n\xc2\xb0015.pdf\" class=\"wp-block-file__button wp-element-button\" download aria-describedby=\"wp-block-file--media-236ad831-4986-4973-82b6-a0e68bfab81a\">t\xc3\xa9l\xc3\xa9charger</a></div>\n<!-- /wp:file -->\n\n<!-- wp:paragraph -->\n<p>cellule communication commune des lacs 1</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>contact : commun</p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.15||T:APACHE||MV:/wp-json/wp/v2/users?context=view&search=lacs1&_locale=user||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.15||T:APACHE||MV:/wp-json/wp/v2/users?context=view&search=lacs1.mairie.tg&_locale=user||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.29.125
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13362,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-12-at-05.16.35.jpeg\" alt=\"\" class=\"wp-image-13362\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>la commune des lacs 1 vous propose de suivre en direct depuis an\xc3\xa9ho, les matchs de la coupe du monde de football 2026 de la fifa qui se d\xc3\xa9roule du 11 juin au 19 juillet aux etats-unis, au canada et au mexique. les d\xc3\xa9tails \xc3\xa0 lire dans le communiqu\xc3\xa9 ci-dessu. </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:file {\"id\":13363,\"href\":\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/communique-n\xc2\xb0015.pdf\",\"displaypreview\":true} -->\n<div class=\"wp-block-file\"><object class=\"wp-block-file__embed\" data=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/communique-n\xc2\xb0015.pdf\" type=\"application/pdf\" style=\"width:100%;height:600px\" aria-label=\"communique n\xc2\xb0015\"></object><a id=\"wp-block-file--media-236ad831-4986-4973-82b6-a0e68bfab81a\" href=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/communique-n\xc2\xb0015.pdf\">communique n\xc2\xb0015</a><a href=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/communique-n\xc2\xb0015.pdf\" class=\"wp-block-file__button wp-element-button\" download aria-describedby=\"wp-block-file--media-236ad831-4986-4973-82b6-a0e68bfab81a\">t\xc3\xa9l\xc3\xa9charger</a></div>\n<!-- /wp:file -->\n\n<!-- wp:paragraph -->\n<p><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 12:24:32 ns5 auth[1356106]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 80.248.70.76
country_id: 2363686
description:
[2026-06-12 12:27:24 +0000] info [cpaneld] 80.248.70.76 NEW cfpjusti:3xnGX1jUOF5_NXnT address=80.248.70.76,app=cpaneld,creator=cfpjusti,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 12:29:04 ns5 auth[1356106]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 12:30:00 ns5 auth[1356106]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 113.190.40.93
country_id: 1562822
description:
2026-06-12 12:32:22 dovecot_plain authenticator failed for H=(dvziix9lvblrq03x105) [113.190.40.93]:47370: 535 Incorrect authentication data (set_id=rappels@mesyscom.com)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-12 12:35:14 +0000] info [webmaild] 196.171.46.177 - justine.botcholi@togointerim.net "GET /cpsess2292507615/3rdparty/roundcube/?_task=mail&_action=compose&_id=7983102169fcb2e3946f3 HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-12 12:35:22 +0000] info [webmaild] 196.171.46.177 - justine.botcholi@togointerim.net "POST /cpsess4099871300/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-12 12:36:22 +0000] info [webmaild] 196.171.46.177 - justine.botcholi@togointerim.net "POST /cpsess4099871300/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-12 12:37:22 +0000] info [webmaild] 196.171.46.177 - justine.botcholi@togointerim.net "POST /cpsess4099871300/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 64.89.161.50
country_id: 6252001
description:
Jun 12 12:40:28 ns5 pure-ftpd[1574210]: (?@64.89.161.50) [WARNING] Authentication failed for user [2641960182]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 77.90.185.41
country_id: 130758
description:
Jun 12 12:40:46 ns5 auth[1356106]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 77.90.185.41 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.92
country_id: 1880251
description:
47.128.121.92 - - [12/Jun/2026:12:40:50 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9595288&pdata=https%253A%252F%252Ftogodailynews.tg%252Fhcte-les-77-delegues-pays-soutillent-pour-mener-a-bien-leur-mission%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781268049 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/hcte-les-77-delegues-pays-soutillent-pour-mener-a-bien-leur-mission/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.92


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 178.175.142.133
country_id: 617790
description:
Jun 12 12:42:30 ns5 pure-ftpd[1575715]: (?@178.175.142.133) [INFO] New connection from 178.175.142.133


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [12/Jun/2026:12:44:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7116740&pdata=http%253A%252F%252Fl4u8i0.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781268249 HTTP/1.1" 302 0 l4u8i0.mediatopnews.tg "http://l4u8i0.mediatopnews.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [12/Jun/2026:12:44:17 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12949101&pdata=http%253A%252F%252Fl4u8i0.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781268255 HTTP/1.1" 302 0 l4u8i0.mediatopnews.tg "http://l4u8i0.mediatopnews.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 205.169.39.7
country_id: 6252001
description:
205.169.39.7 - - [12/Jun/2026:12:44:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7116740%26pdata=http://l4u8i0.mediatopnews.tg%26id=7fa3b767c460b54a2be4d49030b349c7%26ts=1781268249 HTTP/1.1" 404 561 l4u8i0.mediatopnews.tg "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.7


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.57
country_id: 6252001
description:
205.169.39.57 - - [12/Jun/2026:12:44:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9804232&pdata=http%253A%252F%252Fl4u8i0.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781268245 HTTP/1.1" 302 0 l4u8i0.mediatopnews.tg "http://l4u8i0.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.57


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 81.214.73.166
country_id: 298795
domain: tdn.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:12-44.81.214.73.166||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 12:44:38 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>l\xe2\x80\x99ex\xc3\xa9cutif togolais, sous le leadership du pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9, voit grand pour l'avenir de ses citoyens. ce jeudi 11 juin 2026, \xc3\xa0 djamd\xc3\xa8 dans la pr\xc3\xa9fecture de la kozah, faure essozimna gnassingb\xc3\xa9 a ouvert un s\xc3\xa9minaire gouvernemental historique. l'objectif est de tracer la trajectoire strat\xc3\xa9gique du togo pour doubler le niveau de vie moyen et faire ainsi chuter l'incidence de la pauvret\xc3\xa9 sous la barre des 15 % \xc3\xa0 l'horizon 2040.</em></strong><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab leviers strat\xc3\xa9giques pour l\xe2\x80\x99acc\xc3\xa9l\xc3\xa9ration du d\xc3\xa9veloppement du togo \xc2\xbb</em>,tel est le th\xc3\xa8me de cette rencontre de deux jours qui r\xc3\xa9unit ministres et experts de haut niveau, \xc3\xa0 djamd\xc3\xa8, dans la pr\xc3\xa9fecture de la kozah. cette rencontre marque une \xc3\xa9tape d\xc3\xa9cisive pour structurer la future feuille de route gouvernementale 2026-2031.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour propulser le pays vers l'\xc3\xa9mergence, l'ex\xc3\xa9cutif togolais s'appuie sur une planification rigoureuse. ainsi, ce s\xc3\xa9minaire se veut de renforcer la coh\xc3\xa9rence de l'action publique et \xc3\xa0 guider les r\xc3\xa9formes de l'\xc3\x89tat gr\xc3\xa2ce \xc3\xa0 des donn\xc3\xa9es concr\xc3\xa8tes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31217,\"width\":\"711px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/seminaire-djade.jpg\" alt=\"\" class=\"wp-image-31217\" style=\"width:711px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>pour ce faire, les r\xc3\xa9flexions int\xc3\xa8grent notamment, des diagnostics approfondis r\xc3\xa9alis\xc3\xa9s en \xc3\xa9troite collaboration avec la banque mondiale, mais aussi une analyse comparative de mod\xc3\xa8les de r\xc3\xa9ussite internationale ayant op\xc3\xa9r\xc3\xa9 une transformation \xc3\xa9conomique spectaculaire, tels que le vietnam, le cambodge, l'indon\xc3\xa9sie, l'\xc3\x8ele maurice, le br\xc3\xa9sil et la cor\xc3\xa9e du sud.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab une ambition \xc3\xa9lev\xc3\xa9e ne suffit pas. elle doit \xc3\xaatre confront\xc3\xa9e aux conditions r\xc3\xa9elles de mise en \xc5\x93uvre. les exemples internationaux nous seront utiles, mais devront \xc3\xaatre analys\xc3\xa9s avec discernement \xc2\xbb,</em> a martel\xc3\xa9 le pr\xc3\xa9sident du conseil, rappelant la singularit\xc3\xa9 du contexte togolais.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>les leviers de croissance, une approche globale et int\xc3\xa9gr\xc3\xa9e</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>devant les membres du gouvernement, faure gnassingb\xc3\xa9 a insist\xc3\xa9 sur le fait que le d\xc3\xa9veloppement \xc3\xa9conomique ne peut se concevoir sans une meilleure planification, une coordination renforc\xc3\xa9e des actions publiques, une mobilisation accrue des ressources et un suivi rigoureux des r\xc3\xa9sultats. pour transformer la croissance en progr\xc3\xa8s social tangible, les diff\xc3\xa9rents secteurs doivent interagir efficacement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>et dans ce sens, le d\xc3\xa9veloppement rural et l'autosuffisance, priorit\xc3\xa9 pour une modernisation agricole, passent par une interconnectivit\xc3\xa9 totale. le chef de l'ex\xc3\xa9cutif a rappel\xc3\xa9 que cette modernisation agricole n\xc3\xa9cessite imp\xc3\xa9rativement par la s\xc3\xa9curisation fonci\xc3\xa8re et des financements adapt\xc3\xa9s, le d\xc3\xa9ploiement d'infrastructures logistiques (routes, solutions de stockage et d'\xc3\xa9nergie), et le renforcement des comp\xc3\xa9tences locales et de la transformation des produits.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image -->\n<figure class=\"wp-block-image\"><img/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>la stimulation de l'investissement priv\xc3\xa9 est un point non n\xc3\xa9gligeable. ainsi, pour attirer les capitaux et dynamiser le tissu \xc3\xa9conomique, le s\xc3\xa9minaire met l'accent sur la cr\xc3\xa9ation d'un environnement pr\xc3\xa9visible pour les affaires. l'enjeu est de permettre aux pme togolaises de s'int\xc3\xa9grer efficacement dans les cha\xc3\xaenes de valeur mondiales, soutenues par un \xc3\x89tat moderne et performant.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le r\xc3\xb4le central du secteur public ne peut \xc3\xaatre ici r\xc3\xa9affirm\xc3\xa9 comme le moteur de la r\xc3\xa9ussite de ces r\xc3\xa9formes. le pr\xc3\xa9sident du conseil appelle, dans ce sens, \xc3\xa0 une planification stricte, une coordination renforc\xc3\xa9e des minist\xc3\xa8res, une meilleure mobilisation des ressources et un suivi-\xc3\xa9valuation rigoureux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette vision \xc3\xa0 long terme s'articule autour du triptyque politique majeur du gouvernement, notamment, \xc2\xab rassembler, prot\xc3\xa9ger et transformer \xc2\xbb.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que ce s\xc3\xa9minaire \xc3\xa0 djamd\xc3\xa8, qui fait suite \xc3\xa0 une premi\xc3\xa8re session strat\xc3\xa9gique organis\xc3\xa9e \xc3\xa0 lom\xc3\xa9 quelques semaines plus t\xc3\xb4t, pose les jalons d'une \xc3\xa9conomie togolaise plus inclusive, plus r\xc3\xa9siliente et r\xc3\xa9solument tourn\xc3\xa9e vers le bien-\xc3\xaatre de chaque citoyen \xc3\xa0 l'horizon 2040.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mc&nbsp;</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 13.215.102.116
country_id: 1880251
description:
2026-06-12 12:46:33 dovecot_plain authenticator failed for H=ec2-13-215-102-116.ap-southeast-1.compute.amazonaws.com (xhv396ub35pqek85) [13.215.102.116]:42105: 535 Incorrect authentication data (set_id=welldrive@confortis.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>l\xe2\x80\x99ex\xc3\xa9cutif togolais, sous le leadership du pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9, voit grand pour l'avenir de ses citoyens. ce jeudi 11 juin 2026, \xc3\xa0 djamd\xc3\xa8 dans la pr\xc3\xa9fecture de la kozah, faure essozimna gnassingb\xc3\xa9 a ouvert un s\xc3\xa9minaire gouvernemental historique. l'objectif est de tracer la trajectoire strat\xc3\xa9gique du togo pour doubler le niveau de vie moyen et faire ainsi chuter l'incidence de la pauvret\xc3\xa9 sous la barre des 15 % \xc3\xa0 l'horizon 2040.</em></strong><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab leviers strat\xc3\xa9giques pour l\xe2\x80\x99acc\xc3\xa9l\xc3\xa9ration du d\xc3\xa9veloppement du togo \xc2\xbb</em>,tel est le th\xc3\xa8me de cette rencontre de deux jours qui r\xc3\xa9unit ministres et experts de haut niveau, \xc3\xa0 djamd\xc3\xa8, dans la pr\xc3\xa9fecture de la kozah. cette rencontre marque une \xc3\xa9tape d\xc3\xa9cisive pour structurer la future feuille de route gouvernementale 2026-2031.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour propulser le pays vers l'\xc3\xa9mergence, l'ex\xc3\xa9cutif togolais s'appuie sur une planification rigoureuse. ainsi, ce s\xc3\xa9minaire se veut de renforcer la coh\xc3\xa9rence de l'action publique et \xc3\xa0 guider les r\xc3\xa9formes de l'\xc3\x89tat gr\xc3\xa2ce \xc3\xa0 des donn\xc3\xa9es concr\xc3\xa8tes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31217,\"width\":\"711px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/seminaire-djade.jpg\" alt=\"\" class=\"wp-image-31217\" style=\"width:711px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>pour ce faire, les r\xc3\xa9flexions int\xc3\xa8grent notamment, des diagnostics approfondis r\xc3\xa9alis\xc3\xa9s en \xc3\xa9troite collaboration avec la banque mondiale, mais aussi une analyse comparative de mod\xc3\xa8les de r\xc3\xa9ussite internationale ayant op\xc3\xa9r\xc3\xa9 une transformation \xc3\xa9conomique spectaculaire, tels que le vietnam, le cambodge, l'indon\xc3\xa9sie, l'\xc3\x8ele maurice, le br\xc3\xa9sil et la cor\xc3\xa9e du sud.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab une ambition \xc3\xa9lev\xc3\xa9e ne suffit pas. elle doit \xc3\xaatre confront\xc3\xa9e aux conditions r\xc3\xa9elles de mise en \xc5\x93uvre. les exemples internationaux nous seront utiles, mais devront \xc3\xaatre analys\xc3\xa9s avec discernement \xc2\xbb,</em> a martel\xc3\xa9 le pr\xc3\xa9sident du conseil, rappelant la singularit\xc3\xa9 du contexte togolais.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>les leviers de croissance, une approche globale et int\xc3\xa9gr\xc3\xa9e</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>devant les membres du gouvernement, faure gnassingb\xc3\xa9 a insist\xc3\xa9 sur le fait que le d\xc3\xa9veloppement \xc3\xa9conomique ne peut se concevoir sans une meilleure planification, une coordination renforc\xc3\xa9e des actions publiques, une mobilisation accrue des ressources et un suivi rigoureux des r\xc3\xa9sultats. pour transformer la croissance en progr\xc3\xa8s social tangible, les diff\xc3\xa9rents secteurs doivent interagir efficacement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>et dans ce sens, le d\xc3\xa9veloppement rural et l'autosuffisance, priorit\xc3\xa9 pour une modernisation agricole, passent par une interconnectivit\xc3\xa9 totale. le chef de l'ex\xc3\xa9cutif a rappel\xc3\xa9 que cette modernisation agricole n\xc3\xa9cessite imp\xc3\xa9rativement par la s\xc3\xa9curisation fonci\xc3\xa8re et des financements adapt\xc3\xa9s, le d\xc3\xa9ploiement d'infrastructures logistiques (routes, solutions de stockage et d'\xc3\xa9nergie), et le renforcement des comp\xc3\xa9tences locales et de la transformation des produits.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31218,\"width\":\"584px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/da066c4f-332d-4f97-921b-c7f97a0fe1cc.jpg\" alt=\"\" class=\"wp-image-31218\" style=\"width:584px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>la stimulation de l'investissement priv\xc3\xa9 est un point non n\xc3\xa9gligeable. ainsi, pour attirer les capitaux et dynamiser le tissu \xc3\xa9conomique, le s\xc3\xa9minaire met l'accent sur la cr\xc3\xa9ation d'un environnement pr\xc3\xa9visible pour les affaires. l'enjeu est de permettre aux pme togolaises de s'int\xc3\xa9grer efficacement dans les cha\xc3\xaenes de valeur mondiales, soutenues par un \xc3\x89tat moderne et performant.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le r\xc3\xb4le central du secteur public ne peut \xc3\xaatre ici r\xc3\xa9affirm\xc3\xa9 comme le moteur de la r\xc3\xa9ussite de ces r\xc3\xa9formes. le pr\xc3\xa9sident du conseil appelle, dans ce sens, \xc3\xa0 une planification stricte, une coordination renforc\xc3\xa9e des minist\xc3\xa8res, une meilleure mobilisation des ressources et un suivi-\xc3\xa9valuation rigoureux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette vision \xc3\xa0 long terme s'articule autour du triptyque politique majeur du gouvernement, notamment, \xc2\xab rassembler, prot\xc3\xa9ger et transformer \xc2\xbb.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que ce s\xc3\xa9minaire \xc3\xa0 djamd\xc3\xa8, qui fait suite \xc3\xa0 une premi\xc3\xa8re session strat\xc3\xa9gique organis\xc3\xa9e \xc3\xa0 lom\xc3\xa9 quelques semaines plus t\xc3\xb4t, pose les jalons d'une \xc3\xa9conomie togolaise plus inclusive, plus r\xc3\xa9siliente et r\xc3\xa9solument tourn\xc3\xa9e vers le bien-\xc3\xaatre de chaque citoyen \xc3\xa0 l'horizon 2040.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mc&nbsp;</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.38.17.57
country_id: 6252001
description:
[2026-06-12 12:47:52 +0000] info [cpaneld] 45.38.17.57 - BEWELL "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user BEWELL (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 79.108.218.58
country_id: 1562822
description:
Jun 12 12:48:00 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 79.108.218.58 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>l\xe2\x80\x99ex\xc3\xa9cutif togolais, sous le leadership du pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9, voit grand pour l'avenir de ses citoyens. ce jeudi 11 juin 2026, \xc3\xa0 djamd\xc3\xa8 dans la pr\xc3\xa9fecture de la kozah, faure essozimna gnassingb\xc3\xa9 a ouvert un s\xc3\xa9minaire gouvernemental historique. l'objectif est de tracer la trajectoire strat\xc3\xa9gique du togo pour doubler le niveau de vie moyen et faire ainsi chuter l'incidence de la pauvret\xc3\xa9 sous la barre des 15 % \xc3\xa0 l'horizon 2040.</em></strong><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab leviers strat\xc3\xa9giques pour l\xe2\x80\x99acc\xc3\xa9l\xc3\xa9ration du d\xc3\xa9veloppement du togo \xc2\xbb</em>,tel est le th\xc3\xa8me de cette rencontre de deux jours qui r\xc3\xa9unit ministres et experts de haut niveau, \xc3\xa0 djamd\xc3\xa8, dans la pr\xc3\xa9fecture de la kozah. cette rencontre marque une \xc3\xa9tape d\xc3\xa9cisive pour structurer la future feuille de route gouvernementale 2026-2031.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour propulser le pays vers l'\xc3\xa9mergence, l'ex\xc3\xa9cutif togolais s'appuie sur une planification rigoureuse. ainsi, ce s\xc3\xa9minaire se veut de renforcer la coh\xc3\xa9rence de l'action publique et \xc3\xa0 guider les r\xc3\xa9formes de l'\xc3\x89tat gr\xc3\xa2ce \xc3\xa0 des donn\xc3\xa9es concr\xc3\xa8tes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31217,\"width\":\"711px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/seminaire-djade.jpg\" alt=\"\" class=\"wp-image-31217\" style=\"width:711px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>pour ce faire, les r\xc3\xa9flexions int\xc3\xa8grent notamment, des diagnostics approfondis r\xc3\xa9alis\xc3\xa9s en \xc3\xa9troite collaboration avec la banque mondiale, mais aussi une analyse comparative de mod\xc3\xa8les de r\xc3\xa9ussite internationale ayant op\xc3\xa9r\xc3\xa9 une transformation \xc3\xa9conomique spectaculaire, tels que le vietnam, le cambodge, l'indon\xc3\xa9sie, l'\xc3\x8ele maurice, le br\xc3\xa9sil et la cor\xc3\xa9e du sud.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab une ambition \xc3\xa9lev\xc3\xa9e ne suffit pas. elle doit \xc3\xaatre confront\xc3\xa9e aux conditions r\xc3\xa9elles de mise en \xc5\x93uvre. les exemples internationaux nous seront utiles, mais devront \xc3\xaatre analys\xc3\xa9s avec discernement \xc2\xbb,</em> a martel\xc3\xa9 le pr\xc3\xa9sident du conseil, rappelant la singularit\xc3\xa9 du contexte togolais.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>les leviers de croissance, une approche globale et int\xc3\xa9gr\xc3\xa9e</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>devant les membres du gouvernement, faure gnassingb\xc3\xa9 a insist\xc3\xa9 sur le fait que le d\xc3\xa9veloppement \xc3\xa9conomique ne peut se concevoir sans une meilleure planification, une coordination renforc\xc3\xa9e des actions publiques, une mobilisation accrue des ressources et un suivi rigoureux des r\xc3\xa9sultats. pour transformer la croissance en progr\xc3\xa8s social tangible, les diff\xc3\xa9rents secteurs doivent interagir efficacement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31218,\"width\":\"584px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/da066c4f-332d-4f97-921b-c7f97a0fe1cc.jpg\" alt=\"\" class=\"wp-image-31218\" style=\"width:584px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>et dans ce sens, le d\xc3\xa9veloppement rural et l'autosuffisance, priorit\xc3\xa9 pour une modernisation agricole, passent par une interconnectivit\xc3\xa9 totale. le chef de l'ex\xc3\xa9cutif a rappel\xc3\xa9 que cette modernisation agricole n\xc3\xa9cessite imp\xc3\xa9rativement par la s\xc3\xa9curisation fonci\xc3\xa8re et des financements adapt\xc3\xa9s, le d\xc3\xa9ploiement d'infrastructures logistiques (routes, solutions de stockage et d'\xc3\xa9nergie), et le renforcement des comp\xc3\xa9tences locales et de la transformation des produits.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la stimulation de l'investissement priv\xc3\xa9 est un point non n\xc3\xa9gligeable. ainsi, pour attirer les capitaux et dynamiser le tissu \xc3\xa9conomique, le s\xc3\xa9minaire met l'accent sur la cr\xc3\xa9ation d'un environnement pr\xc3\xa9visible pour les affaires. l'enjeu est de permettre aux pme togolaises de s'int\xc3\xa9grer efficacement dans les cha\xc3\xaenes de valeur mondiales, soutenues par un \xc3\x89tat moderne et performant.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le r\xc3\xb4le central du secteur public ne peut \xc3\xaatre ici r\xc3\xa9affirm\xc3\xa9 comme le moteur de la r\xc3\xa9ussite de ces r\xc3\xa9formes. le pr\xc3\xa9sident du conseil appelle, dans ce sens, \xc3\xa0 une planification stricte, une coordination renforc\xc3\xa9e des minist\xc3\xa8res, une meilleure mobilisation des ressources et un suivi-\xc3\xa9valuation rigoureux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31219,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/b35ad057-2e68-495a-9376-9721a19d9c1a.jpg\" alt=\"\" class=\"wp-image-31219\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>cette vision \xc3\xa0 long terme s'articule autour du triptyque politique majeur du gouvernement, notamment, <em>\xc2\xab rassembler, prot\xc3\xa9ger et transformer \xc2\xbb.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que ce s\xc3\xa9minaire \xc3\xa0 djamd\xc3\xa8, qui fait suite \xc3\xa0 une premi\xc3\xa8re session strat\xc3\xa9gique organis\xc3\xa9e \xc3\xa0 lom\xc3\xa9 quelques semaines plus t\xc3\xb4t, pose les jalons d'une \xc3\xa9conomie togolaise plus inclusive, plus r\xc3\xa9siliente et r\xc3\xa9solument tourn\xc3\xa9e vers le bien-\xc3\xaatre de chaque citoyen \xc3\xa0 l'horizon 2040.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mc&nbsp;</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>l\xe2\x80\x99ex\xc3\xa9cutif togolais, sous le leadership du pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9, voit grand pour l'avenir de ses citoyens. ce jeudi 11 juin 2026, \xc3\xa0 djamd\xc3\xa8 dans la pr\xc3\xa9fecture de la kozah, faure essozimna gnassingb\xc3\xa9 a ouvert un s\xc3\xa9minaire gouvernemental historique. l'objectif est de tracer la trajectoire strat\xc3\xa9gique du togo pour doubler le niveau de vie moyen et faire ainsi chuter l'incidence de la pauvret\xc3\xa9 sous la barre des 15 % \xc3\xa0 l'horizon 2040.</em></strong><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab leviers strat\xc3\xa9giques pour l\xe2\x80\x99acc\xc3\xa9l\xc3\xa9ration du d\xc3\xa9veloppement du togo \xc2\xbb</em>,tel est le th\xc3\xa8me de cette rencontre de deux jours qui r\xc3\xa9unit ministres et experts de haut niveau, \xc3\xa0 djamd\xc3\xa8, dans la pr\xc3\xa9fecture de la kozah. cette rencontre marque une \xc3\xa9tape d\xc3\xa9cisive pour structurer la future feuille de route gouvernementale 2026-2031.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour propulser le pays vers l'\xc3\xa9mergence, l'ex\xc3\xa9cutif togolais s'appuie sur une planification rigoureuse. ainsi, ce s\xc3\xa9minaire se veut de renforcer la coh\xc3\xa9rence de l'action publique et \xc3\xa0 guider les r\xc3\xa9formes de l'\xc3\x89tat gr\xc3\xa2ce \xc3\xa0 des donn\xc3\xa9es concr\xc3\xa8tes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31217,\"width\":\"711px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/seminaire-djade.jpg\" alt=\"\" class=\"wp-image-31217\" style=\"width:711px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>pour ce faire, les r\xc3\xa9flexions int\xc3\xa8grent notamment, des diagnostics approfondis r\xc3\xa9alis\xc3\xa9s en \xc3\xa9troite collaboration avec la banque mondiale, mais aussi une analyse comparative de mod\xc3\xa8les de r\xc3\xa9ussite internationale ayant op\xc3\xa9r\xc3\xa9 une transformation \xc3\xa9conomique spectaculaire, tels que le vietnam, le cambodge, l'indon\xc3\xa9sie, l'\xc3\x8ele maurice, le br\xc3\xa9sil et la cor\xc3\xa9e du sud.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab une ambition \xc3\xa9lev\xc3\xa9e ne suffit pas. elle doit \xc3\xaatre confront\xc3\xa9e aux conditions r\xc3\xa9elles de mise en \xc5\x93uvre. les exemples internationaux nous seront utiles, mais devront \xc3\xaatre analys\xc3\xa9s avec discernement \xc2\xbb,</em> a martel\xc3\xa9 le pr\xc3\xa9sident du conseil, rappelant la singularit\xc3\xa9 du contexte togolais.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>les leviers de croissance, une approche globale et int\xc3\xa9gr\xc3\xa9e</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>devant les membres du gouvernement, faure gnassingb\xc3\xa9 a insist\xc3\xa9 sur le fait que le d\xc3\xa9veloppement \xc3\xa9conomique ne peut se concevoir sans une meilleure planification, une coordination renforc\xc3\xa9e des actions publiques, une mobilisation accrue des ressources et un suivi rigoureux des r\xc3\xa9sultats. pour transformer la croissance en progr\xc3\xa8s social tangible, les diff\xc3\xa9rents secteurs doivent interagir efficacement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31218,\"width\":\"584px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/da066c4f-332d-4f97-921b-c7f97a0fe1cc.jpg\" alt=\"\" class=\"wp-image-31218\" style=\"width:584px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>et dans ce sens, le d\xc3\xa9veloppement rural et l'autosuffisance, priorit\xc3\xa9 pour une modernisation agricole, passent par une interconnectivit\xc3\xa9 totale. le chef de l'ex\xc3\xa9cutif a rappel\xc3\xa9 que cette modernisation agricole n\xc3\xa9cessite imp\xc3\xa9rativement par la s\xc3\xa9curisation fonci\xc3\xa8re et des financements adapt\xc3\xa9s, le d\xc3\xa9ploiement d'infrastructures logistiques (routes, solutions de stockage et d'\xc3\xa9nergie), et le renforcement des comp\xc3\xa9tences locales et de la transformation des produits.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la stimulation de l'investissement priv\xc3\xa9 est un point non n\xc3\xa9gligeable. ainsi, pour attirer les capitaux et dynamiser le tissu \xc3\xa9conomique, le s\xc3\xa9minaire met l'accent sur la cr\xc3\xa9ation d'un environnement pr\xc3\xa9visible pour les affaires. l'enjeu est de permettre aux pme togolaises de s'int\xc3\xa9grer efficacement dans les cha\xc3\xaenes de valeur mondiales, soutenues par un \xc3\x89tat moderne et performant.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le r\xc3\xb4le central du secteur public ne peut \xc3\xaatre ici r\xc3\xa9affirm\xc3\xa9 comme le moteur de la r\xc3\xa9ussite de ces r\xc3\xa9formes. le pr\xc3\xa9sident du conseil appelle, dans ce sens, \xc3\xa0 une planification stricte, une coordination renforc\xc3\xa9e des minist\xc3\xa8res, une meilleure mobilisation des ressources et un suivi-\xc3\xa9valuation rigoureux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31219,\"width\":\"679px\",\"height\":\"auto\",\"sizeslug\":\"full\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/b35ad057-2e68-495a-9376-9721a19d9c1a.jpg\" alt=\"\" class=\"wp-image-31219\" style=\"width:679px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>cette vision \xc3\xa0 long terme s'articule autour du triptyque politique majeur du gouvernement, notamment, <em>\xc2\xab rassembler, prot\xc3\xa9ger et transformer \xc2\xbb.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que ce s\xc3\xa9minaire \xc3\xa0 djamd\xc3\xa8, qui fait suite \xc3\xa0 une premi\xc3\xa8re session strat\xc3\xa9gique organis\xc3\xa9e \xc3\xa0 lom\xc3\xa9 quelques semaines plus t\xc3\xb4t, pose les jalons d'une \xc3\xa9conomie togolaise plus inclusive, plus r\xc3\xa9siliente et r\xc3\xa9solument tourn\xc3\xa9e vers le bien-\xc3\xaatre de chaque citoyen \xc3\xa0 l'horizon 2040.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mc&nbsp;</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 118.25.67.181
country_id: 1814991
description:
Jun 12 12:49:35 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 118.25.67.181 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 12:49:53 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.236
country_id: 130758
description:
2026-06-12 12:51:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.236]:59171: 535 Incorrect authentication data (set_id=kafkatemp)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.0.186
country_id: 2363686
description:
[2026-06-12 12:51:38 +0000] info [webmaild] 196.168.0.186 - kawunyo@wages.tg "POST /cpsess0914898893/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.170.45.140] != Current IP Address [196.168.0.186]


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.250.205.62
country_id: 3144096
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:104.250.205.62||TA:104.250.205.62||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.143.244.42
country_id: 2510769
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:104.143.244.42||TA:104.143.244.42||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 154.127.42.52
country_id: 2395170
description:
Jun 12 12:54:26 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 154.127.42.52 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 12:55:29 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.127
country_id: 1880251
description:
47.128.96.127 - - [12/Jun/2026:12:56:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13264793&pdata=https%253A%252F%252Fcfpj.tg%252Ftag%252Fblog%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781268996 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/tag/blog/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.127


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 152.232.101.201
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:152.232.101.201||TA:152.232.101.201||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.73
country_id: 1880251
description:
47.128.121.73 - - [12/Jun/2026:12:58:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10197654&pdata=http%253A%252F%252Ftogodailynews.tg%252Finsertion-professionnelle-des-diplomes-recoivent-des-kits-de-demarrage-dans-le-kloto%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781269134 HTTP/1.1" 302 0 togodailynews.tg "http://togodailynews.tg/insertion-professionnelle-des-diplomes-recoivent-des-kits-de-demarrage-dans-le-kloto/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.73


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.189.196.210
country_id: 3469034
description:
Jun 12 13:00:08 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.189.196.210 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 13:00:09 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.123
country_id: 3469034
description:
Jun 12 13:01:12 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.123 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.189.196.210
country_id: 3469034
description:
Jun 12 13:00:22 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.189.196.210 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 13:00:54 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 94.102.124.87
country_id: 2017370
description:
Jun 12 13:01:49 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 94.102.124.87 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.102.124.87
country_id: 2017370
description:
2026-06-12 13:01:51 dovecot_plain authenticator failed for H=(3ho7p6bjk76qhdzcu42) [94.102.124.87]:53874: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 61.90.30.219
country_id: 1605651
description:
61.90.30.219 - - [12/Jun/2026:13:02:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6791065&pdata=https%253A%252F%252Ftogodailynews.tg%252Fproenergie-un-projet-qui-electrifie-les-villages-et-les-rend-autonomes%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781269320 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/proenergie-un-projet-qui-electrifie-les-villages-et-les-rend-autonomes/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.7346.1471 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:61.90.30.219


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.123
country_id: 3469034
description:
Jun 12 13:01:27 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.123 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.164
country_id: 1880251
description:
47.128.96.164 - - [12/Jun/2026:13:02:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13147239&pdata=https%253A%252F%252Fcfpj.tg%252Fcategory%252Fnon-classe%252F%253F__im-mLcLAlHa%253D3875901866547102545%25252Fpage%25252F3%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F12%25252F%252Fpage%252F12%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781269353 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/category/non-classe/?__im-mLcLAlHa=3875901866547102545%2Fpage%2F3%2F%2Fpage%2F2%2F%2Fpage%2F12%2F%2Fpage%2F12%2F%2Fpage%2F2%2F%2Fpage%2F12%2F%2Fpage%2F3%2F%2Fpage%2F12%2F%2Fpage%2F12%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F12%2F%2Fpage%2F12%2F%2Fpage%2F3%2F%2Fpage%2F12%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F12%2F%2Fpage%2F3%2F%2Fpage%2F12%2F%2Fpage%2F3%2F%2Fpage%2F2%2F%2Fpage%2F12%2F/page/12/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.164


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 79.108.218.58
country_id: 1562822
description:
Jun 12 13:02:55 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 79.108.218.58 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 201.217.97.226
country_id: 3658394
domain: togodailynews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg/protection-sociale-la-crt-confiee-a-justin-tchilabalo-pilante-pour-assurer-la-continuite-des-reformes/ HTTP/1.1||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 201.217.97.226
country_id: 3658394
domain: togodailynews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tghttp/togodailynews.tg/protection-sociale-la-crt-confiee-a-justin-tchilabalo-pilante-pour-assurer-la-continuite-des-reformes/ HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 102.176.253.226
country_id: 2363686
description:
[2026-06-12 13:07:03 +0000] info [webmaild] 102.176.253.226 - presidence@ucao-uut.tg "GET /cpsess7460152667/3rdparty/roundcube/?_task=mail&_caps=pdf%3D1%2Cflash%3D0%2Ctiff%3D0%2Cwebp%3D1%2Cpgpmime%3D0&_uid=5479&_mbox=INBOX&_action=show HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.168.222.250] != Current IP Address [102.176.253.226]


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 171.22.251.242
country_id: 3017382
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:171.22.251.242||TA:171.22.251.242||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 118.25.67.181
country_id: 1814991
description:
Jun 12 13:10:54 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 118.25.67.181 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 13:12:36 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 141.11.17.254
country_id: 1733045
description:
2026-06-12 13:14:09 H=([141.11.17.254]) [141.11.17.254]:62696 F=<sanjayexpprpll@gmail.com> rejected RCPT <info@wellcity.tg>: The mail server could not deliver mail to info@wellcity.tg.  The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 196.171.47.66
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160607||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.108.86.206
country_id: 3469034
description:
Jun 12 13:15:56 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.108.86.206 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.153
country_id: 1880251
description:
47.128.96.153 - - [12/Jun/2026:13:17:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000843&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Foradys-group-recrute%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781270239 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/oradys-group-recrute/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.153


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 79.108.218.58
country_id: 1562822
description:
Jun 12 13:17:48 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 79.108.218.58 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.183.82.70
country_id: 2017370
description:
Jun 12 13:19:24 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.183.82.70 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 13:22:39 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>un tournant majeur s'op\xc3\xa8re pour l'agriculture ouest-africaine. le 11 juin dernier, la giz (coop\xc3\xa9ration allemande) et ses partenaires cl\xc3\xa9s ont officiellement lanc\xc3\xa9 \xc3\xa0 abuja, au nig\xc3\xa9ria, le projet d'envergure mondiale. intitul\xc3\xa9 \xc2\xab organisations paysannes et transformation des syst\xc3\xa8mes agricoles et alimentaires \xc2\xbb (fo hub-giz), ce programme ambitieux port\xc3\xa9 par une synergie unique entre le roppa, l\xe2\x80\x99aoctah et le rejpah-aos, ambitionne de propulser les producteurs locaux au c\xc5\x93ur des d\xc3\xa9cisions politiques et \xc3\xa9conomiques.</em></strong><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le projet fo hub, qui est une initiative internationale de la giz, va se d\xc3\xa9ploier \xc3\xa0 travers des p\xc3\xb4les r\xc3\xa9gionaux en afrique, en asie et en am\xc3\xa9rique latine. con\xc3\xa7u comme une plateforme de coop\xc3\xa9ration et de coordination, il vise \xc3\xa0 structurer et renforcer les capacit\xc3\xa9s des organisations agricoles supranationales. ces derni\xc3\xa8res jouent un r\xc3\xb4le crucial d'interm\xc3\xa9diaires entre les petits exploitants et les d\xc3\xa9cideurs politiques mondiaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>financ\xc3\xa9 dans le cadre de la strat\xc3\xa9gie du bmz (minist\xc3\xa8re allemand de la coop\xc3\xa9ration \xc3\xa9conomique) intitul\xc3\xa9e <em>\xc2\xab vivre sans faim \xe2\x80\x93 transformation des syst\xc3\xa8mes agricoles et alimentaires \xc2\xbb</em>, le projet contribue directement \xc3\xa0 la r\xc3\xa9alisation de plusieurs objectifs de d\xc3\xa9veloppement durable (odd 2, 5, 13, 15, 16 et 17).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"632px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:632px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>les 3 piliers strat\xc3\xa9giques du projet fo hub</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour r\xc3\xa9ussir la transition des syst\xc3\xa8mes alimentaires, l'initiative repose sur trois composantes majeures, \xc3\xa0 savoir&nbsp;: le</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- plaidoyer et influence politique (composante 1)&nbsp;: elle se veut de renforcer les comp\xc3\xa9tences des organisations de la soci\xc3\xa9t\xc3\xa9 civile (osc) pour qu'elles imposent leurs perspectives et solutions dans les processus politiques r\xc3\xa9gionaux et mondiaux&nbsp;;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- \xc3\x89galit\xc3\xa9 des genres et inclusion (composante 2) : autonomiser les agents de changement pour int\xc3\xa9grer efficacement les probl\xc3\xa9matiques de genre de fa\xc3\xa7on structurelle et durable au sein des instances dirigeantes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- protection sociale et agriculture durable (composante 3) : d\xc3\xa9velopper les connaissances des membres des organisations paysannes en mati\xc3\xa8re de s\xc3\xa9curit\xc3\xa9 sociale et vulgariser les pratiques agricoles respectueuses du climat.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que l'int\xc3\xa9gration de solutions digitales et d'approches transformatrices de genre, constitue le fil conducteur de ces trois piliers pour maximiser l'impact sur le terrain.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image -->\n<figure class=\"wp-block-image\"><img alt=\"\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>une synergie ouest-africaine puissante du trio roppa - aoctah - rejpah-aos</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en afrique de l\xe2\x80\x99ouest, la mise en \xc5\x93uvre de fo hub repose sur une alliance strat\xc3\xa9gique et compl\xc3\xa9mentaire entre trois acteurs majeurs de la sous-r\xc3\xa9gion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>d\xe2\x80\x99abord, le r\xc3\xa9seau des organisations paysannes et de producteurs de l'afrique de l'ouest (roppa) est l'organisation fa\xc3\xaeti\xc3\xa8re centrale de ce projet. fo hub va intensifier ses capacit\xc3\xa9s de plaidoyer afin qu\xe2\x80\x99il porte la voix des exploitations familiales aupr\xc3\xa8s des grandes instances. le roppa interviendra notamment sur la politique agricole de la cedeao (ecowap), la politique agricole commune de l'uemoa, et le dialogue continental li\xc3\xa9 au programme global de d\xc3\xa9veloppement agricole de l'afrique <strong>(caadp).</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les priorit\xc3\xa9s d\xc3\xa9fendues incluront l\xe2\x80\x99agro\xc3\xa9cologie, l\xe2\x80\x99assurance et le financement agricoles, ainsi que la r\xc3\xa9silience climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ensuite, l'association ouest-africaine pour le commerce transfrontalier (aoctah), stimulateur du commerce transfrontalier, int\xc3\xa8gre le projet pour fluidifier les \xc3\xa9changes. son r\xc3\xb4le sera de former les organisations agricoles aux r\xc3\xa9glementations commerciales de la cedeao, garantissant un meilleur acc\xc3\xa8s aux march\xc3\xa9s r\xc3\xa9gionaux pour les produits agro-silvo-pastoraux et halieutiques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>enfin, le r\xc3\xa9seau des journalistes pour la promotion des produits agro-silvo-pastoraux et halieutiques en afrique de l\xe2\x80\x99ouest et au sahel (rejpah-aos) devra m\xc3\xa9diatiser les enjeux agricoles. dans ce sens, pour que le plaidoyer soit entendu, il doit \xc3\xaatre visible. les professionnels des m\xc3\xa9dias auront pour mission d\xe2\x80\x99amplifier les campagnes du roppa et de sensibiliser le grand public et les gouvernants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31156,\"width\":\"586px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/cf280d22-5566-4950-b6b8-986b4a8db8fc-724x1024.jpg\" alt=\"\" class=\"wp-image-31156\" style=\"width:586px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>vers des syst\xc3\xa8mes alimentaires r\xc3\xa9silients et connect\xc3\xa9s</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en connectant les r\xc3\xa9alit\xc3\xa9s du terrain aux processus internationaux gr\xc3\xa2ce \xc3\xa0 des donn\xc3\xa9es probantes, le projet fo hub-giz ambitionne de cr\xc3\xa9er des synergies durables, notamment avec d'autres initiatives de la giz comme le <em>fonds d'agrobusiness pour l'afrique</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>avec ce programme, l'afrique de l'ouest se dote aujourd'hui d'un \xc3\xa9cosyst\xc3\xa8me robuste pour nourrir durablement sa population tout en prot\xc3\xa9geant ses producteurs.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>la r\xc3\xa9daction</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.192
country_id: 1880251
description:
47.128.96.192 - - [12/Jun/2026:13:24:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9529754&pdata=https%253A%252F%252Fcfpj.tg%252Fcategory%252Fnon-classe%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781270676 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/category/non-classe/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.192


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>un tournant majeur s'op\xc3\xa8re pour l'agriculture ouest-africaine. le 11 juin dernier, la giz (coop\xc3\xa9ration allemande) et ses partenaires cl\xc3\xa9s ont officiellement lanc\xc3\xa9 \xc3\xa0 abuja, au nig\xc3\xa9ria, le projet d'envergure mondiale. intitul\xc3\xa9 \xc2\xab organisations paysannes et transformation des syst\xc3\xa8mes agricoles et alimentaires \xc2\xbb (fo hub-giz), ce programme ambitieux port\xc3\xa9 par une synergie unique entre le roppa, l\xe2\x80\x99aoctah et le rejpah-aos, ambitionne de propulser les producteurs locaux au c\xc5\x93ur des d\xc3\xa9cisions politiques et \xc3\xa9conomiques.</em></strong><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le projet fo hub, qui est une initiative internationale de la giz, va se d\xc3\xa9ploier \xc3\xa0 travers des p\xc3\xb4les r\xc3\xa9gionaux en afrique, en asie et en am\xc3\xa9rique latine. con\xc3\xa7u comme une plateforme de coop\xc3\xa9ration et de coordination, il vise \xc3\xa0 structurer et renforcer les capacit\xc3\xa9s des organisations agricoles supranationales. ces derni\xc3\xa8res jouent un r\xc3\xb4le crucial d'interm\xc3\xa9diaires entre les petits exploitants et les d\xc3\xa9cideurs politiques mondiaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>financ\xc3\xa9 dans le cadre de la strat\xc3\xa9gie du bmz (minist\xc3\xa8re allemand de la coop\xc3\xa9ration \xc3\xa9conomique) intitul\xc3\xa9e <em>\xc2\xab vivre sans faim \xe2\x80\x93 transformation des syst\xc3\xa8mes agricoles et alimentaires \xc2\xbb</em>, le projet contribue directement \xc3\xa0 la r\xc3\xa9alisation de plusieurs objectifs de d\xc3\xa9veloppement durable (odd 2, 5, 13, 15, 16 et 17).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"632px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:632px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>les 3 piliers strat\xc3\xa9giques du projet fo hub</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour r\xc3\xa9ussir la transition des syst\xc3\xa8mes alimentaires, l'initiative repose sur trois composantes majeures, \xc3\xa0 savoir&nbsp;: le</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- plaidoyer et influence politique (composante 1)&nbsp;: elle se veut de renforcer les comp\xc3\xa9tences des organisations de la soci\xc3\xa9t\xc3\xa9 civile (osc) pour qu'elles imposent leurs perspectives et solutions dans les processus politiques r\xc3\xa9gionaux et mondiaux&nbsp;;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- \xc3\x89galit\xc3\xa9 des genres et inclusion (composante 2) : autonomiser les agents de changement pour int\xc3\xa9grer efficacement les probl\xc3\xa9matiques de genre de fa\xc3\xa7on structurelle et durable au sein des instances dirigeantes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>- protection sociale et agriculture durable (composante 3) : d\xc3\xa9velopper les connaissances des membres des organisations paysannes en mati\xc3\xa8re de s\xc3\xa9curit\xc3\xa9 sociale et vulgariser les pratiques agricoles respectueuses du climat.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que l'int\xc3\xa9gration de solutions digitales et d'approches transformatrices de genre, constitue le fil conducteur de ces trois piliers pour maximiser l'impact sur le terrain.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31006,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31006\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>une synergie ouest-africaine puissante du trio roppa - aoctah - rejpah-aos</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en afrique de l\xe2\x80\x99ouest, la mise en \xc5\x93uvre de fo hub repose sur une alliance strat\xc3\xa9gique et compl\xc3\xa9mentaire entre trois acteurs majeurs de la sous-r\xc3\xa9gion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>d\xe2\x80\x99abord, le r\xc3\xa9seau des organisations paysannes et de producteurs de l'afrique de l'ouest (roppa) est l'organisation fa\xc3\xaeti\xc3\xa8re centrale de ce projet. fo hub va intensifier ses capacit\xc3\xa9s de plaidoyer afin qu\xe2\x80\x99il porte la voix des exploitations familiales aupr\xc3\xa8s des grandes instances. le roppa interviendra notamment sur la politique agricole de la cedeao (ecowap), la politique agricole commune de l'uemoa, et le dialogue continental li\xc3\xa9 au programme global de d\xc3\xa9veloppement agricole de l'afrique <strong>(caadp).</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>les priorit\xc3\xa9s d\xc3\xa9fendues incluront l\xe2\x80\x99agro\xc3\xa9cologie, l\xe2\x80\x99assurance et le financement agricoles, ainsi que la r\xc3\xa9silience climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ensuite, l'association ouest-africaine pour le commerce transfrontalier (aoctah), stimulateur du commerce transfrontalier, int\xc3\xa8gre le projet pour fluidifier les \xc3\xa9changes. son r\xc3\xb4le sera de former les organisations agricoles aux r\xc3\xa9glementations commerciales de la cedeao, garantissant un meilleur acc\xc3\xa8s aux march\xc3\xa9s r\xc3\xa9gionaux pour les produits agro-silvo-pastoraux et halieutiques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>enfin, le r\xc3\xa9seau des journalistes pour la promotion des produits agro-silvo-pastoraux et halieutiques en afrique de l\xe2\x80\x99ouest et au sahel (rejpah-aos) devra m\xc3\xa9diatiser les enjeux agricoles. dans ce sens, pour que le plaidoyer soit entendu, il doit \xc3\xaatre visible. les professionnels des m\xc3\xa9dias auront pour mission d\xe2\x80\x99amplifier les campagnes du roppa et de sensibiliser le grand public et les gouvernants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31156,\"width\":\"586px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/cf280d22-5566-4950-b6b8-986b4a8db8fc-724x1024.jpg\" alt=\"\" class=\"wp-image-31156\" style=\"width:586px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>vers des syst\xc3\xa8mes alimentaires r\xc3\xa9silients et connect\xc3\xa9s</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en connectant les r\xc3\xa9alit\xc3\xa9s du terrain aux processus internationaux gr\xc3\xa2ce \xc3\xa0 des donn\xc3\xa9es probantes, le projet fo hub-giz ambitionne de cr\xc3\xa9er des synergies durables, notamment avec d'autres initiatives de la giz comme le <em>fonds d'agrobusiness pour l'afrique</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>avec ce programme, l'afrique de l'ouest se dote aujourd'hui d'un \xc3\xa9cosyst\xc3\xa8me robuste pour nourrir durablement sa population tout en prot\xc3\xa9geant ses producteurs.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>la r\xc3\xa9daction</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.20
country_id: 1880251
description:
47.128.96.20 - - [12/Jun/2026:13:26:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9870791&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fmadame-cooper-morte%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781270770 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/madame-cooper-morte/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.20


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 13:26:38 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 121.188.233.158
country_id: 1835841
description:
Jun 12 13:26:50 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 121.188.233.158 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.252.222.32
country_id: 3469034
domain: chuso.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:104.252.222.32||TA:104.252.222.32||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.174.125.183
country_id: 3469034
description:
Jun 12 13:27:30 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.174.125.183 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 197.255.198.85
country_id: 2413451
description:
Jun 12 13:27:46 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 197.255.198.85 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 221.165.172.38
country_id: 1835841
description:
Jun 12 13:28:19 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 221.165.172.38 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 43.228.131.114
country_id: 2029969
description:
Jun 12 13:28:34 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 43.228.131.114 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.252.20.145
country_id: 3469034
domain: ekeasarl.com
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:104.252.20.145||TA:104.252.20.145||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.196.31.2
country_id: 1835841
description:
Jun 12 13:29:13 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.196.31.2 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 13:33:02 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 79.108.218.58
country_id: 1562822
description:
Jun 12 13:32:42 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 79.108.218.58 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 13:33:57 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 5.45.95.254
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:13-34.5.45.95.254||RSV:8.15||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.203.56
country_id: 2363686
description:
[2026-06-12 13:40:10 +0000] info [cpaneld] 160.242.203.56 - pnls "GET /cpsess9053465637/frontend/jupiter/index.html?=undefined&login=1&post_login=9400078006463 HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [196.168.204.243] != Current IP Address [160.242.203.56]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 34.201.31.78
country_id: 6252001
description:
2026-06-12 13:41:09 dovecot_plain authenticator failed for H=ec2-34-201-31-78.compute-1.amazonaws.com (EC2AMAZ-PDUUPKU.ec2.internal) [34.201.31.78]:54247: 535 Incorrect authentication data (set_id=dassoumanou@mibservices.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 31.222.12.25
country_id: 798544
description:
Jun 12 13:40:27 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 31.222.12.25 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 209.242.202.106
country_id: 3190538
domain: ekeasarl.com
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:209.242.202.106||TA:209.242.202.106||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.176.253.226
country_id: 2363686
description:
[2026-06-12 13:42:23 +0000] info [webmaild] 102.176.253.226 - dapr@ucao-uut.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 13:42:48 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.153
country_id: 1880251
description:
47.128.96.153 - - [12/Jun/2026:13:42:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131821&pdata=https%253A%252F%252Fcfpj.tg%252Fcategory%252Fnon-classe%252F%253F__im-mLcLAlHa%253D3875901866547102545%25252Fpage%25252F3%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F2%25252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781271767 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/category/non-classe/?__im-mLcLAlHa=3875901866547102545%2Fpage%2F3%2F%2Fpage%2F2%2F%2Fpage%2F12%2F%2Fpage%2F3%2F%2Fpage%2F2%2F%2Fpage%2F3%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F3%2F%2Fpage%2F3%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F3%2F%2Fpage%2F12%2F%2Fpage%2F2%2F" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.153


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.67.155.108
country_id: 298795
description:
Jun 12 13:42:51 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.67.155.108 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 77.90.185.41
country_id: 130758
description:
Jun 12 13:42:50 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 77.90.185.41 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [12/Jun/2026:13:44:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6722972&pdata=https%253A%252F%252Fsia-togo.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781271848 HTTP/2.0" 302 0 sia-togo.tg "https://sia-togo.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 142.147.132.171
country_id: 6252001
domain: caissederetraites.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:142.147.132.171||TA:142.147.132.171||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 46.203.157.175
country_id: 6251999
domain: caissederetraites.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:46.203.157.175||TA:46.203.157.175||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.175.56.149
country_id: 6252001
domain: caissederetraites.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:107.175.56.149||TA:107.175.56.149||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.48.196
country_id: 6252001
domain: caissederetraites.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:104.253.48.196||TA:104.253.48.196||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 13:46:36 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 79.108.218.58
country_id: 1562822
description:
Jun 12 13:47:37 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 79.108.218.58 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.179
country_id: 1880251
description:
47.128.96.179 - - [12/Jun/2026:13:47:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119279&pdata=https%253A%252F%252Fcfpj.tg%252Fpresentation%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781272072 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/presentation/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.179


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 34.201.31.78
country_id: 6252001
description:
2026-06-12 13:49:03 dovecot_plain authenticator failed for H=ec2-34-201-31-78.compute-1.amazonaws.com (EC2AMAZ-PDUUPKU.ec2.internal) [34.201.31.78]:56872: 535 Incorrect authentication data (set_id=stephane@sitewebofficiel.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.79.219.150
country_id: 2395170
description:
[2026-06-12 13:49:16 +0000] info [cpaneld] 41.79.219.150 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.223
country_id: 3469034
description:
Jun 12 13:49:20 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.223 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 165.154.217.204
country_id: 1880251
description:
Jun 12 13:49:28 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 165.154.217.204 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 165.154.217.204
country_id: 1880251
description:
2026-06-12 13:49:30 dovecot_login authenticator failed for H=(ZonPp748) [165.154.217.204]:62140: 535 Incorrect authentication data (set_id=allied)


plugin: ossec
rule: 6070
name: Attempt to upload malware through cPanel file manager
description:
Jun 12 13:50:43 ns5.netmaster.tg cpanel_fileman_hook[1624104]: 0 BAILOUT malware detected when save 'test123Cp.php' in public_html for user ylhgcaui


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - contact@myworkafrica.com [06/12/2026:13:51:18 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: contact@myworkafrica.com


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 165.154.217.204
country_id: 1880251
description:
Jun 12 13:50:21 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 165.154.217.204 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 165.154.217.204
country_id: 1880251
description:
2026-06-12 13:50:23 dovecot_login authenticator failed for H=(JXcb4HM) [165.154.217.204]:52546: 535 Incorrect authentication data (set_id=allied)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 165.154.217.204
country_id: 1880251
description:
2026-06-12 13:51:52 dovecot_login authenticator failed for H=(aPXcUP8) [165.154.217.204]:59291: 535 Incorrect authentication data (set_id=adt-togo)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 165.154.217.204
country_id: 1880251
description:
Jun 12 13:51:23 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 165.154.217.204 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 165.154.217.204
country_id: 1880251
description:
2026-06-12 13:51:25 dovecot_login authenticator failed for H=(aYMiwE89qt) [165.154.217.204]:60411: 535 Incorrect authentication data (set_id=allied)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 165.154.217.204
country_id: 1880251
description:
Jun 12 13:52:27 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 165.154.217.204 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 165.154.217.204
country_id: 1880251
description:
2026-06-12 13:52:29 dovecot_login authenticator failed for H=(uV1LJycI3K) [165.154.217.204]:65164: 535 Incorrect authentication data (set_id=adt-togo)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 165.154.217.204
country_id: 1880251
description:
Jun 12 13:53:21 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 165.154.217.204 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 165.154.217.204
country_id: 1880251
description:
2026-06-12 13:53:23 dovecot_login authenticator failed for H=(AvWx7TILf) [165.154.217.204]:57994: 535 Incorrect authentication data (set_id=allied)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 13:55:10 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 165.154.217.204
country_id: 1880251
description:
Jun 12 13:54:19 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 165.154.217.204 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 165.154.217.204
country_id: 1880251
description:
2026-06-12 13:54:21 dovecot_login authenticator failed for H=(ZEDjCg10) [165.154.217.204]:55601: 535 Incorrect authentication data (set_id=allied)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 165.154.217.204
country_id: 1880251
description:
2026-06-12 13:54:22 dovecot_login authenticator failed for H=(2ldbU9) [165.154.217.204]:59590: 535 Incorrect authentication data (set_id=adt-togo)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 165.154.217.204
country_id: 1880251
description:
Jun 12 13:55:19 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 165.154.217.204 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 13:55:21 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 165.154.217.204
country_id: 1880251
description:
2026-06-12 13:55:21 dovecot_login authenticator failed for H=(cUaXBNMnQ) [165.154.217.204]:54484: 535 Incorrect authentication data (set_id=allied)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.185
country_id: 1880251
description:
47.128.96.185 - - [12/Jun/2026:13:57:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9790570&pdata=https%253A%252F%252Fcfpj.tg%252Fcategory%252Fnon-classe%252F%253F__im-mLcLAlHa%253D3875901866547102545%25252Fpage%25252F3%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F12%25252F%252Fpage%252F12%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781272620 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/category/non-classe/?__im-mLcLAlHa=3875901866547102545%2Fpage%2F3%2F%2Fpage%2F2%2F%2Fpage%2F12%2F%2Fpage%2F12%2F%2Fpage%2F2%2F%2Fpage%2F12%2F%2Fpage%2F3%2F%2Fpage%2F12%2F%2Fpage%2F12%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F12%2F%2Fpage%2F12%2F%2Fpage%2F3%2F%2Fpage%2F12%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F12%2F%2Fpage%2F3%2F%2Fpage%2F12%2F%2Fpage%2F3%2F%2Fpage%2F2%2F%2Fpage%2F12%2F/page/12/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.185


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 13:56:59 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 212.225.210.48
country_id: 2510769
description:
212.225.210.48 - - [12/Jun/2026:13:57:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9671789&pdata=https%253A%252F%252Ftogodailynews.tg%252Felections-aux-usa-faure-gnassingbe-adresse-ses-sinceres-felicitations-a-donald-trump%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781272666 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/elections-aux-usa-faure-gnassingbe-adresse-ses-sinceres-felicitations-a-donald-trump/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3180.1483 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:212.225.210.48


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 13.218.191.102
country_id: 6252001
domain: www.arse.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.0 Safari/537.36||RSV:8.15||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 200.50.232.151
country_id: 3658394
description:
200.50.232.151 - - [12/Jun/2026:13:58:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9659748&pdata=https%253A%252F%252Ftogodailynews.tg%252Fvictoire-tomegah-dogbe-dresse-le-bilan-des-100-jours-de-son-gouvernement%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781272734 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/victoire-tomegah-dogbe-dresse-le-bilan-des-100-jours-de-son-gouvernement/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.8736.1258 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:200.50.232.151


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 182.8.68.207
country_id: 1643084
description:
182.8.68.207 - - [12/Jun/2026:14:00:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6736023&pdata=https%253A%252F%252Ftogodailynews.tg%252Fevolution-de-la-gent-feminine-le-togo-refuse-lautosatisfaction-et-choisit-la-continuite-des-reformes%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781272807 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/evolution-de-la-gent-feminine-le-togo-refuse-lautosatisfaction-et-choisit-la-continuite-des-reformes/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.6230.1488 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:182.8.68.207


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>c\xe2\x80\x99est l\xe2\x80\x99histoire de christian, cadre sup\xc3\xa9rieur tr\xc3\xa8s s\xc3\xa9rieux dans une grande entreprise de la place. christian est le genre d'homme qui porte des costumes sur mesure, ne d\xc3\xa9passe jamais la limite de vitesse et utilise des expressions comme \xc2\xab synergie op\xc3\xa9rationnelle \xc2\xbb ou \xc2\xab \xc3\x80 date \xc2\xbb.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>un jeudi apr\xc3\xa8s-midi, le grand patron envoie un e-mail solennel \xc3\xa0 l\xe2\x80\x99ensemble des <strong>850 employ\xc3\xa9s</strong> de la bo\xc3\xaete pour annoncer une restructuration majeure et la mise en place d'un \xc2\xab plan d'aust\xc3\xa9rit\xc3\xa9 budg\xc3\xa9taire strict \xc2\xbb. en gros : ambiance tendue, finies les d\xc3\xa9penses inutiles, on serre la ceinture.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>christian lit l\xe2\x80\x99e-mail. mais christian a la t\xc3\xaate ailleurs. sa seule obsession du moment, c\xe2\x80\x99est son plan pour le d\xc3\xaener du soir avec ses potes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il veut envoyer un sms \xc3\xa0 sa femme pour lui demander de g\xc3\xa9rer le menu, mais distrait par un coup de fil sur son portable, il d\xc3\xa9cide plut\xc3\xb4t de lui \xc3\xa9crire un mail rapide depuis son ordinateur. il tape fr\xc3\xa9n\xc3\xa9tiquement :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"512px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:512px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab ma ch\xc3\xa9rie, oublie leur plan d'aust\xc3\xa9rit\xc3\xa9 \xc3\xa0 deux balles, ce soir c\xe2\x80\x99est la f\xc3\xaate. s'il te pla\xc3\xaet, passe au resto du coin et prends-nous quatre bons poulets bicyclette bien brais\xc3\xa9s, beaucoup de piment et un casier de bi\xc3\xa8res bien fra\xc3\xaeches. ce soir, on se p\xc3\xa8te le bide, j'ai faim comme un loup ! je t'aime mon c\xc5\x93ur. \xc2\xbb</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>christian est fier de lui. il clique sur envoyer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>le bug de la matrice</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le probl\xc3\xa8me ? dans sa pr\xc3\xa9cipitation, christian n'a pas ouvert un nouveau message. il avait toujours le mail du grand patron ouvert en arri\xc3\xa8re-plan. et au lieu de cliquer sur \xc2\xab transf\xc3\xa9rer \xc2\xbb, son doigt a gliss\xc3\xa9 sur le bouton le plus dangereux de l'histoire de l'humanit\xc3\xa9 : <strong>\xc2\xab r\xc3\xa9pondre \xc3\xa0 tous \xc2\xbb</strong>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pendant deux minutes, rien ne se passe. le silence avant la temp\xc3\xaate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>puis, le t\xc3\xa9l\xc3\xa9phone fixe de christian se met \xc3\xa0 sonner. c\xe2\x80\x99est sa coll\xc3\xa8gue de bureau, en larmes\xe2\x80\xa6 de rire. <em>\xc2\xab christian\xe2\x80\xa6 regarde tes mails envoy\xc3\xa9s. tout de suite. \xc2\xbb</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>christian regarde. son sang ne fait qu'un tour. il devient instantan\xc3\xa9ment plus blanc que son propre traitement de texte. son message d\xe2\x80\x99amour, de poulet brais\xc3\xa9 et de bi\xc3\xa8res fra\xc3\xaeches vient d\xe2\x80\x99\xc3\xaatre livr\xc3\xa9 dans la bo\xc3\xaete de r\xc3\xa9ception des 850 employ\xc3\xa9s. y compris les stagiaires. y compris la rh. y compris\xe2\x80\xa6 le grand patron.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>la contre-attaque g\xc3\xa9n\xc3\xa9rale</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans n\xe2\x80\x99importe quelle entreprise normale, christian aurait pr\xc3\xa9par\xc3\xa9 son carton pour prendre la porte. mais c'est l\xc3\xa0 que la magie du web et de la solidarit\xc3\xa9 entre coll\xc3\xa8gues a op\xc3\xa9r\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>un premier coll\xc3\xa8gue de la comptabilit\xc3\xa9 r\xc3\xa9pond \xc3\xa0 tous :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab c\xe2\x80\x99est d'accord christian, mais j'am\xc3\xa8ne les allocos ! \xc2\xbb</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>un autre du service marketing encha\xc3\xaene :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab s'il reste une cuisse de poulet bicyclette, je valide la restructuration ! \xc2\xbb</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en moins de dix minutes, c'est l'anarchie la plus totale. le serveur de l'entreprise menace de sauter sous le poids des m\xc3\xa8mes de poulets brais\xc3\xa9s. tout le monde y va de son commentaire. christian, lui, est sous son bureau, en position f\xc5\x93tale, cherchant comment s'enfuir vers un pays sans connexion internet.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>le mot de la fin</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\xc3\x80 17h, le signal sonore d\xe2\x80\x99un nouveau mail retentit simultan\xc3\xa9ment sur les 850 ordinateurs de l\xe2\x80\x99immeuble. l'exp\xc3\xa9diteur ? le grand patron en personne.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le bureau devient tellement silencieux qu\xe2\x80\x99on pourrait entendre une cl\xc3\xa9 usb tomber. christian ferme les yeux, pr\xc3\xaat \xc3\xa0 recevoir la foudre.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le mail du patron s'ouvre :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\xc2\xab \xc3\x80 l'attention de christian. note bien que le budget de l\xe2\x80\x99entreprise ne couvrira pas le casier de bi\xc3\xa8res. en revanche, si ton piment est vraiment bon, je m'invite \xc3\xa0 table. la r\xc3\xa9union de crise est annul\xc3\xa9e, place au poulet. \xc2\xbb</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>moralit\xc3\xa9 de l'histoire :</strong> avant de parler de vos envies de poulet brais\xc3\xa9 \xc3\xa0 votre moiti\xc3\xa9, v\xc3\xa9rifiez toujours trois fois la ligne \xc2\xab destinataire \xc2\xbb. ou alors, assurez-vous que votre patron a une bonne descente !</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>charli</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.14
country_id: 1880251
description:
47.128.96.14 - - [12/Jun/2026:14:01:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7062370&pdata=https%253A%252F%252Fcfpj.tg%252Fcategory%252Fnon-classe%252F%253F__im-mLcLAlHa%253D3875901866547102545%25252Fpage%25252F3%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F2%25252F%25252Fpage%25252F3%25252F%25252Fpage%25252F12%25252F%25252Fpage%25252F2%25252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781272879 HTTP/2.0" 302 0 cfpj.tg "https://cfpj.tg/category/non-classe/?__im-mLcLAlHa=3875901866547102545%2Fpage%2F3%2F%2Fpage%2F2%2F%2Fpage%2F12%2F%2Fpage%2F3%2F%2Fpage%2F2%2F%2Fpage%2F3%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F3%2F%2Fpage%2F3%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F2%2F%2Fpage%2F3%2F%2Fpage%2F12%2F%2Fpage%2F2%2F" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.14


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>c\xe2\x80\x99est l\xe2\x80\x99histoire de christian, cadre sup\xc3\xa9rieur tr\xc3\xa8s s\xc3\xa9rieux dans une grande entreprise de la place. christian est le genre d'homme qui porte des costumes sur mesure, ne d\xc3\xa9passe jamais la limite de vitesse et utilise des expressions comme \xc2\xab synergie op\xc3\xa9rationnelle \xc2\xbb ou \xc2\xab \xc3\x80 date \xc2\xbb.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>un jeudi apr\xc3\xa8s-midi, le grand patron envoie un e-mail solennel \xc3\xa0 l\xe2\x80\x99ensemble des <strong>850 employ\xc3\xa9s</strong> de la bo\xc3\xaete pour annoncer une restructuration majeure et la mise en place d'un \xc2\xab plan d'aust\xc3\xa9rit\xc3\xa9 budg\xc3\xa9taire strict \xc2\xbb. en gros : ambiance tendue, finies les d\xc3\xa9penses inutiles, on serre la ceinture.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>christian lit l\xe2\x80\x99e-mail. mais christian a la t\xc3\xaate ailleurs. sa seule obsession du moment, c\xe2\x80\x99est son plan pour le d\xc3\xaener du soir avec ses potes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>il veut envoyer un sms \xc3\xa0 sa femme pour lui demander de g\xc3\xa9rer le menu, mais distrait par un coup de fil sur son portable, il d\xc3\xa9cide plut\xc3\xb4t de lui \xc3\xa9crire un mail rapide depuis son ordinateur. il tape fr\xc3\xa9n\xc3\xa9tiquement :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"512px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:512px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab ma ch\xc3\xa9rie, oublie leur plan d'aust\xc3\xa9rit\xc3\xa9 \xc3\xa0 deux balles, ce soir c\xe2\x80\x99est la f\xc3\xaate. s'il te pla\xc3\xaet, passe au resto du coin et prends-nous quatre bons poulets bicyclette bien brais\xc3\xa9s, beaucoup de piment et un casier de bi\xc3\xa8res bien fra\xc3\xaeches. ce soir, on se p\xc3\xa8te le bide, j'ai faim comme un loup ! je t'aime mon c\xc5\x93ur. \xc2\xbb</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>christian est fier de lui. il clique sur envoyer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>le bug de la matrice</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le probl\xc3\xa8me ? dans sa pr\xc3\xa9cipitation, christian n'a pas ouvert un nouveau message. il avait toujours le mail du grand patron ouvert en arri\xc3\xa8re-plan. et au lieu de cliquer sur \xc2\xab transf\xc3\xa9rer \xc2\xbb, son doigt a gliss\xc3\xa9 sur le bouton le plus dangereux de l'histoire de l'humanit\xc3\xa9 : <strong>\xc2\xab r\xc3\xa9pondre \xc3\xa0 tous \xc2\xbb</strong>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pendant deux minutes, rien ne se passe. le silence avant la temp\xc3\xaate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>puis, le t\xc3\xa9l\xc3\xa9phone fixe de christian se met \xc3\xa0 sonner. c\xe2\x80\x99est sa coll\xc3\xa8gue de bureau, en larmes\xe2\x80\xa6 de rire. <em>\xc2\xab christian\xe2\x80\xa6 regarde tes mails envoy\xc3\xa9s. tout de suite. \xc2\xbb</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>christian regarde. son sang ne fait qu'un tour. il devient instantan\xc3\xa9ment plus blanc que son propre traitement de texte. son message d\xe2\x80\x99amour, de poulet brais\xc3\xa9 et de bi\xc3\xa8res fra\xc3\xaeches vient d\xe2\x80\x99\xc3\xaatre livr\xc3\xa9 dans la bo\xc3\xaete de r\xc3\xa9ception des 850 employ\xc3\xa9s. y compris les stagiaires. y compris la rh. y compris\xe2\x80\xa6 le grand patron.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31006,\"sizeslug\":\"full\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/otr_ferer-pour-batir-1.jpg\" alt=\"\" class=\"wp-image-31006\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>la contre-attaque g\xc3\xa9n\xc3\xa9rale</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>dans n\xe2\x80\x99importe quelle entreprise normale, christian aurait pr\xc3\xa9par\xc3\xa9 son carton pour prendre la porte. mais c'est l\xc3\xa0 que la magie du web et de la solidarit\xc3\xa9 entre coll\xc3\xa8gues a op\xc3\xa9r\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>un premier coll\xc3\xa8gue de la comptabilit\xc3\xa9 r\xc3\xa9pond \xc3\xa0 tous :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab c\xe2\x80\x99est d'accord christian, mais j'am\xc3\xa8ne les allocos ! \xc2\xbb</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>un autre du service marketing encha\xc3\xaene :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab s'il reste une cuisse de poulet bicyclette, je valide la restructuration ! \xc2\xbb</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>en moins de dix minutes, c'est l'anarchie la plus totale. le serveur de l'entreprise menace de sauter sous le poids des m\xc3\xa8mes de poulets brais\xc3\xa9s. tout le monde y va de son commentaire. christian, lui, est sous son bureau, en position f\xc5\x93tale, cherchant comment s'enfuir vers un pays sans connexion internet.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>le mot de la fin</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\xc3\x80 17h, le signal sonore d\xe2\x80\x99un nouveau mail retentit simultan\xc3\xa9ment sur les 850 ordinateurs de l\xe2\x80\x99immeuble. l'exp\xc3\xa9diteur ? le grand patron en personne.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le bureau devient tellement silencieux qu\xe2\x80\x99on pourrait entendre une cl\xc3\xa9 usb tomber. christian ferme les yeux, pr\xc3\xaat \xc3\xa0 recevoir la foudre.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le mail du patron s'ouvre :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31156,\"width\":\"606px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/cf280d22-5566-4950-b6b8-986b4a8db8fc-724x1024.jpg\" alt=\"\" class=\"wp-image-31156\" style=\"width:606px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab \xc3\x80 l'attention de christian. note bien que le budget de l\xe2\x80\x99entreprise ne couvrira pas le casier de bi\xc3\xa8res. en revanche, si ton piment est vraiment bon, je m'invite \xc3\xa0 table. la r\xc3\xa9union de crise est annul\xc3\xa9e, place au poulet. \xc2\xbb</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>moralit\xc3\xa9 de l'histoire :</strong> avant de parler de vos envies de poulet brais\xc3\xa9 \xc3\xa0 votre moiti\xc3\xa9, v\xc3\xa9rifiez toujours trois fois la ligne \xc2\xab destinataire \xc2\xbb. ou alors, assurez-vous que votre patron a une bonne descente !</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>charli</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.171.58.124
country_id: 2363686
description:
[2026-06-12 14:01:29 +0000] info [webmaild] 196.171.58.124 - info@matosshop.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 79.108.218.58
country_id: 1562822
description:
Jun 12 14:02:32 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 79.108.218.58 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.58.124
country_id: 2363686
description:
[2026-06-12 14:02:28 +0000] info [webmaild] 196.171.58.124 - info@matosshop.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 34.201.31.78
country_id: 6252001
description:
2026-06-12 14:04:02 dovecot_plain authenticator failed for H=ec2-34-201-31-78.compute-1.amazonaws.com (EC2AMAZ-PDUUPKU.ec2.internal) [34.201.31.78]:62795: 535 Incorrect authentication data (set_id=stephane@sitewebofficiel.tg)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.203.56
country_id: 2363686
description:
[2026-06-12 14:04:24 +0000] info [cpaneld] 160.242.203.56 - pnls "GET /cPanel_magic_revision_1726168667/frontend/jupiter/core/main_content/main_content.min.css HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [160.242.203.59] != Current IP Address [160.242.203.56]


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 160.242.203.59
country_id: 2363686
description:
[2026-06-12 14:04:21 +0000] info [cpaneld] 160.242.203.59 NEW pnls:80Y8roKY7Tf1myR5 address=160.242.203.59,app=cpaneld,creator=pnls,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.203.58
country_id: 2363686
description:
[2026-06-12 14:04:24 +0000] info [cpaneld] 160.242.203.58 - pnls "GET /cPanel_magic_revision_1748359553/frontend/jupiter/libraries/chosen/1.5.1/chosen.min.css HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [160.242.203.59] != Current IP Address [160.242.203.58]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 14:05:34 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 146.70.72.168
country_id: 6252001
domain: www.butodra.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:Dyeus@25854ps-Rte.www.butodra.tg||Method:wp.getUsersBlogs


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 160.242.203.57
country_id: 2363686
description:
[2026-06-12 14:08:13 +0000] info [cpaneld] 160.242.203.57 NEW pnls:CwRxvEuwC13Hlwsx address=160.242.203.57,app=cpaneld,creator=pnls,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 14:08:49 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.203.58
country_id: 2363686
description:
[2026-06-12 14:08:54 +0000] info [cpaneld] 160.242.203.58 - pnls "GET /cpsess8913458386/frontend/jupiter/css/base_overrides.min.css HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [160.242.203.59] != Current IP Address [160.242.203.58]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.14.192.199
country_id: 3144096
description:
2026-06-12 14:10:11 dovecot_plain authenticator failed for H=(anq8jtslztvvnm2fbs9zo4sg0gtaiy) [45.14.192.199]:49197: 535 Incorrect authentication data (set_id=ptitrikou@mesyscom.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.17.124.139
country_id: 690791
description:
Jun 12 14:11:11 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.17.124.139 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.17.124.139
country_id: 690791
description:
Jun 12 14:11:24 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.17.124.139 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 77.90.185.41
country_id: 130758
description:
Jun 12 14:13:50 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 77.90.185.41 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 201.49.252.215
country_id: 3469034
domain: anamek.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:91317.anamek.tg||ServerName:anamek.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:107b7e1b20718d9eaa72c4b2b16ae8f259325d6f||Title:uvk9c6qmn36sn8abv||RSV:8.15||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.6.236
country_id: 2363686
description:
[2026-06-12 14:19:01 +0000] info [webmaild] 196.171.6.236 - faustinhoinso@flp-tg.com "GET /cpsess2526275295/3rdparty/roundcube/?_task=mail&_mbox=INBOX HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 14:18:32 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 118.103.253.188
country_id: 1820814
description:
Jun 12 14:20:13 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 118.103.253.188 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 43.228.131.114
country_id: 2029969
description:
Jun 12 14:19:57 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 43.228.131.114 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.230.173
country_id: 1269750
description:
Jun 12 14:19:58 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.230.173 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 148.72.64.32
country_id: 6252001
description:
Jun 12 14:20:05 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 148.72.64.32 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 121.26.31.62
country_id: 1814991
description:
Jun 12 14:20:24 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 121.26.31.62 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 121.18.49.14
country_id: 1814991
description:
Jun 12 14:20:29 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 121.18.49.14 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 184.68.123.34
country_id: 6251999
description:
Jun 12 14:20:47 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 184.68.123.34 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.101.217
country_id: 3865483
description:
Jun 12 14:20:48 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.101.217 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.200.6.38
country_id: 3469034
description:
Jun 12 14:21:06 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.200.6.38 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 60.172.43.116
country_id: 1814991
description:
Jun 12 14:20:51 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 60.172.43.116 has been locked due to Imunify RBL


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 91.200.40.110
country_id: 690791
domain: cfpj.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.15||T:APACHE||MV:/wp-json/wp/v2/users/me||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 121.18.148.10
country_id: 1814991
description:
Jun 12 14:21:14 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 121.18.148.10 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 60.250.215.200
country_id: 1668284
description:
Jun 12 14:21:21 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 60.250.215.200 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 8.213.131.12
country_id: 1835841
description:
Jun 12 14:21:21 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 8.213.131.12 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 45.130.81.30
country_id: 690791
domain: sp-eau.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:14-21.45.130.81.30||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 210.182.73.131
country_id: 1835841
description:
Jun 12 14:22:08 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 210.182.73.131 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 121.18.148.10
country_id: 1814991
description:
Jun 12 14:21:22 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 121.18.148.10 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 43.167.192.85
country_id: 1861060
description:
2026-06-12 14:21:51 dovecot_plain authenticator failed for H=(e0z9ipkbz6lwh2vxf4rzsxrn) [43.167.192.85]:46326: 535 Incorrect authentication data (set_id=welldrive@confortis.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:21:44 dovecot_login authenticator failed for H=(Ns3pTzcfx) [185.169.4.236]:59188: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 112.133.27.34
country_id: 1835841
description:
Jun 12 14:21:58 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 112.133.27.34 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.26.248
country_id: 2635167
description:
[2026-06-12 14:22:07 +0000] info [cpaneld] 195.63.26.248 - newglevfer "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 121.18.148.10
country_id: 1814991
description:
Jun 12 14:23:04 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 121.18.148.10 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 14:23:11 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 9.169.121.184
country_id: 6252001
description:
9.169.121.184 - - [12/Jun/2026:14:23:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7432555&pdata=https%253A%252F%252Fucao-uut.tg%252Fformation-recherche%252Fdiplomes%252Flicence-gestion%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781274190 HTTP/2.0" 302 0 ucao-uut.tg "https://ucao-uut.tg/formation-recherche/diplomes/licence-gestion/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.7444.175 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:9.169.121.184


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:22:21 dovecot_login authenticator failed for H=(ciRNIpUz) [185.169.4.236]:60104: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 201.63.138.70
country_id: 3469034
description:
Jun 12 14:22:21 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 201.63.138.70 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:23:34 dovecot_login authenticator failed for H=(SoOVDVjFy) [185.169.4.236]:63079: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 14:23:20 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:24:29 dovecot_login authenticator failed for H=(wIYJTv4xAs) [185.169.4.236]:65125: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 185.169.4.236
country_id: 2635167
description:
Jun 12 14:24:27 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account admin-lirtg@cafe.tg has been locked for the attacker IP 185.169.4.236


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 170.80.41.108
country_id: 3469034
description:
Jun 12 14:24:21 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 170.80.41.108 has been locked due to Imunify RBL


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 185.169.4.236
country_id: 2635167
description:
Jun 12 14:25:22 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account admin-lirtg@cafe.tg has been locked for the attacker IP 185.169.4.236


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:25:24 dovecot_login authenticator failed for H=(5nUjCS) [185.169.4.236]:50698: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:25:42 dovecot_login authenticator failed for H=(l9nJ2H) [185.169.4.236]:51424: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 185.169.4.236
country_id: 2635167
description:
Jun 12 14:26:34 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account admin-lirtg@cafe.tg has been locked for the attacker IP 185.169.4.236


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:26:36 dovecot_login authenticator failed for H=(X12emacz) [185.169.4.236]:53607: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 185.169.4.236
country_id: 2635167
description:
Jun 12 14:27:29 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account admin-lirtg@cafe.tg has been locked for the attacker IP 185.169.4.236


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:27:31 dovecot_login authenticator failed for H=(6157xm) [185.169.4.236]:56775: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 185.169.4.236
country_id: 2635167
description:
Jun 12 14:28:23 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account admin-lirtg@cafe.tg has been locked for the attacker IP 185.169.4.236


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:28:25 dovecot_login authenticator failed for H=(EYiVxbtsN) [185.169.4.236]:59019: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.66.119
country_id: 6251999
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:104.253.66.119||TA:104.253.66.119||


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:29:38 dovecot_login authenticator failed for H=(Rdklj2) [185.169.4.236]:62595: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:29:56 dovecot_login authenticator failed for H=(DylAO1VZx0) [185.169.4.236]:63175: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [12/Jun/2026:14:30:19 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9527401&pdata=http%253A%252F%252Fujjhos.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781274617 HTTP/1.1" 302 0 ujjhos.mediatopnews.tg "http://ujjhos.mediatopnews.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.6
country_id: 6252001
description:
205.169.39.6 - - [12/Jun/2026:14:30:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816730&pdata=http%253A%252F%252Fujjhos.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781274615 HTTP/1.1" 302 0 ujjhos.mediatopnews.tg "http://ujjhos.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.6


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:30:33 dovecot_login authenticator failed for H=(NATcYrcV) [185.169.4.236]:64742: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 185.169.4.236
country_id: 2635167
description:
Jun 12 14:32:02 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account admin-lirtg@cafe.tg has been locked for the attacker IP 185.169.4.236


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:31:28 dovecot_login authenticator failed for H=(AVEMsAEp) [185.169.4.236]:50070: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 185.169.4.236
country_id: 2635167
description:
Jun 12 14:32:20 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account admin-lirtg@cafe.tg has been locked for the attacker IP 185.169.4.236


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:32:22 dovecot_login authenticator failed for H=(m58eRFGgm) [185.169.4.236]:51530: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:33:54 dovecot_login authenticator failed for H=(XnanBCbP) [185.169.4.236]:54903: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 185.169.4.236
country_id: 2635167
description:
Jun 12 14:33:33 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account admin-lirtg@cafe.tg has been locked for the attacker IP 185.169.4.236


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:33:35 dovecot_login authenticator failed for H=(29CFBoVmu) [185.169.4.236]:54125: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.64.151.162
country_id: 2363686
description:
2026-06-12 14:33:25 dovecot_login authenticator failed for H=(Yoga) [102.64.151.162]:61689: 535 Incorrect authentication data (set_id=contactcert@certlogisticstogo.com)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 185.169.4.236
country_id: 2635167
description:
Jun 12 14:34:28 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account admin-lirtg@cafe.tg has been locked for the attacker IP 185.169.4.236


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:34:30 dovecot_login authenticator failed for H=(jIp9cZng2) [185.169.4.236]:56424: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 200.10.41.227
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:14-34.200.10.41.227||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.16
country_id: 6252001
description:
2026-06-12 14:34:41 dovecot_login authenticator failed for H=(y0dYtotVl) [158.94.211.16]:49213: 535 Incorrect authentication data (set_id=ccit)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 14:34:52 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.16
country_id: 6252001
description:
Jun 12 14:34:39 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.16 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.64.151.162
country_id: 2363686
description:
2026-06-12 14:34:43 dovecot_login authenticator failed for H=(Yoga) [102.64.151.162]:61524: 535 Incorrect authentication data (set_id=contactcert@certlogisticstogo.com)


plugin: modsec
rule: 77350541
name: IM360 WAF: Possible SQL injection attack
abuser: 193.151.190.194
country_id: 6252001
domain: 24heureinfo.tg
description:
IM360 WAF: Possible SQL injection attack||MVN:ARGS_NAMES:gt;If you enjoyed this write-up and you would like to receive more information concerning ||MV:gt;If you enjoyed this write-up and you would like to receive more information concerning ||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 185.169.4.236
country_id: 2635167
description:
Jun 12 14:35:22 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account admin-lirtg@cafe.tg has been locked for the attacker IP 185.169.4.236


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.169.4.236
country_id: 2635167
description:
2026-06-12 14:35:24 dovecot_login authenticator failed for H=(zV8S2X2Pf) [185.169.4.236]:58512: 535 Incorrect authentication data (set_id=admin-lirtg@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 158.94.211.16
country_id: 6252001
description:
Jun 12 14:35:26 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 158.94.211.16 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 165.22.212.32
country_id: 1269750
description:
[2026-06-12 14:35:30 +0000] info [cpaneld] 165.22.212.32 - mesyscomcom "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.94.211.16
country_id: 6252001
description:
2026-06-12 14:35:28 dovecot_login authenticator failed for H=(hg5BQycbq) [158.94.211.16]:64971: 535 Incorrect authentication data (set_id=ccit@ccit.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.64.151.162
country_id: 2363686
description:
2026-06-12 14:35:33 dovecot_login authenticator failed for H=(Yoga) [102.64.151.162]:59957: 535 Incorrect authentication data (set_id=contactcert@certlogisticstogo.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-12 14:36:05 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:55172: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 14:36:33 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.64.151.162
country_id: 2363686
description:
2026-06-12 14:37:14 dovecot_login authenticator failed for H=(Yoga) [102.64.151.162]:60754: 535 Incorrect authentication data (set_id=contactcert@certlogisticstogo.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.181.167.134
country_id: 3865483
description:
Jun 12 14:38:01 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.181.167.134 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.64.151.162
country_id: 2363686
description:
2026-06-12 14:37:53 dovecot_login authenticator failed for H=(Yoga) [102.64.151.162]:60503: 535 Incorrect authentication data (set_id=contactcert@certlogisticstogo.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.177.123.61
country_id: 1210997
description:
[2026-06-12 14:38:39 +0000] info [cpaneld] 103.177.123.61 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.64.151.162
country_id: 2363686
description:
2026-06-12 14:39:10 dovecot_login authenticator failed for H=(Yoga) [102.64.151.162]:60504: 535 Incorrect authentication data (set_id=contactcert@certlogisticstogo.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 203.55.81.1
country_id: 3017382
description:
Jun 12 14:44:07 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 203.55.81.1 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 203.55.81.1
country_id: 3017382
description:
2026-06-12 14:44:09 dovecot_plain authenticator failed for H=(6tr841lfv4cr07h1zdibx1) [203.55.81.1]:40382: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.87.67.219
country_id: 1527747
description:
[2026-06-12 14:46:18 +0000] info [cpaneld] 95.87.67.219 - ucaouuttg "GET /login/?login_only=1&user=ucaouuttg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucaouuttg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.224.96.18
country_id: 2017370
description:
[2026-06-12 14:46:32 +0000] info [cpaneld] 185.224.96.18 - ucao "GET /login/?login_only=1&user=ucao&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucao (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 119.195.102.159
country_id: 1835841
description:
2026-06-12 14:47:21 dovecot_plain authenticator failed for H=(iwvdd31dla690eeb390505ewny246) [119.195.102.159]:59566: 535 Incorrect authentication data (set_id=agounkej@ucao-uut.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.39.225.219
country_id: 285570
description:
[2026-06-12 14:46:36 +0000] info [cpaneld] 37.39.225.219 - uca "GET /login/?login_only=1&user=uca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user uca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.221.172.14
country_id: 3686110
description:
[2026-06-12 14:46:40 +0000] info [cpaneld] 201.221.172.14 - uc "GET /login/?login_only=1&user=uc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user uc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.101.74.8
country_id: 2589581
description:
[2026-06-12 14:46:22 +0000] info [cpaneld] 105.101.74.8 - ucaouu "GET /login/?login_only=1&user=ucaouu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucaouu (has_cpuser_file failed)


plugin: modsec
rule: 77350582
name: IM360 WAF: Bytedancewebview detected
abuser: 102.212.94.14
country_id: 2363686
domain: ucao-uut.tg
description:
IM360 WAF: Bytedancewebview detected||UA:Mozilla/5.0 (iPhone; CPU iPhone OS 26_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 Safari/604.1 musical_ly_45.5.0 BytedanceWebview/d8a21c6||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-12 14:50:14 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:37854: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 14:49:28 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: cl_dos
name: DOS detection
abuser: 194.102.38.65
country_id: 2635167
description:
2026-06-12 14:52:09.793166251 +0000 GMT m=+156711.308469404 Denial of Service attack was discovered from 194.102.38.65, on port 52224. Open connections: 252


plugin: cl_dos
name: DOS detection
abuser: 194.102.38.65
country_id: 2635167
description:
2026-06-12 14:52:45.801922006 +0000 GMT m=+156747.317225159 Denial of Service attack was discovered from 194.102.38.65, on port 52224. Open connections: 252


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 109.207.35.205
country_id: 6290252
description:
Jun 12 14:54:42 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 109.207.35.205 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-12 14:55:20 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:3130: 535 Incorrect authentication data (set_id=norman@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 196.0.89.14
country_id: 226074
description:
Jun 12 14:54:24 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 196.0.89.14 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 159.223.62.22
country_id: 1880251
description:
Jun 12 14:55:16 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 159.223.62.22 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 12 14:55:16 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-12 14:55:18 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:8240: 535 Incorrect authentication data (set_id=newsfeed@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 12 14:55:18 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 12 14:55:19 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-12 14:55:21 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:1486: 535 Incorrect authentication data (set_id=ccl@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-12 14:55:38 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:26130: 535 Incorrect authentication data (set_id=norman@ns5.netmaster.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.88.221
country_id: 2750405
description:
[2026-06-12 14:55:56 +0000] info [cpaneld] 217.181.88.221 - newglevfer "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 154.198.42.71
country_id: 241170
description:
Jun 12 14:56:14 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 154.198.42.71 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 12 14:55:23 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-12 14:55:26 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:51756: 535 Incorrect authentication data (set_id=ccl@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-12 14:55:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:24476: 535 Incorrect authentication data (set_id=dewi@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 12 14:55:36 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: cl_dos
name: DOS detection
abuser: 194.102.38.65
country_id: 2635167
description:
2026-06-12 14:56:11.896909535 +0000 GMT m=+156953.412212788 Denial of Service attack was discovered from 194.102.38.65, on port 80. Open connections: 347


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 12 14:55:22 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-12 14:55:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:12430: 535 Incorrect authentication data (set_id=newsfeed@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 12 14:55:32 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-12 14:55:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:38750: 535 Incorrect authentication data (set_id=vid@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 14:56:14 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 12 14:55:24 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-12 14:55:25 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:54514: 535 Incorrect authentication data (set_id=dorn@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.195.24.147
country_id: 1269750
description:
Jun 12 14:55:31 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.195.24.147 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 12 14:55:31 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 12 14:56:22 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 12 14:56:26 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-12 14:56:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:46164: 535 Incorrect authentication data (set_id=mchat@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 12 14:56:37 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-12 14:56:22 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:65496: 535 Incorrect authentication data (set_id=tommy@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 14:56:23 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 77.90.185.91
country_id: 130758
description:
Jun 12 14:56:34 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 77.90.185.91 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 12 14:56:36 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-12 14:56:22 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:1676: 535 Incorrect authentication data (set_id=mo@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-12 14:56:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:3160: 535 Incorrect authentication data (set_id=housing@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-12 14:56:38 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:30512: 535 Incorrect authentication data (set_id=farhan@ns5.netmaster.tg)


plugin: cl_dos
name: DOS detection
abuser: 194.102.38.65
country_id: 2635167
description:
2026-06-12 14:56:46.966801512 +0000 GMT m=+156988.482104665 Denial of Service attack was discovered from 194.102.38.65, on port 80. Open connections: 408


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 12 14:56:36 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-12 14:56:22 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:59180: 535 Incorrect authentication data (set_id=vivona@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 12 14:56:26 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 12 14:57:25 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.221.192.226
country_id: 6252001
description:
34.221.192.226 - - [12/Jun/2026:14:57:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7171683&pdata=https%253A%252F%252Fkpmg.tg%252F71fa419ddb91500bd6c40e52ac0c368c%252F5a62aa212b86bc08a2d77c395174ea68%252F8a5e8e4b08af2effd9daa8105741ce34%252Findex.php%253Fcmd%253Dlogin&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781276246 HTTP/2.0" 302 0 kpmg.tg "https://kpmg.tg/71fa419ddb91500bd6c40e52ac0c368c/5a62aa212b86bc08a2d77c395174ea68/8a5e8e4b08af2effd9daa8105741ce34/index.php?cmd=login" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.221.192.226


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-12 14:57:21 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:15536: 535 Incorrect authentication data (set_id=ni@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-12 14:57:23 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:55402: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-12 14:57:25 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:58410: 535 Incorrect authentication data (set_id=enemy@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-12 14:57:22 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:54250: 535 Incorrect authentication data (set_id=enemy@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 12 14:57:20 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-12 14:57:20 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:50684: 535 Incorrect authentication data (set_id=orel@ns5.netmaster.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.141.44.37
country_id: 2260494
description:
[2026-06-12 14:59:17 +0000] info [cpaneld] 102.141.44.37 - ucaou "GET /login/?login_only=1&user=ucaou&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucaou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.195.6.140
country_id: 3469034
description:
[2026-06-12 14:59:21 +0000] info [cpaneld] 186.195.6.140 - ucao "GET /login/?login_only=1&user=ucao&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucao (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 202.157.191.184
country_id: 1327865
description:
[2026-06-12 14:58:57 +0000] info [cpaneld] 202.157.191.184 - ucaouut "GET /login/?login_only=1&user=ucaouut&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 148.227.74.67
country_id: 3865483
description:
[2026-06-12 14:59:05 +0000] info [cpaneld] 148.227.74.67 - ucaouuttg "GET /login/?login_only=1&user=ucaouuttg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucaouuttg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.97.55.20
country_id: 2589581
description:
[2026-06-12 14:58:52 +0000] info [cpaneld] 105.97.55.20 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.71.73.174
country_id: 3469034
description:
[2026-06-12 14:59:10 +0000] info [cpaneld] 200.71.73.174 - ucaouu "GET /login/?login_only=1&user=ucaouu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ucaouu (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 27.115.124.45
country_id: 1814991
description:
27.115.124.45 - - [12/Jun/2026:14:59:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9857474&pdata=https%253A%252F%252Fdirect7.tg%252Fintense-emotion-a-la-maison-du-hadj-pour-laccueil-des-nouveaux-aladji%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781276380 HTTP/2.0" 302 0 direct7.tg "https://direct7.tg/intense-emotion-a-la-maison-du-hadj-pour-laccueil-des-nouveaux-aladji/" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.45


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [12/Jun/2026:14:59:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13264790&pdata=http%253A%252F%252Fwww.crepsad.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781276386 HTTP/1.1" 404 561 www.crepsad.tg "http://www.crepsad.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.12.139.12
country_id: 3469034
description:
[2026-06-12 14:59:31 +0000] info [cpaneld] 177.12.139.12 - uc "GET /login/?login_only=1&user=uc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user uc (has_cpuser_file failed)


plugin: cl_dos
name: DOS detection
abuser: 47.52.223.161
country_id: 1819730
description:
2026-06-12 15:01:23.929809714 +0000 GMT m=+157265.445112967 Denial of Service attack was discovered from 47.52.223.161, on port 52223. Open connections: 271


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.38.15
country_id: 99237
domain: 1438744.samk657.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/1438744.samk657.com/ HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 87.106.217.70
country_id: 2921044
description:
2026-06-12 15:02:41 dovecot_plain authenticator failed for H=ip87-106-217-70.pbiaas.com (mz1tpy51mpnrm6i26w9khnl8jfijef) [87.106.217.70]:39300: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.120.167.201
country_id: 1210997
description:
103.120.167.201 - - [12/Jun/2026:15:04:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9661337&pdata=https%253A%252F%252Ftogodailynews.tg%252Facces-a-lenergie-electrique-la-bid-soutient-le-togo-avec-20-millions%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781276674 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/acces-a-lenergie-electrique-la-bid-soutient-le-togo-avec-20-millions/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.6033.1889 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.120.167.201


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 15:05:22 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 171.252.188.139
country_id: 1562822
description:
171.252.188.139 - - [12/Jun/2026:15:07:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7170406&pdata=https%253A%252F%252Ftogodailynews.tg%252Fcategory%252Factualites%252Fpage%252F3%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781276846 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/category/actualites/page/3/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.9789.1972 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:171.252.188.139


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.124.159.197
country_id: 1733045
description:
2026-06-12 15:07:40 dovecot_login authenticator failed for H=(191.203.163.124.adsl-pool.sx.cn) [49.124.159.197]:59972: 535 Incorrect authentication data (set_id=office@soena.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.44.242.31
country_id: 3508796
domain: www.certlogisticstogo.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.certlogisticstogo.com/ HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 152.156.120.10
country_id: 3439705
description:
152.156.120.10 - - [12/Jun/2026:15:08:45 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13133411&pdata=https%253A%252F%252Fmediatopnews.tg%252F%253Fp%253D10721&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781276923 HTTP/2.0" 302 0 mediatopnews.tg "https://mediatopnews.tg/?p=10721" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.5490.1875 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:152.156.120.10


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 5.62.145.187
country_id: 99237
description:
5.62.145.187 - - [12/Jun/2026:15:08:46 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9857691&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fbepc-2021%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781276925 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/bepc-2021/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2681.1741 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:5.62.145.187


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 15:08:57 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 79.116.169.43
country_id: 2510769
description:
79.116.169.43 - - [12/Jun/2026:15:10:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131609&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fbepc-2021%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781277016 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/bepc-2021/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2124.1249 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:79.116.169.43


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.55.146.170
country_id: 1210997
description:
103.55.146.170 - - [12/Jun/2026:15:09:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10381720&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Frevalorisation-du-smig-au-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781276962 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/revalorisation-du-smig-au-togo/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.4992.1096 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.55.146.170


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 160.242.203.56
country_id: 2363686
description:
[2026-06-12 15:10:40 +0000] info [cpaneld] 160.242.203.56 NEW pnls:8n2KlW8jX2fot9Dh address=160.242.203.56,app=cpaneld,creator=pnls,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 196.170.29.120
country_id: 2363686
description:
[2026-06-12 15:13:19 +0000] info [cpaneld] 196.170.29.120 NEW uubplgpf:QR4QLqWuRn1NSdah address=196.170.29.120,app=cpaneld,creator=uubplgpf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-12 15:14:22 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:50468: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 15:18:05 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 202.51.88.6
country_id: 1282988
description:
[2026-06-12 15:20:12 +0000] info [cpaneld] 202.51.88.6 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.187.133.208
country_id: 3017382
description:
[2026-06-12 15:20:15 +0000] info [cpaneld] 176.187.133.208 - mesyscom "GET /login/?login_only=1&user=mesyscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.246.141.70
country_id: 2017370
description:
[2026-06-12 15:20:28 +0000] info [cpaneld] 92.246.141.70 - mesys "GET /login/?login_only=1&user=mesys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesys (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 216.234.215.62
country_id: 878675
description:
216.234.215.62 - - [12/Jun/2026:15:20:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10013035&pdata=https%253A%252F%252Fcpanel.stephane.free.netmaster.tg%252F%253Flocale%253Dfi&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781277630 HTTP/2.0" 302 0 cpanel.stephane.free.netmaster.tg "https://cpanel.stephane.free.netmaster.tg/?locale=fi" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:216.234.215.62


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.100.202.189
country_id: 3658394
description:
[2026-06-12 15:20:33 +0000] info [cpaneld] 157.100.202.189 - mes "GET /login/?login_only=1&user=mes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mes (has_cpuser_file failed)


plugin: ossec
rule: 11011
name: WHM SSO login failed
abuser: 80.248.64.198
country_id: 2363686
description:
[2026-06-12 15:20:46 +0000] info [whostmgrd] 80.248.64.198 PURGE root:pVVid1RTUpX6Lkr7 badpass [security token incorrect]


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 80.248.64.198
country_id: 2363686
description:
[2026-06-12 15:20:46 +0000] info [whostmgrd] 80.248.64.198 - root "GET /cpsess9543198679/ HTTP/1.1" DEFERRED LOGIN whostmgrd: security token incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.129.242.58
country_id: 2921044
description:
Jun 12 15:22:00 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.129.242.58 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.251.56.20
country_id: 3469034
description:
Jun 12 15:21:57 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.251.56.20 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 15:24:13 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.189.144.35
country_id: 337996
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/album/journee-internationale-des-travailleurs HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 15:24:22 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.51.233.22
country_id: 2802361
description:
[2026-06-12 15:28:55 +0000] info [cpaneld] 178.51.233.22 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.80.180.183
country_id: 3865483
description:
[2026-06-12 15:29:03 +0000] info [cpaneld] 200.80.180.183 - mesyscomcom "GET /login/?login_only=1&user=mesyscomcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.232.90.17
country_id: 3469034
description:
[2026-06-12 15:29:10 +0000] info [cpaneld] 45.232.90.17 - mesysc "GET /login/?login_only=1&user=mesysc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesysc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.117.11.50
country_id: 2542007
description:
[2026-06-12 15:29:15 +0000] info [cpaneld] 196.117.11.50 - mesy "GET /login/?login_only=1&user=mesy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 203.128.10.61
country_id: 1168579
description:
[2026-06-12 15:29:23 +0000] info [cpaneld] 203.128.10.61 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11009
name: WHM login success
abuser: 80.248.64.198
country_id: 2363686
description:
[2026-06-12 15:29:22 +0000] info [whostmgrd] 80.248.64.198 NEW root:GQb5ckeH0qLf5KiZ address=80.248.64.198,app=whostmgrd,creator=root,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.63.18.66
country_id: 6251999
description:
[2026-06-12 15:29:24 +0000] info [cpaneld] 195.63.18.66 - vodvpozo "GET /frontend/jupiter/index.html HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.210.132.14
country_id: 1269750
description:
[2026-06-12 15:30:59 +0000] info [cpaneld] 103.210.132.14 - cafe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 15:35:14 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-12 15:36:06 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:50348: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 15:35:23 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 15:40:45 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 18.224.171.11
country_id: 6252001
description:
[2026-06-12 15:42:04 +0000] info [cpaneld] 18.224.171.11 - czqxxxnu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User czqxxxnu has their account suspended. Login blocked.


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.102.21
country_id: 2363686
description:
[2026-06-12 15:42:17 +0000] info [whostmgrd] 196.168.102.21 - root "GET /cpsess7880140748/json-api/loadavg HTTP/1.1" DEFERRED LOGIN whostmgrd: cookie ip check: IP address has changed: IP Address [80.248.64.198] != Current IP Address [196.168.102.21]


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.168.102.21
country_id: 2363686
description:
[2026-06-12 15:42:20 +0000] info [whostmgrd] 196.168.102.21 - root "GET /cpsess7880140748/websocket/Shell?rows=23&cols=144 HTTP/1.1" DEFERRED LOGIN whostmgrd: cookie ip check: IP address has changed: IP Address [80.248.64.198] != Current IP Address [196.168.102.21]


plugin: ossec
rule: 11011
name: WHM SSO login failed
abuser: 196.168.102.21
country_id: 2363686
description:
[2026-06-12 15:42:20 +0000] info [whostmgrd] 196.168.102.21 PURGE root:GQb5ckeH0qLf5KiZ badpass [cookie ip check: IP address has changed: IP Address [80.248.64.198] != Current IP Address [196.168.102.21]]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-12 15:42:32 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:41842: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 41.207.188.29
country_id: 2363686
description:
41.207.188.29 - - [12/Jun/2026:15:44:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6855327&pdata=https%253A%252F%252Fwww.arse.tg%252Flogosliderwp%252Fcontour-global%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781279051 HTTP/2.0" 302 0 www.arse.tg "https://www.arse.tg/logosliderwp/contour-global/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:41.207.188.29


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.210.132.14
country_id: 1269750
description:
[2026-06-12 15:47:02 +0000] info [cpaneld] 103.210.132.14 - cafe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 15:48:09 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.168.14
country_id: 2363686
description:
102.64.168.14 - - [12/Jun/2026:15:48:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13136283&pdata=https%253A%252F%252Fbelali.tg%252Flike-a-western-man-which-ily-lifetime%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781279289 HTTP/2.0" 302 0 belali.tg "http://www.baidu.tg/" "Mozilla/5.0 (Linux; Android 9; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.168.14


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.208.217.94
country_id: 3625428
description:
[2026-06-12 15:48:16 +0000] info [cpaneld] 201.208.217.94 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 149.3.115.21
country_id: 614540
description:
[2026-06-12 15:48:18 +0000] info [cpaneld] 149.3.115.21 - ucaouut "GET /login/?login_only=1&user=ucaouut&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.168.14
country_id: 2363686
description:
102.64.168.14 - - [12/Jun/2026:15:48:28 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6801303&pdata=https%253A%252F%252Fbelali.tg%252Flike-a-western-man-which-ily-lifetime%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781279306 HTTP/2.0" 302 0 belali.tg "http://www.baidu.tg/" "Mozilla/5.0 (Linux; Android 9; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.168.14


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 102.64.218.167
country_id: 2363686
description:
102.64.218.167 - - [12/Jun/2026:15:50:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10012830&pdata=https%253A%252F%252Fbelali.tg%252Flike-a-western-man-which-ily-lifetime%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781279268 HTTP/2.0" 404 561 belali.tg "https://www.google.tg/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.218.167


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 15:49:26 ns5 auth[1576051]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 102.64.218.167
country_id: 2363686
description:
102.64.218.167 - - [12/Jun/2026:15:50:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6867866&pdata=https%253A%252F%252Fbelali.tg%252Flike-a-western-man-which-ily-lifetime%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781279298 HTTP/2.0" 404 561 belali.tg "https://www.google.tg/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.218.167


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 118.174.161.103
country_id: 1605651
description:
2026-06-12 15:52:19 dovecot_plain authenticator failed for H=(64ktw7por8owk2t2awka8dem3xbmzyy) [118.174.161.103]:40674: 535 Incorrect authentication data (set_id=admin@togocarrierebetons.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.25.193
country_id: 2635167
domain: www.ave2.mairie.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:HEAD http:/www.ave2.mairie.tg/ HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.137
country_id: 1880251
description:
47.128.96.137 - - [12/Jun/2026:15:53:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13342826&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Ftayc-concert-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781279602 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/tayc-concert-togo/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.137


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 15:55:19 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 15:55:28 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.170.231.71
country_id: 2363686
description:
[2026-06-12 15:57:57 +0000] info [webmaild] 196.170.231.71 - agencekpalime@caissederetraites.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 202.155.186.46
country_id: 2077456
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:202.155.186.46||TA:202.155.186.46||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.203.58
country_id: 2363686
description:
[2026-06-12 16:00:55 +0000] info [cpaneld] 160.242.203.58 - pnls "GET /cpsess7577442776/execute/Notifications/get_notifications_count HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [160.242.203.59] != Current IP Address [160.242.203.58]


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 213.169.208.164
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:213.169.208.164||TA:213.169.208.164||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 144.79.225.12
country_id: 1210997
domain: www.ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.ca-togo.org/ HTTP/1.1||RSV:8.15||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 198.105.100.135
country_id: 2635167
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:198.105.100.135||TA:198.105.100.135||


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 198.235.24.127
country_id: 6252001
description:
Jun 12 16:01:20 ns5 pure-ftpd[1704923]: (?@198.235.24.127) [INFO] New connection from 198.235.24.127


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.8.75.177
country_id: 6254930
domain: fbafrica.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/fbafrica.com/hellessy-resort-2017/ HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.170.66.202
country_id: 2363686
description:
[2026-06-12 16:04:43 +0000] info [webmaild] 196.170.66.202 - ingersarlu@inger.tg "GET /cpsess9276504931/3rdparty/roundcube/?_task=mail&_mbox=INBOX HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 54.171.74.229
country_id: 2963597
description:
54.171.74.229 - - [12/Jun/2026:16:05:11 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10209648&pdata=https%253A%252F%252Fbelali.tg%252Fwp-admin%252Fuser-new.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781280310 HTTP/2.0" 302 0 belali.tg "https://belali.tg/wp-admin/user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:54.171.74.229


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 16:05:04 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.170.43.53
country_id: 2363686
domain: leadelles.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.15||T:APACHE||MV:/index.php/wp-json/wp/v2/users/me?_locale=user||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.19
country_id: 1880251
description:
47.128.96.19 - - [12/Jun/2026:16:05:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9595804&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fapessito%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781280315 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/apessito/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.19


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-12 16:05:19 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:44222: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.192.215.184
country_id: 1733045
description:
[2026-06-12 16:06:09 +0000] info [cpaneld] 14.192.215.184 - lvdt "GET /login/?login_only=1&user=lvdt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lvdt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.186.201.213
country_id: 732800
description:
[2026-06-12 16:06:12 +0000] info [cpaneld] 89.186.201.213 - lvdttg "GET /login/?login_only=1&user=lvdttg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lvdttg (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 54.171.74.229
country_id: 2963597
description:
54.171.74.229 - - [12/Jun/2026:16:05:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9739164&pdata=https%253A%252F%252Fbelali.tg%252Fwp-admin%252Fuser-new.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781280320 HTTP/2.0" 302 0 belali.tg "https://belali.tg/wp-admin/user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:54.171.74.229


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.178.220.93
country_id: 1562822
description:
[2026-06-12 16:06:19 +0000] info [cpaneld] 14.178.220.93 - lv "GET /login/?login_only=1&user=lv&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lv (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.41.106.144
country_id: 1327865
description:
[2026-06-12 16:06:05 +0000] info [cpaneld] 45.41.106.144 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.74.193.27
country_id: 3469034
description:
[2026-06-12 16:06:15 +0000] info [cpaneld] 177.74.193.27 - lvd "GET /login/?login_only=1&user=lvd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lvd (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 91.134.43.152
country_id: 3017382
description:
91.134.43.152 - - [12/Jun/2026:16:06:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6722920&pdata=http%253A%252F%252Fnps.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781280413 HTTP/1.1" 302 0 nps.tg "http://nps.tg/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:91.134.43.152


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 92.112.235.129
country_id: 3077311
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:92.112.235.129||TA:92.112.235.129||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 184.174.126.224
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:184.174.126.224||TA:184.174.126.224||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 16:08:12 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 172.245.158.215
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:172.245.158.215||TA:172.245.158.215||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 16:08:21 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 140.99.202.250
country_id: 3017382
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:140.99.202.250||TA:140.99.202.250||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.253.90.249
country_id: 3175395
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:104.253.90.249||TA:104.253.90.249||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 160.242.203.58
country_id: 2363686
description:
[2026-06-12 16:10:11 +0000] info [cpaneld] 160.242.203.58 NEW pnls:QrJc72YAwphn2Ocd address=160.242.203.58,app=cpaneld,creator=pnls,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.203.58
country_id: 2363686
description:
[2026-06-12 16:09:41 +0000] info [cpaneld] 160.242.203.58 - pnls "GET /cpsess1296955101/execute/Notifications/get_notifications_count HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [160.242.203.56] != Current IP Address [160.242.203.58]


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 173.194.92.177
country_id: 6252001
domain: ccl.tg
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/131.0.0.0 Safari/537.36||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.236
country_id: 130758
description:
Jun 12 16:12:32 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.236 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 209.50.170.56
country_id: 6252001
domain: expertsdefense.com:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/expertsdefense.com:80/ HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.236
country_id: 130758
description:
2026-06-12 16:12:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.236]:57837: 535 Incorrect authentication data (set_id=sparklab)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.151
country_id: 1880251
description:
47.128.96.151 - - [12/Jun/2026:16:13:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6867609&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fjeune-femme-leader%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781280802 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/jeune-femme-leader/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.151


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-12 16:15:50 +0000] info [webmaild] 160.242.195.10 - ldaro@caissederetraites.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 16:16:48 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.191.38.241
country_id: 1562822
domain: tdn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tg/togo-vbg-femmes-eelt-16-jours-activisme/ HTTP/1.1||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.191.38.241
country_id: 1562822
domain: tdn.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/tdn.tghttp/tdn.tg/togo-vbg-femmes-eelt-16-jours-activisme/ HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 16:18:58 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-12 16:18:22 +0000] info [webmaild] 196.171.46.177 - justine.botcholi@togointerim.net "POST /cpsess4099871300/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-12 16:19:22 +0000] info [webmaild] 196.171.46.177 - justine.botcholi@togointerim.net "POST /cpsess4099871300/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-12 16:20:21 +0000] info [webmaild] 196.171.46.177 - justine.botcholi@togointerim.net "POST /cpsess4099871300/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 16:25:03 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 27.115.124.38
country_id: 1814991
description:
27.115.124.38 - - [12/Jun/2026:16:27:14 +0000] "GET /wp-content/plugins/text-to-audio/admin/js/build/text-to-audio-button.min.js?ver=1.5.15 HTTP/1.1" 415 587 togomedia24.tg "http://togomedia24.tg/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6854807&pdata=http%253A%252F%252Ftogomedia24.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781281626" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.38


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 137.184.234.65
country_id: 6252001
description:
2026-06-12 16:26:33 dovecot_plain authenticator failed for H=(feq3a8sxsezkr1bdj0q) [137.184.234.65]:54416: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 16:26:49 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31129
name: Anti-bot protection. Grouped messages
abuser: 27.115.124.45
country_id: 1814991
description:
27.115.124.45 - - [12/Jun/2026:16:27:10 +0000] "GET /wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16 HTTP/1.1" 200 11888 togomedia24.tg "http://togomedia24.tg/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6854807&pdata=http%253A%252F%252Ftogomedia24.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781281626" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.45


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 203.153.20.210
country_id: 1643084
description:
203.153.20.210 - - [12/Jun/2026:16:29:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6855279&pdata=https%253A%252F%252Ftogodailynews.tg%252Fcop28-175-millions-usd-en-faveur-de-lalliance-pour-linfrastructure-verte-en-afrique%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781281744 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/cop28-175-millions-usd-en-faveur-de-lalliance-pour-linfrastructure-verte-en-afrique/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.1238.1422 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.153.20.210


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 192.241.78.121
country_id: 6252001
domain: 24heureinfo.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:brandywill||Email:buddygleadow5338@pecinan.net||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 192.241.78.121
country_id: 6252001
domain: 24heureinfo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:16-28.192.241.78.121||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.240.37.120
country_id: 3469034
description:
Jun 12 16:29:56 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.240.37.120 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.236
country_id: 130758
description:
2026-06-12 16:32:37 dovecot_login authenticator failed for H=(localhost) [81.30.98.236]:65281: 535 Incorrect authentication data (set_id=alpinestage)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.236
country_id: 130758
description:
Jun 12 16:32:35 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.236 has been locked due to Imunify RBL


plugin: ossec
rule: 2501
name: User authentication failure.
description:
127.0.0.1 - cfpj@cfpj.tg [06/12/2026:16:33:46 -0000] "PROPFIND" FAILED LOGIN cpdavd: Authentication failed for user: cfpj@cfpj.tg


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.242.195.10
country_id: 2363686
description:
[2026-06-12 16:34:55 +0000] info [webmaild] 160.242.195.10 - etchonda@caissederetraites.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 16:34:33 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 66.9.166.252
country_id: 3489940
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/prubeneficial.tg HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.103.146.161
country_id: 1643084
description:
Jun 12 16:37:13 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.103.146.161 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.103.146.161
country_id: 1643084
description:
2026-06-12 16:37:15 dovecot_login authenticator failed for H=(mricuFF9Cb) [103.103.146.161]:59982: 535 Incorrect authentication data (set_id=supporthosting@cafe.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 137.255.141.206
country_id: 2395170
domain: portailbj.mesyscom.com
description:
IM360 WAF: Possible XSS in arguments||MV:<p><span style=\"color: rgb(31, 78, 121);\">bonsoir mesys,</span></p><p><span style=\"color: rgb(32, 56, 100);\"> </span></p><p><span style=\"color: rgb(31, 78, 121);\">vous voudriez bien prendre en charge et r\xc3\xa9gler les dysfonctionnements constat\xc3\xa9s lors des exercices d\xe2\x80\x99\xc3\xa9vacuation au niveau de l\xe2\x80\x99agence </span><strong style=\"color: rgb(31, 78, 121);\">cocotomey</strong><span style=\"color: rgb(31, 78, 121);\"> :</span></p><p><span style=\"color: rgb(32, 56, 100);\"> </span></p><ol><li data-list=\"bullet\"><span class=\"ql-ui\" contenteditable=\"false\"></span><strong style=\"color: rgb(31, 78, 121);\">sir\xc3\xa8nes ext\xc3\xa9rieure &amp; incendie  (sans son)</strong></li></ol><p><span style=\"color: rgb(32, 56, 100);\"> </span></p><p><span style=\"color: rgb(31, 78, 121);\">merc</span><strong style=\"color: rgb(31, 78, 121);\">i </strong><span style=\"color: rgb(31, 78, 121);\">de nous proposer une solution de r\xc3\xa9paration.</span></p><p><span style=\"color: rgb(31, 78, 121);\">nous vous remercions de nous communiquer \xc3\xa0 l\xe2\x80\x99avance le nom du technicien qui fera l\xe2\x80\x99intervention et pour la diligence habituelle.</span></p>||RSV:8.15||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 37.65.112.207
country_id: 3017382
description:
37.65.112.207 - - [12/Jun/2026:16:37:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10054085&pdata=https%253A%252F%252Ftogodailynews.tg%252Fune-centrale-solaire-a-agoe-nyive-un-nouvel-elan-pour-lenergie-au-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781282272 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/une-centrale-solaire-a-agoe-nyive-un-nouvel-elan-pour-lenergie-au-togo/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.4544.1644 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.65.112.207


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 98.182.147.97
country_id: 6252001
description:
Jun 12 16:38:27 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 98.182.147.97 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 16:38:31 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 213.184.149.74
country_id: 2017370
description:
Jun 12 16:39:26 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 213.184.149.74 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 16:45:40 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.121.73
country_id: 1880251
description:
47.128.121.73 - - [12/Jun/2026:16:47:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6449560&pdata=https%253A%252F%252Ftogodailynews.tg%252Fdes-soins-de-sante-gratuits-pour-les-femmes-enceintes%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781282839 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/des-soins-de-sante-gratuits-pour-les-femmes-enceintes/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.121.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-12 16:48:02 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:38372: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 137.255.141.206
country_id: 2395170
domain: portailbj.mesyscom.com
description:
IM360 WAF: Possible XSS in arguments||MV:<p><span style=\"color: rgb(31, 78, 121);\">bonjour mesys,</span></p><p><span style=\"color: rgb(31, 78, 121);\"> </span></p><p><span style=\"color: rgb(31, 78, 121);\">nous vous prions de vous rendre en urgence \xc3\xa0 l\xe2\x80\x99agence </span><strong style=\"color: rgb(31, 78, 121);\">porto novo </strong><span style=\"color: rgb(31, 78, 121);\">pour constater</span><strong style=\"color: rgb(31, 78, 121);\"> </strong><span style=\"color: rgb(31, 78, 121);\">le dysfonctionnement suivant :</span></p><ol><li data-list=\"bullet\"><span class=\"ql-ui\" contenteditable=\"false\"></span><strong style=\"color: rgb(31, 78, 121);\">impossibilit\xc3\xa9 de joindre syst\xc3\xa8me alarme anti-intrusion \xc3\xa0 distance </strong></li></ol><p><strong style=\"color: rgb(31, 78, 121);\"> </strong></p><p><span style=\"color: rgb(31, 78, 121);\">merc</span><strong style=\"color: rgb(31, 78, 121);\">i </strong><span style=\"color: rgb(31, 78, 121);\">de nous proposer une solution de r\xc3\xa9paration d\xc3\xa9finitive.</span></p><p><span style=\"color: rgb(31, 78, 121);\">nous vous remercions de nous communiquer \xc3\xa0 l\xe2\x80\x99avance le nom du technicien qui fera l\xe2\x80\x99intervention et pour la diligence habituelle.</span></p>||RSV:8.15||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.122.114
country_id: 1880251
description:
47.128.122.114 - - [12/Jun/2026:16:49:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9857220&pdata=https%253A%252F%252Ftogodailynews.tg%252Fle-togo-dedie-un-budget-de-84-milliards-fcfa-a-lamenagement-du-reseau-routier-national%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781282943 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/le-togo-dedie-un-budget-de-84-milliards-fcfa-a-lamenagement-du-reseau-routier-national/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.122.114


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 16:51:39 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.241.251.168
country_id: 3624060
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/uploads/2026/06/Grands-Lacs-Lome-consolide-la-centralite-de-la-mediation-africaine-248x300.webp HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.236
country_id: 130758
description:
Jun 12 16:51:28 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.236 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.93.45.147
country_id: 690791
domain: togodailynews.tg:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/togodailynews.tg:80/wp-content/uploads/2026/06/4a565e07af339396856f66687cdff581_L-300x200.webp HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.35.225.197
country_id: 3996063
description:
[2026-06-12 16:52:19 +0000] info [cpaneld] 38.35.225.197 - cafe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.236
country_id: 130758
description:
2026-06-12 16:51:30 dovecot_login authenticator failed for H=(localhost) [81.30.98.236]:53392: 535 Incorrect authentication data (set_id=redisprod)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.122.114
country_id: 1880251
description:
47.128.122.114 - - [12/Jun/2026:16:53:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10394978&pdata=http%253A%252F%252Ftogodailynews.tg%252Fve-republique-faure-gnassingbe-1r-pc-prete-serment%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781283235 HTTP/1.1" 302 0 togodailynews.tg "http://togodailynews.tg/ve-republique-faure-gnassingbe-1r-pc-prete-serment/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.122.114


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.3.220.88
country_id: 798544
description:
[2026-06-12 16:54:25 +0000] info [webmaild] 195.3.220.88 - stephane@sitewebofficiel.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 16:56:07 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 150.241.71.35
country_id: 660013
description:
2026-06-12 16:58:37 dovecot_login authenticator failed for H=(inger.tg) [150.241.71.35]:48448: 535 Incorrect authentication data (set_id=sessou.e@inger.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 150.241.71.35
country_id: 660013
description:
Jun 12 16:58:35 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 150.241.71.35 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 16:58:57 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 43.156.53.120
country_id: 1880251
description:
43.156.53.120 - - [12/Jun/2026:17:02:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13026195&pdata=https%253A%252F%252Fcivilemagazine.tg%252Ftogo-pourquoi-le-president-de-la-republique-a-ete-eleve-a-la-plus-haute-dignite-nationale%252F%253Famp%253D1&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781283731 HTTP/2.0" 302 0 civilemagazine.tg "https://civilemagazine.tg/togo-pourquoi-le-president-de-la-republique-a-ete-eleve-a-la-plus-haute-dignite-nationale/?amp=1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.156.53.120


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 205.210.31.245
country_id: 6252001
description:
Jun 12 17:04:13 ns5 pure-ftpd[1745844]: (?@205.210.31.245) [INFO] New connection from 205.210.31.245


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.6
country_id: 6252001
description:
205.169.39.6 - - [12/Jun/2026:17:06:09 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10273475&pdata=http%253A%252F%252Fwww.la-snb-togo.snb.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781283962 HTTP/1.1" 302 0 www.la-snb-togo.snb.tg "http://www.la-snb-togo.snb.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.6


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 50.2.38.64
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:17-06.50.2.38.64||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 37.72.186.19
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:17-06.37.72.186.19||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 200.10.41.98
country_id: 6252001
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:17-06.200.10.41.98||RSV:8.15||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.35.225.197
country_id: 3996063
description:
[2026-06-12 17:06:55 +0000] info [cpaneld] 38.35.225.197 - cafe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 17:06:27 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 194.44.140.118
country_id: 690791
description:
Jun 12 17:10:21 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 194.44.140.118 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 188.92.213.13
country_id: 614540
description:
Jun 12 17:10:39 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 188.92.213.13 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.19.118.57
country_id: 798544
description:
Jun 12 17:11:19 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.19.118.57 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.236
country_id: 130758
description:
2026-06-12 17:11:40 dovecot_login authenticator failed for H=(localhost) [81.30.98.236]:53228: 535 Incorrect authentication data (set_id=cassandradev)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.19.118.57
country_id: 798544
description:
Jun 12 17:11:26 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.19.118.57 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 193.149.176.26
country_id: 6252001
description:
[2026-06-12 17:11:34 +0000] info [cpaneld] 193.149.176.26 - esso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user esso (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.196
country_id: 1880251
description:
47.128.96.196 - - [12/Jun/2026:17:11:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9726060&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fdwayne-wade%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781284295 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/dwayne-wade/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.196


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.236
country_id: 130758
description:
Jun 12 17:11:38 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.236 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 193.149.176.26
country_id: 6252001
description:
[2026-06-12 17:12:46 +0000] info [cpaneld] 193.149.176.26 - czqxxxnu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User czqxxxnu has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.212.235.141
country_id: 1880251
description:
[2026-06-12 17:13:18 +0000] info [cpaneld] 129.212.235.141 - ayhhhyhk "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayhhhyhk (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.71.45
country_id: 3469034
description:
Jun 12 17:14:06 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.71.45 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.35.225.197
country_id: 3996063
description:
[2026-06-12 17:14:58 +0000] info [cpaneld] 38.35.225.197 - cafetg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.44.71.45
country_id: 3469034
description:
Jun 12 17:14:20 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.44.71.45 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.96.6
country_id: 99237
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/10.jpeg HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 8.210.147.41
country_id: 1819730
description:
Jun 12 17:15:46 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 8.210.147.41 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 103.197.170.18
country_id: 1819730
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:103.197.170.18||TA:103.197.170.18||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 17:20:44 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 17:21:25 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong>le processus de d\xc3\xa9centralisation franchit une nouvelle \xc3\xa9tape cruciale au togo. l\xe2\x80\x99ex\xc3\xa9cutif togolais a officiellement lanc\xc3\xa9, le mardi 9 juin dernier, le projet \xc2\xab gnozou \xc2\xbb. dot\xc3\xa9 d\xe2\x80\x99une enveloppe financi\xc3\xa8re de pr\xc3\xa8s de cinq (05) milliards de fcfa, ce programme d\xe2\x80\x99envergure vise \xc3\xa0 transformer la gouvernance locale et \xc3\xa0 dynamiser l'\xc3\xa9conomie des territoires \xc3\xa0 la base.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\xc2\xab gnozou \xc2\xbb, \xe2\x80\x98\xe2\x80\x99d\xc3\xa9veloppement\xe2\x80\x99\xe2\x80\x99, en langue kaby\xc3\xa8, nom traduit en effet l'ambition du gouvernement togolais, qui n\xe2\x80\x99est autre que d\xe2\x80\x99insuffler une nouvelle dynamique de d\xc3\xa9veloppement territorial.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le projet a pour mission principale de renforcer les comp\xc3\xa9tences et les capacit\xc3\xa9s des acteurs territoriaux (\xc3\xa9lus locaux, agents communaux, soci\xc3\xa9t\xc3\xa9 civile). l'objectif est de leur donner les outils n\xc3\xa9cessaires pour mieux valoriser les immenses potentialit\xc3\xa9s sociales et \xc3\xa9conomiques de leurs localit\xc3\xa9s respectives.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"608px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:608px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>pour sa phase de mise en \xc5\x93uvre, le projet gnozou se concentre strat\xc3\xa9giquement sur le nord du pays, une zone cl\xc3\xa9 pour l'inclusion socio-\xc3\xa9conomique. il s\xe2\x80\x99agit des r\xc3\xa9gions de la kara et des savanes pour un budget global de 4,85 milliards de fcfa, environ 7,4 millions d\xe2\x80\x99euros.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ce financement devra permettre de d\xc3\xa9ployer des infrastructures, des formations et des outils de gestion moderne au sein des diff\xc3\xa9rentes communes des deux r\xc3\xa9gions.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour garantir un impact r\xc3\xa9el sur les conditions de vie des populations \xc3\xa0 la base, quatre axes majeurs sont vis\xc3\xa9s par ledit projet.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>primo, l'am\xc3\xa9lioration de la planification locale. il sera question d\xe2\x80\x99aider les communes \xc3\xa0 concevoir des plans de d\xc3\xa9veloppement communaux (pdc) r\xc3\xa9alistes et ambitieux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>secondo, la gestion des comp\xc3\xa9tences transf\xc3\xa9r\xc3\xa9e. il s\xe2\x80\x99agit d\xe2\x80\x99accompagner les collectivit\xc3\xa9s territoriales dans l'exercice de leurs nouvelles pr\xc3\xa9rogatives accord\xc3\xa9es par l'\xc3\x89tat central.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>tertio, le d\xc3\xa9veloppement \xc3\xa9conomique local, qui entendcr\xc3\xa9er des opportunit\xc3\xa9s d'affaires et stimuler les investissements dans les territoires.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>quarto, la transparence et la redevabilit\xc3\xa9 \xc3\xa0 travers la promotion d\xe2\x80\x99une culture de bonne gouvernance o\xc3\xb9 la participation citoyenne est au c\xc5\x93ur des d\xc3\xa9cisions.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab ce projet ouvre une nouvelle phase o\xc3\xb9 les acquis institutionnels doivent produire des r\xc3\xa9sultats tangibles au profit des populations \xc2\xbb,</em> a insist\xc3\xa9 koamy gomado, ministre en charge du d\xc3\xa9veloppement local.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31156,\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/cf280d22-5566-4950-b6b8-986b4a8db8fc-724x1024.jpg\" alt=\"\" class=\"wp-image-31156\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>notons que le lancement du projet gnozou n'est pas un fait isol\xc3\xa9. il s'inscrit dans la droite ligne avec la mise en \xc5\x93uvre progressive de la politique nationale de d\xc3\xa9centralisation (pona 2025-2034) du togo.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cette feuille de route d\xc3\xa9cennale constitue le cadre de r\xc3\xa9f\xc3\xa9rence pour renforcer l\xe2\x80\x99autonomie financi\xc3\xa8re et administrative des collectivit\xc3\xa9s territoriales. en misant sur une d\xc3\xa9centralisation plus participative, inclusive et performante, le togo pose les fondations d'une croissance \xc3\xa9conomique qui ne laisse aucune communaut\xc3\xa9 de c\xc3\xb4t\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>la r\xc3\xa9daction</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 172.239.242.103
country_id: 2750405
description:
Jun 12 17:24:38 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 172.239.242.103 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.98.11.48
country_id: 2589581
domain: www.djama.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.djama.tg/uploads/images/249.png HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 196.171.122.34
country_id: 2363686
description:
[2026-06-12 17:27:03 +0000] info [cpaneld] 196.171.122.34 NEW mvfxewjz:A_UZa7W9LthQ6EsJ address=196.171.122.34,app=cpaneld,creator=mvfxewjz,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 186.71.9.212
country_id: 3658394
description:
186.71.9.212 - - [12/Jun/2026:17:28:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7062885&pdata=https%253A%252F%252Ftogodailynews.tg%252Fbiashara-afrika-2026-lafrique-mise-sur-lagriculture-et-le-commerce-pour-renforcer-son-integration%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781285310 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/biashara-afrika-2026-lafrique-mise-sur-lagriculture-et-le-commerce-pour-renforcer-son-integration/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.4843.1500 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:186.71.9.212


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 74.7.227.148
country_id: 6252001
domain: ave2.mairie.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.15||T:APACHE||MV:/wp-json/wp/v2/users/2||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 111.61.176.242
country_id: 1814991
description:
Jun 12 17:29:56 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 111.61.176.242 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.181.78.214
country_id: 6252001
description:
[2026-06-12 17:30:13 +0000] info [cpaneld] 217.181.78.214 - arsjawjaz "GET / HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.170.231.71
country_id: 2363686
description:
[2026-06-12 17:29:22 +0000] info [webmaild] 196.170.231.71 - agencekpalime@caissederetraites.tg "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 17:29:55 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 17:31:23 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.0.127.97
country_id: 3469034
description:
[2026-06-12 17:34:11 +0000] info [cpaneld] 179.0.127.97 - cec "GET /login/?login_only=1&user=cec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.95.56.188
country_id: 3469034
description:
[2026-06-12 17:34:14 +0000] info [cpaneld] 187.95.56.188 - ce "GET /login/?login_only=1&user=ce&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ce (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 115.135.198.76
country_id: 1733045
description:
[2026-06-12 17:33:55 +0000] info [cpaneld] 115.135.198.76 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.153.176.64
country_id: 102358
description:
[2026-06-12 17:34:03 +0000] info [cpaneld] 46.153.176.64 - cecaptg "GET /login/?login_only=1&user=cecaptg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cecaptg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 49.145.128.167
country_id: 1694008
description:
[2026-06-12 17:34:06 +0000] info [cpaneld] 49.145.128.167 - ceca "GET /login/?login_only=1&user=ceca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceca (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.195.24.147
country_id: 1269750
description:
Jun 12 17:34:19 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.195.24.147 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>le coup d\xe2\x80\x99envoi de la coupe du monde 2026 a \xc3\xa9t\xc3\xa9 donn\xc3\xa9, hier 11 juin avec un duel mewique \xe2\x80\x93 afrique du sud. au-del\xc3\xa0 du score sur le terrain (2-0 pour le mexique), c\xe2\x80\x99est une tout autre partition qui s\xe2\x80\x99est jou\xc3\xa9e sur les r\xc3\xa9seaux sociaux et dans les fanzones du continent africain. lors du match d'ouverture opposant el tri aux bafana bafana, un ph\xc3\xa9nom\xc3\xa8ne saisissant a saut\xc3\xa9 aux yeux : une immense majorit\xc3\xa9 des supporters africains a ouvertement soutenu le mexique. derri\xc3\xa8re ce d\xc3\xa9samour apparent, se cache une fracture politique et sociale profonde li\xc3\xa9e au fl\xc3\xa9au de la x\xc3\xa9nophobie en afrique du sud.</em></strong><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>un match d'ouverture sous le signe de la discorde continentale</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>historiquement, les comp\xc3\xa9titions internationales de football ont toujours \xc3\xa9t\xc3\xa9 le th\xc3\xa9\xc3\xa2tre d\xe2\x80\x99une union sacr\xc3\xa9e derri\xc3\xa8re le concept de la <em>\xc2\xab solidarit\xc3\xa9 africaine \xc2\xbb</em>. qu'il s'agisse du parcours du maroc en 2022 ou du ghana en 2010, le continent a l'habitude de vibrer d'une seule voix pour ses repr\xc3\xa9sentants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pourtant, ce jeudi lors de l'ouverture du mondial 2026, la tradition a vol\xc3\xa9 en \xc3\xa9clats. du nigeria au zimbabwe, en passant par la r\xc3\xa9publique d\xc3\xa9mocratique du congo ou le ghana, les internautes africains ont c\xc3\xa9l\xc3\xa9br\xc3\xa9 les buts mexicains comme s'il s'agissait de leur propre \xc3\xa9quipe nationale. une rupture de ban qui a enflamm\xc3\xa9 les plateaux sportifs et les r\xc3\xa9seaux sociaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"586px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:586px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>le spectre de la x\xc3\xa9nophobie en afrique du sud au c\xc5\x93ur du boycott</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>pour comprendre cette col\xc3\xa8re continentale, il faut quitter les pelouses pour analyser les r\xc3\xa9alit\xc3\xa9s sociopolitiques de la nation arc-en-ciel. depuis plus d'une d\xc3\xa9cennie, l\xe2\x80\x99afrique du sud est r\xc3\xa9guli\xc3\xa8rement le th\xc3\xa9\xc3\xa2tre de violentes vagues d\xe2\x80\x99attaques x\xc3\xa9nophobes visant les migrants issus d'autres pays d'afrique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>plusieurs facteurs expliquent ce ressentiment qui s'est aujourd'hui d\xc3\xa9plac\xc3\xa9 sur le terrain du football. pour certains analystes, les violences r\xc3\xa9currents sont \xc3\xa0 l\xe2\x80\x99origine de ce d\xc3\xa9samour. les commerces et les habitations de ressortissants nig\xc3\xa9rians, zimbabw\xc3\xa9ens, mozambicains ou congolais ont, \xc3\xa0 maintes reprises, \xc3\xa9t\xc3\xa9 pill\xc3\xa9s ou br\xc3\xbbl\xc3\xa9s dans les <em>townships</em>, sous pr\xc3\xa9texte qu\xe2\x80\x99ils <em>\xc2\xab voleraient les emplois </em>\xc2\xbb locaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le sentiment d'ingratitude est point\xc3\xa9 du doigt par d\xe2\x80\x99autres analystes. en effet,beaucoup de pays africains rappellent le r\xc3\xb4le crucial qu'ils ont jou\xc3\xa9 (accueil des exil\xc3\xa9s, soutien financier et diplomatique) dans la lutte contre l'apartheid. voir leurs ressortissants maltrait\xc3\xa9s aujourd'hui en afrique du sud, est v\xc3\xa9cu comme une profonde trahison historique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>mais la rh\xc3\xa9torique politique est toute autre. les discours de certains leaders politiques sud-africains, pointant du doigt l'immigration clandestine pour justifier la crise \xc3\xa9conomique nationale, ont exacerb\xc3\xa9 les tensions \xc3\xa0 travers tout le continent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab pourquoi soutiendrions-nous un pays qui traque nos fr\xc3\xa8res et s\xc5\x93urs au quotidien ? \xc2\xbb</em> s'interrogeait un internaute ivoirien dans une publication partag\xc3\xa9e des milliers de fois pendant le match.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>quand le football devient le tribunal de la diplomatie populaire</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le boycott des <em>bafana bafana</em> par le public africain d\xc3\xa9montre que le football moderne n\xe2\x80\x99est plus imperm\xc3\xa9able aux r\xc3\xa9alit\xc3\xa9s du monde. pour de nombreux africains de la diaspora et du continent, refuser son soutien \xc3\xa0 l'afrique du sud lors de ce match d'ouverture, \xc3\xa9tait le seul moyen pacifique et mondialement visible d'envoyer un signal fort \xc3\xa0 pretoria.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31157,\"width\":\"550px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/18d98b1d-0295-41c7-afab-fc9c13606bd0-724x1024.jpg\" alt=\"\" class=\"wp-image-31157\" style=\"width:550px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>si la d\xc3\xa9faite 2-0 face au mexique complique d\xc3\xa9j\xc3\xa0 les affaires sportives de l'afrique du sud dans cette coupe du monde, la perte de son statut de <em>\xc2\xab chouchou du continent \xc2\xbb</em> est sans doute le revers le plus difficile \xc3\xa0 encaisser pour l'image du pays.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>la coupe du monde 2026 ne fait que commencer, mais elle a d\xc3\xa9j\xc3\xa0 rappel\xc3\xa9 une v\xc3\xa9rit\xc3\xa9 essentielle : sur la sc\xc3\xa8ne internationale, la solidarit\xc3\xa9 ne se d\xc3\xa9cr\xc3\xa8te pas, elle se m\xc3\xa9rite au jour le jour, sur et en dehors du terrain.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>mc</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.142.57.181
country_id: 2542007
description:
[2026-06-12 17:33:58 +0000] info [cpaneld] 41.142.57.181 - cecap "GET /login/?login_only=1&user=cecap&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cecap (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 17:37:25 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 74.7.227.165
country_id: 6252001
domain: c2ie.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.15||T:APACHE||MV:/wp-json/wp/v2/users/1||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 17:40:45 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.195.24.147
country_id: 1269750
description:
Jun 12 17:42:24 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.195.24.147 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 17:46:26 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.195.24.147
country_id: 1269750
description:
Jun 12 17:49:12 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.195.24.147 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 17:50:37 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 168.90.77.21
country_id: 3469034
description:
168.90.77.21 - - [12/Jun/2026:17:53:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9998695&pdata=https%253A%252F%252Feducplusmedia.tg%252F2026%252F04%252F09%252Fcommune-dagoe-nyive-1-le-maire-aguze-akossiwa-ouvre-la-2%2525E1%2525B5%252589-session-ordinaire-du-conseil-municipal-sous-le-signe-dune-presence-accrue-sur-le-terrain%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781286803 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/2026/04/09/commune-dagoe-nyive-1-le-maire-aguze-akossiwa-ouvre-la-2%E1%B5%89-session-ordinaire-du-conseil-municipal-sous-le-signe-dune-presence-accrue-sur-le-terrain/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.6305.1403 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:168.90.77.21


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.220.100.255
country_id: 2921044
description:
2026-06-12 17:55:18 dovecot_plain authenticator failed for H=tor-exit-4.zbau.f3netze.de (ioag4jx7lyfipykhiy8zxvz463) [185.220.100.255]:55134: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.220.100.255
country_id: 2921044
description:
Jun 12 17:55:16 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.220.100.255 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 37.231.156.30
country_id: 285570
description:
37.231.156.30 - - [12/Jun/2026:17:55:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9869169&pdata=https%253A%252F%252Feducplusmedia.tg%252F2026%252F04%252F09%252Fcommune-dagoe-nyive-1-le-maire-aguze-akossiwa-ouvre-la-2%2525E1%2525B5%252589-session-ordinaire-du-conseil-municipal-sous-le-signe-dune-presence-accrue-sur-le-terrain%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781286913 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/2026/04/09/commune-dagoe-nyive-1-le-maire-aguze-akossiwa-ouvre-la-2%E1%B5%89-session-ordinaire-du-conseil-municipal-sous-le-signe-dune-presence-accrue-sur-le-terrain/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.6353.1296 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:37.231.156.30


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.195.24.147
country_id: 1269750
description:
Jun 12 17:57:16 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.195.24.147 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 66.116.196.163
country_id: 1269750
description:
2026-06-12 17:58:13 dovecot_login authenticator failed for H=(66-116-196-163.webhostbox.net) [66.116.196.163]:50712: 535 Incorrect authentication data (set_id=emploi@emt.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 17:57:53 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 66.116.196.163
country_id: 1269750
description:
Jun 12 17:58:11 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 66.116.196.163 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 66.116.196.163
country_id: 1269750
description:
Jun 12 17:58:21 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 66.116.196.163 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 66.116.196.163
country_id: 1269750
description:
2026-06-12 17:58:23 dovecot_login authenticator failed for H=(66-116-196-163.webhostbox.net) [66.116.196.163]:37674: 535 Incorrect authentication data (set_id=emploi@emt.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 18:00:36 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 41.207.187.98
country_id: 2363686
description:
[2026-06-12 18:02:57 +0000] info [cpaneld] 41.207.187.98 NEW atddem:i7v2OXgU9CZ3Qrk_ address=41.207.187.98,app=cpaneld,creator=atddem,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.195.24.147
country_id: 1269750
description:
Jun 12 18:04:05 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.195.24.147 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 128.14.92.85
country_id: 1562822
description:
2026-06-12 18:03:40 dovecot_plain authenticator failed for H=(dgdn-togo.tg) [128.14.92.85]:37452: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.5.153.187
country_id: 3865483
description:
2026-06-12 18:03:48 dovecot_plain authenticator failed for H=(dgdn-togo.tg) [45.5.153.187]:41966: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-12 18:05:00 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:49420: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 195.250.29.165
country_id: 6252001
description:
Jun 12 18:04:28 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 195.250.29.165 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 195.250.29.165
country_id: 6252001
description:
2026-06-12 18:04:30 dovecot_plain authenticator failed for H=server1.acentoempresarial.com (iyy3r9iy21zdwiyms0) [195.250.29.165]:39498: 535 Incorrect authentication data (set_id=stephane.o@cafe.tg)


plugin: cl_dos
name: DOS detection
abuser: 47.52.223.161
country_id: 1819730
description:
2026-06-12 18:05:36.689105791 +0000 GMT m=+168318.134555278 Denial of Service attack was discovered from 47.52.223.161, on port 52223. Open connections: 302


plugin: cl_dos
name: DOS detection
abuser: 103.189.197.43
country_id: 1643084
description:
2026-06-12 18:07:20.109244591 +0000 GMT m=+168421.554694078 Denial of Service attack was discovered from 103.189.197.43, on port 52223. Open connections: 320


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 18:06:44 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-12 18:08:06 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:50308: 535 Incorrect authentication data (set_id=michela@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 12 18:08:04 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 12 18:08:08 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-12 18:08:10 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:46370: 535 Incorrect authentication data (set_id=anhanga@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 12 18:08:13 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: cl_dos
name: DOS detection
abuser: 103.189.197.43
country_id: 1643084
description:
2026-06-12 18:07:55.421856142 +0000 GMT m=+168456.867305529 Denial of Service attack was discovered from 103.189.197.43, on port 52223. Open connections: 293


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-12 18:08:05 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:54950: 535 Incorrect authentication data (set_id=sb1@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 12 18:08:03 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-12 18:08:10 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:41874: 535 Incorrect authentication data (set_id=alex@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 12 18:08:08 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-12 18:08:15 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:21466: 535 Incorrect authentication data (set_id=teacher1@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 12 18:08:20 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 12 18:08:33 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-12 18:08:35 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:45966: 535 Incorrect authentication data (set_id=jgarcia@ns5.netmaster.tg)


plugin: cl_dos
name: DOS detection
abuser: 194.102.38.65
country_id: 2635167
description:
2026-06-12 18:09:00.198121797 +0000 GMT m=+168521.643571184 Denial of Service attack was discovered from 194.102.38.65, on port 80. Open connections: 327


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 213.55.96.152
country_id: 337996
description:
2026-06-12 18:09:11 dovecot_plain authenticator failed for H=(u4q7ielp51oa0w1xm99rwgiij3j) [213.55.96.152]:51156: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 12 18:08:22 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 12 18:08:22 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-12 18:08:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:37446: 535 Incorrect authentication data (set_id=anhanga@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-12 18:08:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:49316: 535 Incorrect authentication data (set_id=f5723580@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 12 18:08:29 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.38.17.57
country_id: 6252001
description:
[2026-06-12 18:09:05 +0000] info [cpaneld] 45.38.17.57 - einguval "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user einguval (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 12 18:08:22 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-12 18:08:22 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:59642: 535 Incorrect authentication data (set_id=rtorres@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-12 18:08:24 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:35476: 535 Incorrect authentication data (set_id=sb1@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-12 18:08:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:58774: 535 Incorrect authentication data (set_id=surachart@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 213.55.96.152
country_id: 337996
description:
Jun 12 18:09:09 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 213.55.96.152 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 12 18:09:42 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.62
country_id: 130758
description:
Jun 12 18:09:25 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.62 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 12 18:09:26 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-12 18:09:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:50372: 535 Incorrect authentication data (set_id=xcp@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-12 18:09:28 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:27108: 535 Incorrect authentication data (set_id=tt1@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 50.255.62.89
country_id: 6252001
description:
Jun 12 18:09:47 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 50.255.62.89 has been locked due to Imunify RBL


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-12 18:10:18 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:8130: 535 Incorrect authentication data (set_id=onyx@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.62
country_id: 130758
description:
2026-06-12 18:09:27 dovecot_login authenticator failed for H=(localhost) [81.30.98.62]:2756: 535 Incorrect authentication data (set_id=supervisores@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 12 18:09:29 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: cl_dos
name: DOS detection
abuser: 194.102.38.65
country_id: 2635167
description:
2026-06-12 18:09:30.675831126 +0000 GMT m=+168552.121280513 Denial of Service attack was discovered from 194.102.38.65, on port 80. Open connections: 420


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-12 18:09:31 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:28908: 535 Incorrect authentication data (set_id=cafe@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 12 18:09:34 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-12 18:09:44 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:29626: 535 Incorrect authentication data (set_id=delphi@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 46.224.84.215
country_id: 2921044
description:
Jun 12 18:09:47 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 46.224.84.215 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 12 18:09:29 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-12 18:09:36 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:37290: 535 Incorrect authentication data (set_id=dongming@ns5.netmaster.tg)


plugin: cl_dos
name: DOS detection
abuser: 194.102.38.65
country_id: 2635167
description:
2026-06-12 18:10:31.953814985 +0000 GMT m=+168613.399264372 Denial of Service attack was discovered from 194.102.38.65, on port 80. Open connections: 353


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 18:10:31 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 177.227.201.120
country_id: 3996063
description:
177.227.201.120 - - [12/Jun/2026:18:10:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9934442&pdata=https%253A%252F%252Ftogodailynews.tg%252Fmedia-la-chaine-de-television-gmat-web-tv-officiellement-lancee%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781287847 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/media-la-chaine-de-television-gmat-web-tv-officiellement-lancee/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2753.1820 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:177.227.201.120


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 181.174.228.109
country_id: 3686110
description:
181.174.228.109 - - [12/Jun/2026:18:11:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9988764&pdata=https%253A%252F%252Ftogodailynews.tg%252Feducation-de-qualite-au-togo-les-enseignants-une-priorite-du-gouvernement%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781287891 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/education-de-qualite-au-togo-les-enseignants-une-priorite-du-gouvernement/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2595.1682 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:181.174.228.109


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 103.122.91.109
country_id: 1210997
description:
103.122.91.109 - - [12/Jun/2026:18:11:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13002602&pdata=https%253A%252F%252Ftogodailynews.tg%252Ftogo-la-revolution-digitale-au-service-de-la-proximite%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781287902 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/togo-la-revolution-digitale-au-service-de-la-proximite/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.8908.1458 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:103.122.91.109


plugin: ossec
rule: 6012
name: Imunify PAM. The account has been temporarily locked
abuser: 74.89.121.1
country_id: 6252001
description:
Jun 12 18:13:14 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_UL] The account info@cndh-togo.org has been temporarily locked by Imunify PAM(74.89.121.1)


plugin: ossec
rule: 6012
name: Imunify PAM. The account has been temporarily locked
abuser: 172.56.178.55
country_id: 6252001
description:
Jun 12 18:13:08 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_UL] The account info@cndh-togo.org has been temporarily locked by Imunify PAM(172.56.178.55)


plugin: ossec
rule: 6012
name: Imunify PAM. The account has been temporarily locked
abuser: 206.220.160.43
country_id: 6252001
description:
Jun 12 18:13:26 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_UL] The account info@cndh-togo.org has been temporarily locked by Imunify PAM(206.220.160.43)


plugin: cl_dos
name: DOS detection
abuser: 194.102.38.65
country_id: 2635167
description:
2026-06-12 18:13:47.613744332 +0000 GMT m=+168809.059193719 Denial of Service attack was discovered from 194.102.38.65, on port 52224. Open connections: 254


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 18:14:44 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 45.238.182.171
country_id: 3686110
description:
45.238.182.171 - - [12/Jun/2026:18:14:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10197356&pdata=https%253A%252F%252Ftogodailynews.tg%252Fecobank-et-agra-un-partenariat-strategique-pour-transformer-lagriculture-africaine%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781288092 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/ecobank-et-agra-un-partenariat-strategique-pour-transformer-lagriculture-africaine/" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.4829.1669 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:45.238.182.171


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 152.203.205.104
country_id: 3686110
description:
152.203.205.104 - - [12/Jun/2026:18:16:35 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9740141&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fmarches-financiers%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781288193 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/marches-financiers/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.4734.1637 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:152.203.205.104


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 101.56.178.174
country_id: 3175395
description:
101.56.178.174 - - [12/Jun/2026:18:16:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10274404&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Frepartition-des-salles-des-examens-a-luniversite-de-lome%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781288201 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/repartition-des-salles-des-examens-a-luniversite-de-lome/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.5015.1097 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:101.56.178.174


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 18:16:33 ns5 pure-ftpd[1786280]: (?@137.184.97.15) [WARNING] Authentication failed for user [atanys]


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 18:19:49 ns5 pure-ftpd[1787507]: (?@137.184.97.15) [WARNING] Authentication failed for user [Turbolte]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 18:19:54 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 18:20:37 ns5 pure-ftpd[1787960]: (?@137.184.97.15) [WARNING] Authentication failed for user [pepe]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 34.27.42.6
country_id: 6252001
description:
[2026-06-12 18:24:11 +0000] info [cpaneld] 34.27.42.6 - mesyscom "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 18:23:50 ns5 pure-ftpd[1789574]: (?@137.184.97.15) [WARNING] Authentication failed for user [Turbolte]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 38.156.230.10
country_id: 3686110
description:
38.156.230.10 - - [12/Jun/2026:18:24:57 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13070226&pdata=https%253A%252F%252Feducplusmedia.tg%252F2025%252F07%252F07%252Fcampagne-electorale-a-adetikope-unir-lance-ses-premiers-meetings-a-kpotave-adetikope-centre-et-devime%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781288695 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/2025/07/07/campagne-electorale-a-adetikope-unir-lance-ses-premiers-meetings-a-kpotave-adetikope-centre-et-devime/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.1894.1844 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:38.156.230.10


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.189.196.122
country_id: 3469034
description:
Jun 12 18:26:07 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.189.196.122 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 110.25.90.235
country_id: 1668284
description:
Jun 12 18:27:14 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 110.25.90.235 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.189.196.122
country_id: 3469034
description:
Jun 12 18:26:22 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.189.196.122 has been locked due to Imunify RBL


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 18:26:47 ns5 pure-ftpd[1790982]: (?@137.184.97.15) [WARNING] Authentication failed for user [atanys]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 201.63.138.70
country_id: 3469034
description:
Jun 12 18:26:58 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 201.63.138.70 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 50.255.62.89
country_id: 6252001
description:
Jun 12 18:27:04 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 50.255.62.89 has been locked due to Imunify RBL


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 102.64.164.32
country_id: 2363686
description:
102.64.164.32 - - [12/Jun/2026:18:27:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6647919&pdata=https%253A%252F%252Ftogodailynews.tg%252Fmobile-money-plus-de-600-milliards-de-fcfa-transferes-en-2018-au-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781288694 HTTP/2.0" 404 561 togodailynews.tg "-" "Mozilla/5.0 (Linux; Android 13; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.164.32


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 43.228.131.114
country_id: 2029969
description:
Jun 12 18:27:13 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 43.228.131.114 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 197.255.199.193
country_id: 2413451
description:
Jun 12 18:27:46 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 197.255.199.193 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 189.56.252.115
country_id: 3469034
description:
Jun 12 18:28:01 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 189.56.252.115 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 197.255.198.85
country_id: 2413451
description:
Jun 12 18:27:29 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 197.255.198.85 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 125.129.142.200
country_id: 1835841
description:
Jun 12 18:27:37 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 125.129.142.200 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 111.4.65.37
country_id: 1814991
description:
Jun 12 18:27:41 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 111.4.65.37 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 95.68.148.0
country_id: 2017370
description:
Jun 12 18:28:54 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 95.68.148.0 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 18:28:55 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 125.129.142.200
country_id: 1835841
description:
Jun 12 18:29:02 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 125.129.142.200 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 201.63.138.70
country_id: 3469034
description:
Jun 12 18:29:42 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 201.63.138.70 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.210.132.14
country_id: 1269750
description:
[2026-06-12 18:29:43 +0000] info [cpaneld] 103.210.132.14 - mesyscom "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 18:30:23 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 154.198.42.71
country_id: 241170
description:
Jun 12 18:31:46 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 154.198.42.71 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.38.239
country_id: 2363686
description:
[2026-06-12 18:32:05 +0000] info [webmaild] 196.171.38.239 - guillaume.saguintaah@togointerim.net "POST /cpsess3285366991/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" DEFERRED LOGIN webmaild: cookie ip check: IP address has changed: IP Address [196.168.219.218] != Current IP Address [196.171.38.239]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 18:37:09 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 18:37:39 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 98.48.178.139
country_id: 6252001
description:
Jun 12 18:37:41 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 98.48.178.139 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 98.48.178.139
country_id: 6252001
description:
2026-06-12 18:37:43 dovecot_plain authenticator failed for H=c-98-48-178-139.hsd1.sc.comcast.net (phtle) [98.48.178.139]:58450: 535 Incorrect authentication data (set_id=admin@white-ways.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.32.88.1
country_id: 2017370
description:
[2026-06-12 18:40:10 +0000] info [cpaneld] 95.32.88.1 - leadell "GET /login/?login_only=1&user=leadell&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadell (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 86.108.17.110
country_id: 248816
description:
[2026-06-12 18:40:19 +0000] info [cpaneld] 86.108.17.110 - lead "GET /login/?login_only=1&user=lead&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lead (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.90.138.254
country_id: 3686110
description:
[2026-06-12 18:39:58 +0000] info [cpaneld] 190.90.138.254 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.89.101.119
country_id: 1522867
description:
[2026-06-12 18:40:02 +0000] info [cpaneld] 178.89.101.119 - leadelles "GET /login/?login_only=1&user=leadelles&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadelles (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 90.151.89.157
country_id: 2017370
description:
[2026-06-12 18:40:04 +0000] info [cpaneld] 90.151.89.157 - leadellestg "GET /login/?login_only=1&user=leadellestg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadellestg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.179.44.235
country_id: 2542007
description:
[2026-06-12 18:40:07 +0000] info [cpaneld] 160.179.44.235 - leadelle "GET /login/?login_only=1&user=leadelle&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadelle (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.201.98.75
country_id: 3996063
description:
[2026-06-12 18:40:23 +0000] info [cpaneld] 187.201.98.75 - lea "GET /login/?login_only=1&user=lea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lea (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 153.67.119.122
country_id: 3996063
description:
[2026-06-12 18:40:27 +0000] info [cpaneld] 153.67.119.122 - le "GET /login/?login_only=1&user=le&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user le (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 66.76.106.13
country_id: 6252001
description:
Jun 12 18:43:44 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 66.76.106.13 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.239.236.1
country_id: 1733045
description:
[2026-06-12 18:43:57 +0000] info [cpaneld] 173.239.236.1 - yxhnfwxr "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 78.83.142.110
country_id: 732800
description:
Jun 12 18:44:00 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 78.83.142.110 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.224.240
country_id: 1269750
description:
Jun 12 18:44:10 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.224.240 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 183.107.76.127
country_id: 1835841
description:
Jun 12 18:43:38 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 183.107.76.127 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.171.197
country_id: 3175395
description:
Jun 12 18:43:53 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.171.197 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 189.56.252.115
country_id: 3469034
description:
Jun 12 18:43:54 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 189.56.252.115 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 60.172.43.116
country_id: 1814991
description:
Jun 12 18:43:57 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 60.172.43.116 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 88.203.220.178
country_id: 732800
description:
Jun 12 18:44:07 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 88.203.220.178 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 50.255.62.89
country_id: 6252001
description:
Jun 12 18:44:20 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 50.255.62.89 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 36.154.116.10
country_id: 1814991
description:
Jun 12 18:43:21 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 36.154.116.10 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 66.76.106.13
country_id: 6252001
description:
Jun 12 18:44:26 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 66.76.106.13 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.53.42.101
country_id: 3469034
description:
Jun 12 18:44:35 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.53.42.101 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 92.100.16.74
country_id: 2017370
description:
Jun 12 18:44:47 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 92.100.16.74 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 223.171.94.75
country_id: 1835841
description:
Jun 12 18:45:10 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 223.171.94.75 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 84.242.180.190
country_id: 732800
description:
Jun 12 18:45:10 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 84.242.180.190 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 184.68.123.34
country_id: 6251999
description:
Jun 12 18:44:22 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 184.68.123.34 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.91.164.131
country_id: 3469034
description:
Jun 12 18:44:27 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.91.164.131 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 8.213.131.12
country_id: 1835841
description:
Jun 12 18:44:34 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 8.213.131.12 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 61.2.246.139
country_id: 1269750
description:
Jun 12 18:44:37 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 61.2.246.139 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.200.6.38
country_id: 3469034
description:
Jun 12 18:44:54 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.200.6.38 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.200.6.38
country_id: 3469034
description:
Jun 12 18:45:25 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.200.6.38 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.230.173
country_id: 1269750
description:
Jun 12 18:46:15 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.230.173 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.228.102.165
country_id: 1835841
description:
Jun 12 18:46:22 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.228.102.165 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 166.155.116.155
country_id: 6252001
description:
Jun 12 18:46:28 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 166.155.116.155 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 18:48:41 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 18:49:53 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.239.236.1
country_id: 1733045
description:
[2026-06-12 18:50:53 +0000] info [cpaneld] 173.239.236.1 - pharma "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user pharma (has_cpuser_file failed)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 18:53:10 ns5 pure-ftpd[1805845]: (?@137.184.97.15) [WARNING] Authentication failed for user [Turbolte]


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>les relations bilat\xc3\xa9rales entre le togo et la mauritanie s'intensifient. hier jeudi 11 juin, le pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9, a accord\xc3\xa9 une audience au ministre mauritanien des affaires \xc3\xa9trang\xc3\xa8res, de la coop\xc3\xa9ration africaine et des mauritaniens de l\xe2\x80\x99ext\xc3\xa9rieur, mohamed salem ould merzoug. au c\xc5\x93ur des \xc3\xa9changes : le renforcement du partenariat entre lom\xc3\xa9 et nouakchott ainsi que la concertation sur les grands d\xc3\xa9fis du continent.</em></strong><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le chef de la diplomatie mauritanienne \xc3\xa9tait, en effet \xc3\xa0 lom\xc3\xa9, en qualit\xc3\xa9 d'\xc3\xa9missaire sp\xc3\xa9cial, porteur d\xe2\x80\x99un message personnel du pr\xc3\xa9sident de la r\xc3\xa9publique islamique de mauritanie, mohamed ould cheikh el ghazouani, \xc3\xa0 l'endroit du leader togolais.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab les deux dirigeants se concertent r\xc3\xa9guli\xc3\xa8rement sur les grandes questions d\xe2\x80\x99int\xc3\xa9r\xc3\xaat commun, tant au niveau bilat\xc3\xa9ral qu\xe2\x80\x99aux \xc3\xa9chelles r\xc3\xa9gionale et internationale \xc2\xbb, </em>a soulign\xc3\xa9 mohamed salem ould merzoug, \xc3\xa0 l'issue de sa rencontre avec faure gnassingb\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"646px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:646px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>cette audience s'inscrit dans une tradition bien ancr\xc3\xa9e de dialogue politique de haut niveau entre les deux nations, visant \xc3\xa0 consolider une coop\xc3\xa9ration mutuellement b\xc3\xa9n\xc3\xa9fique pour les peuples togolais et mauritaniens.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>au-del\xc3\xa0 des civilit\xc3\xa9s diplomatiques, cette s\xc3\xa9ance de travail a permis de faire le point sur l\xe2\x80\x99\xc3\xa9tat actuel du partenariat bilat\xc3\xa9ral. dans ce sens, les discussions ont ouvert la voie \xc3\xa0 de nouvelles perspectives \xc3\xa9conomiques et strat\xc3\xa9giques, touchant plusieurs secteurs cl\xc3\xa9s du d\xc3\xa9veloppement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>lom\xc3\xa9 et nouakchott entendent capitaliser sur leurs atouts respectifs, notamment dans les domaines des \xc3\xa9changes commerciaux, de la s\xc3\xa9curit\xc3\xa9 r\xc3\xa9gionale et du partage d'expertises, pour insuffler un \xc3\xa9lan nouveau \xc3\xa0 leur coop\xc3\xa9ration.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>au plan multilat\xc3\xa9ral, larencontre de lom\xc3\xa9 a \xc3\xa9galement servi de cadre \xc3\xa0 une analyse approfondie de la g\xc3\xa9opolitique r\xc3\xa9gionale et mondiale. face aux crises multiformes qui secouent le continent, le togo et la mauritanie affichent un front uni.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image -->\n<figure class=\"wp-block-image\"><img alt=\"\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>les deux d\xc3\xa9l\xc3\xa9gations ont examin\xc3\xa9 les dossiers br\xc3\xbblants inscrits \xc3\xa0 l\xe2\x80\x99agenda de plusieurs grandes organisations internationales, notamment pourune int\xc3\xa9gration continentale acc\xc3\xa9l\xc3\xa9r\xc3\xa9e et une gestion concert\xc3\xa9e des crises s\xc3\xa9curitaires, mais aussi pour le renforcement de la solidarit\xc3\xa9 intercontinentale, et pour porter la voix de l'afrique sur l'\xc3\xa9chiquier mondial.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que les discussions ont mis \xc3\xa9galement en relief une parfaite convergence de vues car, lom\xc3\xa9 et nouakchott ont r\xc3\xa9affirm\xc3\xa9 leur attachement ind\xc3\xa9fectible aux valeurs de paix, de solidarit\xc3\xa9 et de diplomatie pr\xc3\xa9ventive comme leviers indispensables \xc3\xa0 la stabilit\xc3\xa9 durable de la r\xc3\xa9gion ouest-africaine et du sahel.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>la r\xc3\xa9daction</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 18:56:08 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>les relations bilat\xc3\xa9rales entre le togo et la mauritanie s'intensifient. hier jeudi 11 juin, le pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9, a accord\xc3\xa9 une audience au ministre mauritanien des affaires \xc3\xa9trang\xc3\xa8res, de la coop\xc3\xa9ration africaine et des mauritaniens de l\xe2\x80\x99ext\xc3\xa9rieur, mohamed salem ould merzoug. au c\xc5\x93ur des \xc3\xa9changes : le renforcement du partenariat entre lom\xc3\xa9 et nouakchott ainsi que la concertation sur les grands d\xc3\xa9fis du continent.</em></strong><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le chef de la diplomatie mauritanienne \xc3\xa9tait, en effet \xc3\xa0 lom\xc3\xa9, en qualit\xc3\xa9 d'\xc3\xa9missaire sp\xc3\xa9cial, porteur d\xe2\x80\x99un message personnel du pr\xc3\xa9sident de la r\xc3\xa9publique islamique de mauritanie, mohamed ould cheikh el ghazouani, \xc3\xa0 l'endroit du leader togolais.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab les deux dirigeants se concertent r\xc3\xa9guli\xc3\xa8rement sur les grandes questions d\xe2\x80\x99int\xc3\xa9r\xc3\xaat commun, tant au niveau bilat\xc3\xa9ral qu\xe2\x80\x99aux \xc3\xa9chelles r\xc3\xa9gionale et internationale \xc2\xbb, </em>a soulign\xc3\xa9 mohamed salem ould merzoug, \xc3\xa0 l'issue de sa rencontre avec faure gnassingb\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"646px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:646px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>cette audience s'inscrit dans une tradition bien ancr\xc3\xa9e de dialogue politique de haut niveau entre les deux nations, visant \xc3\xa0 consolider une coop\xc3\xa9ration mutuellement b\xc3\xa9n\xc3\xa9fique pour les peuples togolais et mauritaniens.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>au-del\xc3\xa0 des civilit\xc3\xa9s diplomatiques, cette s\xc3\xa9ance de travail a permis de faire le point sur l\xe2\x80\x99\xc3\xa9tat actuel du partenariat bilat\xc3\xa9ral. dans ce sens, les discussions ont ouvert la voie \xc3\xa0 de nouvelles perspectives \xc3\xa9conomiques et strat\xc3\xa9giques, touchant plusieurs secteurs cl\xc3\xa9s du d\xc3\xa9veloppement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>lom\xc3\xa9 et nouakchott entendent capitaliser sur leurs atouts respectifs, notamment dans les domaines des \xc3\xa9changes commerciaux, de la s\xc3\xa9curit\xc3\xa9 r\xc3\xa9gionale et du partage d'expertises, pour insuffler un \xc3\xa9lan nouveau \xc3\xa0 leur coop\xc3\xa9ration.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>au plan multilat\xc3\xa9ral, larencontre de lom\xc3\xa9 a \xc3\xa9galement servi de cadre \xc3\xa0 une analyse approfondie de la g\xc3\xa9opolitique r\xc3\xa9gionale et mondiale. face aux crises multiformes qui secouent le continent, le togo et la mauritanie affichent un front uni.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image -->\n<figure class=\"wp-block-image\"><img alt=\"\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>les deux d\xc3\xa9l\xc3\xa9gations ont examin\xc3\xa9 les dossiers br\xc3\xbblants inscrits \xc3\xa0 l\xe2\x80\x99agenda de plusieurs grandes organisations internationales, notamment pour une int\xc3\xa9gration continentale acc\xc3\xa9l\xc3\xa9r\xc3\xa9e et une gestion concert\xc3\xa9e des crises s\xc3\xa9curitaires, mais aussi pour le renforcement de la solidarit\xc3\xa9 intercontinentale, et pour porter la voix de l'afrique sur l'\xc3\xa9chiquier mondial.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que les discussions ont mis \xc3\xa9galement en relief une parfaite convergence de vues car, lom\xc3\xa9 et nouakchott ont r\xc3\xa9affirm\xc3\xa9 leur attachement ind\xc3\xa9fectible aux valeurs de paix, de solidarit\xc3\xa9 et de diplomatie pr\xc3\xa9ventive comme leviers indispensables \xc3\xa0 la stabilit\xc3\xa9 durable de la r\xc3\xa9gion ouest-africaine et du sahel.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>la r\xc3\xa9daction</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.239.236.1
country_id: 1733045
description:
[2026-06-12 18:55:21 +0000] info [cpaneld] 173.239.236.1 - pharma "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user pharma (has_cpuser_file failed)


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 170.168.172.233
country_id: 3017382
domain: dany2.mairie.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:Ae97dE97.dany2.mairie.tg||Method:wp.getUsersBlogs


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 18:59:49 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.165.143
country_id: 2363686
domain: macite.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph -->\n<p><strong><em>les relations bilat\xc3\xa9rales entre le togo et la mauritanie s'intensifient. hier jeudi 11 juin, le pr\xc3\xa9sident du conseil, faure essozimna gnassingb\xc3\xa9, a accord\xc3\xa9 une audience au ministre mauritanien des affaires \xc3\xa9trang\xc3\xa8res, de la coop\xc3\xa9ration africaine et des mauritaniens de l\xe2\x80\x99ext\xc3\xa9rieur, mohamed salem ould merzoug. au c\xc5\x93ur des \xc3\xa9changes : le renforcement du partenariat entre lom\xc3\xa9 et nouakchott ainsi que la concertation sur les grands d\xc3\xa9fis du continent.</em></strong><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>le chef de la diplomatie mauritanienne \xc3\xa9tait, en effet \xc3\xa0 lom\xc3\xa9, en qualit\xc3\xa9 d'\xc3\xa9missaire sp\xc3\xa9cial, porteur d\xe2\x80\x99un message personnel du pr\xc3\xa9sident de la r\xc3\xa9publique islamique de mauritanie, mohamed ould cheikh el ghazouani, \xc3\xa0 l'endroit du leader togolais.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\xc2\xab les deux dirigeants se concertent r\xc3\xa9guli\xc3\xa8rement sur les grandes questions d\xe2\x80\x99int\xc3\xa9r\xc3\xaat commun, tant au niveau bilat\xc3\xa9ral qu\xe2\x80\x99aux \xc3\xa9chelles r\xc3\xa9gionale et internationale \xc2\xbb, </em>a soulign\xc3\xa9 mohamed salem ould merzoug, \xc3\xa0 l'issue de sa rencontre avec faure gnassingb\xc3\xa9.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31146,\"width\":\"646px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/image-30-724x1024.png\" alt=\"\" class=\"wp-image-31146\" style=\"width:646px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>cette audience s'inscrit dans une tradition bien ancr\xc3\xa9e de dialogue politique de haut niveau entre les deux nations, visant \xc3\xa0 consolider une coop\xc3\xa9ration mutuellement b\xc3\xa9n\xc3\xa9fique pour les peuples togolais et mauritaniens.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>au-del\xc3\xa0 des civilit\xc3\xa9s diplomatiques, cette s\xc3\xa9ance de travail a permis de faire le point sur l\xe2\x80\x99\xc3\xa9tat actuel du partenariat bilat\xc3\xa9ral. dans ce sens, les discussions ont ouvert la voie \xc3\xa0 de nouvelles perspectives \xc3\xa9conomiques et strat\xc3\xa9giques, touchant plusieurs secteurs cl\xc3\xa9s du d\xc3\xa9veloppement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>lom\xc3\xa9 et nouakchott entendent capitaliser sur leurs atouts respectifs, notamment dans les domaines des \xc3\xa9changes commerciaux, de la s\xc3\xa9curit\xc3\xa9 r\xc3\xa9gionale et du partage d'expertises, pour insuffler un \xc3\xa9lan nouveau \xc3\xa0 leur coop\xc3\xa9ration.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>au plan multilat\xc3\xa9ral, larencontre de lom\xc3\xa9 a \xc3\xa9galement servi de cadre \xc3\xa0 une analyse approfondie de la g\xc3\xa9opolitique r\xc3\xa9gionale et mondiale. face aux crises multiformes qui secouent le continent, le togo et la mauritanie affichent un front uni.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":31157,\"width\":\"604px\",\"height\":\"auto\",\"sizeslug\":\"large\",\"linkdestination\":\"none\",\"align\":\"center\"} -->\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img src=\"https://macite.tg/wp-content/uploads/2026/06/18d98b1d-0295-41c7-afab-fc9c13606bd0-724x1024.jpg\" alt=\"\" class=\"wp-image-31157\" style=\"width:604px;height:auto\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>les deux d\xc3\xa9l\xc3\xa9gations ont examin\xc3\xa9 les dossiers br\xc3\xbblants inscrits \xc3\xa0 l\xe2\x80\x99agenda de plusieurs grandes organisations internationales, notamment pour une int\xc3\xa9gration continentale acc\xc3\xa9l\xc3\xa9r\xc3\xa9e et une gestion concert\xc3\xa9e des crises s\xc3\xa9curitaires, mais aussi pour le renforcement de la solidarit\xc3\xa9 intercontinentale, et pour porter la voix de l'afrique sur l'\xc3\xa9chiquier mondial.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>notons que les discussions ont mis \xc3\xa9galement en relief une parfaite convergence de vues car, lom\xc3\xa9 et nouakchott ont r\xc3\xa9affirm\xc3\xa9 leur attachement ind\xc3\xa9fectible aux valeurs de paix, de solidarit\xc3\xa9 et de diplomatie pr\xc3\xa9ventive comme leviers indispensables \xc3\xa0 la stabilit\xc3\xa9 durable de la r\xc3\xa9gion ouest-africaine et du sahel.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>la r\xc3\xa9daction</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a><strong><em>@macite.tg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</em></strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>e-mail&nbsp;: </em></strong><a href=\"mailto:maciteinfo@gmail.com\"><strong><em>maciteinfo@gmail.com</em></strong></a><strong><em>; </em></strong><a href=\"mailto:bawela1@gmail.com\"><strong><em>bawela1@gmail.com</em></strong></a><strong><em></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>pour vos annonces, publi-reportages, etc., joignez-nous au (00228)91515309/<strong>79872224 </strong><strong></strong></em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>www.macite.tg, l\xe2\x80\x99information, la bonne&nbsp;!</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 50.255.62.89
country_id: 6252001
description:
Jun 12 19:01:35 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 50.255.62.89 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 189.150.86.146
country_id: 3996063
description:
189.150.86.146 - - [12/Jun/2026:19:02:06 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7106755&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fcristiano-junior%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781290924 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/cristiano-junior/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.8422.1181 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:189.150.86.146


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:04:58 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:05:39 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 154.198.42.71
country_id: 241170
description:
Jun 12 19:05:52 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 154.198.42.71 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.56
country_id: 6252001
description:
205.169.39.56 - - [12/Jun/2026:19:06:39 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9672898&pdata=http%253A%252F%252Fxl6zcp.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781291198 HTTP/1.1" 302 0 xl6zcp.mediatopnews.tg "http://xl6zcp.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.56


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [12/Jun/2026:19:06:55 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7116643&pdata=http%253A%252F%252Fxl6zcp.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781291214 HTTP/1.1" 302 0 xl6zcp.mediatopnews.tg "http://xl6zcp.mediatopnews.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 38.64.91.151
country_id: 2635167
description:
2026-06-12 19:06:22 dovecot_login authenticator failed for H=(greekgears.com) [38.64.91.151]:42520: 535 Incorrect authentication data (set_id=root)


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 178.20.28.173
country_id: 6252001
domain: belali.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:Ajatovivi0883.belali.tg||Method:wp.getUsersBlogs


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.210.132.14
country_id: 1269750
description:
[2026-06-12 19:07:54 +0000] info [cpaneld] 103.210.132.14 - cafe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 178.20.28.173
country_id: 6252001
domain: belali.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:Turbolte.belali.tg||Method:blogger.getUsersBlogs


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 218.17.31.210
country_id: 1814991
description:
2026-06-12 19:08:21 H=([218.17.31.210]) [218.17.31.210]:49501 F=<John@4452.com> rejected RCPT <visite@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 181.13.110.16
country_id: 3865483
description:
Jun 12 19:08:46 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 181.13.110.16 has been locked due to Imunify RBL


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.234.152.83
country_id: 3996063
domain: www.vitrinenews.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.vitrinenews.tg/ HTTP/1.1||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 194.58.76.100
country_id: 6254930
domain: www.vitrinenews.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.vitrinenews.tghttp/www.vitrinenews.tg/ HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:18:13 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:18:21 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 50.255.62.89
country_id: 6252001
description:
Jun 12 19:18:50 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 50.255.62.89 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 185.192.20.41
country_id: 2750405
domain: direct7.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-20.185.192.20.41||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:20:01 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 148.222.185.182
country_id: 2750405
domain: direct7.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-20.148.222.185.182||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 154.198.42.71
country_id: 241170
description:
Jun 12 19:23:01 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 154.198.42.71 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.213.195.198
country_id: 1269750
description:
Jun 12 19:23:07 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.213.195.198 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 188.92.213.157
country_id: 614540
description:
Jun 12 19:23:29 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 188.92.213.157 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.213.195.198
country_id: 1269750
description:
Jun 12 19:23:21 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.213.195.198 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 62.197.45.179
country_id: 2750405
domain: direct7.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:19-24.62.197.45.179||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:25:20 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 147.185.132.22
country_id: 6252001
description:
Jun 12 19:25:24 ns5 pure-ftpd[1823795]: (?@147.185.132.22) [INFO] New connection from 147.185.132.22


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:25:30 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 213.92.222.136
country_id: 798544
description:
Jun 12 19:26:30 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 213.92.222.136 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 103.75.228.177
country_id: 2802361
domain: lacs1.mairie.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:103.75.228.177||TA:103.75.228.177||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:28:22 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.170.30
country_id: 3175395
description:
Jun 12 19:32:42 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.170.30 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.210.132.14
country_id: 1269750
description:
[2026-06-12 19:33:34 +0000] info [cpaneld] 103.210.132.14 - mesyscom "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscom (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:33:55 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.210.132.14
country_id: 1269750
description:
[2026-06-12 19:33:35 +0000] info [cpaneld] 103.210.132.14 - mesyscomcom "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mesyscomcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.239.236.1
country_id: 1733045
description:
[2026-06-12 19:35:20 +0000] info [cpaneld] 173.239.236.1 - 1yTd3Xo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:35:50 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 50.255.62.89
country_id: 6252001
description:
Jun 12 19:36:05 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 50.255.62.89 has been locked due to Imunify RBL


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 19:35:24 ns5 pure-ftpd[1830252]: (?@137.184.97.15) [WARNING] Authentication failed for user [client]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.210.132.14
country_id: 1269750
description:
[2026-06-12 19:36:45 +0000] info [cpaneld] 103.210.132.14 - cafe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.210.132.14
country_id: 1269750
description:
[2026-06-12 19:36:45 +0000] info [cpaneld] 103.210.132.14 - cafetg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.97.94.183
country_id: 272103
domain: fbafrica.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/fbafrica.com/media-press-requests/ HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 19:39:04 ns5 pure-ftpd[1832049]: (?@137.184.97.15) [WARNING] Authentication failed for user [enadamso]


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 19:39:27 ns5 pure-ftpd[1832351]: (?@137.184.97.15) [WARNING] Authentication failed for user [coolpluto1114@gmail.com]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-12 19:39:56 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:50830: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-12 19:41:28 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:45128: 535 Incorrect authentication data (set_id=piter)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 165.22.212.32
country_id: 1269750
description:
[2026-06-12 19:42:32 +0000] info [cpaneld] 165.22.212.32 - cafe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.159.243.26
country_id: 192950
description:
2026-06-12 19:43:33 dovecot_plain authenticator failed for H=(dgdn-togo.tg) [154.159.243.26]:43707: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 177.75.111.16
country_id: 3469034
description:
2026-06-12 19:43:40 dovecot_plain authenticator failed for H=(dgdn-togo.tg) [177.75.111.16]:44882: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 217.26.178.139
country_id: 3175395
description:
Jun 12 19:44:53 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 217.26.178.139 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:44:29 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 192.42.116.66
country_id: 2750405
description:
Jun 12 19:44:34 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 192.42.116.66 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.42.116.66
country_id: 2750405
description:
2026-06-12 19:44:36 dovecot_plain authenticator failed for H=(8jeh32if2vdmhcw6odsvoy5jaiddsw1k) [192.42.116.66]:41757: 535 Incorrect authentication data (set_id=mointie@emt.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 195.19.52.187
country_id: 2017370
description:
Jun 12 19:44:45 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 195.19.52.187 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 195.19.52.187
country_id: 2017370
description:
2026-06-12 19:44:47 dovecot_plain authenticator failed for H=(agpfn16q6nf2mksgzqzwqwu) [195.19.52.187]:62312: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.134
country_id: 1880251
description:
47.128.96.134 - - [12/Jun/2026:19:45:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12808042&pdata=https%253A%252F%252Fvitrinenews.tg%252F2024%252F01%252F23%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781293533 HTTP/2.0" 302 0 vitrinenews.tg "https://vitrinenews.tg/2024/01/23/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.134


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:48:05 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-12 19:49:59 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:51077: 535 Incorrect authentication data (set_id=faxserver)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.196
country_id: 1880251
description:
47.128.96.196 - - [12/Jun/2026:19:50:20 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7302244&pdata=https%253A%252F%252Ftdn.tg%252Fyas-togo-top-employer-2026%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781293819 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/yas-togo-top-employer-2026/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.196


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 205.210.31.154
country_id: 3469034
description:
Jun 12 19:51:04 ns5 pure-ftpd[1838565]: (?@205.210.31.154) [INFO] New connection from 205.210.31.154


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 87.95.255.244
country_id: 660013
description:
[2026-06-12 19:52:13 +0000] info [cpaneld] 87.95.255.244 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 148.222.205.171
country_id: 3895114
description:
[2026-06-12 19:52:18 +0000] info [cpaneld] 148.222.205.171 - ameak "GET /login/?login_only=1&user=ameak&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ameak (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.18.34.210
country_id: 1643084
description:
[2026-06-12 19:52:28 +0000] info [cpaneld] 103.18.34.210 - ame "GET /login/?login_only=1&user=ame&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ame (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.104.105.165
country_id: 3686110
description:
[2026-06-12 19:52:31 +0000] info [cpaneld] 191.104.105.165 - am "GET /login/?login_only=1&user=am&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user am (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.95.131.216
country_id: 3686110
description:
[2026-06-12 19:52:24 +0000] info [cpaneld] 191.95.131.216 - amea "GET /login/?login_only=1&user=amea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user amea (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:53:55 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.20.210.21
country_id: 2921044
description:
Jun 12 19:54:28 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.20.210.21 has been locked due to Imunify RBL


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 19:55:09 ns5 pure-ftpd[1840618]: (?@137.184.97.15) [WARNING] Authentication failed for user [elpidio]


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 19:55:23 ns5 pure-ftpd[1840692]: (?@137.184.97.15) [WARNING] Authentication failed for user [ZsrhS1a$a6]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [12/Jun/2026:19:56:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6788706&pdata=https%253A%252F%252Fcrepsad.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781294187 HTTP/2.0" 302 0 crepsad.tg "https://crepsad.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 156.0.134.124
country_id: 2300660
domain: bieredjama.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:88021.bieredjama.tg||ServerName:bieredjama.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b8e40cb41c383130c12f1b1f94969638249f20d2||Title:0x7a0b75a6||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.139
country_id: 130758
description:
Jun 12 19:58:52 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.139 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-12 19:58:54 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:55202: 535 Incorrect authentication data (set_id=nasim)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-12 19:58:57 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:44054: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 20:00:50 ns5 pure-ftpd[1843675]: (?@137.184.97.15) [WARNING] Authentication failed for user [Kisiniov@msn.com]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.74.219.31
country_id: 1733045
description:
[2026-06-12 20:02:03 +0000] info [cpaneld] 180.74.219.31 - togof "GET /login/?login_only=1&user=togof&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togof (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 90.51.190.98
country_id: 3017382
description:
[2026-06-12 20:01:59 +0000] info [cpaneld] 90.51.190.98 - togofe "GET /login/?login_only=1&user=togofe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofe (has_cpuser_file failed)


plugin: ossec
rule: 11331
name: Stealth FTP brute force attack
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 20:03:22 ns5 pure-ftpd[1845192]: (?@137.184.97.15) [WARNING] Authentication failed for user [Fds57YGFYd8]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-12 20:07:19 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:33849: 535 Incorrect authentication data (set_id=signs)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 62.60.130.139
country_id: 130758
description:
Jun 12 20:07:17 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 62.60.130.139 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.171.46.177
country_id: 2363686
description:
[2026-06-12 20:08:57 +0000] info [webmaild] 196.171.46.177 - kekeli.alemawo@togointerim.net "GET / HTTP/1.1" DEFERRED LOGIN webmaild: security token missing


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 213.92.222.76
country_id: 798544
description:
Jun 12 20:10:22 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 213.92.222.76 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 43.156.179.76
country_id: 1880251
description:
43.156.179.76 - - [12/Jun/2026:20:14:15 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6329963&pdata=https%253A%252F%252Flaunetogo.tg%252Fnouvelles-methodes-parlementaires-une-formation-pour-les-commissions-permanentes%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781295253 HTTP/2.0" 302 0 launetogo.tg "https://launetogo.tg/nouvelles-methodes-parlementaires-une-formation-pour-les-commissions-permanentes/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.156.179.76


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.136.217
country_id: 3469034
description:
Jun 12 20:16:30 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.136.217 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.68.178.172
country_id: 3175395
description:
Jun 12 20:16:49 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.68.178.172 has been locked due to Imunify RBL


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 64.176.42.74
country_id: 1861060
domain: kpmg.tg
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.15||T:APACHE||MV:/wp-content/uploads/index.php||SC:/home/kpmg/public_html/wp-content/uploads||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 201.91.233.238
country_id: 3469034
description:
Jun 12 20:19:59 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 201.91.233.238 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 118.172.43.114
country_id: 1605651
description:
Jun 12 20:20:15 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 118.172.43.114 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 148.72.64.32
country_id: 6252001
description:
Jun 12 20:20:46 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 148.72.64.32 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 80.87.33.2
country_id: 798544
description:
Jun 12 20:21:00 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 80.87.33.2 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 118.172.43.114
country_id: 1605651
description:
Jun 12 20:21:06 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 118.172.43.114 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.230.65.143
country_id: 1562822
description:
[2026-06-12 20:20:44 +0000] info [cpaneld] 14.230.65.143 - itstg "GET /login/?login_only=1&user=itstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user itstg (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-12 20:21:06 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:57916: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 121.200.48.114
country_id: 1269750
description:
Jun 12 20:21:57 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 121.200.48.114 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.200.48.114
country_id: 1269750
description:
2026-06-12 20:21:59 dovecot_login authenticator failed for H=(vmi2893052.contaboserver.net) [121.200.48.114]:58703: 535 Incorrect authentication data (set_id=wages@wages.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 201.91.233.238
country_id: 3469034
description:
Jun 12 20:21:53 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 201.91.233.238 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 124.88.218.97
country_id: 1814991
description:
Jun 12 20:21:56 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 124.88.218.97 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 110.25.90.235
country_id: 1668284
description:
Jun 12 20:23:10 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 110.25.90.235 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 118.172.43.114
country_id: 1605651
description:
Jun 12 20:23:17 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 118.172.43.114 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 43.228.131.114
country_id: 2029969
description:
Jun 12 20:22:24 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 43.228.131.114 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 36.67.215.227
country_id: 1643084
description:
Jun 12 20:22:29 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 36.67.215.227 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.120.106.133
country_id: 3469034
description:
Jun 12 20:22:35 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.120.106.133 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 80.87.33.2
country_id: 798544
description:
Jun 12 20:23:07 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 80.87.33.2 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 102.85.7.180
country_id: 226074
domain: sp-eau.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.sp-eau.tg||ServerName:sp-eau.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f026ba93e9b7eaf91ce2d0cbf470f1f0d648e723||Title:n53k94fx6mwpfa||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 102.85.7.180
country_id: 226074
domain: sp-eau.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.sp-eau.tg||ServerName:sp-eau.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:5fa9b990c3a88e3bfe60f02a57957e7bd024906b||Title:1a0a69cboczzxc||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 102.85.7.180
country_id: 226074
domain: sp-eau.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.sp-eau.tg||ServerName:sp-eau.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7137121c2ecf87c42f8e1c679406633a0f499680||Title:lg0u2fdk7q5ldo59mr||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 203.177.64.130
country_id: 1694008
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:dc30c5609f6b740668d686b64a6d23841d472769||Title:rle30gg4d7dkmk||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.142
country_id: 130758
description:
2026-06-12 20:26:33 dovecot_login authenticator failed for H=(localhost) [81.30.98.142]:44852: 535 Incorrect authentication data (set_id=misty@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.144
country_id: 130758
description:
Jun 12 20:26:37 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.144 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:15623.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:769d51d6d8e3ec42a7f6a368b2654e83bc117196||Title:0xfd6a97f5||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.158
country_id: 130758
description:
2026-06-12 20:26:29 dovecot_login authenticator failed for H=(localhost) [81.30.98.158]:9506: 535 Incorrect authentication data (set_id=olivetti@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.49
country_id: 130758
description:
Jun 12 20:26:30 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.49 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.142
country_id: 130758
description:
Jun 12 20:26:31 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.142 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.49
country_id: 130758
description:
2026-06-12 20:26:32 dovecot_login authenticator failed for H=(localhost) [81.30.98.49]:8282: 535 Incorrect authentication data (set_id=porto@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.44
country_id: 130758
description:
Jun 12 20:26:32 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.44 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.44
country_id: 130758
description:
2026-06-12 20:26:34 dovecot_login authenticator failed for H=(localhost) [81.30.98.44]:22326: 535 Incorrect authentication data (set_id=theta@ns5.netmaster.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.30.98.144
country_id: 130758
description:
2026-06-12 20:26:39 dovecot_login authenticator failed for H=(localhost) [81.30.98.144]:12828: 535 Incorrect authentication data (set_id=n1@ns5.netmaster.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 81.30.98.158
country_id: 130758
description:
Jun 12 20:26:27 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 81.30.98.158 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 112.134.175.54
country_id: 1227603
domain: butodra.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.butodra.tg||ServerName:butodra.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:2f747438533b3121d664ca7ba67e642d98a935f2||Title:t0yzahaqx361bvy||RSV:8.15||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 148.255.212.204
country_id: 3508796
description:
148.255.212.204 - - [12/Jun/2026:20:28:05 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9805208&pdata=https%253A%252F%252Ftogodailynews.tg%252Fsecteur-routier-a-la-decouverte-de-lauto-ecole-litineraire%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781296083 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/secteur-routier-a-la-decouverte-de-lauto-ecole-litineraire/" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.4924.1416 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:148.255.212.204


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 102.85.7.180
country_id: 226074
domain: sp-eau.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.sp-eau.tg||ServerName:sp-eau.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1e5012902b777d367d3e0a9087fe14fa8e43ed32||Title:lseu4vqrle731h0x||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 87.106.62.44
country_id: 2921044
description:
2026-06-12 20:28:44 dovecot_plain authenticator failed for H=ip87-106-62-44.pbiaas.com (87nw1l685kyw6g6e) [87.106.62.44]:46804: 535 Incorrect authentication data (set_id=welldrive@confortis.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 191.25.149.196
country_id: 3469034
description:
191.25.149.196 - - [12/Jun/2026:20:29:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9659233&pdata=https%253A%252F%252Ftogodailynews.tg%252Fsante-publique-le-togo-intensifie-la-lutte-contre-les-affections-chroniques%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781296167 HTTP/2.0" 302 0 togodailynews.tg "https://togodailynews.tg/sante-publique-le-togo-intensifie-la-lutte-contre-les-affections-chroniques/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.9527.1405 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:191.25.149.196


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 191.96.227.254
country_id: 6252001
description:
2026-06-12 20:32:08 dovecot_plain authenticator failed for H=([10.45.203.169]) [191.96.227.254]:17827: 535 Incorrect authentication data (set_id=ymintre@otr.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.122.147.229
country_id: 6252001
description:
34.122.147.229 - - [12/Jun/2026:20:32:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9987183&pdata=http%253A%252F%252Fjvvtdy.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781296333 HTTP/1.1" 302 0 jvvtdy.mediatopnews.tg "http://jvvtdy.mediatopnews.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.122.147.229


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 205.169.39.24
country_id: 6252001
description:
205.169.39.24 - - [12/Jun/2026:20:32:12 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9817197&pdata=http%253A%252F%252Fjvvtdy.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781296331 HTTP/1.1" 302 0 jvvtdy.mediatopnews.tg "http://jvvtdy.mediatopnews.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:205.169.39.24


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:7d8800c7a23059c839485386edda2301b6195d22||Title:0x9f4031a0||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.96.227.254
country_id: 6252001
description:
Jun 12 20:32:06 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.96.227.254 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1c60f9357576b39eccbca485839cf42e7eecfc28||Title:0xdf3ad506||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 191.96.227.254
country_id: 6252001
description:
2026-06-12 20:32:38 dovecot_plain authenticator failed for H=([10.45.203.169]) [191.96.227.254]:18732: 535 Incorrect authentication data (set_id=ymintre@otr.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.96.227.254
country_id: 6252001
description:
Jun 12 20:32:36 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.96.227.254 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:6dfefe5ac6a53460f9f3e7ed283165864138e1e7||Title:0x6a59ff14||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 102.85.7.180
country_id: 226074
domain: sp-eau.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.sp-eau.tg||ServerName:sp-eau.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:38152c829eeaf8ab03d71809543c35f65892ebc3||Title:5qjw2cfyx335tpag||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 159.223.62.22
country_id: 1880251
description:
Jun 12 20:34:42 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 159.223.62.22 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:04e77e72b40bbb94d6f9289a0f267da1f49f6915||Title:0x8c793c00||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:c7666af35a609aee9188017a5e0c5662ea182fbc||Title:0x3831587d||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f07e621502b7feb06f9d747b8a960ee8706aebfd||Title:0x46330e30||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 90.73.180.100
country_id: 3017382
domain: ca-togo.org
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:94214.ca-togo.org||ServerName:ca-togo.org||Method:metaWeblog.newPost||BlogID:1||TitleSHA:9b84ba45803dfa0231bbc0e83063719bae4146af||Title:0x84992dda||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a065543d393bd31842cc1d5ed6067746338f562d||Title:0xd5e342d7||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ef5ee486b25f67613b540d09d6c01ddf55185aa2||Title:0x71345768||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:78be9e21043076fb5953478a389e854dad7d7a07||Title:0x1eefb312||RSV:8.15||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 188.198.59.141
country_id: 3190538
description:
188.198.59.141 - - [12/Jun/2026:20:41:14 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6656922&pdata=https%3A%2F%2Flacs1.mairie.tg%3A2083&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781296873 HTTP/1.1" 302 0 lacs1.mairie.tg "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 Edg/137.0.0.0" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:188.198.59.141


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.198.59.141
country_id: 3190538
description:
[2026-06-12 20:41:16 +0000] info [cpaneld] 188.198.59.141 - nwvfmxat "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:eef727bd42cddf788acb5037c67f57eb89df45bc||Title:0xb160cebd||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:dddfbffdc6373a864f408a6a65037168f9d5b768||Title:0xe46f254d||RSV:8.15||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 146.103.44.135
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:146.103.44.135||TA:146.103.44.135||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 194.116.250.172
country_id: 3017382
domain: www.ca-togo.org
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:194.116.250.172||TA:194.116.250.172||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d04a29325697b40f89b8b451f5d1c691dc46b95b||Title:0x62274c28||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:42:31 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (JePoZtq9k) [192.99.255.73]:63101: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 116.110.40.61
country_id: 1562822
description:
[2026-06-12 20:44:02 +0000] info [cpaneld] 116.110.40.61 - bie "GET /login/?login_only=1&user=bie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bie (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:43:29 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (kEv9eHIbvM) [192.99.255.73]:49609: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.202.66.94
country_id: 290557
description:
[2026-06-12 20:43:30 +0000] info [cpaneld] 94.202.66.94 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.141.13.253
country_id: 2510769
description:
[2026-06-12 20:43:34 +0000] info [cpaneld] 89.141.13.253 - bieredjama "GET /login/?login_only=1&user=bieredjama&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredjama (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.112.150.145
country_id: 1210997
description:
[2026-06-12 20:43:42 +0000] info [cpaneld] 103.112.150.145 - bieredjam "GET /login/?login_only=1&user=bieredjam&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredjam (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 27.125.242.165
country_id: 1733045
description:
[2026-06-12 20:43:58 +0000] info [cpaneld] 27.125.242.165 - bier "GET /login/?login_only=1&user=bier&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bier (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:a4c673412b65c543c5ce20395aaf65f182ec6eac||Title:0x0921b73e||RSV:8.15||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.72.231.115
country_id: 3469034
description:
[2026-06-12 20:43:37 +0000] info [cpaneld] 177.72.231.115 - bieredjamatg "GET /login/?login_only=1&user=bieredjamatg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredjamatg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.100.64.13
country_id: 3658394
description:
[2026-06-12 20:43:46 +0000] info [cpaneld] 157.100.64.13 - bieredja "GET /login/?login_only=1&user=bieredja&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredja (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 84.54.78.229
country_id: 1512440
description:
[2026-06-12 20:43:51 +0000] info [cpaneld] 84.54.78.229 - biered "GET /login/?login_only=1&user=biered&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user biered (has_cpuser_file failed)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:58bf6e2484212dcbbad700d30fd7de88540204da||Title:0x06dc7a1f||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:44:26 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (Lc1gWBPgR) [192.99.255.73]:53464: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:45:23 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (hQOpYco) [192.99.255.73]:57325: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:46:20 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (4mmjBc0PyD) [192.99.255.73]:61133: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 20:45:21 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:05e1c54561662812e5674fbaf74e0c39ce4920ed||Title:0xa316dedf||RSV:8.15||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:4e2e145cd276c6a68c3bcdfdda05dbee97246ba6||Title:0x42d80d16||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:46:39 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (Yc0OOcX) [192.99.255.73]:62384: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 20:46:37 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:47:36 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (V646JZZ) [192.99.255.73]:49735: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:2ea5297425d17960c157e2a63f9ca01fe075c58d||Title:0x755ea03d||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 20:47:34 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:748904349ce736cb5269eb3abfbd5802ee4b32ad||Title:0xacf00f85||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 20:48:31 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:48:33 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (DrzRehu9) [192.99.255.73]:53595: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:98d9020d5cf71821a8e2260aba6c6595203db562||Title:0x728d6a1a||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:49:30 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (GpE8Us) [192.99.255.73]:57366: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 159.223.62.22
country_id: 1880251
description:
Jun 12 20:50:09 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 159.223.62.22 has been locked due to Imunify RBL


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 20:49:28 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:cdc0ed4ba45937f66d0d87d356854b430d2ad64c||Title:0x6578d596||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:50:27 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (Artimol) [192.99.255.73]:61171: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:50:46 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (dcLDErQ) [192.99.255.73]:62426: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 34.72.176.129
country_id: 6252001
description:
34.72.176.129 - - [12/Jun/2026:20:51:02 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131096&pdata=http%253A%252F%252Fwww.afriquerevelation.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781297461 HTTP/1.1" 302 0 www.afriquerevelation.tg "http://www.afriquerevelation.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.72.176.129


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 68.178.161.20
country_id: 6252001
description:
Jun 12 20:51:08 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 68.178.161.20 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:51:24 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (zIc1tTuF) [192.99.255.73]:64997: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b6d0ab1f603c7f148deb3803525daf2f109a0266||Title:0xbe5560df||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 20:53:16 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:52:21 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (rN60yf) [192.99.255.73]:52431: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.tg.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b3c5d0080f87023816dc94b47163aee4b77fdaf5||Title:0x7acf6953||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 20:53:35 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:53:37 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (cvfCHWVk) [192.99.255.73]:57494: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 34.123.170.104
country_id: 6252001
description:
34.123.170.104 - - [12/Jun/2026:20:53:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119365&pdata=http%253A%252F%252Fgfcusr.mediatopnews.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781297610 HTTP/1.1" 404 561 gfcusr.mediatopnews.tg "http://gfcusr.mediatopnews.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:34.123.170.104


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.tg.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b2475488dba2f5a56cc0829ca36fa13041b16755||Title:0xec2704fa||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:54:34 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (c2M8eTtbcX) [192.99.255.73]:61267: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 139.59.138.122
country_id: 2921044
description:
2026-06-12 20:55:04 dovecot_login authenticator failed for H=(account.dgdn-togo.tg) [139.59.138.122]:52568: 535 Incorrect authentication data (set_id=contact@dgdn-togo.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.tg.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0469e0166f01db04d9d9270262a98374c3cb3073||Title:0xedaa76e8||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 20:54:32 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:55:12 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (P0QWKjdOp) [192.99.255.73]:63787: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 151.35.194.219
country_id: 3175395
domain: c2ie.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:c2ie.tg.c2ie.tg||ServerName:c2ie.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:882a274f58549242d0812a4bcde265fc596d95b8||Title:0x58bb2fa0||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 20:55:29 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:55:31 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (ZbU5sEdW) [192.99.255.73]:65055: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 5.180.61.236
country_id: 2921044
description:
2026-06-12 20:55:21 dovecot_plain authenticator failed for H=(muo9m47z5pk6dtbuwi) [5.180.61.236]:32483: 535 Incorrect authentication data (set_id=papson.fiatuwo@mesyscom.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.57.54
country_id: 1269750
description:
2026-06-12 20:56:33 dovecot_plain authenticator failed for H=(barldeed) [182.95.57.54]:43798: 535 Incorrect authentication data (set_id=admin@cloud-et-racks.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 20:56:26 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:56:28 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (Tp28tz6j) [192.99.255.73]:52449: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 182.95.57.54
country_id: 1269750
description:
Jun 12 20:56:31 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 182.95.57.54 has been locked due to Imunify RBL


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 112.134.136.71
country_id: 1227603
domain: centif.tg
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:47143.centif.tg||ServerName:centif.tg||Method:metaWeblog.newPost||BlogID:1||TitleSHA:80b24845dbbe00069953852c21ce9ed00e0854c9||Title:0x3a9fc9b3||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 20:57:23 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:57:25 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (Gy8D2r) [192.99.255.73]:56217: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:58:22 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (QKJzBc) [192.99.255.73]:59987: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:59:38 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (z5COe01elR) [192.99.255.73]:65023: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 20:59:57 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (qEsq5v1) [192.99.255.73]:49931: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:01:11 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:00:35 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (PH0vIF7) [192.99.255.73]:52494: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:01:32 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (dqzhDl8W) [192.99.255.73]:56288: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:01:30 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:02:27 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:02:29 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (rkf1eOO) [192.99.255.73]:60128: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:03:24 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:03:26 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (dHvMx4) [192.99.255.73]:63981: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:04:04 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (7Fk2a9) [192.99.255.73]:50070: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:04:21 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:04:23 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (lOu4OgNZ1) [192.99.255.73]:51294: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 185.193.167.42
country_id: 298795
description:
185.193.167.42 - - [12/Jun/2026:21:04:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7194214&pdata=https%253A%252F%252Fsnb.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781298278 HTTP/2.0" 302 0 snb.tg "https://snb.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:185.193.167.42


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.198.130.211
country_id: 2017370
description:
2026-06-12 21:05:25 dovecot_plain authenticator failed for H=(8ndhnnoxxwn8i78yjineejfgr8wln0) [94.198.130.211]:40734: 535 Incorrect authentication data (set_id=arse@arse.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 94.198.130.211
country_id: 2017370
description:
Jun 12 21:05:23 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 94.198.130.211 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 159.223.62.22
country_id: 1880251
description:
Jun 12 21:05:36 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 159.223.62.22 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:05:39 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (bhOMwXnF) [192.99.255.73]:56376: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:05:37 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:06:36 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (pbSWEOMKer) [192.99.255.73]:60210: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 149.86.139.68
country_id: 298795
description:
2026-06-12 21:07:18 dovecot_plain authenticator failed for H=(white-ways.com) [149.86.139.68]:42079: 535 Incorrect authentication data (set_id=home@white-ways.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.134.27.181
country_id: 1210997
description:
2026-06-12 21:07:29 dovecot_plain authenticator failed for H=(white-ways.com) [103.134.27.181]:33845: 535 Incorrect authentication data (set_id=home@white-ways.com)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 21:07:36 ns5 pure-ftpd[1882229]: (?@137.184.97.15) [WARNING] Authentication failed for user [Ae97]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:07:33 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (fqe6WCz) [192.99.255.73]:64058: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:08:49 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (YyurXZ) [192.99.255.73]:52783: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:09:06 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.210.132.14
country_id: 1269750
description:
[2026-06-12 21:09:14 +0000] info [cpaneld] 103.210.132.14 - cafe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:08:30 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (wobTtlAcuI) [192.99.255.73]:51502: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.70.82.245
country_id: 2363686
description:
2026-06-12 21:09:52 dovecot_login authenticator failed for H=(cloud.netmaster.tg) [154.70.82.245]:54512: 535 Incorrect authentication data (set_id=support@cloud-et-racks.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:09:25 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:09:27 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (HXCtfBl) [192.99.255.73]:55356: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.212
country_id: 3469034
description:
Jun 12 21:10:57 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.212 has been locked due to Imunify RBL


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:10:22 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:10:24 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (nGedfgR) [192.99.255.73]:59162: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:11:38 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:11:40 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (jMqVgdauuL) [192.99.255.73]:64313: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.84.8.11
country_id: 3469034
description:
Jun 12 21:12:47 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.84.8.11 has been locked due to Imunify RBL


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:12:56 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (g7L7QEFua) [192.99.255.73]:53140: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:12:35 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:12:37 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (51ujjCxS) [192.99.255.73]:51753: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:13:32 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:13:34 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (vlAO3WkoZ) [192.99.255.73]:55758: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:14:31 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (KsZViEgt) [192.99.255.73]:59551: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:15:28 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (HY0ouWo60A) [192.99.255.73]:63349: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.138.69.94
country_id: 3077311
description:
Jun 12 21:16:56 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.138.69.94 has been locked due to Imunify RBL


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:17:01 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.171.73
country_id: 3175395
description:
Jun 12 21:17:16 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.171.73 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:16:25 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (pkdvw1bG) [192.99.255.73]:50830: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 161.97.125.76
country_id: 3017382
description:
[2026-06-12 21:16:28 +0000] info [cpaneld] 161.97.125.76 - masfloy "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:17:39 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 137.184.97.15
country_id: 6252001
description:
Jun 12 21:18:00 ns5 pure-ftpd[1887798]: (?@137.184.97.15) [WARNING] Authentication failed for user [$GpnYD6]


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:17:22 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (DPQA6U) [192.99.255.73]:54632: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.15.171.73
country_id: 3175395
description:
Jun 12 21:17:24 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.15.171.73 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:17:41 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (Pf3qPR4pA) [192.99.255.73]:55888: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 18.224.171.11
country_id: 6252001
description:
[2026-06-12 21:18:34 +0000] info [cpaneld] 18.224.171.11 - bighostingsnbd "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:18:36 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:18:38 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (DBY3fUP3M) [192.99.255.73]:59747: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.114.170.170
country_id: 953987
domain: www.cafe.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.cafe.tghttp/www.cafe.tg/?p=612 HTTP/1.1||RSV:8.15||T:APACHE||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:19:33 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:19:35 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (RAt2g4AHQ) [192.99.255.73]:63614: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 159.223.62.22
country_id: 1880251
description:
Jun 12 21:21:03 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 159.223.62.22 has been locked due to Imunify RBL


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:20:30 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:20:32 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (BFzl27JP) [192.99.255.73]:51069: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 185.15.179.185
country_id: 3895114
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:185.15.179.185||TA:185.15.179.185||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 152.232.116.56
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:152.232.116.56||TA:152.232.116.56||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:21:27 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:21:29 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (Jc0HTwpHE) [192.99.255.73]:54876: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:21:48 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (UhuRijj4n) [192.99.255.73]:56090: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.189.99.219
country_id: 3895114
description:
[2026-06-12 21:23:12 +0000] info [cpaneld] 186.189.99.219 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:22:26 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (SfnRBxTA) [192.99.255.73]:58619: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 203.55.81.2
country_id: 3017382
description:
203.55.81.2 - - [12/Jun/2026:21:23:54 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6645397&pdata=http%253A%252F%252Fmonde-ai.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1781299431 HTTP/1.1" 302 0 monde-ai.tg "http://monde-ai.tg/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Brave/1 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:203.55.81.2


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 161.123.154.50
country_id: 6252001
domain: caissederetraites.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:161.123.154.50||TA:161.123.154.50||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:23:23 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (GEtfQythYH) [192.99.255.73]:62552: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 114.119.146.4
country_id: 1880251
domain: civilemagazine.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://civilemagazine.tg/ong-sante-integree-recrute-un-superviseur-des-asc-direction-rssbc?amp=1||RSV:8.15||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 38.154.205.150
country_id: 6252001
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:38.154.205.150||TA:38.154.205.150||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 113.16.16.162
country_id: 1814991
domain: www.togosem.com
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309r77140835r77140736||MV:21-24.113.16.16.162||RSV:8.15||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:24:39 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (FQUHCuX4DI) [192.99.255.73]:51324: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 155.254.38.241
country_id: 2635167
domain: afriquerevelation.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:155.254.38.241||TA:155.254.38.241||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:24:56 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13006
name: Active Response. SMTP brute force attack (SMTP ports are protected)
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:26:14 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (qILtvLL) [192.99.255.73]:57820: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 192.186.185.253
country_id: 6252001
domain: caissederetraites.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.15||T:APACHE||RA:192.186.185.253||TA:192.186.185.253||


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:25:34 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.99.255.73
country_id: 6251999
description:
2026-06-12 21:25:36 dovecot_login authenticator failed for H=ip73.ip-192-99-255.net (FJ7ncBMZ7) [192.99.255.73]:55216: 535 Incorrect authentication data (set_id=jmnoagbo@cafe.tg)


plugin: ossec
rule: 6011
name: Imunify PAM. The account has been locked for the attacker IP
abuser: 192.99.255.73
country_id: 6251999
description:
Jun 12 21:26:31 ns5 auth[1698885]: pam_imunify(dovecot_imunify:auth): [IM360_IPUL] The account jmnoagbo@cafe.tg has been locked for the attacker IP 192.99.255.73


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.101.141.68
country_id: 3469034
description:
[2026-06-12 21:27:15 +0000] info [cpaneld] 177.101.141.68 - mediatopnews "GET /login/?login_only=1&user=mediatopnews&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatopnews (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.86.109.131
country_id: 3625428
description:
[2026-06-12 21:27:17 +0000] info [cpaneld] 82.86.109.131 - mediatopnewstg "GET /login/?login_only=1&user=mediatopnewstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatopnewstg (has_cpuser_file failed)


