# incident

plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.109.77
country_id: 6252001
description:
[2026-06-07 10:35:56 +0000] info [cpaneld] 82.40.109.77 - dev03 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dev03 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 10:36:59 +0000] info [cpaneld] 196.179.7.81 - sbnjjkvc "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sbnjjkvc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.80.52
country_id: 6252001
description:
[2026-06-07 10:37:58 +0000] info [whostmgrd] 82.40.80.52 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.100.13.154
country_id: 2589581
description:
[2026-06-07 10:38:01 +0000] info [whostmgrd] 41.100.13.154 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 10:39:13 +0000] info [cpaneld] 196.179.7.81 - admin "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 178.90.248.209
country_id: 1522867
description:
2026-06-07 10:40:18 H=([178.90.248.209]) [178.90.248.209]:28793 F=<John@4452.com> rejected RCPT <admin@togocarrierebetons.com>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.48.229.175
country_id: 357994
description:
[2026-06-07 10:41:42 +0000] info [cpaneld] 197.48.229.175 - aifkjzqm "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Collect Your Entertaining Games Money eropolik.blogspot.mx jl||Email:desell1970@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 178.90.248.209
country_id: 1522867
description:
2026-06-07 10:41:25 H=([178.90.248.209]) [178.90.248.209]:8737 F=<John@4452.com> rejected RCPT <admin@togocarrierebetons.com>: Sender verify failed


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:10-41.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 178.90.248.209
country_id: 1522867
description:
2026-06-07 10:43:29 H=([178.90.248.209]) [178.90.248.209]:24434 F=<John@4452.com> rejected RCPT <admin@togocarrierebetons.com>: Sender verify failed


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.247.48.52
country_id: 1562822
domain: www.direct7.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.direct7.tghttp/www.direct7.tg/ HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.12.253.180
country_id: 3865483
domain: www.direct7.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.direct7.tg/ HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.127.143.153
country_id: 3469034
description:
[2026-06-07 10:49:58 +0000] info [whostmgrd] 177.127.143.153 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 185.213.83.23
country_id: 1643084
description:
[2026-06-07 10:50:09 +0000] info [cpaneld] 185.213.83.23 NEW apicafe:ukbxDMo8q7gxztTt address=185.213.83.23,app=cpaneld,creator=apicafe,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.86.166.154
country_id: 3469034
description:
Jun  7 10:50:37 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.86.166.154 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.77.216.189
country_id: 6252001
description:
47.77.216.189 - - [07/Jun/2026:10:51:22 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6908312&pdata=http%253A%252F%252F154.70.82.246%253A2082%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780829479 HTTP/1.1" 302 0 154.70.82.246 "http://154.70.82.246:52230/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.77.216.189


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.79.205
country_id: 6252001
description:
47.251.79.205 - - [07/Jun/2026:10:51:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7182744&pdata=http%253A%252F%252Fmacite.tg%253A2082%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780829488 HTTP/1.1" 302 0 macite.tg "http://macite.tg:52230/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.79.205


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.88.238
country_id: 6252001
description:
47.251.88.238 - - [07/Jun/2026:10:51:31 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6974108&pdata=http%253A%252F%252Flacs1.mairie.tg%253A2082%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780829488 HTTP/1.1" 302 0 lacs1.mairie.tg "http://lacs1.mairie.tg:52230/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.88.238


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.251.188.16
country_id: 6252001
description:
47.251.188.16 - - [07/Jun/2026:10:51:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7238293&pdata=http%253A%252F%252Femt.tg%253A2082%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780829489 HTTP/1.1" 302 0 emt.tg "http://emt.tg:52230/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.251.188.16


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.255.212.51
country_id: 732800
description:
Jun  7 10:50:50 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.255.212.51 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.78.0.50
country_id: 3686110
description:
[2026-06-07 10:51:32 +0000] info [whostmgrd] 181.78.0.50 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.77.227.227
country_id: 6252001
description:
47.77.227.227 - - [07/Jun/2026:10:51:38 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6919114&pdata=http%253A%252F%252Fns5.netmaster.tg%253A2082%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780829492 HTTP/1.1" 302 0 ns5.netmaster.tg "http://ns5.netmaster.tg:52230/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.77.227.227


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.88.94.125
country_id: 6252001
description:
47.88.94.125 - - [07/Jun/2026:10:51:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001307&pdata=http%253A%252F%252Fdany2.mairie.tg%253A2082%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780829498 HTTP/1.1" 302 0 dany2.mairie.tg "http://dany2.mairie.tg:52230/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.88.94.125


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.234.54
country_id: 1269750
description:
Jun  7 10:52:16 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.234.54 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.187.234.54
country_id: 1269750
description:
2026-06-07 10:52:18 dovecot_login authenticator failed for H=([122.187.234.54]) [122.187.234.54]:54870: 535 Incorrect authentication data (set_id=no-reply@togosem.com)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.48
country_id: 2635167
description:
[2026-06-07 10:52:24 +0000] info [cpaneld] 5.230.153.48 NEW qledpnjw:dqq66D3jvCRkajOw address=5.230.153.48,app=cpaneld,creator=qledpnjw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 39.184.73.149
country_id: 1814991
description:
2026-06-07 10:53:33 H=([39.184.73.149]) [39.184.73.149]:7821 F=<John@4452.com> rejected RCPT <welldrive@confortis.tg>: Sender verify failed


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.175.229.201
country_id: 2921044
description:
[2026-06-07 10:54:35 +0000] info [cpaneld] 5.175.229.201 NEW oviaiart:QuCM20_E45mefnH_ address=5.175.229.201,app=cpaneld,creator=oviaiart,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.38
country_id: 2635167
description:
[2026-06-07 10:54:33 +0000] info [cpaneld] 5.230.153.38 NEW zauwogvk:_tZ4PZdjGzUPRNyx address=5.230.153.38,app=cpaneld,creator=zauwogvk,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 64.44.59.102
country_id: 6252001
domain: scafricaplc.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/zauwogvk/public_html/.472871860463053.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 39.184.73.149
country_id: 1814991
description:
2026-06-07 10:56:08 H=([39.184.73.149]) [39.184.73.149]:9762 F=<John@4452.com> rejected RCPT <welldrive@confortis.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.63.212.231
country_id: 6252001
description:
[2026-06-07 10:56:11 +0000] info [cpaneld] 75.63.212.231 - a.kesso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user a.kesso (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 46.216.242.225
country_id: 630336
description:
2026-06-07 10:57:45 H=([46.216.242.225]) [46.216.242.225]:15591 F=<John@4452.com> rejected RCPT <realestate@confortis.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.142.233.123
country_id: 130758
description:
[2026-06-07 11:00:06 +0000] info [whostmgrd] 185.142.233.123 - pduusmyf "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 77.83.39.169
country_id: 690791
description:
2026-06-07 11:00:41 H=([77.83.39.169]) [77.83.39.169]:57224 F=<dpr@priv8shop.com> rejected RCPT <chikwado22@aol.com>: Sender verify failed


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 103.91.129.82
country_id: 1210997
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-00.103.91.129.82||RSV:8.14||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 46.203.159.237
country_id: 690791
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:46.203.159.237||TA:46.203.159.237||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.67.234.149
country_id: 3895114
description:
[2026-06-07 11:03:32 +0000] info [whostmgrd] 186.67.234.149 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Receive Your Second-Level Plays eropolik.blogspot.sk Pd||Email:suck@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 179.84.165.242
country_id: 3469034
description:
Jun  7 11:05:16 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 179.84.165.242 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 179.84.165.242
country_id: 3469034
description:
2026-06-07 11:05:18 dovecot_login authenticator failed for H=([186.200.83.231]) [179.84.165.242]:47724: 535 Incorrect authentication data (set_id=contact@togosem.com)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:11-05.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.107.112.129
country_id: 290557
description:
[2026-06-07 11:07:08 +0000] info [whostmgrd] 5.107.112.129 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 46.216.242.225
country_id: 630336
description:
2026-06-07 11:08:01 H=([46.216.242.225]) [46.216.242.225]:2472 F=<John@4452.com> rejected RCPT <realestate@confortis.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 11:09:30 +0000] info [cpaneld] 196.179.7.81 - trgtsjot "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user trgtsjot (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 102.129.51.185
country_id: 953987
description:
Jun  7 11:10:00 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 102.129.51.185 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.72.160.237
country_id: 290557
description:
[2026-06-07 11:11:37 +0000] info [whostmgrd] 91.72.160.237 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.82.176
country_id: 6252001
description:
[2026-06-07 11:12:36 +0000] info [whostmgrd] 82.40.82.176 - Turbolte "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 222.116.59.144
country_id: 1835841
description:
Jun  7 11:16:14 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 222.116.59.144 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 222.116.59.144
country_id: 1835841
description:
2026-06-07 11:16:16 dovecot_login authenticator failed for H=(111-70-28-243.emome-ip.hinet.net) [222.116.59.144]:47804: 535 Incorrect authentication data (set_id=visite@cloud-et-racks.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 11:16:44 +0000] info [cpaneld] 196.179.7.81 - TECH3396082237 "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user TECH3396082237 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.243
country_id: 1643084
description:
[2026-06-07 11:17:13 +0000] info [whostmgrd] 185.213.83.243 - apluser "POST /login?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 11:17:21 +0000] info [cpaneld] 196.179.7.81 - Masfloy "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user Masfloy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.243
country_id: 1643084
description:
[2026-06-07 11:21:02 +0000] info [whostmgrd] 185.213.83.243 - masfloy "POST /login?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.158.233
country_id: 2363686
description:
102.64.158.233 - - [07/Jun/2026:11:21:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9739161&pdata=https%253A%252F%252Ftdn.tg%252Ftogo-resultats-bac-1-mai-2026%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780831277 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/togo-resultats-bac-1-mai-2026/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.158.233


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.28.163.189
country_id: 2750405
description:
[2026-06-07 11:25:10 +0000] info [cpaneld] 104.28.163.189 - zsfyjiji "GET /frontend/jupiter/security/two_factor_auth/index.html HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11004
name: Possible breaking attempt on cpanel service
abuser: 104.28.163.189
country_id: 2750405
description:
[2026-06-07 11:25:13 +0000] info [cpaneld] 104.28.163.189 - qfaclpeg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 163.198.111.200
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-26.163.198.111.200||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 163.198.109.175
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-25.163.198.109.175||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 163.198.109.170
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-26.163.198.109.170||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 163.198.110.146
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-26.163.198.110.146||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 163.198.111.13
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-26.163.198.111.13||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 163.198.110.193
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-26.163.198.110.193||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 163.198.111.39
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-26.163.198.111.39||RSV:8.14||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 163.198.109.175
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:163.198.109.175||TA:163.198.109.175||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 163.198.110.54
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-26.163.198.110.54||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 163.198.111.42
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-26.163.198.111.42||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 84.54.72.42
country_id: 1512440
description:
2026-06-07 11:27:04 H=([84.54.72.42]) [84.54.72.42]:28402 F=<John@4452.com> rejected RCPT <pibno@zephyr.tg>: Sender verify failed


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 163.198.111.103
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-27.163.198.111.103||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 163.198.111.181
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-27.163.198.111.181||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 163.198.110.152
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-27.163.198.110.152||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 138.59.5.107
country_id: 3608932
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-27.138.59.5.107||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 206.251.200.245
country_id: 6252001
description:
[2026-06-07 11:28:09 +0000] info [webmaild] 206.251.200.245 - stephane@sitewebofficiel.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password incorrect


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:11-29.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 121.233.200.90
country_id: 1814991
description:
2026-06-07 11:28:50 H=([121.233.200.90]) [121.233.200.90]:50803 F=<John@4452.com> rejected RCPT <contact@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.218.231.25
country_id: 3469034
description:
[2026-06-07 11:29:00 +0000] info [whostmgrd] 179.218.231.25 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Reach Your Ethereum-Based Rock NFT sepoladi.blogspot.sk Br||Email:dandyray80@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.157.112.53
country_id: 3017382
description:
2026-06-07 11:32:22 dovecot_plain authenticator failed for H=([10.62.5.242]) [45.157.112.53]:1059: 535 Incorrect authentication data (set_id=deroupartners@confortis.tg)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.22.11
country_id: 2921044
domain: cloud-et-racks.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:HEAD http:/cloud-et-racks.tg/ HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.157.112.53
country_id: 3017382
description:
2026-06-07 11:35:05 dovecot_plain authenticator failed for H=([10.62.5.242]) [45.157.112.53]:47098: 535 Incorrect authentication data (set_id=deroupartners@confortis.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.157.112.53
country_id: 3017382
description:
2026-06-07 11:36:11 dovecot_plain authenticator failed for H=([10.62.5.242]) [45.157.112.53]:53382: 535 Incorrect authentication data (set_id=deroupartners@confortis.tg)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 45.137.212.23
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-39.45.137.212.23||RSV:8.14||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 163.198.111.30
country_id: 953987
domain: lct-togo.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:163.198.111.30||TA:163.198.111.30||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.164
country_id: 1880251
description:
47.128.96.164 - - [07/Jun/2026:11:43:21 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9870449&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fsource-of-light%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780832600 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/source-of-light/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.164


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 45.137.212.23
country_id: 2750405
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-43.45.137.212.23||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.216.88.75
country_id: 3469034
description:
Jun  7 11:45:18 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.216.88.75 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 114.239.246.165
country_id: 1814991
description:
2026-06-07 11:49:55 H=([0.0.0.0]) [114.239.246.165]:54739 F=<John@4452.com> rejected RCPT <reseaux@soena.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 177.129.25.135
country_id: 3469034
description:
2026-06-07 11:51:13 dovecot_plain authenticator failed for H=(B9MP3) [177.129.25.135]:6094: 535 Incorrect authentication data (set_id=agounkej@ucao-uut.tg)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:11-53.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Activate Your New Member Credit sepoladi.blogspot.se We||Email:enzo.sara@hotmail.it||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 111.61.176.242
country_id: 1814991
description:
Jun  7 11:54:57 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 111.61.176.242 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.61.176.242
country_id: 1814991
description:
2026-06-07 11:54:59 dovecot_login authenticator failed for H=([111.61.176.242]) [111.61.176.242]:62552: 535 Incorrect authentication data (set_id=sales@togosem.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 192.204.100.212
country_id: 6252001
description:
[2026-06-07 11:55:55 +0000] info [whostmgrd] 192.204.100.212 - dev03 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 23.129.64.157
country_id: 6252001
description:
Jun  7 11:58:37 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 23.129.64.157 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 23.129.64.157
country_id: 6252001
description:
2026-06-07 11:58:39 dovecot_plain authenticator failed for H=(pjf3sgemk0enjhojrohse0icq9h8s5c) [23.129.64.157]:1625: 535 Incorrect authentication data (set_id=emmanuel.megbenu@mesyscom.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 182.10.130.188
country_id: 1643084
description:
[2026-06-07 11:58:52 +0000] info [whostmgrd] 182.10.130.188 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.112.202
country_id: 1880251
description:
47.128.112.202 - - [07/Jun/2026:11:59:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10120548&pdata=http%253A%252F%252Fwww.hotelyabisso.com%252Fpages%252Fgallery&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780833597 HTTP/1.1" 302 0 www.hotelyabisso.com "http://www.hotelyabisso.com/pages/gallery" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.112.202


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 223.206.232.45
country_id: 1605651
description:
2026-06-07 11:59:59 dovecot_plain authenticator failed for H=mx-ll-223.206.232-45.dynamic.3bb.co.th (I7QG1XB55L1Y) [223.206.232.45]:3368: 535 Incorrect authentication data (set_id=dossa.amoussou@arse.tg)


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 47.251.168.140
country_id: 6252001
description:
Jun  7 12:00:57 ns5 pure-ftpd[3827901]: (?@47.251.168.140) [INFO] New connection from 47.251.168.140


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 52.81.114.99
country_id: 1814991
description:
52.81.114.99 - - [07/Jun/2026:12:00:59 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9922408&pdata=https%253A%252F%252Flaunetogo.tg%252Fwp-content%252Fuploads%252F2025%252F12%252FScreenshot_20251202-205736.jpg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780833657 HTTP/2.0" 302 0 launetogo.tg "https://launetogo.tg/wp-content/uploads/2025/12/Screenshot_20251202-205736.jpg" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2421.1344 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:52.81.114.99


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 152.56.141.216
country_id: 1269750
description:
2026-06-07 12:02:49 dovecot_plain authenticator failed for H=(Z69Q27X) [152.56.141.216]:58440: 535 Incorrect authentication data (set_id=gdalmeida@kpmg.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 152.56.141.216
country_id: 1269750
description:
2026-06-07 12:02:56 dovecot_login authenticator failed for H=(Z69Q27X) [152.56.141.216]:58440: 535 Incorrect authentication data (set_id=gdalmeida@kpmg.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 112.134.203.80
country_id: 1227603
description:
2026-06-07 12:05:12 dovecot_plain authenticator failed for H=(6LCBR6) [112.134.203.80]:41245: 535 Incorrect authentication data (set_id=info@cndh-togo.org)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 167.250.47.39
country_id: 3469034
description:
2026-06-07 12:05:23 dovecot_login authenticator failed for H=(acesso-47-39.inovainternet.com.br) [167.250.47.39]:54074: 535 Incorrect authentication data (set_id=test@arse.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 121.180.212.234
country_id: 1835841
description:
Jun  7 12:08:05 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 121.180.212.234 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 210.182.73.131
country_id: 1835841
description:
Jun  7 12:08:13 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 210.182.73.131 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.28.163.189
country_id: 2750405
description:
[2026-06-07 12:09:48 +0000] info [cpaneld] 104.28.163.189 - myxlsnta "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.28.163.189
country_id: 2750405
description:
[2026-06-07 12:09:50 +0000] info [cpaneld] 104.28.163.189 - myxlsnta "GET /frontend/jupiter/security/two_factor_auth/index.html HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 12:09:51 +0000] info [cpaneld] 196.179.7.81 - pduusmyf "POST /login HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.215.181.178
country_id: 6252001
description:
[2026-06-07 12:13:59 +0000] info [whostmgrd] 185.215.181.178 - a.kesso "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 190.55.165.72
country_id: 3865483
description:
2026-06-07 12:14:10 dovecot_plain authenticator failed for H=(6S73LVD8) [190.55.165.72]:60236: 535 Incorrect authentication data (set_id=netflix@emt.tg)


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Get Your Superior Shock Funds eropolik.blogspot.hk V4||Email:daoudadiallo321@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:12-17.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.181.88.3
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/ HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.27.190
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/css/style.css HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.181.89.206
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/css/flaticon.css HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.29.28
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/js/jquery.magnific-popup.min.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.29.250
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/js/isotope.pkgd.min.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.27.203
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/css/magnific-popup.min.css HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.27.107
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/js/jquery-3.6.0.min.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.181.89.134
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/js/imagesloaded.pkgd.min.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.29.175
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/js/jquery.appear.min.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.181.89.121
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/js/counter-up.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.28.235
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/js/wow.min.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.181.89.159
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/css/animate.min.css HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.29.141
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/css/owl.carousel.min.css HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.181.88.175
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/js/modernizr.min.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.27.97
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.181.88.46
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/css/all-fontawesome.min.css HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.30.44
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/js/jquery.easing.min.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.30.4
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/js/main.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.181.89.231
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/js/bootstrap.bundle.min.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.181.88.191
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/js/owl.carousel.min.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.28.103
country_id: 2750405
domain: ca-togo.org
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ca-togo.org/client/assets/js/masonry.pkgd.min.js HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.67.155.104
country_id: 298795
description:
Jun  7 12:18:09 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.67.155.104 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.22.160.74
country_id: 3469034
description:
[2026-06-07 12:19:10 +0000] info [whostmgrd] 177.22.160.74 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 12:19:15 +0000] info [whostmgrd] 196.179.7.81 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 12:19:16 +0000] info [whostmgrd] 196.179.7.81 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.134
country_id: 1880251
description:
47.128.96.134 - - [07/Jun/2026:12:23:10 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10183786&pdata=https%253A%252F%252Ftdn.tg%252Fdeces-luc-russel-adjaho%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780834988 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/deces-luc-russel-adjaho/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.134


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 37.99.85.182
country_id: 1522867
description:
2026-06-07 12:25:00 H=([37.99.43.243]) [37.99.85.182]:4444 F=<John@4452.com> rejected RCPT <info@cndh-togo.org>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.22.160.74
country_id: 3469034
description:
[2026-06-07 12:25:11 +0000] info [whostmgrd] 177.22.160.74 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.20.29.128
country_id: 6252001
description:
[2026-06-07 12:27:15 +0000] info [webmaild] 178.20.29.128 - sessou.e@inger.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password hash is missing from system (user probably does not exist)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.96.198.29
country_id: 290557
description:
[2026-06-07 12:30:40 +0000] info [whostmgrd] 92.96.198.29 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 112.184.47.98
country_id: 1835841
description:
Jun  7 12:31:23 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 112.184.47.98 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 112.184.47.98
country_id: 1835841
description:
2026-06-07 12:31:25 dovecot_login authenticator failed for H=([218.94.115.164]) [112.184.47.98]:44779: 535 Incorrect authentication data (set_id=delbegue_j@tps.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.224.66.219
country_id: 3895114
description:
[2026-06-07 12:33:58 +0000] info [whostmgrd] 181.224.66.219 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 86.136.181.185
country_id: 2635167
domain: sia-togo.tg
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0||MV:/wp-json/wp/v2/users/me||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 2.99.192.220
country_id: 2635167
domain: sia-togo.tg
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.14||T:APACHE||MV:/wp-json/wp/v2/users/me||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.143
country_id: 3017382
description:
[2026-06-07 12:38:21 +0000] info [cpaneld] 5.231.64.143 NEW frtwilql:f3nkpZkEpqM24UDr address=5.231.64.143,app=cpaneld,creator=frtwilql,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.100
country_id: 3017382
description:
[2026-06-07 12:38:22 +0000] info [cpaneld] 5.231.64.100 NEW efberwhk:WF1MBXaOSNXcqZuH address=5.231.64.100,app=cpaneld,creator=efberwhk,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 64.44.62.169
country_id: 6252001
domain: scafricaplc.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/zauwogvk/public_html/.911729421629617.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.146
country_id: 2635167
description:
[2026-06-07 12:38:20 +0000] info [cpaneld] 5.230.133.146 NEW dvhzmira:URm4f5677WDiyaiz address=5.230.133.146,app=cpaneld,creator=dvhzmira,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.166.169.96
country_id: 2017370
description:
[2026-06-07 12:38:13 +0000] info [whostmgrd] 5.166.169.96 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.68
country_id: 3017382
description:
[2026-06-07 12:38:18 +0000] info [cpaneld] 5.231.64.68 NEW yydrdvav:W_XEaWrBhU7iFPZs address=5.231.64.68,app=cpaneld,creator=yydrdvav,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.154
country_id: 2635167
domain: sophie-immobilier.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/mipbtgnb/public_html/.420117955205607.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 216.189.152.23
country_id: 6252001
description:
[2026-06-07 12:38:33 +0000] info [cpaneld] 216.189.152.23 NEW zauwogvk:e0zQn9x4gtle_Qyv address=216.189.152.23,app=cpaneld,creator=zauwogvk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.185
country_id: 2635167
description:
[2026-06-07 12:38:16 +0000] info [cpaneld] 5.230.153.185 NEW dvhzmira:pdTDWOfPg7Xto1F3 address=5.230.153.185,app=cpaneld,creator=dvhzmira,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.151
country_id: 6252001
description:
[2026-06-07 12:38:17 +0000] info [cpaneld] 64.44.59.151 NEW wwayrzpl:P8IjZB2cAj7Lk4kj address=64.44.59.151,app=cpaneld,creator=wwayrzpl,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.167
country_id: 2635167
domain: sncom.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/efberwhk/public_html/.575790388571926.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.158
country_id: 2635167
description:
[2026-06-07 12:38:23 +0000] info [cpaneld] 5.230.133.158 NEW mipbtgnb:a68X5EleSfUQsyGa address=5.230.133.158,app=cpaneld,creator=mipbtgnb,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.230
country_id: 2635167
domain: togofeed.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/qledpnjw/public_html/.008235667501108.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.179
country_id: 2635167
description:
[2026-06-07 12:38:23 +0000] info [cpaneld] 5.230.153.179 NEW pkyvzjjc:uG2m4SXLuYskEf9A address=5.230.153.179,app=cpaneld,creator=pkyvzjjc,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.242
country_id: 2635167
description:
[2026-06-07 12:38:19 +0000] info [cpaneld] 5.230.153.242 NEW wgqhqbem:J23MSQFnyZofr1Pe address=5.230.153.242,app=cpaneld,creator=wgqhqbem,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.86
country_id: 3017382
description:
[2026-06-07 12:38:18 +0000] info [cpaneld] 5.231.64.86 NEW qledpnjw:wBSvCLjU0zaeYotX address=5.231.64.86,app=cpaneld,creator=qledpnjw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 37.99.85.182
country_id: 1522867
description:
2026-06-07 12:39:11 H=([37.99.43.243]) [37.99.85.182]:40145 F=<John@4452.com> rejected RCPT <info@cndh-togo.org>: Sender verify failed


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:12-41.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Enter Your Bonus Chamber eropolik.blogspot.gr t0||Email:pchivero17@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.138.144.202
country_id: 1210997
description:
Jun  7 12:42:21 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.138.144.202 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.138.144.202
country_id: 1210997
description:
2026-06-07 12:42:23 dovecot_plain authenticator failed for H=(mu7upw6quebud9qwe2fgym) [103.138.144.202]:48998: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 182.184.132.102
country_id: 1168579
description:
2026-06-07 12:46:45 H=([182.184.132.102]) [182.184.132.102]:54282 F=<John@4452.com> rejected RCPT <contact@emt.tg>: Sender verify failed


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.133
country_id: 2635167
description:
[2026-06-07 12:50:57 +0000] info [cpaneld] 5.230.133.133 NEW frtwilql:_u2cRRQfK__akBO0 address=5.230.133.133,app=cpaneld,creator=frtwilql,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.34
country_id: 2635167
domain: scafricaplc.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/zauwogvk/public_html/.691269600439616.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.175.5.43
country_id: 6252001
description:
[2026-06-07 12:50:57 +0000] info [cpaneld] 107.175.5.43 NEW frtwilql:hlVFpVGl2IdjTONX address=107.175.5.43,app=cpaneld,creator=frtwilql,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.46
country_id: 2635167
description:
[2026-06-07 12:50:59 +0000] info [cpaneld] 5.230.153.46 NEW zauwogvk:ubtn9MJndZAKWNTa address=5.230.153.46,app=cpaneld,creator=zauwogvk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 12:51:06 +0000] info [whostmgrd] 196.179.7.81 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.156
country_id: 2635167
description:
[2026-06-07 12:50:58 +0000] info [cpaneld] 5.230.153.156 NEW frtwilql:RDlqJrj4euZkt1U4 address=5.230.153.156,app=cpaneld,creator=frtwilql,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.26
country_id: 2635167
description:
[2026-06-07 12:52:47 +0000] info [cpaneld] 5.230.153.26 NEW ttfuehop:dPQFSiieF5Vtjz87 address=5.230.153.26,app=cpaneld,creator=ttfuehop,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.56
country_id: 3017382
description:
[2026-06-07 12:52:44 +0000] info [cpaneld] 5.231.64.56 NEW nerohostfreenetm:oklrKmUv_gLum2Pt address=5.231.64.56,app=cpaneld,creator=nerohostfreenetm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.177
country_id: 2635167
description:
[2026-06-07 12:52:46 +0000] info [cpaneld] 5.230.133.177 NEW ebbmnmtd:l4mhalEiK3MqNzRU address=5.230.133.177,app=cpaneld,creator=ebbmnmtd,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.168
country_id: 3017382
description:
[2026-06-07 12:52:45 +0000] info [cpaneld] 5.231.64.168 NEW tqbcalqt:JJ7xwDx7CHRVWFgs address=5.231.64.168,app=cpaneld,creator=tqbcalqt,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.135
country_id: 2635167
domain: mftogo.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ttfuehop/public_html/.283634972630780.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.211
country_id: 2635167
description:
[2026-06-07 12:52:52 +0000] info [cpaneld] 5.230.153.211 NEW libertepansel:IPZcDzXroplTLlFO address=5.230.153.211,app=cpaneld,creator=libertepansel,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.217
country_id: 2635167
description:
[2026-06-07 12:53:05 +0000] info [cpaneld] 5.230.133.217 NEW rbnbkmre:9Z1wRqi3LnapdOtP address=5.230.133.217,app=cpaneld,creator=rbnbkmre,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.62.168
country_id: 6252001
description:
[2026-06-07 12:53:11 +0000] info [cpaneld] 64.44.62.168 NEW nxpivbcy:dGUv5i4LFfiIijxz address=64.44.62.168,app=cpaneld,creator=nxpivbcy,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.210.135.2
country_id: 289688
description:
[2026-06-07 12:53:12 +0000] info [cpaneld] 37.210.135.2 - cafeit "GET /login/?login_only=1&user=cafeit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafeit (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.62.240
country_id: 6252001
description:
[2026-06-07 12:52:50 +0000] info [cpaneld] 64.44.62.240 NEW ebbmnmtd:FJo84shT1r9ukV06 address=64.44.62.240,app=cpaneld,creator=ebbmnmtd,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.74
country_id: 2635167
description:
[2026-06-07 12:52:58 +0000] info [cpaneld] 5.230.133.74 NEW wcnyaruu:Yllbc8wFjzTQCu7p address=5.230.133.74,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.64.159
country_id: 3017382
domain: clients.cloud-et-racks.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/nxpivbcy/public_html/.780860012846276.php||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.216
country_id: 2635167
domain: cinema.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/cinemafreenetmas/public_html/.488024899117740.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.65.19.201
country_id: 3932488
description:
[2026-06-07 12:53:03 +0000] info [cpaneld] 181.65.19.201 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 64.44.62.24
country_id: 6252001
domain: festics.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/njdbfcnn/public_html/.274254820710118.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 65.20.251.170
country_id: 99237
description:
Jun  7 12:53:35 ns5 auth[3021534]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 65.20.251.170 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.88.145
country_id: 6252001
description:
[2026-06-07 12:52:57 +0000] info [cpaneld] 173.211.88.145 NEW wcnyaruu:FXTiUUWlZ1ruuhUO address=173.211.88.145,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.42
country_id: 2635167
domain: fomda.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/tgkkwsvr/public_html/.141441356277608.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 87.164.9.206
country_id: 2921044
description:
[2026-06-07 12:53:32 +0000] info [cpaneld] 87.164.9.206 - ca "GET /login/?login_only=1&user=ca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ca (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.42
country_id: 2635167
description:
[2026-06-07 12:52:59 +0000] info [cpaneld] 5.230.133.42 NEW tgkkwsvr:OlkY5hwDFYZgnxWl address=5.230.133.42,app=cpaneld,creator=tgkkwsvr,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.23
country_id: 2635167
description:
[2026-06-07 12:53:01 +0000] info [cpaneld] 5.230.153.23 NEW uypcrwbr:5IV4He3SSvCkFq2H address=5.230.153.23,app=cpaneld,creator=uypcrwbr,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.88.153
country_id: 6252001
description:
[2026-06-07 12:53:02 +0000] info [cpaneld] 173.211.88.153 NEW tgkkwsvr:G_uusBnqCkqmpXV8 address=173.211.88.153,app=cpaneld,creator=tgkkwsvr,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.52
country_id: 2635167
domain: fastsolution.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/uypcrwbr/public_html/.345661823131933.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 116.254.97.52
country_id: 1643084
description:
[2026-06-07 12:53:15 +0000] info [cpaneld] 116.254.97.52 - cafeit "GET /login/?login_only=1&user=cafeit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafeit (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.125.84.129
country_id: 3469034
description:
[2026-06-07 12:53:24 +0000] info [cpaneld] 179.125.84.129 - cafe "GET /login/?login_only=1&user=cafe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.122
country_id: 2635167
description:
[2026-06-07 12:52:57 +0000] info [cpaneld] 5.230.153.122 NEW oviaiart:TdTQ6dfElGO9Phtr address=5.230.153.122,app=cpaneld,creator=oviaiart,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.251.170
country_id: 99237
description:
2026-06-07 12:53:37 dovecot_login authenticator failed for H=([182.31.197.71]) [65.20.251.170]:53308: 535 Incorrect authentication data (set_id=info@soena.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.133.203.231
country_id: 1210997
description:
[2026-06-07 12:53:09 +0000] info [cpaneld] 103.133.203.231 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.249.163.28
country_id: 3996063
description:
[2026-06-07 12:53:21 +0000] info [cpaneld] 177.249.163.28 - cafei "GET /login/?login_only=1&user=cafei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafei (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.13
country_id: 2635167
description:
[2026-06-07 12:52:50 +0000] info [cpaneld] 5.230.153.13 NEW lhqeyybr:WHvWKQYPgX_deRi4 address=5.230.153.13,app=cpaneld,creator=lhqeyybr,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 64.44.62.168
country_id: 6252001
domain: horizonmedical.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/rdlizssu/public_html/.744064699055108.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.62.195
country_id: 6252001
description:
[2026-06-07 12:53:10 +0000] info [cpaneld] 64.44.62.195 NEW nadngfzn:AVC7RrDOdbkX_5R2 address=64.44.62.195,app=cpaneld,creator=nadngfzn,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 88.153.5.141
country_id: 2921044
description:
[2026-06-07 12:53:18 +0000] info [cpaneld] 88.153.5.141 - cafei "GET /login/?login_only=1&user=cafei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafei (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.203.6.82
country_id: 3624060
description:
[2026-06-07 12:53:32 +0000] info [cpaneld] 201.203.6.82 - ca "GET /login/?login_only=1&user=ca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ca (has_cpuser_file failed)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.34
country_id: 2635167
domain: matwtogo.org
description:
IM360 WAF: Possible phishing page detected||SC:/home/rqgqpxof/public_html/.942747822437112.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.242.106.41
country_id: 3658394
description:
[2026-06-07 12:53:15 +0000] info [cpaneld] 190.242.106.41 - cafeittg "GET /login/?login_only=1&user=cafeittg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafeittg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 93.185.162.142
country_id: 1643084
description:
[2026-06-07 12:56:29 +0000] info [cpaneld] 93.185.162.142 - soeurndetogo "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soeurndetogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.94.210
country_id: 6252001
description:
[2026-06-07 12:57:17 +0000] info [cpaneld] 82.40.94.210 - czqxxxnu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User czqxxxnu has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.176.106.84
country_id: 3469034
description:
[2026-06-07 13:00:43 +0000] info [whostmgrd] 45.176.106.84 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.50.172.143
country_id: 6252001
description:
[2026-06-07 13:00:49 +0000] info [cpaneld] 209.50.172.143 - sprocaadmin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.253.186.187
country_id: 2017370
description:
[2026-06-07 13:01:58 +0000] info [whostmgrd] 185.253.186.187 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 51.68.171.254
country_id: 3017382
domain: belali.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/belali.tg/wp-json/wp/v2/posts HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 13:03:43 +0000] info [cpaneld] 196.179.7.81 - mouss "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mouss (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 13:06:20 +0000] info [cpaneld] 196.179.7.81 - wgqhqbem "POST /login HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11004
name: Possible breaking attempt on cpanel service
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 13:07:06 +0000] info [cpaneld] 196.179.7.81 - hcbcmrio "POST /login HTTP/1.1" FAILED LOGIN cpaneld: User hcbcmrio has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.66.56.231
country_id: 1643084
description:
[2026-06-07 13:07:06 +0000] info [cpaneld] 157.66.56.231 - stephaneogou@gmail.com "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 122.161.243.227
country_id: 1269750
description:
2026-06-07 13:07:08 H=([122.161.243.227]) [122.161.243.227]:11971 F=<John@4452.com> rejected RCPT <development@confortis.tg>: Sender verify failed


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 65.111.23.214
country_id: 2635167
domain: lct-togo.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:13-07.65.111.23.214||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 13:06:58 +0000] info [cpaneld] 196.179.7.81 - lxsenjdd_farms "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lxsenjdd_farms (has_cpuser_file failed)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.217
country_id: 2635167
domain: scafricaplc.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/zauwogvk/public_html/.375460557033276.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.86.10
country_id: 6252001
description:
[2026-06-07 13:07:33 +0000] info [cpaneld] 82.40.86.10 - masfloy "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.154.248
country_id: 2363686
description:
102.64.154.248 - - [07/Jun/2026:13:08:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12819605&pdata=https%253A%252F%252Ftdn.tg%252Ftogo-resultats-bac-1-mai-2026%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780837715 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/togo-resultats-bac-1-mai-2026/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.7.6 Mobile/15E148 Safari/604.1" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.154.248


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 122.161.243.227
country_id: 1269750
description:
2026-06-07 13:07:51 H=([122.161.243.227]) [122.161.243.227]:33041 F=<John@4452.com> rejected RCPT <development@confortis.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.232.136.214
country_id: 192950
description:
[2026-06-07 13:08:42 +0000] info [whostmgrd] 197.232.136.214 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.66.56.231
country_id: 1643084
description:
[2026-06-07 13:10:17 +0000] info [cpaneld] 157.66.56.231 - whmcsadmin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user whmcsadmin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.66.56.231
country_id: 1643084
description:
[2026-06-07 13:10:58 +0000] info [cpaneld] 157.66.56.231 - test "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user test (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.66.56.231
country_id: 1643084
description:
[2026-06-07 13:11:58 +0000] info [cpaneld] 157.66.56.231 - websitecpanel "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 170.245.249.5
country_id: 3469034
description:
Jun  7 13:12:00 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 170.245.249.5 has been locked due to Imunify RBL


plugin: ossec
rule: 11004
name: Possible breaking attempt on cpanel service
abuser: 157.66.56.231
country_id: 1643084
description:
[2026-06-07 13:13:02 +0000] info [cpaneld] 157.66.56.231 - GKAIU5ctJr "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user GKAIU5ctJr (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.75
country_id: 2635167
description:
[2026-06-07 13:16:31 +0000] info [cpaneld] 5.230.133.75 NEW elmkvzcm:5rm5wjomwZVwgiMV address=5.230.133.75,app=cpaneld,creator=elmkvzcm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 167.71.136.93
country_id: 2635167
description:
2026-06-07 13:18:24 dovecot_plain authenticator failed for H=(kwx3xx9ojsj2124tqrxobewc08s) [167.71.136.93]:59938: 535 Incorrect authentication data (set_id=contact@emt.tg)


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 146.190.126.213
country_id: 6252001
description:
Jun  7 13:20:30 ns5 pure-ftpd[3887888]: (?@146.190.126.213) [INFO] New connection from 146.190.126.213


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 146.190.126.213
country_id: 6252001
description:
Jun  7 13:20:36 ns5 pure-ftpd[3887888]: (?@146.190.126.213) [WARNING] Authentication failed for user [direct7]


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 27.115.124.53
country_id: 1814991
description:
27.115.124.53 - - [07/Jun/2026:13:21:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10143892&pdata=http%253A%252F%252Fwww.togoathletisme.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780838493 HTTP/1.1" 404 561 www.togoathletisme.tg "http://www.togoathletisme.tg/" "Mozilla/5.0 (Linux; Android 11; V2055A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:27.115.124.53


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 14.49.195.142
country_id: 1835841
description:
2026-06-07 13:23:01 dovecot_login authenticator failed for H=([70.166.167.37]) [14.49.195.142]:36392: 535 Incorrect authentication data (set_id=admin@soena.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.143
country_id: 3017382
description:
[2026-06-07 13:23:17 +0000] info [cpaneld] 5.231.255.143 NEW wwayrzpl:Ms8Y0bIeoSXVOm2x address=5.231.255.143,app=cpaneld,creator=wwayrzpl,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 14.49.195.142
country_id: 1835841
description:
Jun  7 13:22:59 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 14.49.195.142 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 82.139.195.139
country_id: 2589581
description:
82.139.195.139 - - [07/Jun/2026:13:26:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13068182&pdata=http%253A%252F%252Fsnb.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780838792 HTTP/1.1" 302 0 snb.tg "http://snb.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:82.139.195.139


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.197
country_id: 2635167
description:
[2026-06-07 13:27:20 +0000] info [cpaneld] 5.230.153.197 NEW tgkkwsvr:zkSYd9p1ZD1QRMCM address=5.230.153.197,app=cpaneld,creator=tgkkwsvr,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 5.114.217.92
country_id: 130758
description:
2026-06-07 13:29:25 dovecot_plain authenticator failed for H=(localhost) [5.114.217.92]:42519: 535 Incorrect authentication data (set_id=tpelei@cameg-togo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.166.248.68
country_id: 1880251
description:
[2026-06-07 13:29:34 +0000] info [cpaneld] 188.166.248.68 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.139
country_id: 1880251
description:
47.128.96.139 - - [07/Jun/2026:13:30:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6986094&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fresultats-bac-1%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780838999 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/resultats-bac-1/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.139


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.196.194.248
country_id: 2017370
description:
[2026-06-07 13:31:24 +0000] info [whostmgrd] 109.196.194.248 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 156.0.212.150
country_id: 2395170
description:
156.0.212.150 - - [07/Jun/2026:13:31:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7052442&pdata=https%253A%252F%252Fwww.letabloid.tg%252F2026%252F06%252F05%252Fun-ex-agent-dune-societe-a-lome-revele-les-secrets-de-la-fabrication-du-cube-et-alerte-sur-les-dangers-de-sa-consommation%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780839093 HTTP/2.0" 302 0 www.letabloid.tg "https://www.letabloid.tg/2026/06/05/un-ex-agent-dune-societe-a-lome-revele-les-secrets-de-la-fabrication-du-cube-et-alerte-sur-les-dangers-de-sa-consommation/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:156.0.212.150


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 102.129.53.15
country_id: 953987
description:
Jun  7 13:31:36 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 102.129.53.15 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 102.129.53.15
country_id: 953987
description:
Jun  7 13:31:50 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 102.129.53.15 has been locked due to Imunify RBL


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 5.127.81.13
country_id: 130758
description:
2026-06-07 13:35:23 H=([5.127.38.144]) [5.127.81.13]:43052 F=<John@4452.com> rejected RCPT <visite@cloud-et-racks.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 37.228.70.163
country_id: 1522867
description:
2026-06-07 13:36:01 H=([37.228.70.163]) [37.228.70.163]:62615 F=<John@4452.com> rejected RCPT <deroupartners@confortis.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 119.73.103.15
country_id: 1168579
description:
2026-06-07 13:40:47 dovecot_plain authenticator failed for H=static-host119-73-103-15.link.net.pk (1VT5KO7) [119.73.103.15]:25539: 535 Incorrect authentication data (set_id=papson.fiatuwo@mesyscom.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 119.73.103.15
country_id: 1168579
description:
2026-06-07 13:40:53 dovecot_login authenticator failed for H=static-host119-73-103-15.link.net.pk (1VT5KO7) [119.73.103.15]:25539: 535 Incorrect authentication data (set_id=papson.fiatuwo@mesyscom.com)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 37.228.70.163
country_id: 1522867
description:
2026-06-07 13:42:49 H=([37.228.70.163]) [37.228.70.163]:55569 F=<John@4452.com> rejected RCPT <deroupartners@confortis.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 117.1.213.160
country_id: 1562822
description:
2026-06-07 13:43:45 dovecot_plain authenticator failed for H=(igh7b59ovomjyey0ajbw5) [117.1.213.160]:35805: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.180
country_id: 2635167
domain: fomda.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/tgkkwsvr/public_html/.071903867482802.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.1.213.160
country_id: 1562822
description:
Jun  7 13:43:43 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.1.213.160 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 13:43:33 +0000] info [whostmgrd] 196.179.7.81 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 13:43:35 +0000] info [whostmgrd] 196.179.7.81 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.213.83.243
country_id: 1643084
description:
[2026-06-07 13:43:38 +0000] info [whostmgrd] 185.213.83.243 - NS4 "POST /login?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 47.128.22.22
country_id: 1880251
domain: wellcity.tg
description:
IM360 WAF: Bad file extension||RSV:8.14||T:APACHE||MVN:REQUEST_FILENAME||MV:/gmail.com||User:conforwellty||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 158.173.75.248
country_id: 453733
description:
158.173.75.248 - - [07/Jun/2026:13:49:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6778005&pdata=https%253A%252F%252Fdaula.tg%252Ftyt.html&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780840142 HTTP/2.0" 302 0 daula.tg "https://daula.tg/tyt.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:158.173.75.248


plugin: modsec
rule: 33375
name: IM360 WAF: XMLRPC fault response
abuser: 35.231.191.127
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: XMLRPC fault response||MV:<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<methodResponse>\n  <fault>\n    <value>\n      <struct>\n        <member>\n          <name>faultCode</name>\n          <value><int>403</int></value>\n        </member>\n        <member>\n          <name>faultString</name>\n          <value><string>Votre IP (35.231.191.127) a \xc3\xa9t\xc3\xa9 signal\xc3\xa9e pour de potentielles violations de s\xc3\xa9curit\xc3\xa9.</string></value>\n        </member>\n      </struct>\n    </value>\n  </fault>\n</methodResponse>\n||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.101.177
country_id: 3865483
description:
Jun  7 13:51:54 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.101.177 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 103.59.132.133
country_id: 1269750
description:
Jun  7 13:52:15 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 103.59.132.133 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.188.100.13
country_id: 337996
description:
2026-06-07 13:55:26 dovecot_plain authenticator failed for H=(CHXEI8NX18) [196.188.100.13]:27363: 535 Incorrect authentication data (set_id=rappels@mesyscom.com)


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 103.119.153.18
country_id: 1831722
description:
Jun  7 13:56:49 ns5 pure-ftpd[3914525]: (?@103.119.153.18) [INFO] New connection from 103.119.153.18


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 96.44.174.251
country_id: 6252001
description:
2026-06-07 13:56:56 dovecot_login authenticator failed for H=(ADMIN) [96.44.174.251]:53228: 535 Incorrect authentication data (set_id=daffognon@kpmg.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de la mairie d\xe2\x80\x99an\xc3\xa9ho. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la d\xc3\xa9l\xc3\xa9gation de bessac-togo a \xc3\xa9t\xc3\xa9 ensuite re\xc3\xa7ue \xc3\xa0 l\xe2\x80\x99h\xc3\xb4tel de ville d\xe2\x80\x99an\xc3\xa9ho par le s\xc3\xa9nateur-maire, me alexis coffi aquereburu. celui-ci a exprim\xc3\xa9 sa satisfaction face \xc3\xa0 cette contribution du personnel de cette entreprise au d\xc3\xa9veloppement \xc3\xa9cologique de la commune. il a encourag\xc3\xa9 \xc3\xa0 la poursuite de telles actions, qui participent \xc3\xa0 l\xe2\x80\x99am\xc3\xa9lioration du cadre de vie des populations et \xc3\xa0 la promotion d\xe2\x80\x99une culture de pr\xc3\xa9servation des espaces verts.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">au-del\xc3\xa0 de la plantation d\xe2\x80\x99arbres, cette journ\xc3\xa9e a \xc3\xa9t\xc3\xa9 l\xe2\x80\x99occasion de renforcer les liens entre les collaborateurs de l\xe2\x80\x99entreprise tout en les sensibilisant davantage aux enjeux environnementaux. elle t\xc3\xa9moigne de la volont\xc3\xa9 commune de faire de la protection de la nature une responsabilit\xc3\xa9 partag\xc3\xa9e. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo et qui ex\xc3\xa9cute le projet raine destin\xc3\xa9 \xc3\xa0 lutter durablement les inondations dans le grand lom\xc3\xa9. &nbsp;</p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 132.243.235.48
country_id: 2750405
description:
2026-06-07 13:59:40 dovecot_plain authenticator failed for H=(uxlbko2bp3ygtleyu0r3nknvzxd99) [132.243.235.48]:48836: 535 Incorrect authentication data (set_id=evendeur@soena.tg)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la d\xc3\xa9l\xc3\xa9gation de bessac-togo a \xc3\xa9t\xc3\xa9 ensuite re\xc3\xa7ue \xc3\xa0 l\xe2\x80\x99h\xc3\xb4tel de ville d\xe2\x80\x99an\xc3\xa9ho par le s\xc3\xa9nateur-maire, me alexis coffi aquereburu. celui-ci a exprim\xc3\xa9 sa satisfaction face \xc3\xa0 cette contribution du personnel de cette entreprise au d\xc3\xa9veloppement \xc3\xa9cologique de la commune. il a encourag\xc3\xa9 \xc3\xa0 la poursuite de telles actions, qui participent \xc3\xa0 l\xe2\x80\x99am\xc3\xa9lioration du cadre de vie des populations et \xc3\xa0 la promotion d\xe2\x80\x99une culture de pr\xc3\xa9servation des espaces verts.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">au-del\xc3\xa0 de la plantation d\xe2\x80\x99arbres, cette journ\xc3\xa9e a \xc3\xa9t\xc3\xa9 l\xe2\x80\x99occasion de renforcer les liens entre les collaborateurs de l\xe2\x80\x99entreprise tout en les sensibilisant davantage aux enjeux environnementaux. elle t\xc3\xa9moigne de la volont\xc3\xa9 commune de faire de la protection de la nature une responsabilit\xc3\xa9 partag\xc3\xa9e. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo et qui ex\xc3\xa9cute le projet raine destin\xc3\xa9 \xc3\xa0 lutter durablement les inondations dans le grand lom\xc3\xa9. &nbsp;</p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 176.103.3.240
country_id: 690791
description:
Jun  7 14:04:15 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 176.103.3.240 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail offer</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la d\xc3\xa9l\xc3\xa9gation de bessac-togo a \xc3\xa9t\xc3\xa9 ensuite re\xc3\xa7ue \xc3\xa0 l\xe2\x80\x99h\xc3\xb4tel de ville d\xe2\x80\x99an\xc3\xa9ho par le s\xc3\xa9nateur-maire, me alexis coffi aquereburu. celui-ci a exprim\xc3\xa9 sa satisfaction face \xc3\xa0 cette contribution du personnel de cette entreprise au d\xc3\xa9veloppement \xc3\xa9cologique de la commune. il a encourag\xc3\xa9 \xc3\xa0 la poursuite de telles actions, qui participent \xc3\xa0 l\xe2\x80\x99am\xc3\xa9lioration du cadre de vie des populations et \xc3\xa0 la promotion d\xe2\x80\x99une culture de pr\xc3\xa9servation des espaces verts.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">au-del\xc3\xa0 de la plantation d\xe2\x80\x99arbres, cette journ\xc3\xa9e a \xc3\xa9t\xc3\xa9 l\xe2\x80\x99occasion de renforcer les liens entre les collaborateurs de l\xe2\x80\x99entreprise tout en les sensibilisant davantage aux enjeux environnementaux. elle t\xc3\xa9moigne de la volont\xc3\xa9 commune de faire de la protection de la nature une responsabilit\xc3\xa9 partag\xc3\xa9e. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo et qui ex\xc3\xa9cute le projet raine destin\xc3\xa9 \xc3\xa0 lutter durablement les inondations dans le grand lom\xc3\xa9. &nbsp;</p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie offert par le s\xc3\xa9nateur-maire, me alexis coffi aquereburu. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la d\xc3\xa9l\xc3\xa9gation de bessac-togo a \xc3\xa9t\xc3\xa9 ensuite re\xc3\xa7ue \xc3\xa0 l\xe2\x80\x99h\xc3\xb4tel de ville d\xe2\x80\x99an\xc3\xa9ho par le s\xc3\xa9nateur-maire, me alexis coffi aquereburu. celui-ci a exprim\xc3\xa9 sa satisfaction face \xc3\xa0 cette contribution du personnel de cette entreprise au d\xc3\xa9veloppement \xc3\xa9cologique de la commune. il a encourag\xc3\xa9 \xc3\xa0 la poursuite de telles actions, qui participent \xc3\xa0 l\xe2\x80\x99am\xc3\xa9lioration du cadre de vie des populations et \xc3\xa0 la promotion d\xe2\x80\x99une culture de pr\xc3\xa9servation des espaces verts.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">au-del\xc3\xa0 de la plantation d\xe2\x80\x99arbres, cette journ\xc3\xa9e a \xc3\xa9t\xc3\xa9 l\xe2\x80\x99occasion de renforcer les liens entre les collaborateurs de l\xe2\x80\x99entreprise tout en les sensibilisant davantage aux enjeux environnementaux. elle t\xc3\xa9moigne de la volont\xc3\xa9 commune de faire de la protection de la nature une responsabilit\xc3\xa9 partag\xc3\xa9e. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo et qui ex\xc3\xa9cute le projet raine destin\xc3\xa9 \xc3\xa0 lutter durablement les inondations dans le grand lom\xc3\xa9. &nbsp;</p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 118.163.145.175
country_id: 1668284
description:
Jun  7 14:06:06 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 118.163.145.175 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie offert par le s\xc3\xa9nateur-maire, me alexis coffi aquereburu. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"> bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo et qui ex\xc3\xa9cute le projet raine destin\xc3\xa9 \xc3\xa0 lutter durablement les inondations dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.250.149.25
country_id: 1269750
description:
Jun  7 14:07:44 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.250.149.25 has been locked due to Imunify RBL


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.175.5.98
country_id: 6252001
description:
[2026-06-07 14:07:48 +0000] info [cpaneld] 107.175.5.98 NEW cinemafreenetmas:LG8FehBiIk7uOReY address=107.175.5.98,app=cpaneld,creator=cinemafreenetmas,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 184.22.189.23
country_id: 1605651
description:
2026-06-07 14:08:35 dovecot_plain authenticator failed for H=(5HJ30XO6291) [184.22.189.23]:60506: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 64.44.59.33
country_id: 6252001
domain: cinema.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/cinemafreenetmas/public_html/.304331852526833.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.178
country_id: 1880251
description:
47.128.96.178 - - [07/Jun/2026:14:08:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6841707&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fbac-2020%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780841320 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/bac-2020/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.178


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.125
country_id: 1880251
description:
47.128.96.125 - - [07/Jun/2026:14:08:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6723434&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fquarantaine-obligatoire-a-laeroport-de-lome%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780841327 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/quarantaine-obligatoire-a-laeroport-de-lome/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.125


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.250.149.25
country_id: 1269750
description:
Jun  7 14:08:11 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.250.149.25 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.165
country_id: 1880251
description:
47.128.96.165 - - [07/Jun/2026:14:09:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12883609&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fquarantaine-obligatoire-a-laeroport-de-lome%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780841379 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/quarantaine-obligatoire-a-laeroport-de-lome/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.165


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.186.64.123
country_id: 1562822
description:
[2026-06-07 14:10:45 +0000] info [whostmgrd] 103.186.64.123 - sprocaadmin "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.234.55
country_id: 1269750
description:
Jun  7 14:10:56 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.234.55 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.11
country_id: 2363686
domain: direct7.tg
description:
IM360 WAF: Possible XSS in arguments||MV:https://direct7.tg/wp-content/plugins/onesignal-free-web-push-notifications/sdk_files/onesignalsdkworker.js?appid=8efd3276-8d5b-4b62-bbd3-6ed125ca9f51&sdkversion=160603||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.234.3
country_id: 1269750
description:
Jun  7 14:13:46 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.234.3 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 183.107.76.127
country_id: 1835841
description:
Jun  7 14:14:28 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 183.107.76.127 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.234.55
country_id: 1269750
description:
Jun  7 14:15:15 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.234.55 has been locked due to Imunify RBL


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie offert par le s\xc3\xa9nateur-maire, me alexis coffi aquereburu. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"> bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo et qui ex\xc3\xa9cute le projet raine destin\xc3\xa9 \xc3\xa0 lutter durablement les inondations dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.106.201
country_id: 6252001
description:
[2026-06-07 14:15:39 +0000] info [whostmgrd] 82.40.106.201 - masfloy "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Redeem Your Grade Reward vamvozmviigr.blogspot.ae 53||Email:lvelez9753@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:14-16.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 72.11.147.188
country_id: 6251999
description:
Jun  7 14:16:01 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 72.11.147.188 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 72.11.147.188
country_id: 6251999
description:
2026-06-07 14:16:03 dovecot_plain authenticator failed for H=(a4twz013t94u2l5oojb4a8yo1x9dq5d) [72.11.147.188]:46342: 535 Incorrect authentication data (set_id=info@keedyfarms.com)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"> bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo et qui ex\xc3\xa9cute le projet raine destin\xc3\xa9 \xc3\xa0 r\xc3\xa9soudre durablement les pr inondations dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.166.248.68
country_id: 1880251
description:
[2026-06-07 14:16:44 +0000] info [cpaneld] 188.166.248.68 - kavznjyb "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kavznjyb (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 2.147.142.1
country_id: 130758
description:
2026-06-07 14:17:31 H=([2.147.142.1]) [2.147.142.1]:43134 F=<John@4452.com> rejected RCPT <kpip@emt.tg>: Sender verify failed


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"> bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo et qui ex\xc3\xa9cute le projet raine destin\xc3\xa9 \xc3\xa0 r\xc3\xa9soudre durablement les probl\xc3\xa8mes d'inondation dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 14:17:34 +0000] info [cpaneld] 196.179.7.81 - sodegoz "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sodegoz (has_cpuser_file failed)


plugin: modsec
rule: 77350307
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 157.245.51.186
country_id: 1880251
domain: belali.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:wadminw@wordpress.com||User:dmmkifel||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 146.190.132.31
country_id: 6252001
description:
Jun  7 14:18:39 ns5 pure-ftpd[3930924]: (?@146.190.132.31) [INFO] New connection from 146.190.132.31


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 77.28.105.219
country_id: 718075
description:
2026-06-07 14:18:07 dovecot_plain authenticator failed for H=(648A5DR0V5VM) [77.28.105.219]:54622: 535 Incorrect authentication data (set_id=support@mesyscom.com)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 146.190.132.31
country_id: 6252001
description:
Jun  7 14:18:55 ns5 pure-ftpd[3930924]: (?@146.190.132.31) [WARNING] Authentication failed for user [togofeed]


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.175.229.179
country_id: 2921044
description:
[2026-06-07 14:19:27 +0000] info [cpaneld] 5.175.229.179 NEW elmkvzcm:80XRaHnP52yOfVvw address=5.175.229.179,app=cpaneld,creator=elmkvzcm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 185.213.230.204
country_id: 1512440
description:
2026-06-07 14:19:29 H=([185.213.230.204]) [185.213.230.204]:12607 F=<John@4452.com> rejected RCPT <netflix@emt.tg>: Sender verify failed


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13325,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1024x768.jpeg\" alt=\"\" class=\"wp-image-13325\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13326,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1-1024x768.jpeg\" alt=\"\" class=\"wp-image-13326\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":13327,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-04.29.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13327\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"> bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo et qui ex\xc3\xa9cute le projet raine destin\xc3\xa9 \xc3\xa0 r\xc3\xa9soudre durablement les probl\xc3\xa8mes d'inondation dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.166.248.68
country_id: 1880251
description:
[2026-06-07 14:20:58 +0000] info [cpaneld] 188.166.248.68 - e.carine "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.carine (has_cpuser_file failed)


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13325,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1024x768.jpeg\" alt=\"\" class=\"wp-image-13325\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13326,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1-1024x768.jpeg\" alt=\"\" class=\"wp-image-13326\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":13327,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-04.29.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13327\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo et qui ex\xc3\xa9cute le projet raine destin\xc3\xa9 \xc3\xa0 r\xc3\xa9soudre durablement les probl\xc3\xa8mes d'inondation dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77350307
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 167.99.74.180
country_id: 1880251
domain: cameg-togo.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:trumpweiss||User:camaegdtomgo||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13325,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1024x768.jpeg\" alt=\"\" class=\"wp-image-13325\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13326,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1-1024x768.jpeg\" alt=\"\" class=\"wp-image-13326\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":13327,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-04.29.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13327\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo et qui ex\xc3\xa9cute le projet raine dr\xc3\xa9soudre durablement les probl\xc3\xa8mes d'inondation dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 120.235.118.9
country_id: 1814991
description:
2026-06-07 14:22:26 H=([120.235.118.9]) [120.235.118.9]:42199 F=<John@4452.com> rejected RCPT <majed.zammouri@soroubat.tg>: Sender verify failed


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13325,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1024x768.jpeg\" alt=\"\" class=\"wp-image-13325\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13326,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1-1024x768.jpeg\" alt=\"\" class=\"wp-image-13326\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":13327,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-04.29.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13327\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo, porteur du projet raine qui a pour objectif de r\xc3\xa9soudre durablement les probl\xc3\xa8mes d'inondation dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cellule comm</p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13325,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1024x768.jpeg\" alt=\"\" class=\"wp-image-13325\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13326,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1-1024x768.jpeg\" alt=\"\" class=\"wp-image-13326\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":13327,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-04.29.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13327\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo, porteur du projet raine qui a pour objectif de r\xc3\xa9soudre durablement les probl\xc3\xa8mes d'inondation dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cellule commu</p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.110
country_id: 2635167
domain: sahamtg.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/sahamtg/public_html/.400447092603281.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.175.5.67
country_id: 6252001
description:
[2026-06-07 14:23:57 +0000] info [cpaneld] 107.175.5.67 NEW ruuwezvf:KVXkhfH1dxosfkus address=107.175.5.67,app=cpaneld,creator=ruuwezvf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.225
country_id: 2635167
description:
[2026-06-07 14:23:56 +0000] info [cpaneld] 5.230.133.225 NEW ruuwezvf:XRDOwP4fz0xUvu18 address=5.230.133.225,app=cpaneld,creator=ruuwezvf,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 216.189.152.232
country_id: 6252001
description:
[2026-06-07 14:24:06 +0000] info [cpaneld] 216.189.152.232 NEW ylhgcaui:EjNqGZLxXsYiQCle address=216.189.152.232,app=cpaneld,creator=ylhgcaui,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77896900
name: IM360 WAF: Prohibited WordPress username login/registration
abuser: 167.99.74.180
country_id: 1880251
domain: cameg-togo.tg
description:
IM360 WAF: Prohibited WordPress username login/registration||WPU:wpadminerlzp||User:camaegdtomgo||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13325,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1024x768.jpeg\" alt=\"\" class=\"wp-image-13325\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13326,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1-1024x768.jpeg\" alt=\"\" class=\"wp-image-13326\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":13327,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-04.29.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13327\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo, qui ex\xc3\xa9cute le projet raine dont l'objectif est de r\xc3\xa9soudre durablement les probl\xc3\xa8mes d'inondation dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cellule communication commune des lacs 1</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>contact : communicatio</p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13325,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1024x768.jpeg\" alt=\"\" class=\"wp-image-13325\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13326,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1-1024x768.jpeg\" alt=\"\" class=\"wp-image-13326\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":13327,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-04.29.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13327\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo, qui ex\xc3\xa9cute le projet raine dont l'objectif est de r\xc3\xa9soudre durablement les probl\xc3\xa8mes d'inondation dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>cellule communication commune des lacs 1</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>contact : communication@lacs1.mairie.tg/whatsapp : 70 </p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.166.248.68
country_id: 1880251
description:
[2026-06-07 14:26:09 +0000] info [cpaneld] 188.166.248.68 - waywcbyw "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13325,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1024x768.jpeg\" alt=\"\" class=\"wp-image-13325\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13326,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1-1024x768.jpeg\" alt=\"\" class=\"wp-image-13326\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":13327,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-04.29.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13327\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo, qui ex\xc3\xa9cute le projet raine dont l'objectif est de r\xc3\xa9soudre durablement les probl\xc3\xa8mes d'inondation dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13325,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1024x768.jpeg\" alt=\"\" class=\"wp-image-13325\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13326,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1-1024x768.jpeg\" alt=\"\" class=\"wp-image-13326\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":13327,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-04.29.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13327\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de son entreprise dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo, qui ex\xc3\xa9cute le projet raine dont l'objectif est de r\xc3\xa9soudre durablement les probl\xc3\xa8mes d'inondation dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77350582
name: IM360 WAF: Bytedancewebview detected
abuser: 104.232.222.55
country_id: 2802361
domain: www.matosshop.tg
description:
IM360 WAF: Bytedancewebview detected||UA:Mozilla/5.0 (Linux; Android 13; 22111317PG Build/TKQ1.221114.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/118.0.0.0 Mobile Safari/537.36 musical_ly_2023108040 JsSdk/1.0 NetType/WIFI Channel/googleplay AppName/musical_ly app_version/31.8.4 ByteLocale/pt ByteFullLocale/pt Region/BR AppId/1233 Spark/1.4.3-alpha.5 AppVersion/31.8.4 BytedanceWebview/d8a21c6||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 109.124.227.75
country_id: 2017370
description:
2026-06-07 14:28:59 H=([109.124.227.75]) [109.124.227.75]:12763 F=<John@4452.com> rejected RCPT <development@confortis.tg>: Sender verify failed


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 98.92.35.153
country_id: 6252001
description:
98.92.35.153 - - [07/Jun/2026:14:29:32 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051931&pdata=https%253A%252F%252Fsia-togo.tg%252Fwp-admin%252Finstall.php&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780842571 HTTP/2.0" 302 0 sia-togo.tg "https://sia-togo.tg/wp-admin/install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:98.92.35.153


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 109.124.227.75
country_id: 2017370
description:
2026-06-07 14:30:18 H=([109.124.227.75]) [109.124.227.75]:21020 F=<John@4452.com> rejected RCPT <development@confortis.tg>: Sender verify failed


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13325,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1024x768.jpeg\" alt=\"\" class=\"wp-image-13325\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13326,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1-1024x768.jpeg\" alt=\"\" class=\"wp-image-13326\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":13327,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-04.29.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13327\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de sa structure dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo, qui ex\xc3\xa9cute le projet raine dont l'objectif est de r\xc3\xa9soudre durablement les probl\xc3\xa8mes d'inondation dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 109.124.227.75
country_id: 2017370
description:
2026-06-07 14:33:05 H=([109.124.227.75]) [109.124.227.75]:22423 F=<John@4452.com> rejected RCPT <development@confortis.tg>: Sender verify failed


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13325,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1024x768.jpeg\" alt=\"\" class=\"wp-image-13325\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13326,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1-1024x768.jpeg\" alt=\"\" class=\"wp-image-13326\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":13327,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-04.29.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13327\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de sa structure dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo pour l'ex\xc3\xa9cution du projet raine dont le butr\xc3\xa9soudre durablement les probl\xc3\xa8mes d'inondation dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 43.135.101.247
country_id: 1819730
description:
43.135.101.247 - - [07/Jun/2026:14:34:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9726364&pdata=https%253A%252F%252Fagou1.mairie.tg%252Fmodernisation-des-infrastructures-marchandes-a-agou-1%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780842891 HTTP/2.0" 302 0 agou1.mairie.tg "https://agou1.mairie.tg/modernisation-des-infrastructures-marchandes-a-agou-1/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:43.135.101.247


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 149.54.43.130
country_id: 1149361
description:
2026-06-07 14:35:20 H=([149.54.43.130]) [149.54.43.130]:63449 F=<John@4452.com> rejected RCPT <sergdev@dgdn-togo.tg>: Sender verify failed


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 109.124.227.75
country_id: 2017370
description:
2026-06-07 14:36:15 H=([109.124.227.75]) [109.124.227.75]:21377 F=<John@4452.com> rejected RCPT <development@confortis.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.87.10.66
country_id: 3686110
description:
[2026-06-07 14:37:09 +0000] info [whostmgrd] 186.87.10.66 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 196.196.53.85
country_id: 458258
description:
196.196.53.85 - - [07/Jun/2026:14:36:56 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9660521&pdata=https%253A%252F%252Fwww.la-snb-togo.snb.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780843014 HTTP/2.0" 302 0 www.la-snb-togo.snb.tg "https://www.la-snb-togo.snb.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:196.196.53.85


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 109.124.227.75
country_id: 2017370
description:
2026-06-07 14:39:30 H=([109.124.227.75]) [109.124.227.75]:1267 F=<John@4452.com> rejected RCPT <development@confortis.tg>: Sender verify failed


plugin: modsec
rule: 77350582
name: IM360 WAF: Bytedancewebview detected
abuser: 104.232.222.55
country_id: 2802361
domain: www.dkfood.tg
description:
IM360 WAF: Bytedancewebview detected||UA:Mozilla/5.0 (Linux; Android 12; SM-G990U2 Build/SP1A.210812.016; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/118.0.0.0 Mobile Safari/537.36 musical_ly_2023109030 JsSdk/1.0 NetType/WIFI Channel/googleplay AppName/musical_ly app_version/31.9.3 ByteLocale/en ByteFullLocale/en Region/JM AppId/1233 Spark/1.4.3.5-bugfix AppVersion/31.9.3 BytedanceWebview/d8a21c6||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.120.234.191
country_id: 294640
description:
[2026-06-07 14:40:13 +0000] info [whostmgrd] 46.120.234.191 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Enjoy Your Premium Wager Cash eropolik.blogspot.ru j0||Email:miraclebako98@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:14-40.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 103.119.153.18
country_id: 1831722
description:
Jun  7 14:40:52 ns5 pure-ftpd[3948589]: (?@103.119.153.18) [INFO] New connection from 103.119.153.18


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.143.98.78
country_id: 2542007
description:
[2026-06-07 14:43:19 +0000] info [whostmgrd] 41.143.98.78 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.73.133
country_id: 3865483
domain: cloud-et-racks.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:104.239.73.133||TA:104.239.73.133||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 14:45:30 +0000] info [cpaneld] 196.179.7.81 - camaegdtomgo "POST /login HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.239.88.214
country_id: 3895114
domain: cloud-et-racks.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:104.239.88.214||TA:104.239.88.214||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 111.34.74.82
country_id: 1814991
description:
2026-06-07 14:47:09 H=([111.34.74.82]) [111.34.74.82]:2010 F=<John@4452.com> rejected RCPT <majed.zammouri@soroubat.tg>: Sender verify failed


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 191.96.202.236
country_id: 6252001
domain: cloud-et-racks.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:191.96.202.236||TA:191.96.202.236||


plugin: ossec
rule: 11313
name: FTP file uploaded to server
abuser: 45.198.2.29
country_id: 1643084
description:
Jun  7 14:49:17 ns5 pure-ftpd[3954289]: (edjatiapougloe@45.198.2.29) [NOTICE] //home/edjatiapougloe/public_html/faqs/index.php uploaded  (293985 bytes, 209.83KB/sec)


plugin: ossec
rule: 11313
name: FTP file uploaded to server
abuser: 45.198.2.29
country_id: 1643084
description:
Jun  7 14:49:59 ns5 pure-ftpd[3954289]: (edjatiapougloe@45.198.2.29) [NOTICE] //home/edjatiapougloe/public_html/faqs/sitemap.xml uploaded  (366 bytes, 81.18KB/sec)


plugin: ossec
rule: 11314
name: FTP file deleted from server
abuser: 45.198.2.29
country_id: 1643084
description:
Jun  7 14:50:22 ns5 pure-ftpd[3954030]: (edjatiapougloe@45.198.2.29) [NOTICE] Deleted //home/edjatiapougloe/public_html/faqs/robots.txt


plugin: ossec
rule: 11313
name: FTP file uploaded to server
abuser: 45.198.2.29
country_id: 1643084
description:
Jun  7 14:50:58 ns5 pure-ftpd[3954289]: (edjatiapougloe@45.198.2.29) [NOTICE] //home/edjatiapougloe/public_html/faqs/robots.xml uploaded  (195 bytes, 431.04KB/sec)


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 185.201.137.38
country_id: 298795
domain: www.arse.tg
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:xHV%RBPd8nvyothaC9V3YbN.www.arse.tg||Method:wp.getUsersBlogs


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.106.34
country_id: 6252001
description:
[2026-06-07 14:52:12 +0000] info [cpaneld] 82.40.106.34 - wifizoneuser "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wifizoneuser (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 85.193.117.121
country_id: 1522867
description:
2026-06-07 14:55:21 H=([0.0.0.0]) [85.193.117.121]:20731 F=<John@4452.com> rejected RCPT <info@cndh-togo.org>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.207.176.238
country_id: 3624060
description:
[2026-06-07 14:57:23 +0000] info [cpaneld] 201.207.176.238 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.17.247.125
country_id: 690791
description:
[2026-06-07 14:57:49 +0000] info [cpaneld] 37.17.247.125 - v2ar "GET /login/?login_only=1&user=v2ar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user v2ar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.82.227.153
country_id: 2245662
description:
[2026-06-07 14:57:25 +0000] info [cpaneld] 41.82.227.153 - v2 "GET /login/?login_only=1&user=v2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user v2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 206.85.33.53
country_id: 3865483
description:
[2026-06-07 14:57:36 +0000] info [cpaneld] 206.85.33.53 - v2arset "GET /login/?login_only=1&user=v2arset&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user v2arset (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.74.226.136
country_id: 1733045
description:
[2026-06-07 14:57:46 +0000] info [cpaneld] 180.74.226.136 - v2ars "GET /login/?login_only=1&user=v2ars&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user v2ars (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.237.223.8
country_id: 3865483
description:
[2026-06-07 14:57:52 +0000] info [cpaneld] 45.237.223.8 - v2a "GET /login/?login_only=1&user=v2a&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user v2a (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 89.23.123.32
country_id: 2017370
description:
Jun  7 14:59:56 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 89.23.123.32 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 89.23.123.32
country_id: 2017370
description:
2026-06-07 14:59:58 dovecot_plain authenticator failed for H=(0eu1c9d3dpb2pzxyo5zrs9w9pz1w0nwj) [89.23.123.32]:32809: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 135.136.23.208
country_id: 2635167
description:
135.136.23.208 - - [07/Jun/2026:15:01:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9802908&pdata=https%253A%252F%252Fwww.snbt-togo.snb.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780844499 HTTP/2.0" 302 0 www.snbt-togo.snb.tg "https://www.snbt-togo.snb.tg/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:135.136.23.208


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.129.234.67
country_id: 6252001
description:
102.129.234.67 - - [07/Jun/2026:15:02:30 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7040970&pdata=http%253A%252F%252Fwww.net.free.netmaster.tg&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780844548 HTTP/1.1" 302 0 www.net.free.netmaster.tg "http://www.net.free.netmaster.tg/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.129.234.67


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.167
country_id: 3469034
description:
Jun  7 15:03:51 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.167 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:15-05.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Win Your Virtual Investment Prize bonotdamvam.blogspot.in uf||Email:mayyulanda@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.124.31
country_id: 6252001
description:
[2026-06-07 15:06:49 +0000] info [cpaneld] 82.40.124.31 - ayhhhyhk "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayhhhyhk (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.18
country_id: 1880251
description:
47.128.96.18 - - [07/Jun/2026:15:07:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10013851&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fbac-2020%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780844820 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/bac-2020/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.18


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.166
country_id: 1880251
description:
47.128.96.166 - - [07/Jun/2026:15:07:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6855065&pdata=https%253A%252F%252Ftdn.tg%252Ftogo-pieces-etablissement-carte-nationale-identite%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780844860 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/togo-pieces-etablissement-carte-nationale-identite/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.166


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.136
country_id: 1880251
description:
47.128.96.136 - - [07/Jun/2026:15:06:53 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9750122&pdata=https%253A%252F%252Ftdn.tg%252Ftogo-pieces-etablissement-carte-nationale-identite%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780844812 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/togo-pieces-etablissement-carte-nationale-identite/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.136


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.156
country_id: 2635167
description:
[2026-06-07 15:08:31 +0000] info [cpaneld] 5.230.133.156 NEW efberwhk:M4CPlF1SlXVaTeXt address=5.230.133.156,app=cpaneld,creator=efberwhk,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.255.174
country_id: 3017382
domain: sncom.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/efberwhk/public_html/.218906431293860.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.49
country_id: 2635167
description:
[2026-06-07 15:08:42 +0000] info [cpaneld] 5.230.153.49 NEW nmvhuvgp:AoAb6fhwHSmTV8Kn address=5.230.153.49,app=cpaneld,creator=nmvhuvgp,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.112
country_id: 3017382
description:
[2026-06-07 15:08:48 +0000] info [cpaneld] 5.231.255.112 NEW rdlizssu:nKsMXn_DA_928MoK address=5.231.255.112,app=cpaneld,creator=rdlizssu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.64
country_id: 2635167
description:
[2026-06-07 15:08:32 +0000] info [cpaneld] 5.230.133.64 NEW zauwogvk:HvX6VO986QO8UTu1 address=5.230.133.64,app=cpaneld,creator=zauwogvk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.253
country_id: 2635167
description:
[2026-06-07 15:08:34 +0000] info [cpaneld] 5.230.133.253 NEW newistm:DVsqXqv8zs4gwA3B address=5.230.133.253,app=cpaneld,creator=newistm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.230
country_id: 2635167
description:
[2026-06-07 15:08:26 +0000] info [cpaneld] 5.230.153.230 NEW qledpnjw:0cf1_RwDgz2f2Iwa address=5.230.153.230,app=cpaneld,creator=qledpnjw,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 107.175.5.84
country_id: 6252001
domain: togofeed.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/qledpnjw/public_html/.691991085749845.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.88.116
country_id: 6252001
description:
[2026-06-07 15:08:34 +0000] info [cpaneld] 173.211.88.116 NEW frtwilql:DuhXgnerjNfvgduE address=173.211.88.116,app=cpaneld,creator=frtwilql,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.216
country_id: 2635167
description:
[2026-06-07 15:08:49 +0000] info [cpaneld] 5.230.133.216 NEW rdlizssu:KL8W0xStO1GlIToT address=5.230.133.216,app=cpaneld,creator=rdlizssu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 216.189.152.178
country_id: 6252001
description:
[2026-06-07 15:08:27 +0000] info [cpaneld] 216.189.152.178 NEW qledpnjw:xMljV2bwBcuieeQL address=216.189.152.178,app=cpaneld,creator=qledpnjw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.167
country_id: 2635167
description:
[2026-06-07 15:08:29 +0000] info [cpaneld] 5.230.153.167 NEW wgqhqbem:xWY2wXlU7XnU6voW address=5.230.153.167,app=cpaneld,creator=wgqhqbem,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.115
country_id: 2635167
description:
[2026-06-07 15:08:33 +0000] info [cpaneld] 5.230.133.115 NEW newistm:SW1QGQev3trEcIvF address=5.230.133.115,app=cpaneld,creator=newistm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.62.169
country_id: 6252001
description:
[2026-06-07 15:08:39 +0000] info [cpaneld] 64.44.62.169 NEW lhqeyybr:jizAFrNlgfHhoNTl address=64.44.62.169,app=cpaneld,creator=lhqeyybr,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.254
country_id: 2635167
domain: scafricaplc.com
description:
IM360 WAF: Possible phishing page detected||SC:/home/zauwogvk/public_html/.447535385556639.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.217
country_id: 2635167
description:
[2026-06-07 15:08:29 +0000] info [cpaneld] 5.230.153.217 NEW sotragonet:uKhAjtBUsQu9DP1z address=5.230.153.217,app=cpaneld,creator=sotragonet,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.114
country_id: 2635167
domain: togofeed.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/qledpnjw/public_html/.527919568915431.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.78
country_id: 3017382
description:
[2026-06-07 15:08:45 +0000] info [cpaneld] 5.231.255.78 NEW oviaiart:mKtYgbRtLywajiOz address=5.231.255.78,app=cpaneld,creator=oviaiart,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.136
country_id: 2635167
description:
[2026-06-07 15:08:45 +0000] info [cpaneld] 5.230.153.136 NEW wcnyaruu:MLO30ONwUtFRl_P2 address=5.230.153.136,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.114
country_id: 2635167
description:
[2026-06-07 15:08:37 +0000] info [cpaneld] 5.230.153.114 NEW marketplacenetma:8Dh8kRLcQskon4lW address=5.230.153.114,app=cpaneld,creator=marketplacenetma,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.108
country_id: 2635167
description:
[2026-06-07 15:09:01 +0000] info [cpaneld] 5.230.153.108 NEW zsfyjiji:Xjqdbr2gRxYeGTCl address=5.230.153.108,app=cpaneld,creator=zsfyjiji,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.74
country_id: 2635167
description:
[2026-06-07 15:08:51 +0000] info [cpaneld] 5.230.153.74 NEW rbnbkmre:Tb3KhV8x6XDmCxCp address=5.230.153.74,app=cpaneld,creator=rbnbkmre,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.102
country_id: 6252001
description:
[2026-06-07 15:08:53 +0000] info [cpaneld] 64.44.59.102 NEW hnefmnqz:bAhRAd83gokfza2P address=64.44.59.102,app=cpaneld,creator=hnefmnqz,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 107.175.5.35
country_id: 6252001
domain: horizonmedical.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/rdlizssu/public_html/.785965589349697.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.62.229
country_id: 6252001
description:
[2026-06-07 15:08:54 +0000] info [cpaneld] 64.44.62.229 NEW cinemafreenetmas:lESy4Nu3Cbg7n73q address=64.44.62.229,app=cpaneld,creator=cinemafreenetmas,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.229
country_id: 2635167
description:
[2026-06-07 15:08:54 +0000] info [cpaneld] 5.230.153.229 NEW cinemafreenetmas:i69nDh4TyZ4Vxm0k address=5.230.153.229,app=cpaneld,creator=cinemafreenetmas,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.175.229.130
country_id: 2921044
description:
[2026-06-07 15:09:00 +0000] info [cpaneld] 5.175.229.130 NEW zsfyjiji:Zsb9IDMaxkpS0Lrw address=5.175.229.130,app=cpaneld,creator=zsfyjiji,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 45.58.50.155
country_id: 6252001
domain: clients.cloud-et-racks.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/nxpivbcy/public_html/.505598723150985.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.154
country_id: 2635167
description:
[2026-06-07 15:09:00 +0000] info [cpaneld] 5.230.133.154 NEW glfmqhlj:ex8VIHRR_Qqc83a3 address=5.230.133.154,app=cpaneld,creator=glfmqhlj,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.94
country_id: 2635167
description:
[2026-06-07 15:09:01 +0000] info [cpaneld] 5.230.153.94 NEW sadis:x6ndok45gIT_kfbc address=5.230.153.94,app=cpaneld,creator=sadis,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.89.151
country_id: 6252001
description:
[2026-06-07 15:09:00 +0000] info [cpaneld] 173.211.89.151 NEW zsfyjiji:0OTQ8H7cT1p_yeRC address=173.211.89.151,app=cpaneld,creator=zsfyjiji,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 89.186.1.86
country_id: 798544
description:
Jun  7 15:11:10 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 89.186.1.86 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.227.47.159
country_id: 2464461
description:
[2026-06-07 15:12:27 +0000] info [whostmgrd] 41.227.47.159 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 119.157.76.96
country_id: 1168579
description:
[2026-06-07 15:12:29 +0000] info [cpaneld] 119.157.76.96 - aifkjzqm "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.112.222.88
country_id: 1814991
description:
2026-06-07 15:17:58 dovecot_plain authenticator failed for H=(8pp3v4ok33ludp9ralvnns) [123.112.222.88]:35786: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 15:18:00 +0000] info [cpaneld] 196.179.7.81 - waywcbyw "POST /login HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.26
country_id: 3469034
description:
Jun  7 15:25:48 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.26 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.26
country_id: 3469034
description:
Jun  7 15:25:56 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.26 has been locked due to Imunify RBL


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:15-29.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Claim Your Tertiary Bonus bonotdamvam.blogspot.dk I0||Email:essessenterprises2013@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.163.56.50
country_id: 6252001
description:
[2026-06-07 15:31:22 +0000] info [cpaneld] 98.163.56.50 - tiyasuxe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tiyasuxe (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 51.79.141.49
country_id: 1880251
description:
2026-06-07 15:31:33 dovecot_plain authenticator failed for H=(h15a40tc6oaglalnl9c2e0ufujt4s) [51.79.141.49]:40322: 535 Incorrect authentication data (set_id=papson.fiatuwo@mesyscom.com)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 84.54.70.64
country_id: 1512440
description:
2026-06-07 15:32:45 H=([84.54.70.64]) [84.54.70.64]:27794 F=<John@4452.com> rejected RCPT <egnassingbe@golfe3.mairie.tg>: Sender verify failed


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.137
country_id: 1880251
description:
47.128.96.137 - - [07/Jun/2026:15:36:00 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10182802&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fnavitogo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780846559 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/navitogo/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.137


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.201
country_id: 1880251
description:
47.128.96.201 - - [07/Jun/2026:15:37:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6580887&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fkoc-university%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780846648 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/koc-university/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.201


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 106.219.237.236
country_id: 1269750
description:
2026-06-07 15:37:02 dovecot_plain authenticator failed for H=(localhost) [106.219.237.236]:53768: 535 Incorrect authentication data (set_id=support@mesyscom.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 141.98.10.73
country_id: 597427
description:
2026-06-07 15:37:35 dovecot_plain authenticator failed for H=([141.98.10.73]) [141.98.10.73]:53846: 535 Incorrect authentication data (set_id=irenee.a@cafe.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 141.98.10.73
country_id: 597427
description:
Jun  7 15:37:33 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 141.98.10.73 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 102.64.128.26
country_id: 2363686
description:
102.64.128.26 - - [07/Jun/2026:15:38:47 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6984346&pdata=https%253A%252F%252Flaunetogo.tg%252Fbac-i-2026-les-resultats-disponibles-des-ce-dimanche-7-juin-via-whatsapp-et-en-ligne%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780846726 HTTP/2.0" 302 0 launetogo.tg "https://launetogo.tg/bac-i-2026-les-resultats-disponibles-des-ce-dimanche-7-juin-via-whatsapp-et-en-ligne/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:102.64.128.26


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.207
country_id: 1880251
description:
47.128.96.207 - - [07/Jun/2026:15:38:34 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6658664&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fnoel%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780846713 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/noel/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.207


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.158
country_id: 1880251
description:
47.128.96.158 - - [07/Jun/2026:15:38:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6843591&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fgabrielle-union%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780846719 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/gabrielle-union/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.158


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.196
country_id: 1880251
description:
47.128.96.196 - - [07/Jun/2026:15:38:48 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13406617&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fnavitogo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780846726 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/navitogo/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.196


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 15:41:47 +0000] info [cpaneld] 196.179.7.81 - pyllprbc "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user pyllprbc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 15:42:44 +0000] info [cpaneld] 196.179.7.81 - stephaneogou@gmail.com "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.194.178.84
country_id: 3017382
description:
2026-06-07 15:44:09 dovecot_plain authenticator failed for H=([100.64.100.6]) [185.194.178.84]:20821: 535 Incorrect authentication data (set_id=infos@mesyscom.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 15:45:08 +0000] info [cpaneld] 196.179.7.81 - polyfree "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user polyfree (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 192.204.102.165
country_id: 6252001
description:
[2026-06-07 15:44:52 +0000] info [cpaneld] 192.204.102.165 - crepsad "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.194.178.84
country_id: 3017382
description:
2026-06-07 15:46:28 dovecot_plain authenticator failed for H=([100.64.100.6]) [185.194.178.84]:30927: 535 Incorrect authentication data (set_id=stephane.o@cafe.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.150.164.43
country_id: 3585968
description:
[2026-06-07 15:48:16 +0000] info [whostmgrd] 190.150.164.43 - wifizoneuser "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 103.119.153.18
country_id: 1831722
description:
Jun  7 15:49:06 ns5 pure-ftpd[4000083]: (?@103.119.153.18) [INFO] New connection from 103.119.153.18


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 15:51:25 +0000] info [cpaneld] 196.179.7.81 - kidsedunetmaster "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kidsedunetmaster (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 120.225.110.6
country_id: 1814991
description:
[2026-06-07 15:51:30 +0000] info [whostmgrd] 120.225.110.6 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Cash Out Your Sky-High Reward bonotdamvam.blogspot.sk uP||Email:earnhardt817198396@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.209.171.166
country_id: 6252001
description:
[2026-06-07 15:53:39 +0000] info [cpaneld] 35.209.171.166 - - "GET / HTTP/1.1" FAILED LOGIN cpaneld: Authorization: type not known


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:15-53.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.124.218.229
country_id: 3865483
description:
Jun  7 15:54:04 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.124.218.229 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.209.171.166
country_id: 6252001
description:
[2026-06-07 15:54:19 +0000] info [cpaneld] 35.209.171.166 - - "GET /js/elFinder.version.js HTTP/1.1" FAILED LOGIN cpaneld: Authorization: type not known


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 83.143.29.80
country_id: 933860
description:
Jun  7 15:55:43 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 83.143.29.80 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 83.143.29.80
country_id: 933860
description:
Jun  7 15:55:51 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 83.143.29.80 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.167
country_id: 1880251
description:
47.128.96.167 - - [07/Jun/2026:15:57:29 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7325334&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fkpmg-togo%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780847848 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/kpmg-togo/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.167


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 187.120.107.56
country_id: 3469034
description:
Jun  7 15:59:29 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 187.120.107.56 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.124.182.171
country_id: 3175395
description:
Jun  7 15:59:59 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.124.182.171 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 20.189.240.48
country_id: 1861060
description:
[2026-06-07 16:01:20 +0000] info [whostmgrd] 20.189.240.48 - ayhhhyhk "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31131
name: Anti-bot protection. User failed to pass
abuser: 104.197.69.115
country_id: 6252001
description:
104.197.69.115 - - [07/Jun/2026:16:01:23 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6330262&pdata=http%253A%252F%252Fsahamtg.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780848071 HTTP/1.1" 404 561 sahamtg.com "http://sahamtg.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:104.197.69.115


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 2.78.169.67
country_id: 1522867
description:
2026-06-07 16:00:52 H=([2.78.169.67]) [2.78.169.67]:21063 F=<John@4452.com> rejected RCPT <egnassingbe@golfe3.mairie.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 90.214.20.78
country_id: 2635167
description:
2026-06-07 16:10:47 dovecot_plain authenticator failed for H=([91.92.243.93]) [90.214.20.78]:44310: 535 Incorrect authentication data (set_id=contacto@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 176.214.236.244
country_id: 2017370
description:
2026-06-07 16:10:08 dovecot_plain authenticator failed for H=([91.92.243.93]) [176.214.236.244]:10806: 535 Incorrect authentication data (set_id=marketing@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 105.188.92.6
country_id: 2542007
description:
2026-06-07 16:10:21 dovecot_plain authenticator failed for H=([91.92.243.93]) [105.188.92.6]:52434: 535 Incorrect authentication data (set_id=contact@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 186.235.253.80
country_id: 3469034
description:
2026-06-07 16:10:34 dovecot_plain authenticator failed for H=([91.92.243.93]) [186.235.253.80]:14903: 535 Incorrect authentication data (set_id=contato@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 37.105.230.125
country_id: 102358
description:
2026-06-07 16:09:53 dovecot_plain authenticator failed for H=([91.92.243.93]) [37.105.230.125]:42114: 535 Incorrect authentication data (set_id=admin@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 194.85.183.135
country_id: 2017370
description:
2026-06-07 16:11:00 dovecot_plain authenticator failed for H=183-135.interkonekt.ru ([91.92.243.93]) [194.85.183.135]:1132: 535 Incorrect authentication data (set_id=financeiro@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 72.134.38.243
country_id: 6252001
description:
2026-06-07 16:11:14 dovecot_plain authenticator failed for H=([91.92.243.93]) [72.134.38.243]:48570: 535 Incorrect authentication data (set_id=comercial@dany2.mairie.tg)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.136
country_id: 1880251
description:
47.128.96.136 - - [07/Jun/2026:16:11:16 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119276&pdata=https%253A%252F%252Ftogointerim.net%252F%253Fp%253D548&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780848674 HTTP/2.0" 302 0 togointerim.net "https://togointerim.net/?p=548" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.136


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 190.83.121.23
country_id: 3469034
description:
2026-06-07 16:11:30 dovecot_plain authenticator failed for H=([91.92.243.93]) [190.83.121.23]:30583: 535 Incorrect authentication data (set_id=it@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 181.208.176.14
country_id: 3625428
description:
2026-06-07 16:11:44 dovecot_plain authenticator failed for H=([91.92.243.93]) [181.208.176.14]:46282: 535 Incorrect authentication data (set_id=accounts@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 90.214.20.78
country_id: 2635167
description:
2026-06-07 16:10:54 dovecot_login authenticator failed for H=([91.92.243.93]) [90.214.20.78]:44310: 535 Incorrect authentication data (set_id=contacto@dany2.mairie.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 91.251.43.125
country_id: 130758
description:
2026-06-07 16:11:58 H=([91.251.43.125]) [91.251.43.125]:22814 F=<John@4452.com> rejected RCPT <majed.zammouri@soroubat.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 180.75.232.174
country_id: 1733045
description:
2026-06-07 16:12:48 dovecot_plain authenticator failed for H=([91.92.243.93]) [180.75.232.174]:59914: 535 Incorrect authentication data (set_id=soporte@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.228.139.233
country_id: 3437598
description:
2026-06-07 16:12:02 dovecot_plain authenticator failed for H=45.228.139.233.dipelnetfoz.com.br ([91.92.243.93]) [45.228.139.233]:36520: 535 Incorrect authentication data (set_id=suporte@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 138.185.15.183
country_id: 3932488
description:
2026-06-07 16:12:29 dovecot_plain authenticator failed for H=([91.92.243.93]) [138.185.15.183]:57406: 535 Incorrect authentication data (set_id=office@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 181.208.176.14
country_id: 3625428
description:
2026-06-07 16:11:51 dovecot_login authenticator failed for H=([91.92.243.93]) [181.208.176.14]:46282: 535 Incorrect authentication data (set_id=accounts@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 77.137.65.232
country_id: 294640
description:
2026-06-07 16:12:16 dovecot_plain authenticator failed for H=([91.92.243.93]) [77.137.65.232]:51971: 535 Incorrect authentication data (set_id=hr@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 88.230.103.212
country_id: 298795
description:
2026-06-07 16:13:02 dovecot_plain authenticator failed for H=([91.92.243.93]) [88.230.103.212]:27564: 535 Incorrect authentication data (set_id=ventas@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 175.143.56.161
country_id: 1733045
description:
2026-06-07 16:13:18 dovecot_plain authenticator failed for H=([91.92.243.93]) [175.143.56.161]:54447: 535 Incorrect authentication data (set_id=clients@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.130.172.253
country_id: 2017370
description:
2026-06-07 16:13:32 dovecot_plain authenticator failed for H=([91.92.243.93]) [188.130.172.253]:50936: 535 Incorrect authentication data (set_id=info@dany2.mairie.tg)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 180.75.232.174
country_id: 1733045
description:
2026-06-07 16:12:55 dovecot_login authenticator failed for H=([91.92.243.93]) [180.75.232.174]:59914: 535 Incorrect authentication data (set_id=soporte@dany2.mairie.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 181.225.195.72
country_id: 3865483
description:
Jun  7 16:15:47 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 181.225.195.72 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 181.225.195.72
country_id: 3865483
description:
Jun  7 16:15:55 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 181.225.195.72 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 131.161.55.5
country_id: 3608932
description:
Jun  7 16:16:07 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 131.161.55.5 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 154.144.255.209
country_id: 2542007
description:
Jun  7 16:17:27 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 154.144.255.209 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 194.110.115.20
country_id: 2802361
description:
[2026-06-07 16:17:36 +0000] info [cpaneld] 194.110.115.20 - czqxxxnu "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User czqxxxnu has their account suspended. Login blocked.


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Reserve Your Funds This Instant vamvozmviigr.blogspot.com Lj||Email:jfw7268@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:16-17.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 125.167.48.11
country_id: 1643084
description:
[2026-06-07 16:19:10 +0000] info [whostmgrd] 125.167.48.11 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 52.34.76.65
country_id: 6252001
description:
52.34.76.65 - - [07/Jun/2026:16:18:58 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13080471&pdata=http%253A%252F%252F154-70-82-246.cprapid.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780849137 HTTP/1.1" 302 0 154-70-82-246.cprapid.com "http://154-70-82-246.cprapid.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:52.34.76.65


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 23.129.64.174
country_id: 6252001
description:
2026-06-07 16:21:53 dovecot_plain authenticator failed for H=(5jqsdkstqim2wx8biz2jz5tmyqs) [23.129.64.174]:43489: 535 Incorrect authentication data (set_id=hkanaza@otr.tg)


plugin: ossec
rule: 11313
name: FTP file uploaded to server
abuser: 45.198.2.29
country_id: 1643084
description:
Jun  7 16:22:17 ns5 pure-ftpd[4024895]: (edjatiapougloe@45.198.2.29) [NOTICE] //home/edjatiapougloe/public_html/a-propos/index.php uploaded  (0 bytes, 0.00KB/sec)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 23.129.64.174
country_id: 6252001
description:
Jun  7 16:21:51 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 23.129.64.174 has been locked due to Imunify RBL


plugin: ossec
rule: 11313
name: FTP file uploaded to server
abuser: 45.198.2.29
country_id: 1643084
description:
Jun  7 16:23:16 ns5 pure-ftpd[4025570]: (edjatiapougloe@45.198.2.29) [NOTICE] //home/edjatiapougloe/public_html/a-propos/sitemap.xml uploaded  (370 bytes, 1682.04KB/sec)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 3.39.22.18
country_id: 1835841
description:
[2026-06-07 16:23:50 +0000] info [whostmgrd] 3.39.22.18 - tiyasuxe "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.77.227.227
country_id: 6252001
description:
47.77.227.227 - - [07/Jun/2026:16:25:36 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9727386&pdata=https%253A%252F%252Fwww.crrhuemoa.org&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780849530 HTTP/2.0" 302 0 www.crrhuemoa.org "https://www.crrhuemoa.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" WL:"0" "-" XFF:"47.77.227.227" CAPTCHA:"0" PEER:162.158.167.149


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 37.221.152.157
country_id: 690791
description:
Jun  7 16:25:16 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 37.221.152.157 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.77.227.227
country_id: 6252001
description:
47.77.227.227 - - [07/Jun/2026:16:25:52 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6776215&pdata=https%253A%252F%252Fwww.crrhuemoa.org&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780849544 HTTP/2.0" 302 0 www.crrhuemoa.org "https://www.crrhuemoa.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" WL:"0" "-" XFF:"47.77.227.227" CAPTCHA:"0" PEER:172.71.154.101


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 186.200.6.38
country_id: 3469034
description:
Jun  7 16:26:02 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 186.200.6.38 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 65.20.149.93
country_id: 99237
description:
Jun  7 16:26:24 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 65.20.149.93 has been locked due to Imunify RBL


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 104.28.192.94
country_id: 690791
description:
[2026-06-07 16:26:57 +0000] info [whostmgrd] 104.28.192.94 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.28.192.94
country_id: 690791
description:
[2026-06-07 16:26:55 +0000] info [whostmgrd] 104.28.192.94 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.158
country_id: 1880251
description:
47.128.96.158 - - [07/Jun/2026:16:28:43 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7052906&pdata=https%253A%252F%252Ftdn.tg%252Fpieces-certificat-nationalite-togolaise%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780849722 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/pieces-certificat-nationalite-togolaise/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.158


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 123.21.196.98
country_id: 1562822
description:
[2026-06-07 16:30:19 +0000] info [whostmgrd] 123.21.196.98 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.183.255.17
country_id: 2017370
description:
[2026-06-07 16:33:31 +0000] info [webmaild] 5.183.255.17 - sessou.e@inger.tg "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: user password hash is missing from system (user probably does not exist)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 78.83.142.110
country_id: 732800
description:
Jun  7 16:33:11 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 78.83.142.110 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.106.138
country_id: 6252001
description:
[2026-06-07 16:33:54 +0000] info [cpaneld] 82.40.106.138 - crepsad "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.26.231.227
country_id: 6252001
description:
[2026-06-07 16:36:18 +0000] info [whostmgrd] 216.26.231.227 - crepsad "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 47.15.101.46
country_id: 1269750
domain: mesyscom.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.mesyscom.com||ServerName:mesyscom.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:1529e9db38a1a18e4bdb1b3275a25835914d7da0||Title:vg2u9ppi4las5j||RSV:8.14||T:APACHE||


plugin: modsec
rule: 33375
name: IM360 WAF: XMLRPC fault response
abuser: 47.15.101.46
country_id: 1269750
domain: mesyscom.com
description:
IM360 WAF: XMLRPC fault response||MV:<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<methodResponse>\n  <fault>\n    <value>\n      <struct>\n        <member>\n          <name>faultCode</name>\n          <value><int>403</int></value>\n        </member>\n        <member>\n          <name>faultString</name>\n          <value><string>Votre IP (47.15.101.46) a \xc3\xa9t\xc3\xa9 signal\xc3\xa9e pour de potentielles violations de s\xc3\xa9curit\xc3\xa9.</string></value>\n        </member>\n      </struct>\n    </value>\n  </fault>\n</methodResponse>\n||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 47.15.101.46
country_id: 1269750
domain: mesyscom.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.mesyscom.com||ServerName:mesyscom.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0a06c96bd6468f18a3e2a7014eacae93d8c8ac37||Title:355dw1w3ieeff2nby||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.117
country_id: 2635167
description:
[2026-06-07 16:38:06 +0000] info [cpaneld] 5.230.133.117 NEW frtwilql:mIsjZNIlw23Cmjbz address=5.230.133.117,app=cpaneld,creator=frtwilql,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.82.182
country_id: 6252001
description:
[2026-06-07 16:38:17 +0000] info [cpaneld] 134.195.82.182 NEW ebbmnmtd:KuCBrjDTcG9upvuW address=134.195.82.182,app=cpaneld,creator=ebbmnmtd,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.82.55
country_id: 6252001
description:
[2026-06-07 16:38:33 +0000] info [cpaneld] 134.195.82.55 NEW nxpivbcy:sS0jWVpOAIaIDeaA address=134.195.82.55,app=cpaneld,creator=nxpivbcy,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.175.5.140
country_id: 6252001
description:
[2026-06-07 16:38:05 +0000] info [cpaneld] 107.175.5.140 NEW wwayrzpl:7bgC8XehjTRoRH7t address=107.175.5.140,app=cpaneld,creator=wwayrzpl,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.217
country_id: 2635167
description:
[2026-06-07 16:38:19 +0000] info [cpaneld] 5.230.133.217 NEW ttfuehop:EfrGX0uLOCHu_Ymn address=5.230.133.217,app=cpaneld,creator=ttfuehop,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.179
country_id: 2635167
description:
[2026-06-07 16:38:02 +0000] info [cpaneld] 5.230.133.179 NEW yydrdvav:mj47VyC9110S9Ufc address=5.230.133.179,app=cpaneld,creator=yydrdvav,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.34
country_id: 2635167
description:
[2026-06-07 16:38:06 +0000] info [cpaneld] 5.230.133.34 NEW wgqhqbem:tplW1N_bjemCqXZu address=5.230.133.34,app=cpaneld,creator=wgqhqbem,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.74
country_id: 2635167
description:
[2026-06-07 16:38:31 +0000] info [cpaneld] 5.230.133.74 NEW nxpivbcy:wiwzZsbEmyj0v8sJ address=5.230.133.74,app=cpaneld,creator=nxpivbcy,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 134.195.83.109
country_id: 6252001
domain: clients.cloud-et-racks.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/nxpivbcy/public_html/.030449470729955.php||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.48
country_id: 2635167
domain: afrique-distribution.net
description:
IM360 WAF: Possible phishing page detected||SC:/home/sadis/public_html/.586536437094329.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.68
country_id: 3017382
description:
[2026-06-07 16:38:05 +0000] info [cpaneld] 5.231.64.68 NEW sotragonet:EFsMxK1RMfW36Xur address=5.231.64.68,app=cpaneld,creator=sotragonet,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.175.229.192
country_id: 2921044
description:
[2026-06-07 16:38:11 +0000] info [cpaneld] 5.175.229.192 NEW newistm:mj3mUSvUgJs2iKaG address=5.175.229.192,app=cpaneld,creator=newistm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.34
country_id: 2635167
description:
[2026-06-07 16:38:16 +0000] info [cpaneld] 5.230.153.34 NEW tqbcalqt:_kfeQ5mO_0xkpvGd address=5.230.153.34,app=cpaneld,creator=tqbcalqt,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 45.58.50.47
country_id: 6252001
domain: nerohost.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/nerohostfreenetm/public_html/.101836918295436.php||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 188.80.129.138
country_id: 2264397
domain: pnls.tg
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 134.195.83.31
country_id: 6252001
domain: mftogo.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ttfuehop/public_html/.447470200711186.php||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.89
country_id: 2635167
domain: anamek.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ljrwwgxg/public_html/.578298292778083.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 216.189.152.238
country_id: 6252001
description:
[2026-06-07 16:38:02 +0000] info [cpaneld] 216.189.152.238 NEW wwayrzpl:ymK7SzzjAdBl_bsq address=216.189.152.238,app=cpaneld,creator=wwayrzpl,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 47.15.101.46
country_id: 1269750
domain: mesyscom.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.mesyscom.com||ServerName:mesyscom.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:8bebe33fce1ee4c9716dd55eacdcca938145af98||Title:cs9gcaz8os0sile||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.38
country_id: 2635167
description:
[2026-06-07 16:38:25 +0000] info [cpaneld] 5.230.153.38 NEW wcnyaruu:eclbtsWNCqNrtaAV address=5.230.153.38,app=cpaneld,creator=wcnyaruu,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.33
country_id: 2635167
domain: togofeed.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/qledpnjw/public_html/.767235759095080.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.223
country_id: 2635167
description:
[2026-06-07 16:38:36 +0000] info [cpaneld] 5.230.133.223 NEW sadis:nq74J5CdCMuCdLqq address=5.230.133.223,app=cpaneld,creator=sadis,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.64.143
country_id: 3017382
domain: clients.cloud-et-racks.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/nxpivbcy/public_html/.267493606821541.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.245
country_id: 3017382
description:
[2026-06-07 16:38:04 +0000] info [cpaneld] 5.231.255.245 NEW qledpnjw:xpwJllr5eiPHxJ9e address=5.231.255.245,app=cpaneld,creator=qledpnjw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.48
country_id: 2635167
description:
[2026-06-07 16:38:17 +0000] info [cpaneld] 5.230.153.48 NEW marketplacenetma:TNxp04tSGoRrsmxE address=5.230.153.48,app=cpaneld,creator=marketplacenetma,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 134.195.83.86
country_id: 6252001
domain: fastsolution.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/uypcrwbr/public_html/.408105765040866.php||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.208
country_id: 2635167
domain: fomda.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/tgkkwsvr/public_html/.166361959367587.php||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 47.15.101.46
country_id: 1269750
domain: mesyscom.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.mesyscom.com||ServerName:mesyscom.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:87bb15b15dfdeff02e9cfac32e2b167f3d9a115e||Title:hk3hfn9qmozaed3n||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 47.15.101.46
country_id: 1269750
domain: mesyscom.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.mesyscom.com||ServerName:mesyscom.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:59fd0e87a3dfd049cc2e32ec28b0a9f0f366632a||Title:nuweyzqvn068s4||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 47.15.101.46
country_id: 1269750
domain: mesyscom.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.mesyscom.com||ServerName:mesyscom.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:28f3ba73926a650853e9d6df3669d9e42b2ea1d4||Title:ong8hz9sv0wdf5v7||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Enjoy Your Authoritative Cash sepoladi.blogspot.ae 0S||Email:rollandfelix830@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 47.15.101.46
country_id: 1269750
domain: mesyscom.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.mesyscom.com||ServerName:mesyscom.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:ee720302c442222bb9e72aa97b9774b38c6f7acf||Title:9t49f187en3zncc||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:16-42.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 109.74.74.163
country_id: 1220409
description:
2026-06-07 16:42:44 H=([109.74.74.163]) [109.74.74.163]:15327 F=<John@4452.com> rejected RCPT <majed.zammouri@soroubat.tg>: Sender verify failed


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.167.90.252
country_id: 2510769
description:
2026-06-07 16:43:39 dovecot_plain authenticator failed for H=(o94tilf13ijhrn1akx321t) [185.167.90.252]:51992: 535 Incorrect authentication data (set_id=contact@cloud-et-racks.tg)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 47.15.101.46
country_id: 1269750
domain: mesyscom.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.mesyscom.com||ServerName:mesyscom.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:729ad42f724f3af03ff82b3c942ea8548c4fd8c4||Title:orapu8gsfogcsl4||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 47.15.101.46
country_id: 1269750
domain: mesyscom.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.mesyscom.com||ServerName:mesyscom.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:f2e3f722477c7fa32b4d78a4a08dcdd2f21a3535||Title:0ebvuy2x1inlrjz0fh||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 47.15.101.46
country_id: 1269750
domain: mesyscom.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.mesyscom.com||ServerName:mesyscom.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:635417570a1c20a84f674deffbfd71a380d32c4b||Title:5xpfk5562y3caus||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 47.15.79.18
country_id: 1269750
domain: mesyscom.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:admin.mesyscom.com||ServerName:mesyscom.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:77ceba21a2e6add4403425e2f2db4d7026cb74af||Title:bolozpxpmqkltfdo3||RSV:8.14||T:APACHE||


plugin: modsec
rule: 33375
name: IM360 WAF: XMLRPC fault response
abuser: 47.15.79.18
country_id: 1269750
domain: mesyscom.com
description:
IM360 WAF: XMLRPC fault response||MV:<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<methodResponse>\n  <fault>\n    <value>\n      <struct>\n        <member>\n          <name>faultCode</name>\n          <value><int>403</int></value>\n        </member>\n        <member>\n          <name>faultString</name>\n          <value><string>Votre IP (47.15.79.18) a \xc3\xa9t\xc3\xa9 signal\xc3\xa9e pour de potentielles violations de s\xc3\xa9curit\xc3\xa9.</string></value>\n        </member>\n      </struct>\n    </value>\n  </fault>\n</methodResponse>\n||RSV:8.14||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 38.154.224.174
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:38.154.224.174||TA:38.154.224.174||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 95.84.160.232
country_id: 2017370
description:
Jun  7 16:49:48 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 95.84.160.232 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 95.84.160.232
country_id: 2017370
description:
2026-06-07 16:49:50 dovecot_login authenticator failed for H=broadband-95-84-160-232.ip.moscow.rt.ru (54.38.176.154) [95.84.160.232]:54558: 535 Incorrect authentication data (set_id=emploi@emt.tg)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 188.190.212.122
country_id: 2017370
description:
2026-06-07 16:50:39 H=([188.190.212.122]) [188.190.212.122]:49536 F=<John@4452.com> rejected RCPT <contact@dany2.mairie.tg>: Sender verify failed


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 107.173.150.18
country_id: 6252001
domain: togomedia24.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:107.173.150.18||TA:107.173.150.18||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 16:57:57 +0000] info [cpaneld] 196.179.7.81 - rolle "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rolle (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 188.190.212.122
country_id: 2017370
description:
2026-06-07 17:00:57 H=([188.190.212.122]) [188.190.212.122]:5371 F=<John@4452.com> rejected RCPT <contact@dany2.mairie.tg>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 191.240.37.49
country_id: 3469034
description:
Jun  7 17:02:19 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 191.240.37.49 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 185.198.37.217
country_id: 798544
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:185.198.37.217||TA:185.198.37.217||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 8.210.147.41
country_id: 1819730
description:
Jun  7 17:05:23 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 8.210.147.41 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 17:06:32 +0000] info [cpaneld] 196.179.7.81 - nwvfmxat "POST /login HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.38.56.184
country_id: 290557
description:
[2026-06-07 17:07:06 +0000] info [cpaneld] 5.38.56.184 - tchambainvest "GET /login/?login_only=1&user=tchambainvest&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tchambainvest (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 31.181.234.250
country_id: 2017370
description:
[2026-06-07 17:07:09 +0000] info [cpaneld] 31.181.234.250 - tchambainvesttg "GET /login/?login_only=1&user=tchambainvesttg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tchambainvesttg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.136.150.188
country_id: 99237
description:
[2026-06-07 17:07:32 +0000] info [cpaneld] 185.136.150.188 - mafis "GET /login/?login_only=1&user=mafis&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafis (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.200.96.206
country_id: 2802361
description:
[2026-06-07 17:07:34 +0000] info [cpaneld] 80.200.96.206 - mafi "GET /login/?login_only=1&user=mafi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.223.242.84
country_id: 3996063
description:
[2026-06-07 17:07:12 +0000] info [cpaneld] 187.223.242.84 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.122.180.52
country_id: 3865483
description:
[2026-06-07 17:07:17 +0000] info [cpaneld] 186.122.180.52 - tchambainv "GET /login/?login_only=1&user=tchambainv&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tchambainv (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.230.127.148
country_id: 2542007
description:
[2026-06-07 17:07:24 +0000] info [cpaneld] 197.230.127.148 - tchambai "GET /login/?login_only=1&user=tchambai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tchambai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.26.192.126
country_id: 6251999
description:
[2026-06-07 17:07:24 +0000] info [cpaneld] 70.26.192.126 - mafistee "GET /login/?login_only=1&user=mafistee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafistee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.115.117.56
country_id: 1210997
description:
[2026-06-07 17:07:39 +0000] info [cpaneld] 103.115.117.56 - tcham "GET /login/?login_only=1&user=tcham&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tcham (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.65.46.237
country_id: 3017382
description:
[2026-06-07 17:07:13 +0000] info [cpaneld] 37.65.46.237 - tchambainve "GET /login/?login_only=1&user=tchambainve&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tchambainve (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.32.196.46
country_id: 3686110
description:
[2026-06-07 17:07:32 +0000] info [cpaneld] 179.32.196.46 - tchamb "GET /login/?login_only=1&user=tchamb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tchamb (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.92.196.143
country_id: 2017370
description:
[2026-06-07 17:07:41 +0000] info [cpaneld] 188.92.196.143 - tcha "GET /login/?login_only=1&user=tcha&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tcha (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.223.37.32
country_id: 3469034
description:
[2026-06-07 17:07:45 +0000] info [cpaneld] 177.223.37.32 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.157.239.211
country_id: 2542007
description:
[2026-06-07 17:07:03 +0000] info [cpaneld] 105.157.239.211 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.190.51.61
country_id: 337996
description:
[2026-06-07 17:07:21 +0000] info [cpaneld] 196.190.51.61 - tchambain "GET /login/?login_only=1&user=tchambain&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tchambain (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.173.66.172
country_id: 3996063
description:
[2026-06-07 17:07:28 +0000] info [cpaneld] 201.173.66.172 - mafist "GET /login/?login_only=1&user=mafist&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafist (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.92.139.128
country_id: 3017382
description:
[2026-06-07 17:06:59 +0000] info [cpaneld] 89.92.139.128 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.224.99.10
country_id: 3658394
description:
[2026-06-07 17:07:11 +0000] info [cpaneld] 45.224.99.10 - tchambainves "GET /login/?login_only=1&user=tchambainves&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tchambainves (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 14.191.35.119
country_id: 1562822
description:
[2026-06-07 17:07:18 +0000] info [cpaneld] 14.191.35.119 - mafisteel "GET /login/?login_only=1&user=mafisteel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafisteel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.104.29.88
country_id: 3686110
description:
[2026-06-07 17:07:21 +0000] info [cpaneld] 191.104.29.88 - mafisteeltg "GET /login/?login_only=1&user=mafisteeltg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafisteeltg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.59.82.188
country_id: 1269750
description:
[2026-06-07 17:07:40 +0000] info [cpaneld] 152.59.82.188 - maf "GET /login/?login_only=1&user=maf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.235.170.43
country_id: 2464461
description:
[2026-06-07 17:07:47 +0000] info [cpaneld] 196.235.170.43 - tch "GET /login/?login_only=1&user=tch&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tch (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.134.255.213
country_id: 3017382
description:
[2026-06-07 17:07:26 +0000] info [cpaneld] 92.134.255.213 - mafiste "GET /login/?login_only=1&user=mafiste&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mafiste (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:17-08.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Claim Your Highest Level Cash vamvozmviigr.blogspot.tw b2||Email:maxkostin23@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.120.110.43
country_id: 294640
description:
[2026-06-07 17:07:51 +0000] info [cpaneld] 46.120.110.43 - tc "GET /login/?login_only=1&user=tc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.105.123.198
country_id: 3585968
description:
[2026-06-07 17:08:01 +0000] info [cpaneld] 143.105.123.198 - tdntg "GET /login/?login_only=1&user=tdntg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tdntg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.61.86.190
country_id: 285570
description:
[2026-06-07 17:07:54 +0000] info [cpaneld] 178.61.86.190 - tchamba1 "GET /login/?login_only=1&user=tchamba1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tchamba1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.84.33.194
country_id: 3895114
description:
[2026-06-07 17:08:06 +0000] info [cpaneld] 138.84.33.194 - td "GET /login/?login_only=1&user=td&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user td (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.210
country_id: 3469034
description:
Jun  7 17:09:05 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.210 has been locked due to Imunify RBL


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 174.140.200.149
country_id: 6252001
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:174.140.200.149||TA:174.140.200.149||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.78.233.55
country_id: 1522867
description:
[2026-06-07 17:12:29 +0000] info [cpaneld] 185.78.233.55 - abttogo "GET /login/?login_only=1&user=abttogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.211.194.199
country_id: 2017370
description:
[2026-06-07 17:12:43 +0000] info [cpaneld] 195.211.194.199 - abtto "GET /login/?login_only=1&user=abtto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user abtto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 1.20.173.87
country_id: 1605651
description:
[2026-06-07 17:12:54 +0000] info [cpaneld] 1.20.173.87 - abt "GET /login/?login_only=1&user=abt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user abt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.158.170.65
country_id: 3865483
description:
[2026-06-07 17:13:00 +0000] info [cpaneld] 186.158.170.65 - ab "GET /login/?login_only=1&user=ab&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ab (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.250.22.2
country_id: 1643084
description:
[2026-06-07 17:15:03 +0000] info [whostmgrd] 160.250.22.2 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.141.69.129
country_id: 2542007
description:
[2026-06-07 17:16:42 +0000] info [cpaneld] 41.141.69.129 - relanceinfotg "GET /login/?login_only=1&user=relanceinfotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanceinfotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.74.10.160
country_id: 290557
description:
[2026-06-07 17:16:52 +0000] info [cpaneld] 91.74.10.160 - crpedupe "GET /login/?login_only=1&user=crpedupe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user crpedupe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.10.175.197
country_id: 3469034
description:
[2026-06-07 17:16:56 +0000] info [cpaneld] 177.10.175.197 - relance "GET /login/?login_only=1&user=relance&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relance (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.224.18.60
country_id: 99237
description:
[2026-06-07 17:17:01 +0000] info [cpaneld] 169.224.18.60 - relan "GET /login/?login_only=1&user=relan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.208.185.138
country_id: 2921044
description:
[2026-06-07 17:17:03 +0000] info [cpaneld] 92.208.185.138 - rela "GET /login/?login_only=1&user=rela&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rela (has_cpuser_file failed)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 45.128.134.82
country_id: 3017382
description:
Jun  7 17:17:04 ns5 pure-ftpd[4067844]: (?@45.128.134.82) [WARNING] Authentication failed for user [anonymous]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.227.152.206
country_id: 3469034
description:
[2026-06-07 17:17:11 +0000] info [cpaneld] 168.227.152.206 - re "GET /login/?login_only=1&user=re&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user re (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.154.87.40
country_id: 2542007
description:
[2026-06-07 17:16:58 +0000] info [cpaneld] 105.154.87.40 - relanc "GET /login/?login_only=1&user=relanc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relanc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.89.26.99
country_id: 1210997
description:
[2026-06-07 17:17:16 +0000] info [cpaneld] 103.89.26.99 - relance1 "GET /login/?login_only=1&user=relance1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relance1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.46.76.24
country_id: 690791
description:
[2026-06-07 17:16:52 +0000] info [cpaneld] 95.46.76.24 - relancei "GET /login/?login_only=1&user=relancei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user relancei (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.50.169.71
country_id: 6252001
description:
[2026-06-07 17:21:31 +0000] info [whostmgrd] 209.50.169.71 - crepsad "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.252.41.180
country_id: 6251999
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:104.252.41.180||TA:104.252.41.180||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 128.71.168.114
country_id: 2017370
description:
[2026-06-07 17:24:26 +0000] info [cpaneld] 128.71.168.114 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 176.113.66.196
country_id: 2635167
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:176.113.66.196||TA:176.113.66.196||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.234.55
country_id: 1269750
description:
Jun  7 17:24:18 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.234.55 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.227.216.174
country_id: 3865483
description:
[2026-06-07 17:24:22 +0000] info [cpaneld] 45.227.216.174 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 190.97.238.211
country_id: 3625428
description:
2026-06-07 17:23:55 H=([190.97.238.222]) [190.97.238.211]:63012 F=<John@4452.com> rejected RCPT <netflix@emt.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.244.139.162
country_id: 3469034
description:
[2026-06-07 17:24:30 +0000] info [cpaneld] 170.244.139.162 - cafe "GET /login/?login_only=1&user=cafe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.207.222.187
country_id: 2245662
description:
[2026-06-07 17:24:34 +0000] info [cpaneld] 196.207.222.187 - caf "GET /login/?login_only=1&user=caf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.144.64.237
country_id: 2017370
description:
[2026-06-07 17:24:39 +0000] info [cpaneld] 5.144.64.237 - ca "GET /login/?login_only=1&user=ca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ca (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.19
country_id: 1880251
description:
47.128.96.19 - - [07/Jun/2026:17:24:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9933665&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fsaint-peregrin%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780853052 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/saint-peregrin/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.19


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.118.148.227
country_id: 3469034
description:
[2026-06-07 17:25:01 +0000] info [cpaneld] 138.118.148.227 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.114.53.154
country_id: 2921044
description:
[2026-06-07 17:25:03 +0000] info [cpaneld] 95.114.53.154 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.70.34.95
country_id: 3686110
description:
[2026-06-07 17:25:12 +0000] info [cpaneld] 190.70.34.95 - cafei "GET /login/?login_only=1&user=cafei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafei (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.228.133.123
country_id: 2017370
description:
[2026-06-07 17:25:20 +0000] info [cpaneld] 185.228.133.123 - caf "GET /login/?login_only=1&user=caf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 141.98.142.52
country_id: 783754
description:
[2026-06-07 17:25:06 +0000] info [cpaneld] 141.98.142.52 - cafeit "GET /login/?login_only=1&user=cafeit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafeit (has_cpuser_file failed)


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 155.254.34.196
country_id: 2635167
domain: direct7.tg
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.14||T:APACHE||RA:155.254.34.196||TA:155.254.34.196||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.178.116.242
country_id: 298795
description:
[2026-06-07 17:25:23 +0000] info [cpaneld] 78.178.116.242 - ca "GET /login/?login_only=1&user=ca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 17:26:34 +0000] info [cpaneld] 196.179.7.81 - e.sanvee "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user e.sanvee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 171.243.49.17
country_id: 1562822
description:
[2026-06-07 17:26:37 +0000] info [cpaneld] 171.243.49.17 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.167.232.20
country_id: 1282988
description:
[2026-06-07 17:26:48 +0000] info [cpaneld] 103.167.232.20 - caissederetraite "GET /login/?login_only=1&user=caissederetraite&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissederetraite (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.115.38.163
country_id: 2542007
description:
[2026-06-07 17:26:29 +0000] info [cpaneld] 196.115.38.163 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.204.9.136
country_id: 290557
description:
[2026-06-07 17:26:44 +0000] info [cpaneld] 94.204.9.136 - caissederetraitestg "GET /login/?login_only=1&user=caissederetraitestg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissederetraitestg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.225.200.139
country_id: 3469034
description:
[2026-06-07 17:27:11 +0000] info [cpaneld] 45.225.200.139 - caisseder "GET /login/?login_only=1&user=caisseder&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caisseder (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.41.121.85
country_id: 3378535
description:
[2026-06-07 17:27:21 +0000] info [cpaneld] 181.41.121.85 - caissed "GET /login/?login_only=1&user=caissed&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissed (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.149.212.89
country_id: 1168579
description:
[2026-06-07 17:27:31 +0000] info [cpaneld] 180.149.212.89 - caiss "GET /login/?login_only=1&user=caiss&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caiss (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.208.68.51
country_id: 2623032
description:
[2026-06-07 17:26:51 +0000] info [cpaneld] 80.208.68.51 - caissederetrait "GET /login/?login_only=1&user=caissederetrait&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissederetrait (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.150.253.142
country_id: 3469034
description:
[2026-06-07 17:26:57 +0000] info [cpaneld] 200.150.253.142 - caissederetra "GET /login/?login_only=1&user=caissederetra&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissederetra (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.197.154.60
country_id: 1210997
description:
[2026-06-07 17:27:36 +0000] info [cpaneld] 103.197.154.60 - cais "GET /login/?login_only=1&user=cais&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cais (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.191.176.223
country_id: 337996
description:
[2026-06-07 17:27:41 +0000] info [cpaneld] 196.191.176.223 - cai "GET /login/?login_only=1&user=cai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 27.125.248.6
country_id: 1733045
description:
[2026-06-07 17:27:45 +0000] info [cpaneld] 27.125.248.6 - auditeccandcocom "GET /login/?login_only=1&user=auditeccandcocom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user auditeccandcocom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.2.44.114
country_id: 2921044
description:
[2026-06-07 17:27:49 +0000] info [cpaneld] 91.2.44.114 - auditeccandc "GET /login/?login_only=1&user=auditeccandc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user auditeccandc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 213.24.132.104
country_id: 2017370
description:
[2026-06-07 17:27:06 +0000] info [cpaneld] 213.24.132.104 - caissedere "GET /login/?login_only=1&user=caissedere&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissedere (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.191.23.211
country_id: 3996063
description:
[2026-06-07 17:27:25 +0000] info [cpaneld] 187.191.23.211 - caisse "GET /login/?login_only=1&user=caisse&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caisse (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.114.32.92
country_id: 3895114
description:
[2026-06-07 17:27:39 +0000] info [cpaneld] 190.114.32.92 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 223.233.64.251
country_id: 1269750
description:
[2026-06-07 17:27:41 +0000] info [whostmgrd] 223.233.64.251 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.250.254.228
country_id: 1282988
description:
[2026-06-07 17:27:41 +0000] info [cpaneld] 160.250.254.228 - auditeccandco "GET /login/?login_only=1&user=auditeccandco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user auditeccandco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.184.240.242
country_id: 290291
description:
[2026-06-07 17:27:47 +0000] info [cpaneld] 46.184.240.242 - caissed1 "GET /login/?login_only=1&user=caissed1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissed1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 201.76.209.134
country_id: 3469034
description:
[2026-06-07 17:27:01 +0000] info [cpaneld] 201.76.209.134 - caissederetr "GET /login/?login_only=1&user=caissederetr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissederetr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.142.234.108
country_id: 2542007
description:
[2026-06-07 17:27:04 +0000] info [cpaneld] 41.142.234.108 - caissederet "GET /login/?login_only=1&user=caissederet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caissederet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 183.171.249.1
country_id: 1733045
description:
[2026-06-07 17:27:59 +0000] info [cpaneld] 183.171.249.1 - auditeccan "GET /login/?login_only=1&user=auditeccan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user auditeccan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.120.252.196
country_id: 3625428
description:
[2026-06-07 17:28:34 +0000] info [cpaneld] 190.120.252.196 - au "GET /login/?login_only=1&user=au&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user au (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.151.30.196
country_id: 1210997
description:
[2026-06-07 17:28:05 +0000] info [cpaneld] 103.151.30.196 - auditecca "GET /login/?login_only=1&user=auditecca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user auditecca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 195.139.192.71
country_id: 3144096
description:
[2026-06-07 17:28:19 +0000] info [cpaneld] 195.139.192.71 - audite "GET /login/?login_only=1&user=audite&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user audite (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.67.141.100
country_id: 3017382
description:
[2026-06-07 17:28:27 +0000] info [cpaneld] 37.67.141.100 - audi "GET /login/?login_only=1&user=audi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user audi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.68.252.160
country_id: 6251999
description:
[2026-06-07 17:28:38 +0000] info [cpaneld] 50.68.252.160 - auditec1 "GET /login/?login_only=1&user=auditec1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user auditec1 (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.8.149.85
country_id: 3175395
description:
Jun  7 17:29:36 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.8.149.85 has been locked due to Imunify RBL


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 173.211.89.138
country_id: 6252001
domain: mftogo.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ttfuehop/public_html/.239924394729493.php||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:17-33.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Acquire Your Segment Funds eropolik.blogspot.gr Iz||Email:Crystinarice639@gmail.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 212.154.238.114
country_id: 1522867
description:
2026-06-07 17:33:57 H=([0.0.0.0]) [212.154.238.114]:64832 F=<John@4452.com> rejected RCPT <deroupartners@confortis.tg>: Sender verify failed


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 200.107.226.253
country_id: 3865483
description:
Jun  7 17:35:31 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 200.107.226.253 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.110.127
country_id: 6252001
description:
[2026-06-07 17:35:58 +0000] info [cpaneld] 82.40.110.127 - prince "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user prince (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.176.101.63
country_id: 2300660
description:
[2026-06-07 17:38:45 +0000] info [cpaneld] 102.176.101.63 - hcbcmrio "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: User hcbcmrio has their account suspended. Login blocked.


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 196.179.7.81
country_id: 2464461
description:
Jun  7 17:42:46 ns5 pure-ftpd[4087661]: (?@196.179.7.81) [WARNING] Authentication failed for user [rolle]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 171.25.193.38
country_id: 2661886
description:
Jun  7 17:42:53 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 171.25.193.38 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 171.25.193.38
country_id: 2661886
description:
2026-06-07 17:42:55 dovecot_plain authenticator failed for H=tor-exit-read-me.dfri.se (tbilji03n6kun2r4mwrw) [171.25.193.38]:55764: 535 Incorrect authentication data (set_id=admin@togocarrierebetons.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 117.1.213.160
country_id: 1562822
description:
2026-06-07 17:44:45 dovecot_plain authenticator failed for H=(1d80nx7rmmgcl225) [117.1.213.160]:48035: 535 Incorrect authentication data (set_id=contacts@ucao-uut.tg)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 45.58.50.47
country_id: 6252001
description:
[2026-06-07 17:45:49 +0000] info [cpaneld] 45.58.50.47 NEW qfaclpeg:7Tm8qPkpa4GO_mRB address=45.58.50.47,app=cpaneld,creator=qfaclpeg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.122
country_id: 2635167
description:
[2026-06-07 17:45:45 +0000] info [cpaneld] 5.230.153.122 NEW sotragonet:noYg5qyHVp1GDnaE address=5.230.153.122,app=cpaneld,creator=sotragonet,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.174.169.209
country_id: 6252001
description:
[2026-06-07 17:45:46 +0000] info [cpaneld] 107.174.169.209 NEW jdzxeovw:KSLONDJwSFoIIrJj address=107.174.169.209,app=cpaneld,creator=jdzxeovw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.226
country_id: 2635167
description:
[2026-06-07 17:45:43 +0000] info [cpaneld] 5.230.153.226 NEW qledpnjw:b0ZtX_2sq84tfc7k address=5.230.153.226,app=cpaneld,creator=qledpnjw,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 64.44.62.24
country_id: 6252001
domain: togofeed.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/qledpnjw/public_html/.121368296746123.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.211
country_id: 2635167
description:
[2026-06-07 17:45:43 +0000] info [cpaneld] 5.230.153.211 NEW qledpnjw:W1GPdyAjptDmDIZo address=5.230.153.211,app=cpaneld,creator=qledpnjw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.255.174
country_id: 3017382
description:
[2026-06-07 17:45:45 +0000] info [cpaneld] 5.231.255.174 NEW wgqhqbem:VD6bRfF99O6fS8Vo address=5.231.255.174,app=cpaneld,creator=wgqhqbem,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 134.195.83.86
country_id: 6252001
domain: togofeed.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/qledpnjw/public_html/.705256155903042.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.13
country_id: 2635167
description:
[2026-06-07 17:45:46 +0000] info [cpaneld] 5.230.153.13 NEW frtwilql:l7s6EdcZIdOiRSjj address=5.230.153.13,app=cpaneld,creator=frtwilql,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 195.63.28.171
country_id: 2750405
domain: ccl.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ccl.tg/ HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.227
country_id: 2635167
description:
[2026-06-07 17:45:41 +0000] info [cpaneld] 5.230.153.227 NEW yydrdvav:UTSw3wOuca8sZg83 address=5.230.153.227,app=cpaneld,creator=yydrdvav,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.180
country_id: 2635167
description:
[2026-06-07 17:46:08 +0000] info [cpaneld] 5.230.153.180 NEW hnefmnqz:3F3VuPRydbMqYv9K address=5.230.153.180,app=cpaneld,creator=hnefmnqz,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.114
country_id: 2635167
domain: cinema.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/cinemafreenetmas/public_html/.502076971441825.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.154
country_id: 2635167
description:
[2026-06-07 17:46:12 +0000] info [cpaneld] 5.230.153.154 NEW nxpivbcy:66sx3wAlhrwf3C4G address=5.230.153.154,app=cpaneld,creator=nxpivbcy,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.89.202
country_id: 6252001
description:
[2026-06-07 17:45:57 +0000] info [cpaneld] 173.211.89.202 NEW lhqeyybr:P6SjoxmcrEoyNHli address=173.211.89.202,app=cpaneld,creator=lhqeyybr,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.255.163
country_id: 3017382
domain: horizonmedical.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/rdlizssu/public_html/.734972530309808.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.26
country_id: 2635167
description:
[2026-06-07 17:46:14 +0000] info [cpaneld] 5.230.153.26 NEW glfmqhlj:8ceOLdg_mRpx4UB_ address=5.230.153.26,app=cpaneld,creator=glfmqhlj,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.244
country_id: 6252001
description:
[2026-06-07 17:46:04 +0000] info [cpaneld] 64.44.59.244 NEW oviaiart:b6GrwDmVBEeMRUog address=64.44.59.244,app=cpaneld,creator=oviaiart,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.110
country_id: 2635167
description:
[2026-06-07 17:46:07 +0000] info [cpaneld] 5.230.133.110 NEW tgkkwsvr:Xucrp1_oC3NngAsM address=5.230.133.110,app=cpaneld,creator=tgkkwsvr,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.179
country_id: 2635167
description:
[2026-06-07 17:45:53 +0000] info [cpaneld] 5.230.153.179 NEW rqgqpxof:WilB9MF6Kq3A_buq address=5.230.153.179,app=cpaneld,creator=rqgqpxof,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.154
country_id: 2635167
domain: nerohost.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/nerohostfreenetm/public_html/.353087562744472.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.89
country_id: 2635167
description:
[2026-06-07 17:45:59 +0000] info [cpaneld] 5.230.133.89 NEW nmvhuvgp:8ovcpYutptW1Hlgs address=5.230.133.89,app=cpaneld,creator=nmvhuvgp,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.197
country_id: 2635167
domain: fomda.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/tgkkwsvr/public_html/.388963730986816.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.82.68
country_id: 6252001
description:
[2026-06-07 17:46:06 +0000] info [cpaneld] 134.195.82.68 NEW rdlizssu:yh3nlP3GB_ubJnnW address=134.195.82.68,app=cpaneld,creator=rdlizssu,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.64.143
country_id: 3017382
domain: clients.cloud-et-racks.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/nxpivbcy/public_html/.023897695148012.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.14
country_id: 2635167
description:
[2026-06-07 17:45:57 +0000] info [cpaneld] 5.230.133.14 NEW libertepansel:9N6umniNConfDE41 address=5.230.133.14,app=cpaneld,creator=libertepansel,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.231.64.56
country_id: 3017382
description:
[2026-06-07 17:45:50 +0000] info [cpaneld] 5.231.64.56 NEW efberwhk:oobVtD0oNDttOi8P address=5.231.64.56,app=cpaneld,creator=efberwhk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.44
country_id: 2635167
description:
[2026-06-07 17:45:56 +0000] info [cpaneld] 5.230.133.44 NEW marketplacenetma:vpKUjJiO50zzgta8 address=5.230.133.44,app=cpaneld,creator=marketplacenetma,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 134.195.82.54
country_id: 6252001
domain: afrique-distribution.net
description:
IM360 WAF: Possible phishing page detected||SC:/home/sadis/public_html/.739676630808218.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 42.105.196.166
country_id: 1269750
description:
Jun  7 17:46:50 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 42.105.196.166 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 42.105.196.166
country_id: 1269750
description:
2026-06-07 17:46:52 dovecot_plain authenticator failed for H=(localhost) [42.105.196.166]:27499: 535 Incorrect authentication data (set_id=avid.ayivi@mesyscom.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 117.1.213.160
country_id: 1562822
description:
2026-06-07 17:48:20 dovecot_plain authenticator failed for H=(gcynmxgzjfakafw5iihmvo1bek6ug) [117.1.213.160]:47845: 535 Incorrect authentication data (set_id=e.sanvee@lacs1.mairie.tg)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 117.1.213.160
country_id: 1562822
description:
Jun  7 17:48:18 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 117.1.213.160 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 176.103.7.26
country_id: 690791
description:
Jun  7 17:48:28 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 176.103.7.26 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 45.7.187.218
country_id: 3469034
description:
Jun  7 17:48:58 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 45.7.187.218 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.128
country_id: 1880251
description:
47.128.96.128 - - [07/Jun/2026:17:51:41 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10119528&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fkoc-university%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780854700 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/koc-university/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.128


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.18
country_id: 1880251
description:
47.128.96.18 - - [07/Jun/2026:17:51:04 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9791639&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Ftogo-vs-namibie%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780854663 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/togo-vs-namibie/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.18


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.185
country_id: 1880251
description:
47.128.96.185 - - [07/Jun/2026:17:52:37 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9816722&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Ftogo-vs-namibie%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780854756 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/togo-vs-namibie/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.185


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.212.68.103
country_id: 337996
description:
[2026-06-07 17:53:15 +0000] info [cpaneld] 102.212.68.103 - afriquerevelation "GET /login/?login_only=1&user=afriquerevelation&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afriquerevelation (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.7.24.205
country_id: 3469034
description:
[2026-06-07 17:53:41 +0000] info [cpaneld] 191.7.24.205 - afriquereve "GET /login/?login_only=1&user=afriquereve&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afriquereve (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 175.144.78.222
country_id: 1733045
description:
[2026-06-07 17:53:45 +0000] info [cpaneld] 175.144.78.222 - afriquerev "GET /login/?login_only=1&user=afriquerev&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afriquerev (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.215.40.177
country_id: 630336
description:
[2026-06-07 17:53:48 +0000] info [cpaneld] 37.215.40.177 - afriquere "GET /login/?login_only=1&user=afriquere&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afriquere (has_cpuser_file failed)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 196.179.7.81
country_id: 2464461
description:
Jun  7 17:53:04 ns5 pure-ftpd[4096139]: (?@196.179.7.81) [WARNING] Authentication failed for user [nwvfmxat]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.36.182.80
country_id: 3865483
description:
[2026-06-07 17:53:22 +0000] info [cpaneld] 179.36.182.80 - afriquerevelatio "GET /login/?login_only=1&user=afriquerevelatio&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afriquerevelatio (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 212.237.123.250
country_id: 99237
description:
[2026-06-07 17:53:25 +0000] info [cpaneld] 212.237.123.250 - afriquerevelati "GET /login/?login_only=1&user=afriquerevelati&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afriquerevelati (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.121.226.11
country_id: 1327865
description:
[2026-06-07 17:53:07 +0000] info [cpaneld] 103.121.226.11 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.148.53.61
country_id: 290291
description:
[2026-06-07 17:53:31 +0000] info [cpaneld] 89.148.53.61 - afriquerevela "GET /login/?login_only=1&user=afriquerevela&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afriquerevela (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.43.139.207
country_id: 3895114
description:
[2026-06-07 17:53:35 +0000] info [cpaneld] 181.43.139.207 - afriquerevel "GET /login/?login_only=1&user=afriquerevel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afriquerevel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.141.189.182
country_id: 2542007
description:
[2026-06-07 17:54:02 +0000] info [cpaneld] 41.141.189.182 - afriq "GET /login/?login_only=1&user=afriq&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afriq (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.155.251.165
country_id: 3658394
description:
[2026-06-07 17:54:06 +0000] info [cpaneld] 190.155.251.165 - afri "GET /login/?login_only=1&user=afri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.254.75.42
country_id: 3686110
description:
[2026-06-07 17:53:56 +0000] info [cpaneld] 177.254.75.42 - afrique "GET /login/?login_only=1&user=afrique&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afrique (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.15.38.153
country_id: 690791
description:
[2026-06-07 17:53:59 +0000] info [cpaneld] 185.15.38.153 - afriqu "GET /login/?login_only=1&user=afriqu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afriqu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 112.203.165.51
country_id: 1694008
description:
[2026-06-07 17:54:11 +0000] info [cpaneld] 112.203.165.51 - afr "GET /login/?login_only=1&user=afr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.62.241.110
country_id: 3469034
description:
[2026-06-07 17:54:19 +0000] info [cpaneld] 187.62.241.110 - afrique1 "GET /login/?login_only=1&user=afrique1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user afrique1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.37.137.191
country_id: 3469034
description:
[2026-06-07 17:56:08 +0000] info [whostmgrd] 177.37.137.191 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:17-57.146.19.125.71||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Receive Your Additional Bet Funds sepoladi.blogspot.nl Lb||Email:meansteens@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 2.56.50.81
country_id: 2750405
domain: www.letabloid.tg
description:
IM360 WAF: Track upload attempt||MVN:ARGS:<?xml version||MV:\"1.0\" encoding=\"utf-8\" standalone=\"yes\"?>\\n<methodCall>\\n\t<methodName>pingback.ping</methodName>\\n\t<params>\\n\t\t<param>\\n\t\t\t<value><string>http://valleyviewfwbchurch.org/System/UserProfile.asp?id=55021||RSV:8.14||T:APACHE||


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 37.151.18.237
country_id: 1522867
description:
2026-06-07 17:59:42 H=([37.151.18.237]) [37.151.18.237]:57285 F=<John@4452.com> rejected RCPT <realestate@confortis.tg>: Sender verify failed


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 41.242.49.194
country_id: 2328926
description:
[2026-06-07 18:03:31 +0000] info [cpaneld] 41.242.49.194 NEW pnls:W2JEy6Z2T7feE2u6 address=41.242.49.194,app=cpaneld,creator=pnls,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 84.201.128.56
country_id: 2017370
description:
Jun  7 18:03:56 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 84.201.128.56 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 84.201.128.56
country_id: 2017370
description:
2026-06-07 18:03:58 dovecot_plain authenticator failed for H=(qybuids2boqbrxihi4qk2ftf) [84.201.128.56]:37452: 535 Incorrect authentication data (set_id=welldrive@confortis.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.210.35.182
country_id: 2017370
description:
[2026-06-07 18:05:03 +0000] info [cpaneld] 176.210.35.182 - sn "GET /login/?login_only=1&user=sn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 131.196.78.40
country_id: 3469034
description:
[2026-06-07 18:05:04 +0000] info [cpaneld] 131.196.78.40 - newland "GET /login/?login_only=1&user=newland&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user newland (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 168.205.223.74
country_id: 3469034
description:
Jun  7 18:04:59 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 168.205.223.74 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.28.180.201
country_id: 294640
description:
[2026-06-07 18:04:59 +0000] info [cpaneld] 5.28.180.201 - snc "GET /login/?login_only=1&user=snc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user snc (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 37.151.18.237
country_id: 1522867
description:
2026-06-07 18:09:57 H=([37.151.18.237]) [37.151.18.237]:63069 F=<John@4452.com> rejected RCPT <realestate@confortis.tg>: Sender verify failed


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 64.44.62.228
country_id: 6252001
domain: nerohost.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/nerohostfreenetm/public_html/.091874453983683.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.146
country_id: 2635167
description:
[2026-06-07 18:12:27 +0000] info [cpaneld] 5.230.133.146 NEW nerohostfreenetm:xcOEZhDRvLX3PJMp address=5.230.133.146,app=cpaneld,creator=nerohostfreenetm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 118.100.234.76
country_id: 1733045
description:
[2026-06-07 18:13:41 +0000] info [cpaneld] 118.100.234.76 - vitrin "GET /login/?login_only=1&user=vitrin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.148.23.206
country_id: 1282988
description:
[2026-06-07 18:13:16 +0000] info [cpaneld] 103.148.23.206 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.106.67.156
country_id: 102358
description:
[2026-06-07 18:13:20 +0000] info [cpaneld] 37.106.67.156 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 27.125.249.134
country_id: 1733045
description:
[2026-06-07 18:13:26 +0000] info [cpaneld] 27.125.249.134 - banm "GET /login/?login_only=1&user=banm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.154.74.36
country_id: 2635167
description:
[2026-06-07 18:13:30 +0000] info [cpaneld] 109.154.74.36 - ba "GET /login/?login_only=1&user=ba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ba (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.60.72.63
country_id: 3895114
description:
[2026-06-07 18:13:16 +0000] info [cpaneld] 179.60.72.63 - banmlabtg "GET /login/?login_only=1&user=banmlabtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banmlabtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 87.197.124.201
country_id: 3057568
description:
[2026-06-07 18:13:18 +0000] info [cpaneld] 87.197.124.201 - banmla "GET /login/?login_only=1&user=banmla&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banmla (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.144.104.61
country_id: 3570311
description:
[2026-06-07 18:13:23 +0000] info [cpaneld] 92.144.104.61 - vitrinenews "GET /login/?login_only=1&user=vitrinenews&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrinenews (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.27.246.190
country_id: 2921044
description:
[2026-06-07 18:13:37 +0000] info [cpaneld] 62.27.246.190 - vitrine "GET /login/?login_only=1&user=vitrine&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrine (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.255.200.125
country_id: 3469034
description:
[2026-06-07 18:13:09 +0000] info [cpaneld] 138.255.200.125 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.4.252.242
country_id: 2921044
description:
[2026-06-07 18:13:12 +0000] info [cpaneld] 37.4.252.242 - banmlab "GET /login/?login_only=1&user=banmlab&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banmlab (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.235.57.170
country_id: 2635167
description:
[2026-06-07 18:13:16 +0000] info [cpaneld] 91.235.57.170 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.246.81.175
country_id: 2017370
description:
[2026-06-07 18:13:20 +0000] info [cpaneld] 80.246.81.175 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.52.178.143
country_id: 6251999
description:
[2026-06-07 18:13:27 +0000] info [cpaneld] 96.52.178.143 - vitrinenewstg "GET /login/?login_only=1&user=vitrinenewstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrinenewstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.97.124.249
country_id: 290557
description:
[2026-06-07 18:13:30 +0000] info [cpaneld] 92.97.124.249 - vitrinenew "GET /login/?login_only=1&user=vitrinenew&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrinenew (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.170.198.158
country_id: 2017370
description:
[2026-06-07 18:13:11 +0000] info [cpaneld] 178.170.198.158 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.163.61.10
country_id: 3469034
description:
[2026-06-07 18:13:21 +0000] info [cpaneld] 45.163.61.10 - banml "GET /login/?login_only=1&user=banml&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user banml (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.201.255.91
country_id: 99237
description:
[2026-06-07 18:13:33 +0000] info [cpaneld] 62.201.255.91 - vitrinene "GET /login/?login_only=1&user=vitrinene&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrinene (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.213.132.231
country_id: 953987
description:
[2026-06-07 18:13:36 +0000] info [cpaneld] 102.213.132.231 - ese "GET /login/?login_only=1&user=ese&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ese (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.174.33.56
country_id: 2017370
description:
[2026-06-07 18:13:57 +0000] info [cpaneld] 79.174.33.56 - vitrine1 "GET /login/?login_only=1&user=vitrine1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vitrine1 (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.35.136
country_id: 99237
domain: www.brmn.tg
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.brmn.tg/ HTTP/1.1||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.213.230.23
country_id: 1512440
domain: www.brmn.tghttp
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.brmn.tghttp/www.brmn.tg/ HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.62.70.8
country_id: 1527747
description:
[2026-06-07 18:15:02 +0000] info [cpaneld] 92.62.70.8 - cecaptg "GET /login/?login_only=1&user=cecaptg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cecaptg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.59.99.221
country_id: 3469034
description:
[2026-06-07 18:15:16 +0000] info [cpaneld] 187.59.99.221 - ce "GET /login/?login_only=1&user=ce&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ce (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.50.248.5
country_id: 290557
description:
[2026-06-07 18:15:10 +0000] info [cpaneld] 2.50.248.5 - cec "GET /login/?login_only=1&user=cec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 118.179.89.21
country_id: 1210997
description:
[2026-06-07 18:14:52 +0000] info [cpaneld] 118.179.89.21 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.63.11.5
country_id: 290291
description:
[2026-06-07 18:14:56 +0000] info [cpaneld] 109.63.11.5 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 93.248.53.21
country_id: 2921044
description:
[2026-06-07 18:14:58 +0000] info [cpaneld] 93.248.53.21 - cecap "GET /login/?login_only=1&user=cecap&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cecap (has_cpuser_file failed)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.231.64.168
country_id: 3017382
domain: anamek.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/ljrwwgxg/public_html/.667551977797555.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.83.121
country_id: 6252001
description:
[2026-06-07 18:17:49 +0000] info [cpaneld] 134.195.83.121 NEW qfaclpeg:doWsZjJnUzW9mIa3 address=134.195.83.121,app=cpaneld,creator=qfaclpeg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.33
country_id: 2635167
description:
[2026-06-07 18:17:06 +0000] info [cpaneld] 5.230.153.33 NEW yydrdvav:u3x0FqVoDmUbGNMq address=5.230.153.33,app=cpaneld,creator=yydrdvav,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 216.189.152.23
country_id: 6252001
description:
[2026-06-07 18:17:43 +0000] info [cpaneld] 216.189.152.23 NEW nerohostfreenetm:srxBuchYgsDMo6PJ address=216.189.152.23,app=cpaneld,creator=nerohostfreenetm,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.102
country_id: 6252001
description:
[2026-06-07 18:17:28 +0000] info [cpaneld] 64.44.59.102 NEW nmvhuvgp:q5wzLEDwl9NkxHwu address=64.44.59.102,app=cpaneld,creator=nmvhuvgp,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.53.203.253
country_id: 3469034
description:
[2026-06-07 18:17:45 +0000] info [cpaneld] 200.53.203.253 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.125
country_id: 2635167
domain: lvdt.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/lhqeyybr/public_html/.538627675823998.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.46
country_id: 2635167
description:
[2026-06-07 18:17:47 +0000] info [cpaneld] 5.230.153.46 NEW efberwhk:SSnEHiiEFOva3FZX address=5.230.153.46,app=cpaneld,creator=efberwhk,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 64.44.59.151
country_id: 6252001
description:
[2026-06-07 18:17:40 +0000] info [cpaneld] 64.44.59.151 NEW lhqeyybr:O1kR44C7oCj2D2W0 address=64.44.59.151,app=cpaneld,creator=lhqeyybr,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.33
country_id: 2635167
domain: nerohost.free.netmaster.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/nerohostfreenetm/public_html/.888510548085671.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.93.70
country_id: 6252001
description:
[2026-06-07 18:17:22 +0000] info [whostmgrd] 82.40.93.70 - prince "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 134.195.83.16
country_id: 6252001
domain: matwtogo.org
description:
IM360 WAF: Possible phishing page detected||SC:/home/rqgqpxof/public_html/.444169573994380.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 173.211.88.145
country_id: 6252001
description:
[2026-06-07 18:18:14 +0000] info [cpaneld] 173.211.88.145 NEW jdzxeovw:GYj5fLercTcTa5C6 address=173.211.88.145,app=cpaneld,creator=jdzxeovw,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.168.201.228
country_id: 3469034
description:
[2026-06-07 18:17:58 +0000] info [cpaneld] 45.168.201.228 - kp "GET /login/?login_only=1&user=kp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kp (has_cpuser_file failed)


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 107.174.169.229
country_id: 6252001
domain: soroubat.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/jdzxeovw/public_html/.792862161106065.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.176.81.79
country_id: 2017370
description:
[2026-06-07 18:17:53 +0000] info [cpaneld] 178.176.81.79 - kpmgtg "GET /login/?login_only=1&user=kpmgtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kpmgtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.236.239.200
country_id: 298795
description:
[2026-06-07 18:17:55 +0000] info [cpaneld] 176.236.239.200 - kpm "GET /login/?login_only=1&user=kpm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kpm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.203.115.193
country_id: 290557
description:
[2026-06-07 18:20:16 +0000] info [cpaneld] 94.203.115.193 - centif "GET /login/?login_only=1&user=centif&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.44.117.43
country_id: 3865483
description:
[2026-06-07 18:20:24 +0000] info [cpaneld] 181.44.117.43 - centi "GET /login/?login_only=1&user=centi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user centi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.249.123.60
country_id: 6252001
description:
[2026-06-07 18:20:29 +0000] info [cpaneld] 71.249.123.60 - cen "GET /login/?login_only=1&user=cen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cen (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.109.152.91
country_id: 2623032
description:
[2026-06-07 18:20:31 +0000] info [cpaneld] 2.109.152.91 - ce "GET /login/?login_only=1&user=ce&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ce (has_cpuser_file failed)


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.153.229
country_id: 2635167
description:
[2026-06-07 18:21:16 +0000] info [cpaneld] 5.230.153.229 NEW cietg:rMeHmP3EaG8H51pn address=5.230.153.229,app=cpaneld,creator=cietg,method=handle_form_login,path=form,possessed=0


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 5.230.133.156
country_id: 2635167
description:
[2026-06-07 18:21:18 +0000] info [cpaneld] 5.230.133.156 NEW hnefmnqz:H50KqypZ3_wVWnH9 address=5.230.133.156,app=cpaneld,creator=hnefmnqz,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.42
country_id: 2635167
domain: fomda.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/tgkkwsvr/public_html/.924715559446088.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 134.195.83.31
country_id: 6252001
description:
[2026-06-07 18:21:16 +0000] info [cpaneld] 134.195.83.31 NEW nadngfzn:Cn5qtLDcsLaGs8Ng address=134.195.83.31,app=cpaneld,creator=nadngfzn,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.153.185
country_id: 2635167
domain: fastsolution.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/uypcrwbr/public_html/.478025790159409.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11006
name: cPanel login success
abuser: 107.175.5.43
country_id: 6252001
description:
[2026-06-07 18:21:21 +0000] info [cpaneld] 107.175.5.43 NEW uypcrwbr:KuotEI_BnlUOdN0s address=107.175.5.43,app=cpaneld,creator=uypcrwbr,method=handle_form_login,path=form,possessed=0


plugin: modsec
rule: 77609300
name: IM360 WAF: Possible phishing page detected
abuser: 5.230.133.78
country_id: 2635167
domain: clients.cloud-et-racks.tg
description:
IM360 WAF: Possible phishing page detected||SC:/home/nxpivbcy/public_html/.284679306976521.php||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 117.199.86.170
country_id: 1269750
description:
[2026-06-07 18:22:48 +0000] info [cpaneld] 117.199.86.170 - pnls "GET /login/?login_only=1&user=pnls&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.157.88.207
country_id: 2542007
description:
[2026-06-07 18:22:50 +0000] info [cpaneld] 105.157.88.207 - pnlstg "GET /login/?login_only=1&user=pnlstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user pnlstg (has_cpuser_file failed)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:18-21.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.244.46.28
country_id: 2017370
description:
[2026-06-07 18:22:37 +0000] info [cpaneld] 80.244.46.28 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Reach Your Online Portfolio Prize eropolik.blogspot.sk d6||Email:bambivegas05@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 102.64.221.105
country_id: 2363686
domain: lacs1.mairie.tg
description:
IM360 WAF: Possible XSS in arguments||MV:<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">par claude gbenyedji</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":13324,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-07-at-06.55.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13324\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong><em>le personnel de bessac-togo a organis\xc3\xa9 le samedi 6 juin en collaboration avec la commune des lacs 1, une activit\xc3\xa9 de reboisement au sein du jardin botanique de hounssiafa dans la canton de glidji. cette initiative citoyenne s\xe2\x80\x99inscrit dans le cadre de la c\xc3\xa9l\xc3\xa9bration de la journ\xc3\xa9e nationale de l\xe2\x80\x99arbre.</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">r\xc3\xa9unis dans une ambiance conviviale et empreinte de responsabilit\xc3\xa9 environnementale, les collaborateurs de l\xe2\x80\x99entreprise ont proc\xc3\xa9d\xc3\xa9 \xc3\xa0 la mise en terre d\xe2\x80\x99environ 200 jeunes plants destin\xc3\xa9s \xc3\xa0 enrichir le couvert v\xc3\xa9g\xc3\xa9tal du jardin botanique de hounssiafa dans le canton de glidji. cette action vise non seulement \xc3\xa0 contribuer \xc3\xa0 la restauration des espaces verts de la commune des lacs 1, mais \xc3\xa9galement \xc3\xa0 r\xc3\xa9pondre aux d\xc3\xa9fis li\xc3\xa9s \xc3\xa0 la d\xc3\xa9gradation des terres, \xc3\xa0 l\xe2\x80\x99\xc3\xa9rosion c\xc3\xb4ti\xc3\xa8re et aux effets du changement climatique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13325,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1024x768.jpeg\" alt=\"\" class=\"wp-image-13325\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":13326,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-03.18.38-1-1024x768.jpeg\" alt=\"\" class=\"wp-image-13326\"/></figure>\n<!-- /wp:image --></div>\n<!-- /wp:column --></div>\n<!-- /wp:columns -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">\xc3\x80 travers cette op\xc3\xa9ration de reboisement, bessac-togo r\xc3\xa9affirme sa volont\xc3\xa9 de participer activement aux initiatives de d\xc3\xa9veloppement durable dans les collectivit\xc3\xa9s territoriales togolaises. l\xe2\x80\x99entreprise consid\xc3\xa8re la pr\xc3\xa9servation de l\xe2\x80\x99environnement comme un pilier essentiel de sa responsabilit\xc3\xa9 soci\xc3\xa9tale et entend poursuivre ses efforts en faveur d\xe2\x80\x99un cadre de vie plus sain pour les g\xc3\xa9n\xc3\xa9rations pr\xc3\xa9sentes et futures.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":13327,\"sizeslug\":\"large\",\"linkdestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://lacs1.mairie.tg/wp-content/uploads/2026/06/whatsapp-image-2026-06-06-at-04.29.56-1024x768.jpeg\" alt=\"\" class=\"wp-image-13327\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">mr karim cheiniour, directeur projet \xc3\xa0 bessac-togo a soulign\xc3\xa9 l\xe2\x80\x99importance de l\xe2\x80\x99implication de sa structure dans les actions de protection de l\xe2\x80\x99environnement. il a \xc3\xa9galement indiqu\xc3\xa9 que des discussions vont se poursuivre avec les autorit\xc3\xa9s municipales pour la concr\xc3\xa9tisation d\xe2\x80\x99autres projets dans la commune. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\">la journ\xc3\xa9e s'est achev\xc3\xa9e autour d'un cocktail \xc3\xa0 la plage de la mairie en pr\xc3\xa9sence du s\xc3\xa9nateur-maire, me alexis coffi aquereburu. bessac est une entreprise fran\xc3\xa7aise install\xc3\xa9e au togo pour l'ex\xc3\xa9cution du projet raine dont le but est de r\xc3\xa9soudre durablement les probl\xc3\xa8mes d'inondation dans le grand lom\xc3\xa9. \xc2\xa0</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>cellule communication commune des lacs 1</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"style\":{\"typography\":{\"fontsize\":\"21px\"}}} -->\n<p style=\"font-size:21px\"><strong>contact : communication@lacs1.mairie.tg/whatsapp : 70 52 52 67/tel : 23 30 17 63</strong></p>\n<!-- /wp:paragraph -->||RSV:8.14||T:APACHE||


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.136.222
country_id: 3469034
description:
Jun  7 18:26:59 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.136.222 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.238.183.145
country_id: 3686110
description:
[2026-06-07 18:27:55 +0000] info [cpaneld] 45.238.183.145 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.60.65.93
country_id: 3895114
description:
[2026-06-07 18:28:11 +0000] info [cpaneld] 179.60.65.93 - wa "GET /login/?login_only=1&user=wa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.238.58.139
country_id: 3469034
description:
[2026-06-07 18:28:17 +0000] info [cpaneld] 170.238.58.139 - arifsoc "GET /login/?login_only=1&user=arifsoc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user arifsoc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.234.229.163
country_id: 3658394
description:
[2026-06-07 18:28:05 +0000] info [cpaneld] 177.234.229.163 - wage "GET /login/?login_only=1&user=wage&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wage (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 212.73.71.186
country_id: 174982
description:
2026-06-07 18:29:01 H=([212.73.71.186]) [212.73.71.186]:58374 F=<John@4452.com> rejected RCPT <info@cndh-togo.org>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.84.213.127
country_id: 3865483
description:
[2026-06-07 18:30:48 +0000] info [cpaneld] 191.84.213.127 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.12.228.167
country_id: 3865483
description:
[2026-06-07 18:31:46 +0000] info [cpaneld] 186.12.228.167 - mediato1 "GET /login/?login_only=1&user=mediato1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediato1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.238.163.32
country_id: 2921044
description:
[2026-06-07 18:31:22 +0000] info [cpaneld] 79.238.163.32 - mediato "GET /login/?login_only=1&user=mediato&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediato (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.130.149.230
country_id: 2017370
description:
[2026-06-07 18:31:25 +0000] info [cpaneld] 188.130.149.230 - mediat "GET /login/?login_only=1&user=mediat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediat (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 116.105.27.28
country_id: 1562822
description:
2026-06-07 18:31:32 dovecot_plain authenticator failed for H=(ru1sad9azf3xokv86vyfrr) [116.105.27.28]:55063: 535 Incorrect authentication data (set_id=admin@togocarrierebetons.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.118.73.195
country_id: 2017370
description:
[2026-06-07 18:30:57 +0000] info [cpaneld] 92.118.73.195 - mediatopnews "GET /login/?login_only=1&user=mediatopnews&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatopnews (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 93.203.220.35
country_id: 2921044
description:
[2026-06-07 18:31:01 +0000] info [cpaneld] 93.203.220.35 - mediatopnewstg "GET /login/?login_only=1&user=mediatopnewstg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatopnewstg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 146.158.112.164
country_id: 2017370
description:
[2026-06-07 18:31:08 +0000] info [cpaneld] 146.158.112.164 - cafei "GET /login/?login_only=1&user=cafei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafei (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.54.31.186
country_id: 2921044
description:
[2026-06-07 18:31:03 +0000] info [cpaneld] 78.54.31.186 - mediatopnew "GET /login/?login_only=1&user=mediatopnew&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatopnew (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.104.37.68
country_id: 3865483
description:
[2026-06-07 18:31:09 +0000] info [cpaneld] 190.104.37.68 - mediatopne "GET /login/?login_only=1&user=mediatopne&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatopne (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.83.235.248
country_id: 3865483
description:
[2026-06-07 18:31:18 +0000] info [cpaneld] 191.83.235.248 - mediatop "GET /login/?login_only=1&user=mediatop&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mediatop (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 171.97.250.177
country_id: 1605651
description:
[2026-06-07 18:31:18 +0000] info [cpaneld] 171.97.250.177 - caf "GET /login/?login_only=1&user=caf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user caf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.252.31.110
country_id: 1210997
description:
[2026-06-07 18:31:31 +0000] info [cpaneld] 138.252.31.110 - media "GET /login/?login_only=1&user=media&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user media (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.28.206.65
country_id: 718075
description:
[2026-06-07 18:31:02 +0000] info [cpaneld] 77.28.206.65 - cafeit "GET /login/?login_only=1&user=cafeit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafeit (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 110.76.128.169
country_id: 1210997
description:
[2026-06-07 18:31:13 +0000] info [cpaneld] 110.76.128.169 - cafe "GET /login/?login_only=1&user=cafe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cafe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 27.68.91.150
country_id: 1562822
description:
[2026-06-07 18:31:24 +0000] info [cpaneld] 27.68.91.150 - ca "GET /login/?login_only=1&user=ca&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ca (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.144.71.207
country_id: 2542007
description:
[2026-06-07 18:31:39 +0000] info [cpaneld] 197.144.71.207 - med "GET /login/?login_only=1&user=med&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user med (has_cpuser_file failed)


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 190.60.60.235
country_id: 3686110
description:
190.60.60.235 - - [07/Jun/2026:18:32:40 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10250393&pdata=https%253A%252F%252Feducplusmedia.tg%252Fcategory%252Ffaits-divers%252Fpage%252F2%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780857158 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/category/faits-divers/page/2/" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.1906.1210 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:190.60.60.235


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 190.97.247.165
country_id: 3625428
description:
190.97.247.165 - - [07/Jun/2026:18:33:01 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9924195&pdata=https%253A%252F%252Feducplusmedia.tg%252F2025%252F12%252F19%252Fdeveloppement-local-sous-limpulsion-du-maire-songoi-agoe-nyive-6-se-dote-une-feuille-de-route-2025-2026%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780857179 HTTP/2.0" 302 0 educplusmedia.tg "https://educplusmedia.tg/2025/12/19/developpement-local-sous-limpulsion-du-maire-songoi-agoe-nyive-6-se-dote-une-feuille-de-route-2025-2026/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.4778.1637 Mobile Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:190.97.247.165


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.95.118
country_id: 6252001
description:
[2026-06-07 18:33:21 +0000] info [cpaneld] 82.40.95.118 - ingertgsarl "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 196.179.7.81
country_id: 2464461
description:
Jun  7 18:36:45 ns5 pure-ftpd[4132007]: (?@196.179.7.81) [WARNING] Authentication failed for user [masfloy]


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 65.20.150.52
country_id: 99237
description:
Jun  7 18:37:00 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 65.20.150.52 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 18:38:18 +0000] info [cpaneld] 196.179.7.81 - masfloy "POST /login HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 211.198.128.204
country_id: 1835841
description:
Jun  7 18:38:25 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 211.198.128.204 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 122.187.227.166
country_id: 1269750
description:
Jun  7 18:39:12 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 122.187.227.166 has been locked due to Imunify RBL


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.14
country_id: 1880251
description:
47.128.96.14 - - [07/Jun/2026:18:40:18 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13093530&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fcoronavirus%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780857616 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/coronavirus/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.14


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 47.236.243.254
country_id: 1880251
description:
Jun  7 18:40:23 ns5 pure-ftpd[4134752]: (?@47.236.243.254) [INFO] New connection from 47.236.243.254


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 47.236.243.254
country_id: 1880251
description:
Jun  7 18:40:30 ns5 pure-ftpd[4134752]: (?@47.236.243.254) [WARNING] Authentication failed for user [centif]


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.132
country_id: 1880251
description:
47.128.96.132 - - [07/Jun/2026:18:41:13 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10120297&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Fusage-du-telephone-portable-aux-heures-de-travail%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780857672 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/usage-du-telephone-portable-aux-heures-de-travail/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.132


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.128.96.157
country_id: 1880251
description:
47.128.96.157 - - [07/Jun/2026:18:41:25 +0000] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6711193&pdata=https%253A%252F%252Ftdn.tg%252Ftag%252Ftogo-vs-namibie%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1780857684 HTTP/2.0" 302 0 tdn.tg "https://tdn.tg/tag/togo-vs-namibie/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.128.96.157


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.195.96.73
country_id: 3469034
description:
[2026-06-07 18:43:19 +0000] info [cpaneld] 168.195.96.73 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.243.182.201
country_id: 2017370
description:
[2026-06-07 18:43:27 +0000] info [cpaneld] 188.243.182.201 - benatex "GET /login/?login_only=1&user=benatex&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benatex (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.245.185.235
country_id: 953987
description:
[2026-06-07 18:43:42 +0000] info [cpaneld] 197.245.185.235 - benat "GET /login/?login_only=1&user=benat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.6.36.194
country_id: 3625428
description:
[2026-06-07 18:43:35 +0000] info [cpaneld] 190.6.36.194 - benate "GET /login/?login_only=1&user=benate&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user benate (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 31.148.160.164
country_id: 1512440
description:
[2026-06-07 18:43:44 +0000] info [cpaneld] 31.148.160.164 - bena "GET /login/?login_only=1&user=bena&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bena (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 202.51.80.169
country_id: 1282988
description:
[2026-06-07 18:44:40 +0000] info [cpaneld] 202.51.80.169 - tilitula "GET /login/?login_only=1&user=tilitula&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tilitula (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.19.55.238
country_id: 2017370
description:
[2026-06-07 18:44:46 +0000] info [cpaneld] 188.19.55.238 - tilitu "GET /login/?login_only=1&user=tilitu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tilitu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.86.255.172
country_id: 3895114
description:
[2026-06-07 18:44:48 +0000] info [cpaneld] 200.86.255.172 - tilit "GET /login/?login_only=1&user=tilit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tilit (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.235.161.247
country_id: 2464461
description:
[2026-06-07 18:43:51 +0000] info [cpaneld] 196.235.161.247 - ben "GET /login/?login_only=1&user=ben&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ben (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.45.193.214
country_id: 3865483
description:
[2026-06-07 18:43:56 +0000] info [cpaneld] 181.45.193.214 - be "GET /login/?login_only=1&user=be&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user be (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 91.78.14.254
country_id: 2017370
description:
[2026-06-07 18:44:31 +0000] info [cpaneld] 91.78.14.254 - tilitulab "GET /login/?login_only=1&user=tilitulab&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tilitulab (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.218.185.219
country_id: 953987
description:
[2026-06-07 18:44:54 +0000] info [cpaneld] 102.218.185.219 - tili "GET /login/?login_only=1&user=tili&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tili (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.255.179.186
country_id: 3576396
description:
[2026-06-07 18:45:06 +0000] info [cpaneld] 104.255.179.186 - ti "GET /login/?login_only=1&user=ti&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ti (has_cpuser_file failed)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.6.35.14
country_id: 3625428
domain: ip-api.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/ip-api.com/json HTTP/1.1||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 18:45:35 +0000] info [cpaneld] 196.179.7.81 - root "POST /login HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 18:45:51 +0000] info [cpaneld] 196.179.7.81 - koolnetfree "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user koolnetfree (has_cpuser_file failed)


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Secure Your Best Bonus eropolik.blogspot.pt FH||Email:chris_csc12@yahoo.com||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 196.179.7.81
country_id: 2464461
description:
Jun  7 18:46:22 ns5 pure-ftpd[4138881]: (?@196.179.7.81) [WARNING] Authentication failed for user [root]


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 5.125.219.55
country_id: 130758
description:
2026-06-07 18:46:01 H=([5.125.219.55]) [5.125.219.55]:59266 F=<John@4452.com> rejected RCPT <home@white-ways.com>: Sender verify failed


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:18-46.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.39.168.228
country_id: 285570
description:
[2026-06-07 18:47:10 +0000] info [cpaneld] 37.39.168.228 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.180.243.151
country_id: 3585968
description:
[2026-06-07 18:47:20 +0000] info [cpaneld] 45.180.243.151 - sahamtg "GET /login/?login_only=1&user=sahamtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.89.137.235
country_id: 3469034
description:
Jun  7 18:47:28 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.89.137.235 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.190.132.31
country_id: 1210997
description:
[2026-06-07 18:47:39 +0000] info [cpaneld] 103.190.132.31 - saha "GET /login/?login_only=1&user=saha&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user saha (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.33.48.80
country_id: 3686110
description:
[2026-06-07 18:47:43 +0000] info [cpaneld] 179.33.48.80 - sah "GET /login/?login_only=1&user=sah&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sah (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 79.117.164.91
country_id: 2510769
description:
[2026-06-07 18:50:28 +0000] info [cpaneld] 79.117.164.91 - nstreamp "GET /login/?login_only=1&user=nstreamp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nstreamp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.60.78.64
country_id: 3895114
description:
[2026-06-07 18:50:36 +0000] info [cpaneld] 179.60.78.64 - nstrea "GET /login/?login_only=1&user=nstrea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nstrea (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 147.235.193.169
country_id: 294640
description:
[2026-06-07 18:50:05 +0000] info [cpaneld] 147.235.193.169 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 13008
name: Mail Recipient rejected
abuser: 95.59.47.215
country_id: 1522867
description:
2026-06-07 18:50:07 H=([95.59.47.215]) [95.59.47.215]:63447 F=<John@4452.com> rejected RCPT <mointie.konlambigue@emt.tg>: Sender verify failed


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 197.145.238.101
country_id: 2542007
description:
[2026-06-07 18:50:40 +0000] info [cpaneld] 197.145.238.101 - nstre "GET /login/?login_only=1&user=nstre&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nstre (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 78.160.51.111
country_id: 298795
description:
[2026-06-07 18:50:47 +0000] info [cpaneld] 78.160.51.111 - nst "GET /login/?login_only=1&user=nst&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nst (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 88.248.250.143
country_id: 298795
description:
Jun  7 18:52:24 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 88.248.250.143 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 8.213.131.12
country_id: 1835841
description:
Jun  7 18:53:14 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 8.213.131.12 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 2.135.167.58
country_id: 1522867
description:
[2026-06-07 18:54:13 +0000] info [cpaneld] 2.135.167.58 - metaa "GET /login/?login_only=1&user=metaa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user metaa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.122.104.246
country_id: 3865483
description:
[2026-06-07 18:54:21 +0000] info [cpaneld] 186.122.104.246 - met "GET /login/?login_only=1&user=met&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user met (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 177.53.42.101
country_id: 3469034
description:
Jun  7 18:54:29 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 177.53.42.101 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 118.163.145.175
country_id: 1668284
description:
Jun  7 18:55:35 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 118.163.145.175 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 27.73.209.71
country_id: 1562822
description:
Jun  7 18:56:34 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 27.73.209.71 has been locked due to Imunify RBL


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.73.209.71
country_id: 1562822
description:
2026-06-07 18:56:36 dovecot_plain authenticator failed for H=(srtua5ks8feu8z7fjvdxskxgipl8l) [27.73.209.71]:60885: 535 Incorrect authentication data (set_id=sergdev@dgdn-togo.tg)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.177.205.229
country_id: 3865483
description:
[2026-06-07 18:57:17 +0000] info [cpaneld] 190.177.205.229 - launetogo "GET /login/?login_only=1&user=launetogo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user launetogo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.209.223.94
country_id: 2287781
description:
[2026-06-07 18:57:20 +0000] info [cpaneld] 102.209.223.94 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 163.53.146.138
country_id: 2077456
description:
[2026-06-07 18:57:21 +0000] info [cpaneld] 163.53.146.138 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.22.251.226
country_id: 3469034
description:
[2026-06-07 18:57:45 +0000] info [cpaneld] 191.22.251.226 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.101.26
country_id: 2464461
description:
[2026-06-07 18:57:23 +0000] info [cpaneld] 196.179.101.26 - togodailynews "GET /login/?login_only=1&user=togodailynews&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodailynews (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.81.152.221
country_id: 3469034
description:
[2026-06-07 18:57:25 +0000] info [cpaneld] 170.81.152.221 - launetog "GET /login/?login_only=1&user=launetog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user launetog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.6.168.71
country_id: 3932488
description:
[2026-06-07 18:57:28 +0000] info [cpaneld] 179.6.168.71 - togofeed "GET /login/?login_only=1&user=togofeed&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofeed (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.182.187.132
country_id: 2802361
description:
[2026-06-07 18:57:35 +0000] info [cpaneld] 95.182.187.132 - togofee "GET /login/?login_only=1&user=togofee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofee (has_cpuser_file failed)


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 176.125.228.148
country_id: 2589581
description:
Jun  7 18:57:02 ns5 pure-ftpd[4146477]: (?@176.125.228.148) [INFO] New connection from 176.125.228.148


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.92.114.120
country_id: 6251999
description:
[2026-06-07 18:57:24 +0000] info [cpaneld] 50.92.114.120 - togosemcom "GET /login/?login_only=1&user=togosemcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togosemcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.188.37.127
country_id: 337996
description:
[2026-06-07 18:57:35 +0000] info [cpaneld] 196.188.37.127 - launet "GET /login/?login_only=1&user=launet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user launet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.138.157.164
country_id: 2017370
description:
[2026-06-07 18:57:36 +0000] info [cpaneld] 46.138.157.164 - togomedia "GET /login/?login_only=1&user=togomedia&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togomedia (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 109.252.124.150
country_id: 2017370
description:
[2026-06-07 18:57:39 +0000] info [cpaneld] 109.252.124.150 - laune "GET /login/?login_only=1&user=laune&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user laune (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.118.62.173
country_id: 3686110
description:
[2026-06-07 18:57:12 +0000] info [cpaneld] 200.118.62.173 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 111.119.35.28
country_id: 1282988
description:
[2026-06-07 18:57:17 +0000] info [cpaneld] 111.119.35.28 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.11.131.205
country_id: 3469034
description:
[2026-06-07 18:57:18 +0000] info [cpaneld] 177.11.131.205 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 87.200.207.99
country_id: 290557
description:
[2026-06-07 18:57:21 +0000] info [cpaneld] 87.200.207.99 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 213.230.86.116
country_id: 1512440
description:
[2026-06-07 18:57:32 +0000] info [cpaneld] 213.230.86.116 - togofeedcom "GET /login/?login_only=1&user=togofeedcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togofeedcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.181.123.122
country_id: 3895114
description:
[2026-06-07 18:57:33 +0000] info [cpaneld] 45.181.123.122 - togomedia2 "GET /login/?login_only=1&user=togomedia2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togomedia2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.16.24.186
country_id: 1210997
description:
[2026-06-07 18:57:47 +0000] info [cpaneld] 103.16.24.186 - lau "GET /login/?login_only=1&user=lau&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lau (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.184.203.243
country_id: 290291
description:
[2026-06-07 18:57:16 +0000] info [cpaneld] 46.184.203.243 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 171.7.238.43
country_id: 1605651
description:
[2026-06-07 18:57:28 +0000] info [cpaneld] 171.7.238.43 - togose "GET /login/?login_only=1&user=togose&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togose (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.189.81.207
country_id: 3469034
description:
[2026-06-07 18:57:43 +0000] info [cpaneld] 179.189.81.207 - laun "GET /login/?login_only=1&user=laun&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user laun (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 113.186.9.125
country_id: 1562822
description:
[2026-06-07 18:57:44 +0000] info [cpaneld] 113.186.9.125 - togomed "GET /login/?login_only=1&user=togomed&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togomed (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.77.36.179
country_id: 2017370
description:
[2026-06-07 18:57:33 +0000] info [cpaneld] 94.77.36.179 - togodailynew "GET /login/?login_only=1&user=togodailynew&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodailynew (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 88.65.185.16
country_id: 2921044
description:
[2026-06-07 18:57:40 +0000] info [cpaneld] 88.65.185.16 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 177.39.159.252
country_id: 3469034
description:
[2026-06-07 18:57:47 +0000] info [cpaneld] 177.39.159.252 - togodaily "GET /login/?login_only=1&user=togodaily&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodaily (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.76.248.180
country_id: 3625428
description:
[2026-06-07 18:57:21 +0000] info [cpaneld] 217.76.248.180 - launetogotg "GET /login/?login_only=1&user=launetogotg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user launetogotg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.94.255.69
country_id: 1282988
description:
[2026-06-07 18:57:42 +0000] info [cpaneld] 103.94.255.69 - togodailyn "GET /login/?login_only=1&user=togodailyn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodailyn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 115.135.197.53
country_id: 1733045
description:
[2026-06-07 18:57:48 +0000] info [cpaneld] 115.135.197.53 - togome "GET /login/?login_only=1&user=togome&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togome (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 137.119.213.136
country_id: 6252001
description:
[2026-06-07 18:57:22 +0000] info [cpaneld] 137.119.213.136 - togosem "GET /login/?login_only=1&user=togosem&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togosem (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 210.186.16.88
country_id: 1733045
description:
[2026-06-07 18:57:29 +0000] info [cpaneld] 210.186.16.88 - launeto "GET /login/?login_only=1&user=launeto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user launeto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.184.203.243
country_id: 290291
description:
[2026-06-07 18:58:08 +0000] info [cpaneld] 46.184.203.243 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 176.115.124.33
country_id: 2017370
description:
[2026-06-07 18:58:03 +0000] info [cpaneld] 176.115.124.33 - to "GET /login/?login_only=1&user=to&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user to (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.75.235.247
country_id: 1733045
description:
[2026-06-07 18:57:51 +0000] info [cpaneld] 180.75.235.247 - togom "GET /login/?login_only=1&user=togom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.225.125.28
country_id: 3469034
description:
[2026-06-07 18:57:53 +0000] info [cpaneld] 45.225.125.28 - togodai "GET /login/?login_only=1&user=togodai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.112.216.29
country_id: 3865483
description:
[2026-06-07 18:57:55 +0000] info [cpaneld] 190.112.216.29 - togo "GET /login/?login_only=1&user=togo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.7.123.50
country_id: 3469034
description:
[2026-06-07 18:57:57 +0000] info [cpaneld] 200.7.123.50 - togoda "GET /login/?login_only=1&user=togoda&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togoda (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 190.114.38.66
country_id: 3895114
description:
[2026-06-07 18:58:00 +0000] info [cpaneld] 190.114.38.66 - togod "GET /login/?login_only=1&user=togod&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togod (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 191.121.25.22
country_id: 3469034
description:
[2026-06-07 18:57:50 +0000] info [cpaneld] 191.121.25.22 - togodail "GET /login/?login_only=1&user=togodail&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodail (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 84.54.120.243
country_id: 1512440
description:
[2026-06-07 18:57:54 +0000] info [cpaneld] 84.54.120.243 - tog "GET /login/?login_only=1&user=tog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tog (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.139.128.237
country_id: 3996063
description:
[2026-06-07 18:58:11 +0000] info [cpaneld] 187.139.128.237 - togodai1 "GET /login/?login_only=1&user=togodai1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user togodai1 (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 190.181.109.72
country_id: 3865483
description:
Jun  7 19:00:32 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 190.181.109.72 has been locked due to Imunify RBL


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 178.219.103.82
country_id: 798544
description:
Jun  7 19:00:52 ns5 auth[3871818]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 178.219.103.82 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 178.120.51.156
country_id: 630336
description:
[2026-06-07 19:01:41 +0000] info [cpaneld] 178.120.51.156 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.126.47.88
country_id: 3469034
description:
[2026-06-07 19:01:45 +0000] info [cpaneld] 189.126.47.88 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 19:02:32 +0000] info [cpaneld] 196.179.7.81 - netmastersarl "POST /login HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.28.210.159
country_id: 3895114
description:
[2026-06-07 19:02:41 +0000] info [cpaneld] 200.28.210.159 - ciieein "GET /login/?login_only=1&user=ciieein&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieein (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.83.36.133
country_id: 6252001
description:
[2026-06-07 19:02:14 +0000] info [cpaneld] 72.83.36.133 - ciieeinternati "GET /login/?login_only=1&user=ciieeinternati&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternati (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.124.14.145
country_id: 3469034
description:
[2026-06-07 19:02:20 +0000] info [cpaneld] 189.124.14.145 - ciieeinterna "GET /login/?login_only=1&user=ciieeinterna&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinterna (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.52.221.14
country_id: 3686110
description:
[2026-06-07 19:01:50 +0000] info [cpaneld] 181.52.221.14 - ciieeinternational "GET /login/?login_only=1&user=ciieeinternational&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieeinternational (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 159.0.203.95
country_id: 102358
description:
[2026-06-07 19:02:46 +0000] info [cpaneld] 159.0.203.95 - ciieei "GET /login/?login_only=1&user=ciieei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciieei (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.167.18.157
country_id: 933860
description:
[2026-06-07 19:02:51 +0000] info [cpaneld] 168.167.18.157 - ciiee "GET /login/?login_only=1&user=ciiee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ciiee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 125.26.211.147
country_id: 1605651
description:
[2026-06-07 19:03:04 +0000] info [cpaneld] 125.26.211.147 - ci "GET /login/?login_only=1&user=ci&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ci (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 102.213.135.175
country_id: 953987
description:
[2026-06-07 19:04:45 +0000] info [cpaneld] 102.213.135.175 - lead "GET /login/?login_only=1&user=lead&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lead (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 5.31.195.172
country_id: 290557
description:
[2026-06-07 19:04:40 +0000] info [cpaneld] 5.31.195.172 - leade "GET /login/?login_only=1&user=leade&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leade (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.78.213.231
country_id: 3895114
description:
[2026-06-07 19:04:28 +0000] info [cpaneld] 186.78.213.231 - leadelle "GET /login/?login_only=1&user=leadelle&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadelle (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.249.86.210
country_id: 3469034
description:
[2026-06-07 19:04:36 +0000] info [cpaneld] 186.249.86.210 - leadel "GET /login/?login_only=1&user=leadel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 77.222.228.75
country_id: 798544
description:
[2026-06-07 19:04:23 +0000] info [cpaneld] 77.222.228.75 - leadellestg "GET /login/?login_only=1&user=leadellestg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leadellestg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.103.251.246
country_id: 3469034
description:
[2026-06-07 19:04:50 +0000] info [cpaneld] 187.103.251.246 - lea "GET /login/?login_only=1&user=lea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lea (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 103.81.113.226
country_id: 1327865
description:
[2026-06-07 19:08:36 +0000] info [cpaneld] 103.81.113.226 - bieredja "GET /login/?login_only=1&user=bieredja&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredja (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.128.48.252
country_id: 3865483
description:
[2026-06-07 19:08:40 +0000] info [cpaneld] 186.128.48.252 - bieredj "GET /login/?login_only=1&user=bieredj&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredj (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 188.17.9.189
country_id: 2017370
description:
[2026-06-07 19:08:43 +0000] info [cpaneld] 188.17.9.189 - biered "GET /login/?login_only=1&user=biered&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user biered (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.217.106.154
country_id: 3996063
description:
[2026-06-07 19:08:23 +0000] info [cpaneld] 189.217.106.154 - bieredjama "GET /login/?login_only=1&user=bieredjama&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredjama (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.236.108.185
country_id: 3469034
description:
[2026-06-07 19:08:26 +0000] info [cpaneld] 45.236.108.185 - diskgasribeiraopretocombr "GET /login/?login_only=1&user=diskgasribeiraopretocombr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user diskgasribeiraopretocombr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 105.101.34.139
country_id: 2589581
description:
[2026-06-07 19:08:30 +0000] info [cpaneld] 105.101.34.139 - bieredjam "GET /login/?login_only=1&user=bieredjam&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredjam (has_cpuser_file failed)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 196.179.7.81
country_id: 2464461
description:
Jun  7 19:08:43 ns5 pure-ftpd[4155385]: (?@196.179.7.81) [WARNING] Authentication failed for user [netmastersarl]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 217.164.82.58
country_id: 290557
description:
[2026-06-07 19:09:01 +0000] info [cpaneld] 217.164.82.58 - bieredj1 "GET /login/?login_only=1&user=bieredj1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bieredj1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 185.244.152.184
country_id: 99237
description:
[2026-06-07 19:08:54 +0000] info [cpaneld] 185.244.152.184 - bie "GET /login/?login_only=1&user=bie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bie (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-07 19:09:12 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:28669: 535 Incorrect authentication data (set_id=mickey)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 54.241.156.218
country_id: 6252001
description:
[2026-06-07 19:09:27 +0000] info [whostmgrd] 54.241.156.218 - ingertgsarl "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 200.192.103.10
country_id: 3469034
description:
[2026-06-07 19:08:51 +0000] info [cpaneld] 200.192.103.10 - bier "GET /login/?login_only=1&user=bier&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bier (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 19:09:04 +0000] info [cpaneld] 196.179.7.81 - anadebfreenetmas "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anadebfreenetmas (has_cpuser_file failed)


plugin: modsec
rule: 77433250
name: IM360 WAF: Track WordPress user self-registration
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Track WordPress user self-registration||NewUser:Start Using Your Distinct Confidential Offering bonotdamvam.blogspot.no k9||Email:jadajordan1432@gmail.com||RSV:8.14||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 146.19.125.71
country_id: 2750405
domain: cloud-et-racks.tg
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77142125r77142137||MV:19-10.146.19.125.71||RSV:8.14||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 179.6.39.96
country_id: 3932488
description:
[2026-06-07 19:12:03 +0000] info [cpaneld] 179.6.39.96 - amea "GET /login/?login_only=1&user=amea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user amea (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.220.100.244
country_id: 2921044
description:
2026-06-07 19:12:58 dovecot_plain authenticator failed for H=tor-exit-5.zbau.f3netze.de (471k9s9saztvgdhccv7) [185.220.100.244]:48542: 535 Incorrect authentication data (set_id=admin@togocarrierebetons.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.223.165.146
country_id: 3996063
description:
[2026-06-07 19:13:13 +0000] info [cpaneld] 187.223.165.146 - fastso "GET /login/?login_only=1&user=fastso&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastso (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.92.21.213
country_id: 2017370
description:
[2026-06-07 19:13:32 +0000] info [cpaneld] 80.92.21.213 - fastsol1 "GET /login/?login_only=1&user=fastsol1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsol1 (has_cpuser_file failed)


plugin: ossec
rule: 6013
name: Imunify PAM. The IP has been locked by RBL
abuser: 185.220.100.244
country_id: 2921044
description:
Jun  7 19:12:56 ns5 auth[4149427]: pam_imunify(dovecot_imunify:auth): [IM360_RBL] The IP 185.220.100.244 has been locked due to Imunify RBL


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 82.40.73.134
country_id: 6252001
description:
[2026-06-07 19:12:57 +0000] info [cpaneld] 82.40.73.134 - seft "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user seft (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.249.143.199
country_id: 2542007
description:
[2026-06-07 19:13:02 +0000] info [cpaneld] 41.249.143.199 - fastsoluti "GET /login/?login_only=1&user=fastsoluti&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsoluti (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.82.34.255
country_id: 3469034
description:
[2026-06-07 19:13:10 +0000] info [cpaneld] 170.82.34.255 - fastsolu "GET /login/?login_only=1&user=fastsolu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsolu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 141.98.140.12
country_id: 783754
description:
[2026-06-07 19:13:20 +0000] info [cpaneld] 141.98.140.12 - fast "GET /login/?login_only=1&user=fast&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fast (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 37.231.156.9
country_id: 285570
description:
[2026-06-07 19:13:00 +0000] info [cpaneld] 37.231.156.9 - fastsolutio "GET /login/?login_only=1&user=fastsolutio&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsolutio (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.107.75.81
country_id: 3895114
description:
[2026-06-07 19:13:18 +0000] info [cpaneld] 186.107.75.81 - fasts "GET /login/?login_only=1&user=fasts&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fasts (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 41.251.157.68
country_id: 2542007
description:
[2026-06-07 19:13:04 +0000] info [cpaneld] 41.251.157.68 - fastsolut "GET /login/?login_only=1&user=fastsolut&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsolut (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 186.66.175.40
country_id: 3658394
description:
[2026-06-07 19:12:56 +0000] info [cpaneld] 186.66.175.40 - fastsolutiontg "GET /login/?login_only=1&user=fastsolutiontg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user fastsolutiontg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 187.190.202.147
country_id: 3996063
description:
[2026-06-07 19:14:38 +0000] info [cpaneld] 187.190.202.147 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 94.129.167.92
country_id: 285570
description:
[2026-06-07 19:14:47 +0000] info [cpaneld] 94.129.167.92 - djama "GET /login/?login_only=1&user=djama&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user djama (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-07 19:15:43 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:45105: 535 Incorrect authentication data (set_id=apple01)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.70.10.111
country_id: 3865483
description:
[2026-06-07 19:15:01 +0000] info [cpaneld] 45.70.10.111 - dja "GET /login/?login_only=1&user=dja&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dja (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 196.179.7.81
country_id: 2464461
description:
[2026-06-07 19:15:11 +0000] info [cpaneld] 196.179.7.81 - netmast "POST /login HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user netmast (has_cpuser_file failed)


plugin: ossec
rule: 11302
name: FTP Authentication failed.
abuser: 196.179.7.81
country_id: 2464461
description:
Jun  7 19:17:31 ns5 pure-ftpd[4161680]: (?@196.179.7.81) [WARNING] Authentication failed for user [anadebfreenetmas]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.224.210.20
country_id: 3469034
description:
[2026-06-07 19:18:06 +0000] info [cpaneld] 45.224.210.20 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.138.238.41
country_id: 2017370
description:
[2026-06-07 19:18:08 +0000] info [cpaneld] 46.138.238.41 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.26.208.49
country_id: 3865483
description:
[2026-06-07 19:18:20 +0000] info [cpaneld] 181.26.208.49 - bio "GET /login/?login_only=1&user=bio&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bio (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 95.104.182.123
country_id: 2017370
description:
[2026-06-07 19:18:11 +0000] info [cpaneld] 95.104.182.123 - biom "GET /login/?login_only=1&user=biom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user biom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 84.119.243.50
country_id: 2921044
description:
[2026-06-07 19:18:22 +0000] info [cpaneld] 84.119.243.50 - bi "GET /login/?login_only=1&user=bi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 112.213.151.222
country_id: 2077456
description:
[2026-06-07 19:21:35 +0000] info [cpaneld] 112.213.151.222 - letablo "GET /login/?login_only=1&user=letablo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letablo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 193.168.179.45
country_id: 2017370
description:
[2026-06-07 19:21:24 +0000] info [cpaneld] 193.168.179.45 - letabloid "GET /login/?login_only=1&user=letabloid&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabloid (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 92.209.232.133
country_id: 2921044
description:
[2026-06-07 19:21:29 +0000] info [cpaneld] 92.209.232.133 - letabloi "GET /login/?login_only=1&user=letabloi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabloi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 80.64.26.99
country_id: 2017370
description:
[2026-06-07 19:21:39 +0000] info [cpaneld] 80.64.26.99 - letabl "GET /login/?login_only=1&user=letabl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.140.249.25
country_id: 2017370
description:
[2026-06-07 19:21:43 +0000] info [cpaneld] 62.140.249.25 - letab "GET /login/?login_only=1&user=letab&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letab (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 189.131.168.42
country_id: 3996063
description:
[2026-06-07 19:21:27 +0000] info [cpaneld] 189.131.168.42 - letabloidtg "GET /login/?login_only=1&user=letabloidtg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user letabloidtg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 116.99.249.112
country_id: 1562822
description:
[2026-06-07 19:21:49 +0000] info [cpaneld] 116.99.249.112 - leta "GET /login/?login_only=1&user=leta&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user leta (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.60.130.139
country_id: 130758
description:
2026-06-07 19:22:14 dovecot_login authenticator failed for H=(localhost) [62.60.130.139]:31825: 535 Incorrect authentication data (set_id=carbon)


