# incident

plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 79.136.8.69
country_id: 2661886
description:
2026-07-17 00:16:57 dovecot_login authenticator failed for H=h-79-136-8-69.a463.priv.bahnhof.se (abts-north-static-109.51.160.122.airtelbroadband.in) [79.136.8.69]:43602: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.3.122
country_id: 1668284
description:
2026-07-17 00:18:23 dovecot_login authenticator failed for H=111-70-3-122.emome-ip.hinet.net ([174.64.199.77]) [111.70.3.122]:58519: 535 Incorrect authentication data (set_id=mbt@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 46.16.149.199
country_id: 1522867
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/1d3662805 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77209355
name: IM360 WAF: Script execution in com_sppagebuilder media assets - web shell (CVE-2026-48908)
abuser: 196.115.176.244
country_id: 2542007
domain: gsmex.global
description:
IM360 WAF: Script execution in com_sppagebuilder media assets - web shell (CVE-2026-48908)||MVN:REQUEST_FILENAME||MV:/media/com_sppagebuilder/assets/iconfont/icofont/fonts/Nxploited_1784227768329.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 210.186.215.209
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/2092611 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.242.176.179
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/231416794 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.70.45.189
country_id: 192950
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/361658850 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 156.34.2.27
country_id: 6251999
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/362042904 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 165.165.95.69
country_id: 953987
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/381745119 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.64.21.40
country_id: 3374766
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/383503428 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 82.39.35.211
country_id: 2635167
description:
2026-07-17 00:24:56 dovecot_login authenticator failed for H=([184.181.217.198]) [82.39.35.211]:60278: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 67.85.146.216
country_id: 6252001
description:
2026-07-17 00:25:33 dovecot_login authenticator failed for H=ool-435592d8.dyn.optonline.net ([191.44.113.143]) [67.85.146.216]:35632: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 157.10.134.170
country_id: 1210997
description:
2026-07-17 00:25:12 dovecot_login authenticator failed for H=(nsg-corporate-6.249.186.122.airtel.in) [157.10.134.170]:54488: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.252.177.148
country_id: 2186224
description:
2026-07-17 00:25:19 dovecot_login authenticator failed for H=([203.194.5.183]) [27.252.177.148]:42054: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 201.179.176.43
country_id: 3865483
description:
2026-07-17 00:26:42 dovecot_login authenticator failed for H=([50.77.90.194]) [201.179.176.43]:5825: 535 Incorrect authentication data (set_id=prasad.k@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.58.134.122
country_id: 3439705
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/45313959 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 181.61.251.4
country_id: 3686110
description:
2026-07-17 00:27:01 dovecot_login authenticator failed for H=([183.56.179.201]) [181.61.251.4]:53620: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 81.64.96.194
country_id: 3017382
domain: yukticlick.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:33811.yukticlick.com||ServerName:yukticlick.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:cb52c5293235163cc56aecafde5ddfe5363bbb47||Title:0xb85fca9b||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 181.56.174.63
country_id: 3686110
description:
2026-07-17 00:26:47 dovecot_login authenticator failed for H=([180.94.74.82]) [181.56.174.63]:33514: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 89.93.96.116
country_id: 3017382
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/462671363 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 78.173.45.92
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/0b1712011 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.41.41.0
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/11130446 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 61.79.170.117
country_id: 1835841
description:
2026-07-17 00:33:53 dovecot_login authenticator failed for H=([206.220.175.5]) [61.79.170.117]:44367: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.119.14.27
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/131925998 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 119.158.136.43
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/151125697 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 109.107.231.200
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/163008490 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 171.234.12.238
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/183114067 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 165.101.222.22
country_id: 1210997
description:
2026-07-17 00:37:46 dovecot_login authenticator failed for H=(atlanta-1.cdn77.com) [165.101.222.22]:40681: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 83.255.209.245
country_id: 2661886
description:
2026-07-17 00:37:48 dovecot_login authenticator failed for H=c83-255-209-245.bredband.tele2.se ([70.166.167.60]) [83.255.209.245]:57928: 535 Incorrect authentication data (set_id=uaeindiab2b@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.6.72.106
country_id: 1835841
description:
2026-07-17 00:38:02 dovecot_login authenticator failed for H=([202.72.193.34]) [59.6.72.106]:46364: 535 Incorrect authentication data (set_id=uaeindiab2b)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 95.94.205.12
country_id: 2264397
description:
2026-07-17 00:38:33 dovecot_login authenticator failed for H=a95-94-205-12.cpe.netcabo.pt (red.138.118.213.204.ssservicios.com.ar) [95.94.205.12]:45612: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 113.160.209.29
country_id: 1562822
description:
2026-07-17 00:39:04 dovecot_login authenticator failed for H=([59.177.12.54]) [113.160.209.29]:52508: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 90.228.229.182
country_id: 2661886
description:
2026-07-17 00:39:29 dovecot_login authenticator failed for H=90-228-229-182-no600.tbcn.telia.com ([222.112.168.34]) [90.228.229.182]:38888: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 95.82.7.89
country_id: 2077456
description:
2026-07-17 00:39:23 dovecot_login authenticator failed for H=([27.79.200.239]) [95.82.7.89]:53140: 535 Incorrect authentication data (set_id=mbt@globalgroupoman.com)


plugin: modsec
rule: 77469916
abuser: 37.122.149.28
country_id: 6251999
domain: idealloanz.com.au
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:a9503.xml.php||RSV:8.29||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 93.185.162.136
country_id: 1643084
description:
[2026-07-17 00:40:58 +0530] info [whostmgrd] 93.185.162.136 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77469916
abuser: 175.100.79.76
country_id: 1831722
domain: travelinbh.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:jcev4then0m.xml.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.133.62.52
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/301522846 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 92.143.123.253
country_id: 3017382
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/333262812 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 151.244.79.85
country_id: 2635167
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Opera/9.80 <a href=\"https://mid-east.info/is-iq-option-legit-or-not-data-driven-look-at-gamification-asset-diversification-and-mobile-first-platforms/\">iq option \xd9\x85\xd8\xb1\xd8\xa7\xd8\xac\xd8\xb9\xd8\xa7\xd8\xaa</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 219.248.4.146
country_id: 1835841
description:
2026-07-17 00:44:39 dovecot_login authenticator failed for H=([49.124.153.33]) [219.248.4.146]:60308: 535 Incorrect authentication data (set_id=khalid@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 201.246.78.123
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/353198392 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 210.1.66.154
country_id: 1694008
description:
2026-07-17 00:44:49 dovecot_login authenticator failed for H=([157.211.246.182]) [210.1.66.154]:52974: 535 Incorrect authentication data (set_id=khalid)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.255.81.98
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/372448139 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.217.116.6
country_id: 3351879
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/42773340 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 75.80.65.214
country_id: 6252001
description:
2026-07-17 00:48:45 dovecot_login authenticator failed for H=syn-075-080-065-214.biz.spectrum.com ([183.171.41.134]) [75.80.65.214]:39952: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 47.250.40.154
country_id: 1733045
domain: elegantautomotives.com
description:
IM360 WAF: Bad file extension||RSV:8.29||T:APACHE||MVN:REQUEST_FILENAME||MV:/config/master.key||User:elegantautomotiv||


plugin: modsec
rule: 77350212
name: IM360 WAF: Information Disclosure Attempt in WordPress
abuser: 47.250.40.154
country_id: 1733045
domain: elegantautomotives.com
description:
IM360 WAF: Information Disclosure Attempt in WordPress||MV:/wp-config.php.bak||RSV:8.29||T:APACHE||REQUEST_URI:/wp-config.php.bak||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.19.190
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/461286047 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.86.57.87
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/44558211 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 37.122.149.28
country_id: 6251999
domain: elegantautomotives.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:a6488.xml.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 131.226.97.108
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/462403096 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 91.106.43.219
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/481885143 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.104.244.72
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/4d1008822 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 197.219.208.38
country_id: 1036973
description:
2026-07-17 00:55:54 dovecot_login authenticator failed for H=(187-51-84-86.customer.tdatabrasil.net.br) [197.219.208.38]:50870: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 221.120.73.25
country_id: 1668284
description:
2026-07-17 00:56:05 dovecot_login authenticator failed for H=221-120-73-25.emome-ip.hinet.net ([182.239.131.5]) [221.120.73.25]:52537: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 95.173.233.231
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/4e573020 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.62.147.252
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/531780724 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.7.254
country_id: 1668284
description:
2026-07-17 00:56:17 dovecot_login authenticator failed for H=111-70-7-254.emome-ip.hinet.net ([106.13.181.87]) [111.70.7.254]:49454: 535 Incorrect authentication data (set_id=evin.joseph)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 220.245.133.202
country_id: 2077456
description:
2026-07-17 00:56:40 dovecot_login authenticator failed for H=220-245-133-202.tpgi.com.au ([95.38.149.156]) [220.245.133.202]:60626: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 117.252.93.114
country_id: 1269750
description:
2026-07-17 00:57:07 dovecot_login authenticator failed for H=([109.63.222.198]) [117.252.93.114]:44675: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 183.82.108.109
country_id: 1269750
description:
2026-07-17 00:57:18 dovecot_login authenticator failed for H=(110-25-105-240.adsl.fetnet.net) [183.82.108.109]:56678: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 152.58.186.32
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/5c2269306 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.188.187.205
country_id: 337996
description:
2026-07-17 01:00:50 dovecot_login authenticator failed for H=([51.162.192.62]) [196.188.187.205]:56794: 535 Incorrect authentication data (set_id=anoop.ps@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 221.120.57.172
country_id: 1668284
description:
2026-07-17 01:01:02 dovecot_login authenticator failed for H=221-120-57-172.emome-ip.hinet.net (m121-202-206-119.smartone.com) [221.120.57.172]:52218: 535 Incorrect authentication data (set_id=anoop.ps)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 180.75.140.230
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/66873607 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 153.51.238.119
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/712542379 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.209.101.43
country_id: 2077456
description:
2026-07-17 01:06:00 dovecot_login authenticator failed for H=([113.140.95.250]) [123.209.101.43]:46036: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 101.108.51.244
country_id: 1605651
description:
[2026-07-17 01:07:27 +0530] info [whostmgrd] 101.108.51.244 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 66.45.144.201
country_id: 6252001
description:
2026-07-17 01:09:04 dovecot_login authenticator failed for H=66-45-144-201-dynamic.midco.net (wsip-184-178-172-20.rn.hr.cox.net) [66.45.144.201]:34714: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.23.204.74
country_id: 1269750
description:
2026-07-17 01:08:42 dovecot_login authenticator failed for H=([103.210.250.198]) [125.23.204.74]:49638: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 61.32.68.66
country_id: 1835841
description:
2026-07-17 01:09:49 dovecot_login authenticator failed for H=([49.125.203.163]) [61.32.68.66]:39346: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.16.17.139
country_id: 2921044
description:
2026-07-17 01:09:52 dovecot_login authenticator failed for H=([49.124.153.13]) [94.16.17.139]:33334: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 222.252.36.117
country_id: 1562822
description:
2026-07-17 01:10:41 dovecot_login authenticator failed for H=([196.189.51.64]) [222.252.36.117]:58826: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.140.113.166
country_id: 3703430
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/8c2760486 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 200.46.177.242
country_id: 3703430
description:
2026-07-17 01:10:14 dovecot_login authenticator failed for H=([68.183.228.238]) [200.46.177.242]:59462: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.158.10
country_id: 99237
description:
2026-07-17 01:10:15 dovecot_login authenticator failed for H=([70.166.167.42]) [65.20.158.10]:49768: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.212.57.170
country_id: 630336
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/91832358 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.177.189.7
country_id: 3624060
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/972354206 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 104.223.105.243
country_id: 6252001
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Mozilla/4.0 <a href=\"http://www.westco.coop/markets/stocks.php?article=abnewswire-2026-5-24-house-washing-in-amityville-ny-amityvilles-1-exterior-power-washing-roof-and-house-washing-responds-to-growing-demand-for-exterior-cleaning-services\">Commercial Pressure Washing Amityville NY</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 20.127.25.202
country_id: 6252001
description:
2026-07-17 01:14:09 dovecot_login authenticator failed for H=([203.198.173.145]) [20.127.25.202]:47102: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 115.74.104.233
country_id: 1562822
description:
2026-07-17 01:14:30 dovecot_login authenticator failed for H=([70.166.167.42]) [115.74.104.233]:56596: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 79.177.151.33
country_id: 294640
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/9f204615 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.20.89.8
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/ab110671 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77209355
name: IM360 WAF: Script execution in com_sppagebuilder media assets - web shell (CVE-2026-48908)
abuser: 45.155.124.110
country_id: 298795
domain: alnayza.com
description:
IM360 WAF: Script execution in com_sppagebuilder media assets - web shell (CVE-2026-48908)||MVN:REQUEST_FILENAME||MV:/media/com_sppagebuilder/assets/iconfont/ioqpoqfq.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 111.119.48.190
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/b32716244 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.1.104.41
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/bd1283891 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 37.122.149.28
country_id: 6251999
domain: globalgroupoman.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:a9876.xml.php||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 221.120.4.61
country_id: 1668284
description:
2026-07-17 01:21:32 dovecot_login authenticator failed for H=221-120-4-61.emome-ip.hinet.net ([196.190.180.18]) [221.120.4.61]:58720: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 149.86.146.250
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e63481790 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 141.98.143.196
country_id: 783754
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e83485477 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.192.54.219
country_id: 1835841
description:
2026-07-17 01:24:18 dovecot_login authenticator failed for H=(151.237.115.208.pronet.bg) [211.192.54.219]:56194: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 78.67.161.64
country_id: 2661886
description:
2026-07-17 01:24:38 dovecot_login authenticator failed for H=78-67-161-64-no2550.tbcn.telia.com ([180.165.4.111]) [78.67.161.64]:55356: 535 Incorrect authentication data (set_id=sajithkumar.pk)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 92.47.166.23
country_id: 1522867
description:
2026-07-17 01:24:39 dovecot_login authenticator failed for H=92.47.166.23.dynamic.telecom.kz (c83-191-181-23.bredband.tele2.se) [92.47.166.23]:60235: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 159.223.111.27
country_id: 6252001
description:
2026-07-17 01:25:10 dovecot_login authenticator failed for H=([91.229.67.20]) [159.223.111.27]:36858: 535 Incorrect authentication data (set_id=sajithkumar.pk)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.144.79.102
country_id: 1269750
description:
2026-07-17 01:27:54 dovecot_login authenticator failed for H=(nsg-corporate-250.250.187.122.airtel.in) [59.144.79.102]:42538: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 78.66.45.101
country_id: 2661886
description:
2026-07-17 01:27:55 dovecot_login authenticator failed for H=78-66-45-101-no2550.tbcn.telia.com ([49.124.153.25]) [78.66.45.101]:40076: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 197.219.210.86
country_id: 1036973
description:
2026-07-17 01:28:02 dovecot_login authenticator failed for H=(111-70-9-143.emome-ip.hinet.net) [197.219.210.86]:51570: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.116.107.222
country_id: 1835841
description:
2026-07-17 01:27:19 dovecot_login authenticator failed for H=([14.54.35.193]) [211.116.107.222]:43003: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 109.248.156.49
country_id: 1522867
description:
2026-07-17 01:28:20 dovecot_login authenticator failed for H=([182.95.102.190]) [109.248.156.49]:58588: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 159.223.111.27
country_id: 6252001
description:
2026-07-17 01:28:50 dovecot_login authenticator failed for H=([37.238.45.202]) [159.223.111.27]:50780: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.38.29.4
country_id: 290557
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/062348784 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.173.188.105
country_id: 798544
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/603733637 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-07-17 01:30:57 +0530] info [whostmgrd] 45.198.224.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.120.215.211
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/61374870 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 61.97.17.208
country_id: 1835841
description:
2026-07-17 01:31:57 dovecot_login authenticator failed for H=([120.195.26.54]) [61.97.17.208]:47691: 535 Incorrect authentication data (set_id=support@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 148.63.8.97
country_id: 2264397
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/622696511 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 203.196.42.114
country_id: 2077456
description:
2026-07-17 01:32:09 dovecot_login authenticator failed for H=([124.160.45.26]) [203.196.42.114]:44680: 535 Incorrect authentication data (set_id=support)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.28.86.45
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/61594295 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.232.218.106
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/631649844 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 128.185.208.42
country_id: 1269750
description:
2026-07-17 01:36:08 dovecot_login authenticator failed for H=([87.103.196.161]) [128.185.208.42]:53812: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 94.26.106.214
country_id: 2921044
domain: ogocindia.com
description:
IM360 WAF: Bad file extension||RSV:8.29||T:APACHE||MVN:REQUEST_FILENAME||MV:/.env.backup||User:ogocindia||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 172.56.162.185
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/701815258 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 82.82.143.196
country_id: 2921044
description:
2026-07-17 01:38:06 dovecot_login authenticator failed for H=dslc-082-082-143-196.pools.arcor-ip.net ([70.166.167.47]) [82.82.143.196]:62671: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 20.46.45.121
country_id: 290557
description:
2026-07-17 01:38:42 dovecot_login authenticator failed for H=([45.164.115.86]) [20.46.45.121]:56404: 535 Incorrect authentication data (set_id=anoop.ps@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 80.187.125.88
country_id: 2921044
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/732226094 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.61.121.207
country_id: 3617476
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/732962917 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.181.138
country_id: 1269750
description:
2026-07-17 01:39:34 dovecot_login authenticator failed for H=(203-75-170-63.hinet-ip.hinet.net) [182.95.181.138]:53972: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.25.89.150
country_id: 953987
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/743376517 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 14.252.120.89
country_id: 1562822
domain: ahsmarine.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:11889.ahsmarine.com||ServerName:ahsmarine.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:fb65256eb2e02df35bbaa9f4eade7c81db12d7c8||Title:0x89c17bb7||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 203.192.211.180
country_id: 1269750
description:
2026-07-17 01:40:08 dovecot_login authenticator failed for H=([111.26.80.228]) [203.192.211.180]:36474: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 70.183.229.152
country_id: 6252001
description:
2026-07-17 01:39:21 dovecot_login authenticator failed for H=wsip-70-183-229-152.pn.at.cox.net ([189.56.195.78]) [70.183.229.152]:49291: 535 Incorrect authentication data (set_id=anoop.ps)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.198.159
country_id: 99237
description:
2026-07-17 01:40:09 dovecot_login authenticator failed for H=(wsip-70-166-137-91.fv.ks.cox.net) [65.20.198.159]:45861: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.169.7.188
country_id: 272103
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/802194541 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.146.3.210
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/803009557 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 106.201.76.203
country_id: 1269750
description:
2026-07-17 01:41:26 dovecot_login authenticator failed for H=([49.124.145.62]) [106.201.76.203]:33134: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.179.88.9
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/80777757 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 89.211.247.117
country_id: 289688
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/903571940 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.74.9.206
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/962184263 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 135.125.199.17
country_id: 3017382
description:
2026-07-17 01:46:42 dovecot_login authenticator failed for H=vps-36f1e8f3.vps.ovh.net ([49.124.151.45]) [135.125.199.17]:43494: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.124.155.175
country_id: 1733045
description:
2026-07-17 01:47:04 dovecot_login authenticator failed for H=([20.46.45.121]) [49.124.155.175]:48282: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.16.17.140
country_id: 2921044
description:
2026-07-17 01:47:06 dovecot_login authenticator failed for H=([49.124.151.54]) [94.16.17.140]:44298: 535 Incorrect authentication data (set_id=investmentmanager@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.130.214.53
country_id: 3351879
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/a32892153 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.115.60.110
country_id: 3608932
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/b13769586 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 94.249.48.223
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/c62238482 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.213.168.70
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/cf2298751 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 94.98.180.191
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d13389759 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 73.87.185.192
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/de2565164 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 73.87.247.83
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/dc224709 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 31.111.81.185
country_id: 2635167
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/ef63810 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.184.124.46
country_id: 1269750
description:
2026-07-17 01:54:46 dovecot_login authenticator failed for H=([111.26.62.39]) [122.184.124.46]:43744: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 188.78.104.206
country_id: 2510769
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e11765358 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 78.197.6.173
country_id: 3017382
description:
2026-07-17 01:54:31 dovecot_login authenticator failed for H=([219.153.81.22]) [78.197.6.173]:52922: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.85.210.222
country_id: 3437598
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f72069936 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.114.32.171
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f43287205 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.114.53.45
country_id: 3608932
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/02302434 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.19.158.2
country_id: 1269750
description:
2026-07-17 01:57:33 dovecot_login authenticator failed for H=([183.104.220.152]) [125.19.158.2]:58358: 535 Incorrect authentication data (set_id=sunil@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.105.229.237
country_id: 1835841
description:
2026-07-17 01:58:35 dovecot_login authenticator failed for H=([192.111.130.1]) [211.105.229.237]:47870: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 128.185.56.205
country_id: 1269750
description:
2026-07-17 01:58:53 dovecot_login authenticator failed for H=([174.75.211.195]) [128.185.56.205]:57680: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 197.219.210.94
country_id: 1036973
description:
2026-07-17 01:59:00 dovecot_login authenticator failed for H=([20.162.124.58]) [197.219.210.94]:46936: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 118.37.27.11
country_id: 1835841
description:
2026-07-17 01:59:10 dovecot_login authenticator failed for H=(ipmapt-72-195-34-34.oc.oc.cox.net) [118.37.27.11]:50412: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 95.91.254.134
country_id: 2921044
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/08244614 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 155.4.209.51
country_id: 2661886
description:
2026-07-17 02:00:51 dovecot_login authenticator failed for H=h-155-4-209-51.a463.priv.bahnhof.se ([200.37.179.83]) [155.4.209.51]:33352: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.242.173.250
country_id: 3686110
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/08593550 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 37.122.149.28
country_id: 6251999
domain: futuracare.com.au
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:a4683.xml.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.231.10.60
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/09143871 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.61.159.91
country_id: 2264397
description:
2026-07-17 02:01:23 dovecot_login authenticator failed for H=91.159.61.94.rev.vodafone.pt ([68.71.247.133]) [94.61.159.91]:41364: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 205.250.25.62
country_id: 6251999
description:
2026-07-17 02:02:05 dovecot_login authenticator failed for H=(m121-202-206-119.smartone.com) [205.250.25.62]:47666: 535 Incorrect authentication data (set_id=corporate)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.124.149.48
country_id: 1733045
description:
2026-07-17 02:01:32 dovecot_login authenticator failed for H=([117.79.226.23]) [49.124.149.48]:33514: 535 Incorrect authentication data (set_id=corporate@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.32.50
country_id: 1668284
description:
2026-07-17 02:02:23 dovecot_login authenticator failed for H=111-70-32-50.emome-ip.hinet.net (eth1.1172.vrrp.fw05.1739.la3.ml.zerolag.com) [111.70.32.50]:52756: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 157.96.146.250
country_id: 6252001
description:
2026-07-17 02:02:37 dovecot_login authenticator failed for H=([49.124.146.34]) [157.96.146.250]:57037: 535 Incorrect authentication data (set_id=sajithkumar.pk)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 202.47.38.91
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/0f3700342 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 112.208.76.231
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/10863525 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 213.66.196.11
country_id: 2661886
description:
2026-07-17 02:03:58 dovecot_login authenticator failed for H=213-66-196-11-no2550.tbcn.telia.com (static.ill.117.247.82.240.bsnl.co.in) [213.66.196.11]:44864: 535 Incorrect authentication data (set_id=mail@kallanigroup.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.41.164.249
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/151460106 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.215.146.195
country_id: 934841
description:
2026-07-17 02:04:20 dovecot_login authenticator failed for H=(novagest-cust.maxnet.ao) [41.215.146.195]:29343: 535 Incorrect authentication data (set_id=mail)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.242.13.208
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/163613562 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 81.56.95.247
country_id: 3175395
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/1a2465913 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.9.46.178
country_id: 614540
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/21661769 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.152.12.212
country_id: 1210997
description:
2026-07-17 02:08:09 dovecot_login authenticator failed for H=([49.124.146.37]) [59.152.12.212]:34591: 535 Incorrect authentication data (set_id=corporate@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 90.230.226.175
country_id: 2661886
description:
2026-07-17 02:08:37 dovecot_login authenticator failed for H=90-230-226-175-no2550.tbcn.telia.com ([45.167.249.253]) [90.230.226.175]:44156: 535 Incorrect authentication data (set_id=corporate)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 197.157.252.162
country_id: 2260494
description:
2026-07-17 02:08:38 dovecot_login authenticator failed for H=([27.24.141.112]) [197.157.252.162]:56414: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.124.142.203
country_id: 2245662
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/26952067 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 92.98.203.246
country_id: 290557
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/263598875 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.70.242.20
country_id: 2635167
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/281970460 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.130.207.227
country_id: 1282988
description:
2026-07-17 02:09:43 dovecot_login authenticator failed for H=([118.145.247.242]) [103.130.207.227]:41322: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 67.43.243.158
country_id: 6252001
description:
2026-07-17 02:09:46 dovecot_login authenticator failed for H=67-43-243-158.fidnet.com ([185.161.38.22]) [67.43.243.158]:48218: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.212.9.122
country_id: 1835841
description:
2026-07-17 02:10:01 dovecot_login authenticator failed for H=([39.164.91.67]) [123.212.9.122]:54287: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.122.37.97
country_id: 2635167
description:
2026-07-17 02:09:11 dovecot_login authenticator failed for H=([211.178.3.26]) [188.122.37.97]:48732: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77469916
abuser: 68.183.227.208
country_id: 1880251
domain: 103.185.74.189
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:masta3qf88f.xml.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.171.212.36
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/34621003 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 176.188.227.48
country_id: 3017382
domain: arcrealtors.com.au
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:34974.arcrealtors.com.au||ServerName:arcrealtors.com.au||Method:metaWeblog.newPost||BlogID:1||TitleSHA:e01cb256090335dd63daf51bdce573673de9bc7b||Title:0x7c163f38||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 148.222.222.14
country_id: 3865483
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/35977296 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 210.206.24.237
country_id: 1835841
description:
2026-07-17 02:14:10 dovecot_login authenticator failed for H=(dynamic-ip-181612514.cable.net.co) [210.206.24.237]:57652: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.14.31.10
country_id: 2921044
description:
2026-07-17 02:15:10 dovecot_login authenticator failed for H=(67-43-243-158.fidnet.com) [154.14.31.10]:46002: 535 Incorrect authentication data (set_id=support@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 207.254.29.22
country_id: 2963597
description:
2026-07-17 02:15:21 dovecot_login authenticator failed for H=(firewall01.practicetechnologies.ml.zerolag.com) [207.254.29.22]:57318: 535 Incorrect authentication data (set_id=support)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.43.112.186
country_id: 3277605
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/383009801 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.36.233.228
country_id: 286963
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/39231181 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 159.223.111.27
country_id: 6252001
description:
2026-07-17 02:18:17 dovecot_login authenticator failed for H=(105.217.146.34.bc.googleusercontent.com) [159.223.111.27]:37414: 535 Incorrect authentication data (set_id=corporate@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.176.122
country_id: 1269750
description:
2026-07-17 02:18:40 dovecot_login authenticator failed for H=([142.54.225.52]) [182.95.176.122]:55884: 535 Incorrect authentication data (set_id=corporate)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 79.117.252.171
country_id: 2510769
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/443368682 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 87.241.156.210
country_id: 174982
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/443461611 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 156.203.219.77
country_id: 357994
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/472714422 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 176.222.63.168
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/472850226 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 166.78.156.46
country_id: 6252001
description:
2026-07-17 02:22:05 dovecot_login authenticator failed for H=([195.133.156.116]) [166.78.156.46]:58892: 535 Incorrect authentication data (set_id=anoop.ps@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.134.216.52
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/4c3033576 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 70.183.232.85
country_id: 6252001
description:
2026-07-17 02:22:26 dovecot_login authenticator failed for H=wsip-70-183-232-85.pn.at.cox.net (ipv4-ip63-211-169-103.usercontent.jetdino.com) [70.183.232.85]:44137: 535 Incorrect authentication data (set_id=anoop.ps)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.22.170.36
country_id: 49518
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/4a1566164 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 161.153.13.153
country_id: 6252001
description:
2026-07-17 02:24:08 dovecot_login authenticator failed for H=([192.111.137.33]) [161.153.13.153]:45400: 535 Incorrect authentication data (set_id=uaeindiab2b)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.228.106
country_id: 1269750
description:
2026-07-17 02:23:37 dovecot_login authenticator failed for H=([49.124.146.34]) [182.95.228.106]:48594: 535 Incorrect authentication data (set_id=uaeindiab2b@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.39.215.50
country_id: 953987
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/53816038 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 207.97.143.20
country_id: 6252001
domain: www.kallanigroup.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.kallanigroup.com/cache/twojtoolbox/Screenshot_2023-07-18-08-45-06-809_commiuigallery1jpg_size220x160_bgffffff_fs6719d7a4da713f923076cb8557619f21_tr2_p0.png HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 62.60.130.230
country_id: 130758
domain: www.ogocindia.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:nx35535.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77240000
name: IM360 WAF: Protecting Joomla folder
abuser: 62.60.130.230
country_id: 130758
domain: www.ogocindia.com
description:
IM360 WAF: Protecting Joomla folder||MVN:REQUEST_FILENAME||MV:/images/stories/nx35535.php||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 24.142.170.231
country_id: 6252001
description:
2026-07-17 02:29:36 dovecot_login authenticator failed for H=syn-024-142-170-231.biz.spectrum.com ([125.139.87.30]) [24.142.170.231]:47062: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.90.111.74
country_id: 1269750
description:
2026-07-17 02:29:21 dovecot_login authenticator failed for H=(91-211-23-39.atstelecom.ru) [59.90.111.74]:39836: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.34.21
country_id: 1668284
description:
2026-07-17 02:30:27 dovecot_login authenticator failed for H=111-70-34-21.emome-ip.hinet.net ([49.124.146.46]) [111.70.34.21]:60414: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.89.214
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/372537758 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 184.186.73.106
country_id: 6252001
description:
2026-07-17 02:32:52 dovecot_login authenticator failed for H=wsip-184-186-73-106.lf.br.cox.net ([109.244.44.21]) [184.186.73.106]:53664: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.83.23.169
country_id: 1168579
description:
2026-07-17 02:33:01 dovecot_login authenticator failed for H=([221.155.237.109]) [103.83.23.169]:58014: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 9.246.41.216
country_id: 2921044
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/462268712 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.14.141.167
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/4d3342658 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.188.14.75
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/513092146 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 27.125.247.40
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/563222395 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.124.205.169
country_id: 1733045
description:
2026-07-17 02:38:54 dovecot_login authenticator failed for H=([103.100.235.113]) [49.124.205.169]:39748: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.33.247.46
country_id: 2077456
description:
2026-07-17 02:39:24 dovecot_login authenticator failed for H=27-33-247-46.tpgi.com.au ([83.239.108.218]) [27.33.247.46]:41054: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.122.37.97
country_id: 2635167
description:
2026-07-17 02:39:38 dovecot_login authenticator failed for H=([210.90.216.105]) [188.122.37.97]:47242: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 14.232.189.158
country_id: 1562822
description:
2026-07-17 02:39:55 dovecot_login authenticator failed for H=(191-210-159-32.user.vivozap.com.br) [14.232.189.158]:46225: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.111.212.46
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/602691334 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.171.55.242
country_id: 1269750
description:
2026-07-17 02:41:19 dovecot_login authenticator failed for H=(ip-142-54-232-1.hosts.zerolag.com) [103.171.55.242]:53084: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 78.66.44.23
country_id: 2661886
description:
2026-07-17 02:41:30 dovecot_login authenticator failed for H=78-66-44-23-no2550.tbcn.telia.com ([92.124.133.35]) [78.66.44.23]:58556: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.134.120.245
country_id: 953987
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/66192406 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 93.172.245.223
country_id: 294640
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/681956275 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 209.178.159.24
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/683162348 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 71.13.124.166
country_id: 6252001
description:
2026-07-17 02:46:07 dovecot_login authenticator failed for H=syn-071-013-124-166.biz.spectrum.com ([49.125.203.165]) [71.13.124.166]:43450: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.38.248
country_id: 1668284
description:
2026-07-17 02:45:52 dovecot_login authenticator failed for H=111-70-38-248.emome-ip.hinet.net ([49.124.159.192]) [111.70.38.248]:45151: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 213.230.92.82
country_id: 1512440
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/712056337 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 64.203.44.170
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/75129890 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.221.255.51
country_id: 783754
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/771921471 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 78.172.16.82
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/783528339 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.220.154.75
country_id: 6290252
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/7a527208 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 160.176.113.232
country_id: 2542007
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/813413913 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 73.125.126.193
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/873197371 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.187.131.138
country_id: 272103
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/881630146 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 167.61.201.127
country_id: 3439705
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/8d903357 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.230.74
country_id: 1269750
description:
2026-07-17 02:57:51 dovecot_login authenticator failed for H=([211.220.156.232]) [182.95.230.74]:33820: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 85.29.246.199
country_id: 453733
description:
2026-07-17 02:59:07 dovecot_login authenticator failed for H=199-246-29-85.dyn.estpak.ee ([124.238.104.74]) [85.29.246.199]:50362: 535 Incorrect authentication data (set_id=evin.joseph)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.43.11.241
country_id: 2510769
description:
2026-07-17 02:58:58 dovecot_login authenticator failed for H=241.red-81-43-11.staticip.rima-tde.net ([114.202.28.214]) [81.43.11.241]:39692: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 171.100.121.127
country_id: 1605651
description:
2026-07-17 02:58:59 dovecot_login authenticator failed for H=171-100-121-127.static.asianet.co.th ([62.201.212.54]) [171.100.121.127]:51638: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.10.4
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/963118245 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 213.235.25.2
country_id: 2635167
description:
2026-07-17 03:00:07 dovecot_login authenticator failed for H=([49.124.149.49]) [213.235.25.2]:49871: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.160.11.40
country_id: 1269750
description:
2026-07-17 02:59:12 dovecot_login authenticator failed for H=([205.206.92.54]) [122.160.11.40]:38065: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 110.25.109.54
country_id: 1668284
description:
2026-07-17 03:00:19 dovecot_login authenticator failed for H=110-25-109-54.adsl.fetnet.net (host.46-183-135-88.broadband.redcom.ru) [110.25.109.54]:38850: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.104.96.117
country_id: 6251999
domain: keralapeople.com
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.29||T:APACHE||MV:/wp-content/uploads/2021/02/index.php||SC:/home/keralapeople/public_html/wp-content||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.36.15
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/c33313791 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.116.66
country_id: 1269750
description:
2026-07-17 03:02:04 dovecot_login authenticator failed for H=(corporativo.static.gvt.net.br) [182.95.116.66]:60462: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 43.111.61.77
country_id: 6252001
domain: globalgroupoman.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/135.0.0.0 Safari/537.36||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 171.96.220.126
country_id: 1605651
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d5200633 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 85.106.61.94
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/cc786317 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.193.186.214
country_id: 290557
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d83345052 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 204.144.197.151
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/de274944 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.108.215.50
country_id: 3378535
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e413949 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 80.94.254.207
country_id: 617790
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/ec3430110 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 207.180.19.106
country_id: 1643084
domain: fefkadirectorsunion.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:jce-165b4dec.xml.php||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 89.253.90.113
country_id: 2661886
description:
2026-07-17 03:07:40 dovecot_login authenticator failed for H=89-253-90-113.customers.ownit.se ([70.166.167.37]) [89.253.90.113]:42389: 535 Incorrect authentication data (set_id=mail@kallanigroup.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.23.203.138
country_id: 1269750
description:
2026-07-17 03:07:53 dovecot_login authenticator failed for H=(syn-172-251-252-216.res.spectrum.com) [125.23.203.138]:59960: 535 Incorrect authentication data (set_id=mail)


plugin: modsec
rule: 77209355
name: IM360 WAF: Script execution in com_sppagebuilder media assets - web shell (CVE-2026-48908)
abuser: 135.148.32.173
country_id: 6252001
domain: alnayza.com
description:
IM360 WAF: Script execution in com_sppagebuilder media assets - web shell (CVE-2026-48908)||MVN:REQUEST_FILENAME||MV:/media/com_sppagebuilder/assets/iconfont/cox/fonts/cox.PHP||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.204.41
country_id: 99237
description:
2026-07-17 03:08:19 dovecot_login authenticator failed for H=(ip-68-71-245-203.hosts.zerolag.com) [65.20.204.41]:38097: 535 Incorrect authentication data (set_id=cil@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 118.37.255.140
country_id: 1835841
description:
2026-07-17 03:08:32 dovecot_login authenticator failed for H=([62.182.132.94]) [118.37.255.140]:48304: 535 Incorrect authentication data (set_id=cil)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 203.219.172.24
country_id: 2077456
description:
2026-07-17 03:09:27 dovecot_login authenticator failed for H=203-219-172-24.tpgi.com.au ([49.124.153.51]) [203.219.172.24]:52760: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.172.170.12
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f53353682 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.213.95.48
country_id: 192950
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f72794071 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.21.243.7
country_id: 1668284
description:
2026-07-17 03:12:48 dovecot_login authenticator failed for H=211-21-243-7.hinet-ip.hinet.net ([74.119.147.213]) [211.21.243.7]:51332: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 78.66.44.246
country_id: 2661886
description:
2026-07-17 03:12:13 dovecot_login authenticator failed for H=78-66-44-246-no2550.tbcn.telia.com ([220.189.253.198]) [78.66.44.246]:49390: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 58.187.12.22
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/092858362 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 188.132.249.205
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/0c767435 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.164.147.137
country_id: 3017382
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/122138046 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 218.156.93.203
country_id: 1835841
description:
2026-07-17 03:17:48 dovecot_login authenticator failed for H=([72.37.216.65]) [218.156.93.203]:40097: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 188.72.41.176
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/131106419 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 73.135.189.150
country_id: 6252001
description:
2026-07-17 03:18:01 dovecot_login authenticator failed for H=c-73-135-189-150.hsd1.md.comcast.net ([184.181.178.35]) [73.135.189.150]:2732: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 79.197.38.214
country_id: 2921044
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/143780899 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 101.13.4.122
country_id: 1668284
description:
2026-07-17 03:18:38 dovecot_login authenticator failed for H=(abts-mum-static-094.97.170.122.airtelbroadband.in) [101.13.4.122]:38022: 535 Incorrect authentication data (set_id=mail@kallanigroup.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 31.206.160.242
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/19728389 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.168.241.32
country_id: 1269750
description:
2026-07-17 03:20:03 dovecot_login authenticator failed for H=(188-122-39-33.xdsl.5gdsl.com) [103.168.241.32]:38043: 535 Incorrect authentication data (set_id=support)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 221.162.0.119
country_id: 1835841
description:
2026-07-17 03:19:46 dovecot_login authenticator failed for H=([103.210.250.198]) [221.162.0.119]:33406: 535 Incorrect authentication data (set_id=support@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 72.51.113.159
country_id: 3374084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/213243873 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 37.122.149.28
country_id: 6251999
domain: ogocindia.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:a9572.xml.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 170.80.18.5
country_id: 3617476
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/222008821 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 46.13.207.39
country_id: 3077311
description:
2026-07-17 03:22:07 dovecot_login authenticator failed for H=46-13-207-39.customers.tmcz.cz ([49.124.152.253]) [46.13.207.39]:52897: 535 Incorrect authentication data (set_id=investmentmanager@ibmcglobal.com)


plugin: modsec
rule: 77469916
abuser: 182.0.230.191
country_id: 1643084
domain: globalgroupoman.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:jce2ry2lpgb.xml.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 194.11.19.82
country_id: 2510769
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/223465671 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.1.120.2
country_id: 1835841
description:
2026-07-17 03:22:23 dovecot_login authenticator failed for H=([40.68.103.10]) [121.1.120.2]:33867: 535 Incorrect authentication data (set_id=investmentmanager)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.234.84.143
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/24630925 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.59.182.213
country_id: 298795
description:
2026-07-17 03:24:50 dovecot_login authenticator failed for H=([112.24.99.134]) [188.59.182.213]:37298: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 171.234.8.175
country_id: 1562822
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Opera/9.80 <a href=\"https://bjyou4122.com/home.php?mod=space&uid=509101&do=profile&from=space\">Xem b\xc3\xa0i vi\xe1\xba\xbft</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 34.41.211.48
country_id: 6252001
description:
2026-07-17 03:25:10 dovecot_login authenticator failed for H=48.211.41.34.bc.googleusercontent.com ([36.93.154.207]) [34.41.211.48]:58098: 535 Incorrect authentication data (set_id=uaeindiab2b@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.24.61.19
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/271014445 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 101.13.1.58
country_id: 1668284
description:
2026-07-17 03:25:34 dovecot_login authenticator failed for H=([49.124.149.48]) [101.13.1.58]:39076: 535 Incorrect authentication data (set_id=uaeindiab2b)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.199.148.244
country_id: 192950
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/2c1133771 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.178.183.233
country_id: 2361809
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/353196980 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.203.174.59
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/35851322 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.22.153
country_id: 1668284
description:
2026-07-17 03:31:05 dovecot_login authenticator failed for H=111-70-22-153.emome-ip.hinet.net ([221.181.210.98]) [111.70.22.153]:33873: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.190.187.243
country_id: 3608932
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/313609854 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 207.254.40.89
country_id: 6252001
description:
2026-07-17 03:31:25 dovecot_login authenticator failed for H=([199.229.254.131]) [207.254.40.89]:62529: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.140.115.97
country_id: 3703430
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/362935900 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 206.62.136.130
country_id: 3686110
description:
2026-07-17 03:34:27 dovecot_login authenticator failed for H=([157.85.13.153]) [206.62.136.130]:55158: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 160.177.93.129
country_id: 2542007
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/392382561 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.190.195.203
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/3d1255949 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.132.172
country_id: 99237
description:
2026-07-17 03:37:01 dovecot_login authenticator failed for H=([61.185.30.170]) [65.20.132.172]:53022: 535 Incorrect authentication data (set_id=cil@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.163.182.202
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/432615262 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.41.207.112
country_id: 953987
description:
2026-07-17 03:37:47 dovecot_login authenticator failed for H=([94.16.17.141]) [196.41.207.112]:36760: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 213.139.49.70
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/452074258 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 14.224.193.215
country_id: 1562822
description:
2026-07-17 03:38:44 dovecot_login authenticator failed for H=([187.93.51.46]) [14.224.193.215]:34430: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.187.226.12
country_id: 1269750
description:
2026-07-17 03:40:00 dovecot_login authenticator failed for H=(server2.profuturo.com.pa) [122.187.226.12]:56040: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.50.205.244
country_id: 3439705
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/4d1268319 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77350586
name: IM360 WAF: Suspicious access to wp-includes library directory
abuser: 20.151.7.119
country_id: 6251999
domain: ibmcglobal.com
description:
IM360 WAF: Suspicious access to wp-includes library directory||SC:/home/ibmcglobal/public_html/wp-includes||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.82.110.150
country_id: 660013
description:
2026-07-17 03:40:40 dovecot_login authenticator failed for H=([94.233.127.194]) [45.82.110.150]:41126: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.122.110
country_id: 1269750
description:
2026-07-17 03:42:22 dovecot_login authenticator failed for H=([27.128.162.146]) [182.95.122.110]:41264: 535 Incorrect authentication data (set_id=rdcentre)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 188.240.103.251
country_id: 69543
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/543239804 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 219.248.4.146
country_id: 1835841
description:
2026-07-17 03:42:10 dovecot_login authenticator failed for H=([31.173.29.136]) [219.248.4.146]:44898: 535 Incorrect authentication data (set_id=rdcentre@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.122.39.33
country_id: 2635167
description:
2026-07-17 03:45:44 dovecot_login authenticator failed for H=([83.239.84.130]) [188.122.39.33]:40824: 535 Incorrect authentication data (set_id=rdcentre@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.29.51.12
country_id: 1605651
description:
2026-07-17 03:45:58 dovecot_login authenticator failed for H=([98.170.57.251]) [202.29.51.12]:35768: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.63.34.149
country_id: 1835841
description:
2026-07-17 03:46:10 dovecot_login authenticator failed for H=([83.56.172.231]) [211.63.34.149]:55519: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 180.252.87.171
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/70108939 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.225.244.28
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/6b3790248 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.230.103.73
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/6d3653585 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77209355
name: IM360 WAF: Script execution in com_sppagebuilder media assets - web shell (CVE-2026-48908)
abuser: 196.115.176.244
country_id: 2542007
domain: cochinbigbandshow.com
description:
IM360 WAF: Script execution in com_sppagebuilder media assets - web shell (CVE-2026-48908)||MVN:REQUEST_FILENAME||MV:/media/com_sppagebuilder/assets/iconfont/icofont/fonts/Nxploited_1784240415853.phtml||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.46.252.52
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.29||T:APACHE||MV:/images/uploader.php||SC:/home/keralapeople/public_html/images/uploader.php||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 2.185.215.14
country_id: 130758
description:
2026-07-17 03:50:10 dovecot_login authenticator failed for H=([192.252.216.83]) [2.185.215.14]:59358: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.126.217.40
country_id: 1210997
description:
2026-07-17 03:53:07 dovecot_login authenticator failed for H=(broadband-95-84-137-185.ip.moscow.rt.ru) [103.126.217.40]:60767: 535 Incorrect authentication data (set_id=anoop.ps@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.82.185.93
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/792314335 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 112.164.234.246
country_id: 1835841
description:
2026-07-17 03:53:43 dovecot_login authenticator failed for H=(111-70-29-156.emome-ip.hinet.net) [112.164.234.246]:60504: 535 Incorrect authentication data (set_id=anoop.ps)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.254.47.201
country_id: 2215636
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/861682828 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 31.208.81.75
country_id: 2661886
description:
2026-07-17 03:55:45 dovecot_login authenticator failed for H=31-208-81-75.cust.bredband2.com ([112.168.121.39]) [31.208.81.75]:34108: 535 Incorrect authentication data (set_id=support@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 37.207.215.2
country_id: 3175395
description:
2026-07-17 03:55:55 dovecot_login authenticator failed for H=host-37-207-215-2.business.telecomitalia.it ([218.150.226.139]) [37.207.215.2]:45533: 535 Incorrect authentication data (set_id=support)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.243.217.57
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/8b1435296 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.25.153.46
country_id: 3439705
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/891749360 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.215.125.250
country_id: 192950
description:
2026-07-17 03:59:42 dovecot_login authenticator failed for H=(ipmapt-72-195-101-102.oc.oc.cox.net) [41.215.125.250]:42888: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.229.110
country_id: 1269750
description:
2026-07-17 03:59:12 dovecot_login authenticator failed for H=([104.37.132.51]) [182.95.229.110]:51366: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.42.141.186
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/9f371454 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.216.85.23
country_id: 192950
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/aa2818272 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.16.17.141
country_id: 2921044
description:
2026-07-17 04:01:45 dovecot_login authenticator failed for H=(168-91-173-57.s823.c3-0.eas-cbr7.atw-eas.pa.cable.rcncustomer.com) [94.16.17.141]:55778: 535 Incorrect authentication data (set_id=uaeindiab2b@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 63.135.169.175
country_id: 6252001
description:
2026-07-17 04:02:06 dovecot_login authenticator failed for H=([218.21.243.58]) [63.135.169.175]:55184: 535 Incorrect authentication data (set_id=uaeindiab2b)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 86.219.17.189
country_id: 3017382
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/ab3547738 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.136.194.42
country_id: 2510769
description:
2026-07-17 04:03:50 dovecot_login authenticator failed for H=([118.113.15.18]) [45.136.194.42]:33902: 535 Incorrect authentication data (set_id=mail@kallanigroup.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 124.148.134.155
country_id: 2077456
description:
2026-07-17 04:04:07 dovecot_login authenticator failed for H=(ipmapt-72-195-101-102.oc.oc.cox.net) [124.148.134.155]:41862: 535 Incorrect authentication data (set_id=mbt@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 82.209.148.60
country_id: 2661886
description:
2026-07-17 04:04:18 dovecot_login authenticator failed for H=82-209-148-60.cust.bredband2.com ([98.181.137.75]) [82.209.148.60]:33816: 535 Incorrect authentication data (set_id=mbt)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.160.11.40
country_id: 1269750
description:
2026-07-17 04:05:08 dovecot_login authenticator failed for H=([36.135.100.47]) [122.160.11.40]:49577: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 68.183.228.238
country_id: 1880251
description:
2026-07-17 04:05:53 dovecot_login authenticator failed for H=([101.13.5.34]) [68.183.228.238]:55768: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.122.37.97
country_id: 2635167
description:
2026-07-17 04:08:35 dovecot_login authenticator failed for H=([103.120.116.162]) [188.122.37.97]:51656: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.251.41
country_id: 99237
description:
2026-07-17 04:08:55 dovecot_login authenticator failed for H=([74.119.147.213]) [65.20.251.41]:60345: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.45.136.254
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e12041353 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 46.43.84.197
country_id: 6254930
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/ec2135527 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 27.61.185.239
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/ea1859022 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 158.69.22.136
country_id: 6251999
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Mozilla/4.0 <a href=\"https://trial.sinknews.it.com/\">bigtechoro</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 150.228.104.125
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/eb525245 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 128.234.19.25
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f61193920 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 51.36.222.163
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f51020492 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.147.111.106
country_id: 1522867
description:
2026-07-17 04:15:56 dovecot_login authenticator failed for H=([49.124.152.226]) [91.147.111.106]:53986: 535 Incorrect authentication data (set_id=anoop.ps)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 218.219.193.151
country_id: 1861060
description:
2026-07-17 04:15:28 dovecot_login authenticator failed for H=l193151.ppp.asahi-net.or.jp ([103.86.127.71]) [218.219.193.151]:58776: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 218.149.228.177
country_id: 1835841
description:
2026-07-17 04:15:38 dovecot_login authenticator failed for H=([185.15.82.135]) [218.149.228.177]:55864: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 163.61.33.117
country_id: 1269750
description:
2026-07-17 04:15:47 dovecot_login authenticator failed for H=([197.219.208.58]) [163.61.33.117]:48632: 535 Incorrect authentication data (set_id=anoop.ps@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.211.96.84
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/041690092 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 111.119.49.71
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/053332950 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469918
abuser: 140.213.69.140
country_id: 1643084
domain: alnayza.com
description:
IM360 WAF: Unauthenticated non-PHP executable upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:jcea1wsbf7p.xml.shtml||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 116.109.115.190
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/111670214 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.239.131.5
country_id: 2077456
description:
2026-07-17 04:22:02 dovecot_login authenticator failed for H=182-239-131-5.tpgi.com.au ([184.181.178.35]) [182.239.131.5]:55333: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.185.44.206
country_id: 1269750
description:
2026-07-17 04:21:50 dovecot_login authenticator failed for H=([91.237.183.81]) [122.185.44.206]:59472: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.106.218.251
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/191317837 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 140.213.69.140
country_id: 1643084
domain: alnayza.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:jce29k76lvt.xml.php.pjpeg||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.78.234.10
country_id: 3686110
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/193597151 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.124.146.42
country_id: 1733045
description:
2026-07-17 04:24:51 dovecot_login authenticator failed for H=([65.183.235.134]) [49.124.146.42]:52746: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 110.25.110.134
country_id: 1668284
description:
2026-07-17 04:24:34 dovecot_login authenticator failed for H=110-25-110-134.adsl.fetnet.net ([178.178.194.131]) [110.25.110.134]:60860: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77469916
abuser: 203.78.120.248
country_id: 1643084
domain: alnayza.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:jce29k76lvt.php.pjpeg||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.5.33.210
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/241929915 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 118.101.170.74
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/252756058 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 78.190.200.175
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/272478904 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 90.213.177.164
country_id: 2635167
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/2792165 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.214.47.154
country_id: 2245662
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/273190836 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.64.161.238
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/2a2147619 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 124.105.91.126
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/2d2903044 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.224.62.206
country_id: 2464461
description:
2026-07-17 04:33:10 dovecot_login authenticator failed for H=(dsl-hkibng42-50dfbe-179.dhcp.inet.fi) [41.224.62.206]:52996: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.19.182.118
country_id: 1269750
description:
2026-07-17 04:32:33 dovecot_login authenticator failed for H=(49-158-179-118.dynamic.elinx.com.tw) [125.19.182.118]:50334: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.22.238.79
country_id: 3865483
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/2d961480 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 210.1.66.154
country_id: 1694008
description:
2026-07-17 04:33:39 dovecot_login authenticator failed for H=([178.178.194.134]) [210.1.66.154]:51278: 535 Incorrect authentication data (set_id=sajithkumar.pk)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.187.221.130
country_id: 1269750
description:
2026-07-17 04:33:25 dovecot_login authenticator failed for H=(150.120.103.218.static.netvigator.com) [122.187.221.130]:33190: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 46.248.203.81
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/331960031 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 196.51.87.233
country_id: 6252001
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Mozilla/5.0 <a href=\"https://lovealba.co.kr/\">\xed\x99\x94\xeb\xa5\x98\xea\xb3\x84 \xec\x95\x8c\xeb\xb0\x94</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 106.247.22.181
country_id: 1835841
description:
2026-07-17 04:35:58 dovecot_login authenticator failed for H=([112.161.42.97]) [106.247.22.181]:55983: 535 Incorrect authentication data (set_id=anoop.ps@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.172.138.43
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/351699590 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.90.111.74
country_id: 1269750
description:
2026-07-17 04:36:10 dovecot_login authenticator failed for H=([167.250.118.12]) [59.90.111.74]:51624: 535 Incorrect authentication data (set_id=anoop.ps)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 161.142.152.180
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/37848082 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.197.198.195
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/383444461 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 36.39.140.2
country_id: 1835841
description:
2026-07-17 04:38:53 dovecot_login authenticator failed for H=(static.bb.awr.59.90.111.74.bsnl.in) [36.39.140.2]:47610: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.16.146.168
country_id: 1562822
description:
2026-07-17 04:39:59 dovecot_login authenticator failed for H=([146.66.76.174]) [123.16.146.168]:55446: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.19.163.58
country_id: 1269750
description:
2026-07-17 04:39:44 dovecot_login authenticator failed for H=([83.239.84.130]) [125.19.163.58]:49934: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 115.135.26.97
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/41259793 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.61.82
country_id: 1269750
description:
2026-07-17 04:40:09 dovecot_login authenticator failed for H=([197.219.228.242]) [182.95.61.82]:54418: 535 Incorrect authentication data (set_id=evin.joseph)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 152.52.200.6
country_id: 1269750
description:
2026-07-17 04:40:18 dovecot_login authenticator failed for H=([175.195.132.165]) [152.52.200.6]:53948: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 77.30.193.251
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/442780500 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.191.231
country_id: 99237
description:
2026-07-17 04:40:53 dovecot_login authenticator failed for H=([49.124.159.185]) [65.20.191.231]:45833: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77469916
abuser: 203.78.120.248
country_id: 1643084
domain: alnayza.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:jcef4rua0lc.xml.PhTmL||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.255.19.222
country_id: 2589581
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/4d3617924 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.61.82
country_id: 1269750
description:
2026-07-17 04:44:34 dovecot_login authenticator failed for H=([103.154.64.185]) [182.95.61.82]:55990: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 5.76.16.216
country_id: 1522867
description:
2026-07-17 04:45:06 dovecot_login authenticator failed for H=([14.153.169.33]) [5.76.16.216]:55178: 535 Incorrect authentication data (set_id=sajithkumar.pk)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.189.119.141
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/52287946 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.115.166.133
country_id: 3923057
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/532696101 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.78.86.62
country_id: 1269750
description:
2026-07-17 04:46:45 dovecot_login authenticator failed for H=([98.182.171.163]) [182.78.86.62]:48590: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 128.185.209.30
country_id: 1269750
description:
2026-07-17 04:48:15 dovecot_login authenticator failed for H=([192.111.131.4]) [128.185.209.30]:36818: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 61.72.145.38
country_id: 1835841
description:
2026-07-17 04:48:44 dovecot_login authenticator failed for H=([182.79.95.152]) [61.72.145.38]:56973: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.212.9.122
country_id: 1835841
description:
2026-07-17 04:49:57 dovecot_login authenticator failed for H=(67-43-243-158.fidnet.com) [123.212.9.122]:56933: 535 Incorrect authentication data (set_id=prasad.k@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.179.222.71
country_id: 2361809
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/68412920 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.90.33.247
country_id: 192950
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/68998718 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 1.171.76.110
country_id: 1668284
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/6b3367618 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.21.86.47
country_id: 798544
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/721331754 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.123.113.30
country_id: 1269750
description:
2026-07-17 04:54:10 dovecot_login authenticator failed for H=([213.234.11.10]) [27.123.113.30]:50264: 535 Incorrect authentication data (set_id=uaeindiab2b@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.212.158.190
country_id: 3617476
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/752300615 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.82.109.136
country_id: 660013
description:
2026-07-17 04:54:33 dovecot_login authenticator failed for H=([213.234.11.10]) [45.82.109.136]:39198: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 144.172.151.186
country_id: 6251999
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/75883950 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 210.5.117.238
country_id: 1694008
description:
2026-07-17 04:57:03 dovecot_login authenticator failed for H=([59.6.72.106]) [210.5.117.238]:61027: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 50.121.186.125
country_id: 6252001
description:
2026-07-17 04:57:27 dovecot_login authenticator failed for H=50-121-186-125.static.chtn.wv.ip.frontiernet.net ([124.239.169.52]) [50.121.186.125]:61103: 535 Incorrect authentication data (set_id=evin.joseph)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 176.10.197.168
country_id: 2661886
description:
2026-07-17 04:57:38 dovecot_login authenticator failed for H=h-176-10-197-168.a444.priv.bahnhof.se (177-0-238-190.bnut3703.dsl.brasiltelecom.net.br) [176.10.197.168]:49374: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 109.238.140.87
country_id: 2661886
description:
2026-07-17 04:57:48 dovecot_login authenticator failed for H=customer-109-238-140-87.stosn.net ([149.54.15.126]) [109.238.140.87]:59942: 535 Incorrect authentication data (set_id=evin.joseph)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 184.22.26.236
country_id: 1605651
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/812349503 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 114.74.54.190
country_id: 2077456
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/853397407 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.191.180.222
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/87457801 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.219.162.101
country_id: 2542007
domain: metrodigitals.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/metrodigitals.com/?page_id=1383/ HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.211.114.84
country_id: 3624060
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/901299381 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.190.223.103
country_id: 337996
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/903260064 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.54.140.16
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/912063142 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 50.190.89.138
country_id: 6252001
description:
2026-07-17 05:04:03 dovecot_login authenticator failed for H=([119.207.3.114]) [50.190.89.138]:52344: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.95.120.53
country_id: 2077456
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/media/com_sppagebuilder/assets/iconfont/icowqkrkp/style.css?19c050e35ed81e9b737004c4c6bc61c6 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 197.51.4.39
country_id: 357994
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/913150767 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.95.106.82
country_id: 1562822
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/images/2024/12/21/inside-seats.jpg HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 31.56.224.125
country_id: 290557
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/components/com_sppagebuilder/assets/css/sppagebuilder.css?19c050e35ed81e9b737004c4c6bc61c6 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.246.221.114
country_id: 290557
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/components/com_sppagebuilder/assets/css/font-awesome-v4-shims.css?19c050e35ed81e9b737004c4c6bc61c6 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.246.209.217
country_id: 290557
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/components/com_sppagebuilder/assets/css/animate.min.css?19c050e35ed81e9b737004c4c6bc61c6 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.246.207.15
country_id: 290557
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/media/com_sppagebuilder/assets/iconfont/icoskbojd/style.css?19c050e35ed81e9b737004c4c6bc61c6 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.243.252.11
country_id: 290291
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/media/com_sppagebuilder/assets/iconfont/icoxeqfbw/style.css?19c050e35ed81e9b737004c4c6bc61c6 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.95.111.145
country_id: 3865483
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/images/2024/12/16/screen.jpg HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.247.72.102
country_id: 290557
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/media/com_sppagebuilder/assets/iconfont/icoehloyn/style.css?19c050e35ed81e9b737004c4c6bc61c6 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.245.235.142
country_id: 4566966
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/images/st_cinemas_logo-mob.png HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.243.252.230
country_id: 290291
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/images/st_cinemas_logo.png HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.247.70.20
country_id: 290557
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/images/2024/12/15/ticket-new-2.jpg HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.241.101.41
country_id: 3658394
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/media/com_sppagebuilder/assets/iconfont/icohfxdpz/style.css?19c050e35ed81e9b737004c4c6bc61c6 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.118.32.190
country_id: 1269750
description:
2026-07-17 05:03:51 dovecot_login authenticator failed for H=([211.205.53.47]) [45.118.32.190]:54250: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.245.250.36
country_id: 6290252
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/media/com_sppagebuilder/assets/iconfont/icoymxypz/style.css?19c050e35ed81e9b737004c4c6bc61c6 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.243.220.64
country_id: 2782113
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/plugins/system/jce/css/content.css?badb4208be409b1335b815dde676300e HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.244.103.3
country_id: 6252001
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/images/2024/12/21/lobby.jpg HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.244.65.180
country_id: 1880251
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/images/2024/12/23/night-view3.jpg HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.247.69.159
country_id: 290557
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/media/vendor/joomla-custom-elements/css/joomla-alert.min.css?0.2.0 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 220.77.214.59
country_id: 1835841
description:
2026-07-17 05:05:34 dovecot_login authenticator failed for H=([128.185.253.122]) [220.77.214.59]:57338: 535 Incorrect authentication data (set_id=nirmal@globalgroupoman.com)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 115.42.75.122
country_id: 1168579
domain: cochinbigbandshow.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:65595.cochinbigbandshow.com||ServerName:cochinbigbandshow.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:d1ffe26fb660d0b1c20edd1fef367611e2a68fb2||Title:0x8ffc6181||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.228.77.133
country_id: 3865483
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/9c2733871 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.34.60
country_id: 1668284
description:
2026-07-17 05:05:51 dovecot_login authenticator failed for H=111-70-34-60.emome-ip.hinet.net (wsip-184-178-172-24.rn.hr.cox.net) [111.70.34.60]:53080: 535 Incorrect authentication data (set_id=nirmal)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 51.36.223.219
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/982275570 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.11.3.69
country_id: 3658394
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/a01959160 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 202.184.101.5
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/a91147529 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.19.163.58
country_id: 1269750
description:
2026-07-17 05:08:13 dovecot_login authenticator failed for H=(201-200-93-6.mad-05-p64.cantv.net.93.208.201.in-addr.arpa) [125.19.163.58]:36666: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.229.98.52
country_id: 2510769
description:
2026-07-17 05:08:23 dovecot_login authenticator failed for H=(27-33-247-46.tpgi.com.au) [185.229.98.52]:50577: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 113.193.187.154
country_id: 1269750
description:
2026-07-17 05:08:25 dovecot_login authenticator failed for H=([49.124.153.27]) [113.193.187.154]:50830: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.245.235.142
country_id: 4566966
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/images/2024/12/15/external-view.jpg HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 178.95.106.82
country_id: 1562822
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/images/2024/12/15/chettayi.jpg HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.247.73.38
country_id: 290557
domain: www.stcinemas.co:80
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/www.stcinemas.co:80/images/2024/12/15/aniyathi.jpg HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 212.132.64.89
country_id: 2921044
description:
2026-07-17 05:08:50 dovecot_login authenticator failed for H=(made-again.tmesis.com) [212.132.64.89]:37420: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.123.114.190
country_id: 1269750
description:
2026-07-17 05:09:33 dovecot_login authenticator failed for H=(253.pool90-160-113.dynamic.orange.es) [27.123.114.190]:45408: 535 Incorrect authentication data (set_id=corporate)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 222.99.52.202
country_id: 1835841
description:
2026-07-17 05:09:19 dovecot_login authenticator failed for H=([85.186.244.106]) [222.99.52.202]:50514: 535 Incorrect authentication data (set_id=corporate@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 104.185.106.22
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/bb2131502 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 86.127.225.195
country_id: 2510769
domain: combinations.in
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:11712.combinations.in||ServerName:combinations.in||Method:metaWeblog.newPost||BlogID:1||TitleSHA:e91c0dbca1ee2dec0c54cb3c4c1a3baabd2de571||Title:0xddf10044||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.72.46.152
country_id: 1562822
description:
2026-07-17 05:09:48 dovecot_login authenticator failed for H=([124.88.174.143]) [27.72.46.152]:50092: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 95.82.7.89
country_id: 2077456
description:
2026-07-17 05:12:01 dovecot_login authenticator failed for H=([213.186.233.10]) [95.82.7.89]:47443: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.92.51.186
country_id: 1269750
description:
2026-07-17 05:12:23 dovecot_login authenticator failed for H=([103.147.248.23]) [59.92.51.186]:42450: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.242.153.5
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d71363745 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 180.75.238.143
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e43599865 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 157.100.120.82
country_id: 3658394
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/eb3014845 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 82.167.194.66
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f3829805 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 128.185.209.30
country_id: 1269750
description:
2026-07-17 05:17:20 dovecot_login authenticator failed for H=([49.124.159.185]) [128.185.209.30]:48324: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 67.230.43.85
country_id: 3489940
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/fd2514045 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 72.27.115.52
country_id: 3489940
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/fe3451017 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 98.48.178.139
country_id: 6252001
description:
2026-07-17 05:19:32 dovecot_plain authenticator failed for H=c-98-48-178-139.hsd1.sc.comcast.net (skloger) [98.48.178.139]:40830: 535 Incorrect authentication data (set_id=admin@ddgalaxy.in)


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 34.128.99.187
country_id: 1643084
domain: www.ahsmarine.com
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.29||T:APACHE||REQUEST_URI:/wp-content/plugins/payment-gateway-pix-for-woocommerce/readme.txt||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 152.173.164.87
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/011256795 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 118.33.119.34
country_id: 1835841
description:
2026-07-17 05:20:25 dovecot_login authenticator failed for H=(h31-192-201-106.cust.bredband2.com) [118.33.119.34]:36272: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.28.75.12
country_id: 3923057
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/032455707 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.23.228.86
country_id: 1269750
description:
2026-07-17 05:21:31 dovecot_login authenticator failed for H=([65.99.181.123]) [125.23.228.86]:39004: 535 Incorrect authentication data (set_id=cil)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.32.200.175
country_id: 2077456
description:
2026-07-17 05:21:14 dovecot_login authenticator failed for H=27-32-200-175.tpgi.com.au ([183.171.149.196]) [27.32.200.175]:38496: 535 Incorrect authentication data (set_id=cil@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.124.205.169
country_id: 1733045
description:
2026-07-17 05:22:20 dovecot_login authenticator failed for H=([120.77.210.8]) [49.124.205.169]:39056: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 197.219.228.246
country_id: 1036973
description:
2026-07-17 05:22:38 dovecot_login authenticator failed for H=(191-116-247-190.fibertel.com.ar) [197.219.228.246]:50534: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 101.13.2.183
country_id: 1668284
description:
2026-07-17 05:22:54 dovecot_login authenticator failed for H=(static-ip-1815617463.cable.net.co) [101.13.2.183]:46020: 535 Incorrect authentication data (set_id=cil@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.197.192.102
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/092248343 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.205.165.171
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/0a1340249 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 124.123.93.20
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/0d1291274 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 213.66.196.11
country_id: 2661886
description:
2026-07-17 05:26:45 dovecot_login authenticator failed for H=213-66-196-11-no2550.tbcn.telia.com ([103.147.248.23]) [213.66.196.11]:54972: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 27.125.249.222
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/142004268 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 96.56.228.149
country_id: 6252001
description:
2026-07-17 05:26:13 dovecot_login authenticator failed for H=ool-6038e495.static.optonline.net (119.6.17.58.adsl-pool.jx.chinaunicom.com) [96.56.228.149]:42492: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.104.96.117
country_id: 6251999
domain: kallanigroup.com
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.29||T:APACHE||MV:/wp-content/uploads/2021/02/index.php||SC:/home/kallanigroup/public_html/wp-content||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 176.28.169.108
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/152264756 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 112.203.50.230
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/182474382 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 143.255.104.228
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/252243536 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 212.243.68.166
country_id: 2658434
description:
2026-07-17 05:31:33 dovecot_login authenticator failed for H=([182.16.176.108]) [212.243.68.166]:46604: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.104.166.110
country_id: 1835841
description:
2026-07-17 05:31:50 dovecot_login authenticator failed for H=(85-19-195-12.telia-isp.no) [211.104.166.110]:38360: 535 Incorrect authentication data (set_id=sajithkumar.pk)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 169.224.10.20
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/7a408479 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.22.245.136
country_id: 3865483
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/7b596498 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 143.246.138.101
country_id: 6252001
domain: alnayza.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:m-gp1rvv.xml.php||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 101.13.4.122
country_id: 1668284
description:
2026-07-17 05:35:43 dovecot_login authenticator failed for H=([183.171.49.152]) [101.13.4.122]:60624: 535 Incorrect authentication data (set_id=corporate)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.184.124.46
country_id: 1269750
description:
2026-07-17 05:34:54 dovecot_login authenticator failed for H=(250.43.246.220.static.netvigator.com) [122.184.124.46]:57462: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.36.155.18
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/811710089 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 70.120.9.176
country_id: 6252001
description:
2026-07-17 05:36:18 dovecot_login authenticator failed for H=([49.125.201.86]) [70.120.9.176]:55315: 535 Incorrect authentication data (set_id=prasad.k@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.189.59.226
country_id: 337996
description:
2026-07-17 05:36:35 dovecot_login authenticator failed for H=(197-90-131-158.mweb.ipv4.as20011.net) [196.189.59.226]:36350: 535 Incorrect authentication data (set_id=prasad.k)


plugin: modsec
rule: 77469916
abuser: 2407:6ac0:4:1:4:4321:528b:1
country_id: 1643084
domain: futuracare.com.au
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:jce-08704dad.xml.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.25.248.222
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/872508737 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.169.236.186
country_id: 1835841
description:
2026-07-17 05:39:13 dovecot_login authenticator failed for H=(syn-071-013-124-166.biz.spectrum.com) [121.169.236.186]:37308: 535 Incorrect authentication data (set_id=corporate)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 205.250.25.62
country_id: 6251999
description:
2026-07-17 05:39:14 dovecot_login authenticator failed for H=([121.46.239.199]) [205.250.25.62]:34020: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.228.64.197
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/8a414895 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.244.215.186
country_id: 298795
description:
2026-07-17 05:38:59 dovecot_login authenticator failed for H=(111-70-9-143.emome-ip.hinet.net) [178.244.215.186]:59408: 535 Incorrect authentication data (set_id=corporate@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.63.219.148
country_id: 1835841
description:
2026-07-17 05:40:19 dovecot_login authenticator failed for H=(static.vnpt.vn) [211.63.219.148]:60298: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.23.155.110
country_id: 1269750
description:
2026-07-17 05:40:26 dovecot_login authenticator failed for H=([89.218.247.234]) [125.23.155.110]:34266: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 221.120.73.24
country_id: 1668284
description:
2026-07-17 05:40:41 dovecot_login authenticator failed for H=221-120-73-24.emome-ip.hinet.net (190024687.ip3.static.mediacommerce.com.co) [221.120.73.24]:52577: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.165.29.196
country_id: 1733045
description:
2026-07-17 05:40:46 dovecot_login authenticator failed for H=(syn-024-097-253-246.biz.spectrum.com) [202.165.29.196]:62561: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 183.89.208.174
country_id: 1605651
description:
2026-07-17 05:40:17 dovecot_login authenticator failed for H=([178.213.114.194]) [183.89.208.174]:36988: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 220.72.198.61
country_id: 1835841
description:
2026-07-17 05:40:17 dovecot_login authenticator failed for H=([110.93.243.22]) [220.72.198.61]:37956: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 83.225.24.63
country_id: 3175395
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/903675507 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 123.209.101.43
country_id: 2077456
description:
2026-07-17 05:40:57 dovecot_login authenticator failed for H=([42.247.107.130]) [123.209.101.43]:42762: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.127.84.186
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/931612126 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.49.183
country_id: 1668284
description:
2026-07-17 05:42:36 dovecot_login authenticator failed for H=111-70-49-183.emome-ip.hinet.net ([188.168.86.6]) [111.70.49.183]:49527: 535 Incorrect authentication data (set_id=khalid@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.45.133.4
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/9c2478086 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 82.39.35.211
country_id: 2635167
description:
2026-07-17 05:42:54 dovecot_login authenticator failed for H=([184.170.249.69]) [82.39.35.211]:46032: 535 Incorrect authentication data (set_id=khalid)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 94.249.51.214
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/9e2253252 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.0.74.92
country_id: 2510769
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/a23364708 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 91.224.170.38
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/bd614695 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 176.88.128.147
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/c42651993 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.187.86
country_id: 1269750
description:
2026-07-17 05:49:12 dovecot_login authenticator failed for H=(189-108-224-67.customer.tdatabrasil.net.br) [182.95.187.86]:48842: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.12.212.38
country_id: 1835841
description:
2026-07-17 05:49:26 dovecot_login authenticator failed for H=(mx-ll-183.89.250-247.dynamic.3bb.in.th) [59.12.212.38]:42004: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 162.196.158.31
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d11522064 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.188.98.0
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d32207695 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 112.208.64.58
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/dd3336530 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 104.28.211.189
country_id: 3017382
domain: cochinbigbandshow.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:up-yczpm.php||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.78.240.94
country_id: 1269750
description:
2026-07-17 05:52:22 dovecot_login authenticator failed for H=([49.124.151.22]) [182.78.240.94]:59310: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 157.15.58.182
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/ea1781015 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.23.155.110
country_id: 1269750
description:
2026-07-17 05:51:57 dovecot_login authenticator failed for H=([111.70.49.181]) [125.23.155.110]:42516: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.226.138
country_id: 1269750
description:
2026-07-17 05:52:01 dovecot_login authenticator failed for H=([187.126.105.42]) [182.95.226.138]:44528: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.32.200.175
country_id: 2077456
description:
2026-07-17 05:52:15 dovecot_login authenticator failed for H=27-32-200-175.tpgi.com.au ([103.161.93.53]) [27.32.200.175]:48247: 535 Incorrect authentication data (set_id=evin.joseph)


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.46.252.52
country_id: 6252001
domain: mail.elegantautomotives.com
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.29||T:APACHE||MV:/images/uploader.php||SC:/home/elegantautomotiv/public_html/images/uploader.php||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 156.155.36.14
country_id: 953987
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/ec2391163 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.163.213.5
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f51620689 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 218.156.93.202
country_id: 1835841
description:
2026-07-17 05:54:21 dovecot_login authenticator failed for H=([72.207.33.65]) [218.156.93.202]:53277: 535 Incorrect authentication data (set_id=mbt@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.62.88.25
country_id: 1269750
description:
2026-07-17 05:54:42 dovecot_login authenticator failed for H=(67-43-240-149.fidnet.com) [202.62.88.25]:45888: 535 Incorrect authentication data (set_id=mbt)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.76.71.82
country_id: 1269750
description:
2026-07-17 05:57:19 dovecot_login authenticator failed for H=([115.241.65.249]) [182.76.71.82]:46286: 535 Incorrect authentication data (set_id=sunil@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 110.25.107.172
country_id: 1668284
description:
2026-07-17 05:57:37 dovecot_login authenticator failed for H=110-25-107-172.adsl.fetnet.net (dsl-tn-dynamic-009.209.22.125.airtelbroadband.in) [110.25.107.172]:52694: 535 Incorrect authentication data (set_id=sunil)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.170.131.225
country_id: 272103
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/03637035 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.184.124.46
country_id: 1269750
description:
2026-07-17 05:58:28 dovecot_login authenticator failed for H=([36.64.36.101]) [122.184.124.46]:60202: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 135.125.199.17
country_id: 3017382
description:
2026-07-17 05:58:46 dovecot_login authenticator failed for H=vps-36f1e8f3.vps.ovh.net ([58.56.128.190]) [135.125.199.17]:45404: 535 Incorrect authentication data (set_id=sunil@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 80.223.190.179
country_id: 660013
description:
2026-07-17 05:58:53 dovecot_login authenticator failed for H=dsl-hkibng42-50dfbe-179.dhcp.inet.fi ([49.124.151.40]) [80.223.190.179]:40676: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 183.171.49.144
country_id: 1733045
description:
2026-07-17 05:59:02 dovecot_login authenticator failed for H=([218.202.143.68]) [183.171.49.144]:37994: 535 Incorrect authentication data (set_id=sunil)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.14.31.10
country_id: 2921044
description:
2026-07-17 06:01:35 dovecot_login authenticator failed for H=([220.189.253.198]) [154.14.31.10]:40164: 535 Incorrect authentication data (set_id=investmentmanager@ibmcglobal.com)


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.104.96.117
country_id: 6251999
domain: ibmctradeflow.com
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.29||T:APACHE||MV:/wp-content/uploads/2021/02/index.php||SC:/home/ibmctradeflow/public_html/wp-content||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 197.219.210.94
country_id: 1036973
description:
2026-07-17 06:01:54 dovecot_login authenticator failed for H=([188.219.104.210]) [197.219.210.94]:55654: 535 Incorrect authentication data (set_id=investmentmanager)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.106.190.93
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/163138471 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 147.148.205.252
country_id: 2635167
description:
2026-07-17 06:04:01 dovecot_login authenticator failed for H=(ip-104-200-152-25.hosts.zerolag.com) [147.148.205.252]:37460: 535 Incorrect authentication data (set_id=investmentmanager@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 83.208.70.70
country_id: 3077311
description:
2026-07-17 06:04:11 dovecot_login authenticator failed for H=83-208-70-70.rcc.o2.cz ([178.178.222.59]) [83.208.70.70]:50304: 535 Incorrect authentication data (set_id=investmentmanager)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.242.105.125
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/193859103 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 210.206.24.237
country_id: 1835841
description:
2026-07-17 06:05:20 dovecot_login authenticator failed for H=(chernyshevskayarb-gw.transtelecom.net) [210.206.24.237]:53301: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 171.4.246.215
country_id: 1605651
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/293000701 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 14.224.193.215
country_id: 1562822
description:
2026-07-17 06:08:42 dovecot_login authenticator failed for H=(dloja.static.gvt.net.br) [14.224.193.215]:47790: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 181.215.65.64
country_id: 6252001
description:
[2026-07-17 06:09:20 +0530] info [whostmgrd] 181.215.65.64 - root "GET /cpsess6724066211/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 49.43.227.2
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/391618520 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.111.245.135
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/363141100 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 14.232.189.158
country_id: 1562822
description:
2026-07-17 06:09:13 dovecot_login authenticator failed for H=([112.31.109.13]) [14.232.189.158]:60900: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 181.215.65.64
country_id: 6252001
description:
[2026-07-17 06:09:18 +0530] info [whostmgrd] 181.215.65.64 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 64.65.92.43
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/391762943 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 64.251.149.81
country_id: 6252001
description:
2026-07-17 06:10:01 dovecot_login authenticator failed for H=64-251-149-81.fidnet.com (104-194-37-176.tpia.execulink.com) [64.251.149.81]:53816: 535 Incorrect authentication data (set_id=cil@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 14.46.58.104
country_id: 1835841
description:
2026-07-17 06:10:20 dovecot_login authenticator failed for H=([197.90.131.158]) [14.46.58.104]:37558: 535 Incorrect authentication data (set_id=cil)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 89.197.101.200
country_id: 2635167
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/39327217 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.206.131.33
country_id: 1269750
description:
2026-07-17 06:11:06 dovecot_login authenticator failed for H=(ppp-58-8-48-178.revip2.asianet.co.th) [103.206.131.33]:36299: 535 Incorrect authentication data


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 175.143.247.237
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/3a750924 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 78.66.44.246
country_id: 2661886
description:
2026-07-17 06:11:54 dovecot_login authenticator failed for H=78-66-44-246-no2550.tbcn.telia.com ([92.124.133.35]) [78.66.44.246]:37276: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 174.115.246.214
country_id: 6251999
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/3d2249715 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.141.202
country_id: 99237
description:
2026-07-17 06:12:11 dovecot_login authenticator failed for H=([39.164.91.67]) [65.20.141.202]:39315: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 23.108.46.101
country_id: 6252001
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Opera/9.80 <a href=\"http://www.abnewswire.com/pressreleases/garage-door-repair-services-in-laurel-md-expand-residential-accessibility-through-neighborhood-garage-door-repair-of-laurel_819417.html\">web page</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.234.179.248
country_id: 3932488
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/413811466 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.27.138.81
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/402464802 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 170.244.58.154
country_id: 3865483
description:
2026-07-17 06:13:14 dovecot_plain authenticator failed for H=(localhost) [170.244.58.154]:54249: 535 Incorrect authentication data (set_id=jijo@ddgalaxy.in)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.119.70.27
country_id: 3686110
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/442830960 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 172.121.235.54
country_id: 6252001
domain: fefkadirectorsunion.com
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.29||T:APACHE||RA:172.121.235.54||TA:172.121.235.54||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 190.197.31.229
country_id: 3582678
description:
2026-07-17 06:21:27 dovecot_login authenticator failed for H=([49.124.153.64]) [190.197.31.229]:49719: 535 Incorrect authentication data (set_id=prasad.k@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 68.183.228.238
country_id: 1880251
description:
2026-07-17 06:21:00 dovecot_login authenticator failed for H=([197.251.193.6]) [68.183.228.238]:45254: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 203.221.144.203
country_id: 2077456
description:
2026-07-17 06:21:16 dovecot_login authenticator failed for H=([125.35.109.214]) [203.221.144.203]:40078: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 106.0.165.219
country_id: 1605651
description:
2026-07-17 06:21:50 dovecot_login authenticator failed for H=([174.64.199.71]) [106.0.165.219]:42913: 535 Incorrect authentication data (set_id=prasad.k)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.170.32.172
country_id: 3608932
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/592488515 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.14.144.138
country_id: 6252001
description:
2026-07-17 06:23:47 dovecot_login authenticator failed for H=(181-212-174-166.baf.movistar.cl) [154.14.144.138]:47553: 535 Incorrect authentication data (set_id=mbt@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.14.31.10
country_id: 2921044
description:
2026-07-17 06:23:33 dovecot_login authenticator failed for H=([49.124.152.149]) [154.14.31.10]:59447: 535 Incorrect authentication data (set_id=prasad.k)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 209.203.45.126
country_id: 953987
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/5e1814080 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 200.106.49.149
country_id: 3932488
description:
2026-07-17 06:23:13 dovecot_login authenticator failed for H=([61.142.85.190]) [200.106.49.149]:51856: 535 Incorrect authentication data (set_id=prasad.k@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.123.111.110
country_id: 1269750
description:
2026-07-17 06:24:04 dovecot_login authenticator failed for H=(82-65-140-218.subs.proxad.net) [27.123.111.110]:50144: 535 Incorrect authentication data (set_id=mbt)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.186.202.58
country_id: 1269750
description:
2026-07-17 06:24:09 dovecot_login authenticator failed for H=([68.71.251.130]) [122.186.202.58]:34020: 535 Incorrect authentication data (set_id=mail@kallanigroup.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.241.232.14
country_id: 2921044
description:
2026-07-17 06:24:44 dovecot_login authenticator failed for H=p5df1e80e.dip0.t-ipconnect.de (abts-kk-static-226.253.166.122.airtelbroadband.in) [93.241.232.14]:50287: 535 Incorrect authentication data (set_id=mail)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 76.132.238.43
country_id: 6252001
description:
2026-07-17 06:25:13 dovecot_login authenticator failed for H=c-76-132-238-43.hsd1.ca.comcast.net ([49.124.148.19]) [76.132.238.43]:38490: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.176.45.238
country_id: 1269750
description:
2026-07-17 06:25:25 dovecot_login authenticator failed for H=([211.178.3.26]) [122.176.45.238]:43571: 535 Incorrect authentication data (set_id=rdcentre)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.131.220.150
country_id: 1835841
description:
2026-07-17 06:25:43 dovecot_login authenticator failed for H=([192.111.134.12]) [121.131.220.150]:33845: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 80.83.26.237
country_id: 272103
description:
2026-07-17 06:25:14 dovecot_login authenticator failed for H=([49.124.153.42]) [80.83.26.237]:59532: 535 Incorrect authentication data (set_id=rdcentre@ibmcglobal.com)


plugin: modsec
rule: 77469916
abuser: 140.213.230.7
country_id: 1643084
domain: alnayza.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:jceewcffy0g.php83||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 156.247.222.167
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/673248954 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 176.108.60.165
country_id: 3277605
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/662976997 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 15.188.27.200
country_id: 3017382
domain: 103.185.74.189
description:
IM360 WAF: Bad file extension||RSV:8.29||T:APACHE||MVN:REQUEST_FILENAME||MV:/servlist.conf||User:root||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.46.252.52
country_id: 6252001
domain: yukticlick.com
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.29||T:APACHE||MV:/images/uploader.php||SC:/home/yukticlick/public_html/images/uploader.php||


plugin: modsec
rule: 77783317
name: IM360 WAF: [monitor] DB-management plugin/tool interaction (WPT-2631 attack-surface tracking)
abuser: 15.188.27.200
country_id: 3017382
domain: 103.185.74.189
description:
IM360 WAF: [monitor] DB-management plugin/tool interaction (WPT-2631 attack-surface tracking)||MV:/adminer/adminer.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 15.188.27.200
country_id: 3017382
domain: 103.185.74.189
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/backend/.env.production||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 206.62.161.164
country_id: 3686110
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/74101835 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 51.162.194.94
country_id: 1733045
description:
2026-07-17 06:30:05 dovecot_login authenticator failed for H=([74.119.144.57]) [51.162.194.94]:58733: 535 Incorrect authentication data (set_id=nirmal@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 37.207.215.2
country_id: 3175395
description:
2026-07-17 06:30:20 dovecot_login authenticator failed for H=host-37-207-215-2.business.telecomitalia.it (mx-ll-183.89.208-174.dynamic.3bb.in.th) [37.207.215.2]:16833: 535 Incorrect authentication data (set_id=support@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 116.98.104.138
country_id: 1562822
description:
2026-07-17 06:30:32 dovecot_login authenticator failed for H=([201.59.176.97]) [116.98.104.138]:57098: 535 Incorrect authentication data (set_id=support)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.222.141.154
country_id: 3374766
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/cf1671227 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 201.141.108.139
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d63444080 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.34.138.116
country_id: 2510769
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e0347023 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 131.222.252.112
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/db3720532 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.185.146.166
country_id: 1269750
description:
2026-07-17 06:33:13 dovecot_login authenticator failed for H=([182.66.212.121]) [122.185.146.166]:46466: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.179.163.52
country_id: 3382998
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/eb1820220 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 118.37.27.11
country_id: 1835841
description:
2026-07-17 06:35:21 dovecot_login authenticator failed for H=([176.111.64.38]) [118.37.27.11]:44749: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.122.39.33
country_id: 2635167
description:
2026-07-17 06:35:53 dovecot_login authenticator failed for H=([31.173.67.146]) [188.122.39.33]:59156: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.134.97
country_id: 99237
description:
2026-07-17 06:36:19 dovecot_login authenticator failed for H=([72.37.217.1]) [65.20.134.97]:53584: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.187.78.189
country_id: 1269750
description:
2026-07-17 06:36:44 dovecot_login authenticator failed for H=([120.198.61.146]) [103.187.78.189]:42812: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 106.107.163.210
country_id: 1668284
description:
2026-07-17 06:38:21 dovecot_login authenticator failed for H=([184.170.249.69]) [106.107.163.210]:51022: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.123.50
country_id: 1269750
description:
2026-07-17 06:38:42 dovecot_login authenticator failed for H=([182.31.36.202]) [182.95.123.50]:59492: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 171.225.192.63
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/012742859 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.192.54.219
country_id: 1835841
description:
2026-07-17 06:39:24 dovecot_login authenticator failed for H=([199.187.210.51]) [211.192.54.219]:50396: 535 Incorrect authentication data (set_id=nirmal@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.189.51.64
country_id: 337996
description:
2026-07-17 06:39:39 dovecot_login authenticator failed for H=(201-15-149-254.pltce300.ipd.brasiltelecom.net.br) [196.189.51.64]:44346: 535 Incorrect authentication data (set_id=nirmal)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.103.31.25
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/011341766 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 33331
name: IM360 WAF: Attempt to upload malware
abuser: 163.223.211.27
country_id: 1562822
domain: alnayza.com
description:
IM360 WAF: Attempt to upload malware||Action:||Scan duration:2278194||Sizes:14781||Combined size:14781||User:alnay||WPU:||Filename:icotubrgi.zip||Scanned:/tmp//20260717-063921-almAwRn7p16f7FuXl4B3HQAAAFg-file-cxjMxF||SC:/home/alnay/public_html/component||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.110.176.222
country_id: 1694008
description:
2026-07-17 06:39:36 dovecot_login authenticator failed for H=([49.124.147.105]) [27.110.176.222]:36621: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 171.225.206.162
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/052499725 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 51.39.233.158
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/05118482 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 84.118.20.106
country_id: 2921044
description:
2026-07-17 06:41:06 dovecot_login authenticator failed for H=ip-084-118-020-106.um23.pools.vodafone-ip.de ([14.224.193.215]) [84.118.20.106]:25251: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 37.207.215.2
country_id: 3175395
description:
2026-07-17 06:41:41 dovecot_login authenticator failed for H=host-37-207-215-2.business.telecomitalia.it ([208.69.161.214]) [37.207.215.2]:2429: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 76.35.1.141
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/092232094 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 118.101.205.186
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/0c934110 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 96.56.228.149
country_id: 6252001
description:
2026-07-17 06:43:39 dovecot_login authenticator failed for H=ool-6038e495.static.optonline.net ([121.131.220.168]) [96.56.228.149]:49410: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.64.148.223
country_id: 2542007
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/102920256 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.246.182.158
country_id: 1835841
description:
2026-07-17 06:44:30 dovecot_login authenticator failed for H=(89-253-90-113.customers.ownit.se) [211.246.182.158]:56298: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 129.224.206.110
country_id: 163843
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/142016906 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.235.6.140
country_id: 3686110
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/16294163 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.153.175.227
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/252296653 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 167.104.43.135
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/201279470 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 153.51.238.113
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/272110613 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.66.143.215
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/27227967 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 94.120.186.61
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/291853894 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.179.163.230
country_id: 3382998
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/2a576273 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.73.140.74
country_id: 3175395
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/2f1117455 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.207.227.135
country_id: 2245662
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/3146675 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 90.230.115.5
country_id: 2661886
description:
2026-07-17 06:52:24 dovecot_login authenticator failed for H=90-230-115-5-no2550.tbcn.telia.com ([49.124.149.48]) [90.230.115.5]:56594: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.124.152.147
country_id: 1733045
description:
2026-07-17 06:52:34 dovecot_login authenticator failed for H=([112.196.103.235]) [49.124.152.147]:57244: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.228.106
country_id: 1269750
description:
2026-07-17 06:52:41 dovecot_login authenticator failed for H=(aes-static-193.106.22.125.airtel.in) [182.95.228.106]:36030: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 50.231.243.28
country_id: 6252001
description:
2026-07-17 06:52:01 dovecot_login authenticator failed for H=([182.95.181.50]) [50.231.243.28]:40818: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.54.78.115
country_id: 3439705
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/341713962 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.130.102.172
country_id: 1835841
description:
2026-07-17 06:53:45 dovecot_login authenticator failed for H=([106.246.89.70]) [125.130.102.172]:34857: 535 Incorrect authentication data (set_id=uaeindiab2b@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 116.74.77.163
country_id: 1269750
description:
2026-07-17 06:53:55 dovecot_login authenticator failed for H=(host59.181-104-41.telecom.net.ar) [116.74.77.163]:61197: 535 Incorrect authentication data (set_id=uaeindiab2b)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 149.3.34.157
country_id: 614540
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/392042663 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.212.210.212
country_id: 3617476
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/413058133 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 72.181.229.228
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/413729798 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.253.48.14
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/41597211 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 120.56.56.92
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/43934559 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.224.33.4
country_id: 953987
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/442545040 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.131.108.199
country_id: 290291
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/47887967 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.21.170.146
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/4915109 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.237.14.85
country_id: 3932488
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/481489155 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 72.179.206.48
country_id: 6252001
description:
2026-07-17 07:02:38 dovecot_login authenticator failed for H=([192.111.131.4]) [72.179.206.48]:50249: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.144.157.174
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/4b2612645 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.187.230.11
country_id: 1269750
description:
2026-07-17 07:03:31 dovecot_login authenticator failed for H=([189.57.9.17]) [122.187.230.11]:52520: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 85.195.9.20
country_id: 2661886
description:
2026-07-17 07:04:41 dovecot_login authenticator failed for H=user20.85-195-9.netatonce.net ([199.187.210.51]) [85.195.9.20]:44616: 535 Incorrect authentication data (set_id=support)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 76.49.199.97
country_id: 6252001
description:
2026-07-17 07:03:54 dovecot_login authenticator failed for H=(ip-50-5-205-174.dynamic.fuse.net) [76.49.199.97]:41608: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 81.107.5.221
country_id: 2635167
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/512251937 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 191.44.113.143
country_id: 798544
description:
2026-07-17 07:04:17 dovecot_login authenticator failed for H=(18.91.212.222.broad.cd.sc.dynamic.163data.com.cn) [191.44.113.143]:40540: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.1.80.17
country_id: 1835841
description:
2026-07-17 07:04:19 dovecot_login authenticator failed for H=([195.158.14.232]) [121.1.80.17]:46952: 535 Incorrect authentication data (set_id=support@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 89.233.203.159
country_id: 2661886
description:
2026-07-17 07:04:25 dovecot_login authenticator failed for H=89-233-203-159.cust.bredband2.com ([112.44.243.191]) [89.233.203.159]:60304: 535 Incorrect authentication data (set_id=evin.joseph)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 223.123.113.182
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/553565265 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 157.51.126.161
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/56190182 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 111.119.59.125
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/562737769 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 82.117.126.160
country_id: 2661886
description:
2026-07-17 07:07:02 dovecot_login authenticator failed for H=h82-117-126-160.cust.bredband2.com ([49.124.205.169]) [82.117.126.160]:52982: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.237.191
country_id: 99237
description:
2026-07-17 07:07:44 dovecot_login authenticator failed for H=([207.188.158.216]) [65.20.237.191]:53987: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.234.34.130
country_id: 3865483
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/632277537 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 1.241.64.237
country_id: 1835841
description:
2026-07-17 07:08:59 dovecot_login authenticator failed for H=([182.95.214.23]) [1.241.64.237]:45284: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.105.229.237
country_id: 1835841
description:
2026-07-17 07:08:58 dovecot_login authenticator failed for H=([72.37.217.1]) [211.105.229.237]:52918: 535 Incorrect authentication data (set_id=nirmal@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.218.55.38
country_id: 3703430
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/5e3166580 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 174.134.45.64
country_id: 6252001
description:
2026-07-17 07:09:21 dovecot_login authenticator failed for H=(static.vnpt.vn) [174.134.45.64]:50775: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.190.220.168
country_id: 337996
description:
2026-07-17 07:10:32 dovecot_login authenticator failed for H=(109.43.246.220.static.netvigator.com) [196.190.220.168]:53244: 535 Incorrect authentication data (set_id=support)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.63.219.148
country_id: 1835841
description:
2026-07-17 07:10:00 dovecot_login authenticator failed for H=([61.2.44.54]) [211.63.219.148]:48420: 535 Incorrect authentication data (set_id=anoop.ps@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 117.211.74.211
country_id: 1269750
description:
2026-07-17 07:10:09 dovecot_login authenticator failed for H=([125.138.166.217]) [117.211.74.211]:44148: 535 Incorrect authentication data (set_id=support@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 180.210.164.158
country_id: 1210997
description:
2026-07-17 07:10:19 dovecot_login authenticator failed for H=([121.131.220.168]) [180.210.164.158]:40796: 535 Incorrect authentication data (set_id=anoop.ps)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.238.13.73
country_id: 2464461
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/673246288 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.29.51.12
country_id: 1605651
description:
2026-07-17 07:11:17 dovecot_login authenticator failed for H=([72.206.74.97]) [202.29.51.12]:38394: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 212.237.123.136
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/661641897 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.202.135.172
country_id: 1819730
description:
2026-07-17 07:11:54 dovecot_login authenticator failed for H=(host-148-170-156-248.public.eastlink.ca) [121.202.135.172]:61245: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.102.190
country_id: 1269750
description:
2026-07-17 07:12:03 dovecot_login authenticator failed for H=(syn-076-089-199-082.res.spectrum.com) [182.95.102.190]:44398: 535 Incorrect authentication data (set_id=rdcentre@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.124.159.185
country_id: 1733045
description:
2026-07-17 07:12:22 dovecot_login authenticator failed for H=([213.39.31.14]) [49.124.159.185]:58666: 535 Incorrect authentication data (set_id=rdcentre@ibmcglobal.com)


plugin: modsec
rule: 77350295
name: IM360 WAF: Interaction with fake plugin
abuser: 64.89.163.64
country_id: 6252001
domain: ahsmarine.com
description:
IM360 WAF: Interaction with fake plugin||MV:/wp-content/plugins/apikey/apikey.php?test=hello||WPU:||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77140165
name: IM360 WAF: Block .suspected files
abuser: 64.89.163.64
country_id: 6252001
domain: ahsmarine.com
description:
IM360 WAF: Block .suspected files||RSV:8.29||T:APACHE||MVN:REQUEST_FILENAME||MV:/plugins/content/apismtp/apismtp.php.suspected||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 122.52.50.4
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/742558196 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.175.70.62
country_id: 3508796
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/742934698 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 200.105.141.172
country_id: 3923057
description:
2026-07-17 07:15:24 dovecot_login authenticator failed for H=static-200-105-141-172.acelerate.net ([82.39.35.211]) [200.105.141.172]:53700: 535 Incorrect authentication data (set_id=khalid@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 47.33.195.187
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/77285141 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.184.124.46
country_id: 1269750
description:
2026-07-17 07:15:46 dovecot_login authenticator failed for H=([49.124.153.26]) [122.184.124.46]:48314: 535 Incorrect authentication data (set_id=khalid)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 24.230.159.142
country_id: 6252001
description:
2026-07-17 07:16:03 dovecot_login authenticator failed for H=24-230-159-142-static.midco.net ([192.111.129.146]) [24.230.159.142]:62645: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 222.111.148.83
country_id: 1835841
description:
2026-07-17 07:16:35 dovecot_login authenticator failed for H=([192.111.130.1]) [222.111.148.83]:52956: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.130.102.172
country_id: 1835841
description:
2026-07-17 07:16:48 dovecot_login authenticator failed for H=([92.241.194.237]) [125.130.102.172]:36324: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.78.73.1
country_id: 3686110
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/801919104 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.199.111.53
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/863027318 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 171.234.8.175
country_id: 1562822
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Opera/9.80 <a href=\"https://groupe-begaiement-selfhelp.fr/wiki/index.php/Gi%E1%BB%91ng_c%C3%A0_ph%C3%AA_HQ1_trong_m%C3%B4_h%C3%ACnh_t%C3%A1i_canh_v%C6%B0%E1%BB%9Dn_c%C3%A0_ph%C3%AA\">\xe2\x80\x9cgi\xe1\xbb\x91ng c\xc3\xa2y ch\xe1\xba\xa5t l\xc6\xb0\xe1\xbb\xa3ng cao\xe2\x80\x9d</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 180.191.65.91
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/863236595 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 143.44.140.40
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/863523605 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.65.229.120
country_id: 1643084
description:
2026-07-17 07:19:41 dovecot_plain authenticator failed for H=(localhost) [202.65.229.120]:48896: 535 Incorrect authentication data (set_id=support@ddgalaxy.in)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.244.152.132
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/87492718 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.179.228.180
country_id: 2361809
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/87724181 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.224.23.105
country_id: 3658394
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/921914736 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 58.11.84.109
country_id: 1605651
description:
2026-07-17 07:22:32 dovecot_plain authenticator failed for H=ppp-58-11-84-109.revip2.asianet.co.th (localhost) [58.11.84.109]:12333: 535 Incorrect authentication data (set_id=accounts.zoho.comsigninsupport@ddgalaxy.in)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.204.129.94
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/963587827 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 24.105.160.100
country_id: 6252001
description:
2026-07-17 07:23:27 dovecot_login authenticator failed for H=syn-024-105-160-100.biz.spectrum.com ([5.142.5.118]) [24.105.160.100]:40431: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 155.103.131.36
country_id: 3865483
description:
2026-07-17 07:24:15 dovecot_login authenticator failed for H=([122.165.91.5]) [155.103.131.36]:46166: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 58.8.48.178
country_id: 1605651
description:
2026-07-17 07:23:53 dovecot_login authenticator failed for H=ppp-58-8-48-178.revip2.asianet.co.th ([183.82.56.12]) [58.8.48.178]:36850: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 92.253.29.253
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/9a663871 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.39.201.121
country_id: 6251999
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/9b3370934 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.10.228.10
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/b2135713 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 59.103.100.34
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/b52572527 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 122.183.49.116
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/b52380474 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.97.172.94
country_id: 2589581
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/b62526994 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.138.3
country_id: 99237
description:
2026-07-17 07:29:10 dovecot_login authenticator failed for H=([124.195.255.12]) [65.20.138.3]:45034: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77093094
abuser: 34.31.88.250
country_id: 6252001
domain: metrodigitals.com
description:


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 87.10.199.10
country_id: 3175395
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/c53760533 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 110.227.211.82
country_id: 1269750
description:
2026-07-17 07:32:27 dovecot_login authenticator failed for H=([14.48.112.8]) [110.227.211.82]:36264: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 206.62.136.109
country_id: 3686110
description:
2026-07-17 07:32:56 dovecot_login authenticator failed for H=([107.181.168.150]) [206.62.136.109]:43180: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 167.62.164.152
country_id: 3439705
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/cb783231 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 180.75.242.54
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e31930500 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 212.135.208.32
country_id: 1861060
description:
2026-07-17 07:38:18 dovecot_login authenticator failed for H=([59.17.27.137]) [212.135.208.32]:45451: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.212.191.16
country_id: 1861060
description:
2026-07-17 07:38:36 dovecot_login authenticator failed for H=st0848.nas811.p-aichi.nttpc.ne.jp (corporate.static.gvt.net.br) [202.212.191.16]:29666: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.160.137.230
country_id: 1269750
description:
2026-07-17 07:39:07 dovecot_login authenticator failed for H=([199.91.128.98]) [122.160.137.230]:37597: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.88.6.196
country_id: 1168579
description:
2026-07-17 07:40:35 dovecot_login authenticator failed for H=([27.115.113.138]) [111.88.6.196]:35731: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 2.138.28.65
country_id: 2510769
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/032795754 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.66.137.213
country_id: 3932488
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/062187649 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 197.242.170.10
country_id: 1036973
description:
2026-07-17 07:41:59 dovecot_login authenticator failed for H=([213.235.25.2]) [197.242.170.10]:50024: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 59.103.108.246
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/085646 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 152.52.198.42
country_id: 1269750
description:
2026-07-17 07:42:21 dovecot_login authenticator failed for H=([174.77.111.220]) [152.52.198.42]:35214: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 124.122.133.197
country_id: 1605651
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/0b2550281 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 92.142.108.231
country_id: 3381670
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/102767585 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.130.91.83
country_id: 1269750
description:
2026-07-17 07:44:48 dovecot_login authenticator failed for H=([174.64.199.77]) [103.130.91.83]:45598: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 208.96.233.67
country_id: 6251999
description:
2026-07-17 07:44:57 dovecot_login authenticator failed for H=208-96-233-67.resi.cgocable.ca ([142.54.228.195]) [208.96.233.67]:41710: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 153.117.24.37
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/10759367 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.81.229.179
country_id: 6252001
description:
2026-07-17 07:47:14 dovecot_login authenticator failed for H=([191.44.113.143]) [192.81.229.179]:33320: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 184.57.39.170
country_id: 6252001
description:
2026-07-17 07:47:46 dovecot_login authenticator failed for H=([212.104.70.143]) [184.57.39.170]:63380: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 176.29.19.180
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/1f1748220 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 31.94.18.169
country_id: 2635167
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/1e391688 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 86.108.21.145
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/20826317 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.43.11.241
country_id: 2510769
description:
2026-07-17 07:51:12 dovecot_login authenticator failed for H=241.red-81-43-11.staticip.rima-tde.net ([80.83.26.237]) [81.43.11.241]:34978: 535 Incorrect authentication data (set_id=support@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 218.233.182.39
country_id: 1835841
description:
2026-07-17 07:51:33 dovecot_login authenticator failed for H=([110.77.150.25]) [218.233.182.39]:8217: 535 Incorrect authentication data (set_id=support)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.182.125.243
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/213494023 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 176.222.60.87
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/22281936 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 200.56.111.227
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/22577351 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 64.49.97.15
country_id: 6252001
description:
2026-07-17 07:53:46 dovecot_login authenticator failed for H=([142.54.228.195]) [64.49.97.15]:37832: 535 Incorrect authentication data (set_id=prasad.k@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.237.191
country_id: 99237
description:
2026-07-17 07:54:44 dovecot_login authenticator failed for H=([27.32.40.37]) [65.20.237.191]:57633: 535 Incorrect authentication data (set_id=rdcentre@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 201.46.114.37
country_id: 3658394
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/23505250 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 70.64.222.34
country_id: 6251999
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/243742102 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77350979
abuser: 51.79.180.242
country_id: 1880251
domain: yukticlick.com
description:
IM360 WAF: Joomla Page Builder CK unauthenticated file upload - browse.ajaxAddPicture (CVE-2026-56290 / WPT-2603)||MVN:REQUEST_FILENAME||MV:/index.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 166.48.192.230
country_id: 6251999
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/253095401 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 84.195.184.129
country_id: 2802361
description:
2026-07-17 07:55:00 dovecot_login authenticator failed for H=d54c3b881.access.telenet.be ([171.211.123.106]) [84.195.184.129]:64036: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 115.131.27.24
country_id: 2077456
description:
2026-07-17 07:55:13 dovecot_login authenticator failed for H=([222.109.73.135]) [115.131.27.24]:38973: 535 Incorrect authentication data (set_id=rdcentre)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 12.34.186.180
country_id: 6252001
description:
2026-07-17 07:55:54 dovecot_login authenticator failed for H=([68.71.249.154]) [12.34.186.180]:42754: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.51.221.157
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/342824875 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.241.185.238
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/452709442 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.162.61.229
country_id: 1835841
description:
2026-07-17 08:00:44 dovecot_login authenticator failed for H=(dynamicip-95-79-108-51.pppoe.nn.ertelecom.ru) [121.162.61.229]:61476: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 141.148.165.230
country_id: 6252001
description:
2026-07-17 08:01:18 dovecot_login authenticator failed for H=([110.166.80.135]) [141.148.165.230]:54564: 535 Incorrect authentication data (set_id=sajithkumar.pk)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.131.220.154
country_id: 1835841
description:
2026-07-17 08:01:02 dovecot_login authenticator failed for H=([59.6.72.106]) [121.131.220.154]:52313: 535 Incorrect authentication data (set_id=sajithkumar.pk)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 75.109.206.38
country_id: 6252001
description:
2026-07-17 08:03:36 dovecot_login authenticator failed for H=([111.39.167.59]) [75.109.206.38]:39230: 535 Incorrect authentication data (set_id=corporate@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.50.203.111
country_id: 3439705
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/543081700 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 68.113.199.243
country_id: 6252001
description:
2026-07-17 08:05:55 dovecot_login authenticator failed for H=(nsg-corporate-6.249.186.122.airtel.in) [68.113.199.243]:53476: 535 Incorrect authentication data (set_id=support@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 174.137.29.175
country_id: 6252001
description:
2026-07-17 08:06:25 dovecot_login authenticator failed for H=([183.105.71.98]) [174.137.29.175]:38577: 535 Incorrect authentication data (set_id=support)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 201.243.50.134
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/561605398 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77642288
name: IM360 WAF: WordPress web-shell control gate (root=admin888)
abuser: 95.85.238.18
country_id: 3077311
domain: ns2.ddgalaxy.in
description:
IM360 WAF: WordPress web-shell control gate (root=admin888)||MVN:ARGS:root||MV:admin888||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 95.85.238.18
country_id: 3077311
domain: ns2.ddgalaxy.in
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:jce_fnkgsq_fm.xml.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 207.204.103.56
country_id: 3489940
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/603014367 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.141.173.123
country_id: 3703430
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/593506521 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 114.30.104.218
country_id: 2077456
description:
2026-07-17 08:09:11 dovecot_login authenticator failed for H=114-30-104-218.tpgi.com.au ([183.236.75.189]) [114.30.104.218]:47140: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.135.73.145
country_id: 3439705
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/613483882 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.16.17.139
country_id: 2921044
description:
2026-07-17 08:09:32 dovecot_login authenticator failed for H=(65-73-230-99.d1dd231b1e9e11c70abaf8fabd83036a.ip.frontiernet.net) [94.16.17.139]:40616: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.141.202
country_id: 99237
description:
2026-07-17 08:09:57 dovecot_login authenticator failed for H=([175.198.18.3]) [65.20.141.202]:51014: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 188.26.219.168
country_id: 2510769
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/623393102 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 68.178.160.25
country_id: 6252001
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Opera/9.80 <a href=\"http://www.tifosy.de/url?q=https%3A%2F%2Ftragagratis.com\">https://tragagratis.com</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.154.76.15
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/62663980 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 86.98.221.231
country_id: 290557
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/613538423 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 79.16.52.109
country_id: 3175395
description:
2026-07-17 08:09:51 dovecot_login authenticator failed for H=host-79-16-52-109.retail.telecomitalia.it (dynamic-ip-18680230116.cable.net.co) [79.16.52.109]:63452: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.53.249.194
country_id: 3608932
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/631530195 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.16.17.140
country_id: 2921044
description:
2026-07-17 08:11:45 dovecot_login authenticator failed for H=(187-8-89-120.customer.tdatabrasil.net.br) [94.16.17.140]:33572: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.16.17.139
country_id: 2921044
description:
2026-07-17 08:12:18 dovecot_login authenticator failed for H=(77.145.34.171.adsl-pool.jx.chinaunicom.com) [94.16.17.139]:55430: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 172.81.129.42
country_id: 6252001
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Opera/9.80 <a href=\"https://zzz-1.com/\">https://zzz-1.com/</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.15.82.135
country_id: 798544
description:
2026-07-17 08:14:16 dovecot_login authenticator failed for H=(mail.mnr.gov.mw) [185.15.82.135]:45211: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.48.160.11
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/692438980 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 110.25.112.150
country_id: 1668284
description:
2026-07-17 08:14:43 dovecot_login authenticator failed for H=110-25-112-150.adsl.fetnet.net ([49.124.153.17]) [110.25.112.150]:52910: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 51.36.164.66
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/74263420 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.190.91.172
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/781163317 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 115.70.16.87
country_id: 2077456
description:
2026-07-17 08:18:55 dovecot_login authenticator failed for H=115-70-16-87.ip4.superloop.au (176.36.103.218.static.netvigator.com) [115.70.16.87]:47325: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 1.227.228.131
country_id: 1835841
description:
2026-07-17 08:19:30 dovecot_login authenticator failed for H=(nsg-corporate-129.229.187.122.airtel.in) [1.227.228.131]:39654: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 138.84.34.81
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/8f2163055 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.93.93.146
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/91469070 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.119.44.29
country_id: 1282988
description:
2026-07-17 08:21:59 dovecot_login authenticator failed for H=([68.71.243.10]) [111.119.44.29]:33966: 535 Incorrect authentication data (set_id=prasad.k@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 110.25.114.8
country_id: 1668284
description:
2026-07-17 08:22:09 dovecot_login authenticator failed for H=110-25-114-8.adsl.fetnet.net ([217.59.129.132]) [110.25.114.8]:40709: 535 Incorrect authentication data (set_id=prasad.k)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 106.214.3.232
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/922804981 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.153.250.96
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/94931261 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.11.205.214
country_id: 1835841
description:
2026-07-17 08:25:22 dovecot_login authenticator failed for H=([49.125.201.79]) [59.11.205.214]:60614: 535 Incorrect authentication data (set_id=khalid)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.17.214
country_id: 1668284
description:
2026-07-17 08:24:53 dovecot_login authenticator failed for H=111-70-17-214.emome-ip.hinet.net ([197.219.208.58]) [111.70.17.214]:56486: 535 Incorrect authentication data (set_id=khalid@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.170.97.94
country_id: 1269750
description:
2026-07-17 08:26:24 dovecot_login authenticator failed for H=([94.72.35.226]) [122.170.97.94]:44880: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 117.222.53.245
country_id: 1269750
description:
2026-07-17 08:26:30 dovecot_login authenticator failed for H=([14.32.231.200]) [117.222.53.245]:42398: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 193.114.134.130
country_id: 2077456
description:
2026-07-17 08:26:45 dovecot_login authenticator failed for H=(firewall01.practicetechnologies.ml.zerolag.com) [193.114.134.130]:57051: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.187.230.250
country_id: 1269750
description:
2026-07-17 08:27:42 dovecot_login authenticator failed for H=([68.71.249.154]) [122.187.230.250]:49143: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 70.184.65.81
country_id: 6252001
description:
2026-07-17 08:26:48 dovecot_login authenticator failed for H=wsip-70-184-65-81.oc.oc.cox.net (188-122-37-97.xdsl.5gdsl.com) [70.184.65.81]:39921: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.121.229.251
country_id: 3437598
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/a41801586 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.191.10.80
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/a73634371 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 213.230.66.211
country_id: 1512440
description:
2026-07-17 08:27:57 dovecot_login authenticator failed for H=([41.89.128.60]) [213.230.66.211]:36690: 535 Incorrect authentication data (set_id=mail@kallanigroup.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.61.82
country_id: 1269750
description:
2026-07-17 08:28:10 dovecot_login authenticator failed for H=([174.64.199.77]) [182.95.61.82]:46544: 535 Incorrect authentication data (set_id=sajithkumar.pk)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.171.43.162
country_id: 1733045
description:
2026-07-17 08:28:11 dovecot_login authenticator failed for H=([121.131.220.139]) [202.171.43.162]:33702: 535 Incorrect authentication data (set_id=mail)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.176.160.146
country_id: 1269750
description:
2026-07-17 08:34:32 dovecot_login authenticator failed for H=([78.136.223.227]) [103.176.160.146]:47242: 535 Incorrect authentication data (set_id=cil@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.235.212.105
country_id: 3202326
description:
2026-07-17 08:34:47 dovecot_login authenticator failed for H=([154.146.238.122]) [185.235.212.105]:50751: 535 Incorrect authentication data (set_id=cil)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 157.50.96.195
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/59497955 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 81.84.156.13
country_id: 2264397
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/5a1803568 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 133.106.130.47
country_id: 1861060
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/5d3010302 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 143.105.147.177
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/63415445 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.207.177.56
country_id: 192950
description:
2026-07-17 08:38:26 dovecot_login authenticator failed for H=([37.208.46.131]) [196.207.177.56]:43378: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.131.220.133
country_id: 1835841
description:
2026-07-17 08:38:56 dovecot_login authenticator failed for H=([74.195.53.129]) [121.131.220.133]:34605: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.144.24.198
country_id: 3017382
description:
2026-07-17 08:38:54 dovecot_login authenticator failed for H=([121.131.220.137]) [185.144.24.198]:39175: 535 Incorrect authentication data (set_id=corporate@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 157.211.1.171
country_id: 2077456
description:
2026-07-17 08:39:21 dovecot_login authenticator failed for H=(155-94-180-28-host.colocrossing.com) [157.211.1.171]:35304: 535 Incorrect authentication data (set_id=corporate)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.1.80.17
country_id: 1835841
description:
2026-07-17 08:39:58 dovecot_login authenticator failed for H=(220-245-133-202.tpgi.com.au) [121.1.80.17]:54943: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.206.27.37
country_id: 1269750
description:
2026-07-17 08:40:15 dovecot_login authenticator failed for H=([190.57.233.133]) [49.206.27.37]:56330: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.182.138
country_id: 1269750
description:
2026-07-17 08:40:41 dovecot_login authenticator failed for H=(adsl.viettel.vn) [182.95.182.138]:43192: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.255.255.26
country_id: 2661886
description:
2026-07-17 08:41:13 dovecot_login authenticator failed for H=94-255-255-26.cust.bredband2.com (ip103-31-38-92.cloudhost.web.id) [94.255.255.26]:40630: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 112.164.228.18
country_id: 1835841
description:
2026-07-17 08:41:25 dovecot_login authenticator failed for H=([189.57.9.17]) [112.164.228.18]:44031: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 61.4.74.220
country_id: 1327865
domain: futuracare.com.au
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:12025.futuracare.com.au||ServerName:futuracare.com.au||Method:metaWeblog.newPost||BlogID:1||TitleSHA:0f2b575f5f1b55352ec568322523e87ba054f487||Title:0xd080ceef||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 69.118.232.13
country_id: 6252001
description:
2026-07-17 08:42:25 dovecot_login authenticator failed for H=ool-4576e80d.dyn.optonline.net ([192.111.137.33]) [69.118.232.13]:42472: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 90.230.115.5
country_id: 2661886
description:
2026-07-17 08:42:49 dovecot_login authenticator failed for H=90-230-115-5-no2550.tbcn.telia.com ([125.134.191.222]) [90.230.115.5]:52552: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 220.86.176.134
country_id: 1835841
description:
2026-07-17 08:43:27 dovecot_login authenticator failed for H=([121.66.63.186]) [220.86.176.134]:57411: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 31.171.125.179
country_id: 587116
description:
2026-07-17 08:42:46 dovecot_login authenticator failed for H=(230.pool85-51-235.static.orange.es) [31.171.125.179]:50294: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 71.13.124.166
country_id: 6252001
description:
2026-07-17 08:43:43 dovecot_login authenticator failed for H=syn-071-013-124-166.biz.spectrum.com ([49.124.152.30]) [71.13.124.166]:46200: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 203.194.96.254
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/781345665 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 188.54.132.141
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/81229135 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 92.96.95.145
country_id: 290557
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/823666704 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 193.31.200.85
country_id: 1522867
description:
2026-07-17 08:47:06 dovecot_login authenticator failed for H=([178.178.194.136]) [193.31.200.85]:35212: 535 Incorrect authentication data (set_id=investmentmanager@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 101.13.6.91
country_id: 1668284
description:
2026-07-17 08:47:28 dovecot_login authenticator failed for H=(nsg-static-057.88.71.182.airtel.in) [101.13.6.91]:51153: 535 Incorrect authentication data (set_id=investmentmanager)


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 192.111.137.34
country_id: 6252001
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Opera/9.80 <a href=\"https://www.peixun10.com\">\xe7\xbf\xb0\xe9\x82\xa6\xe6\x95\x99\xe8\x82\xb2\xe5\x9f\xb9\xe8\xae\xad\xe5\xad\xa6\xe6\xa0\xa1</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 40.142.210.255
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/912446060 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 89.67.246.166
country_id: 798544
description:
2026-07-17 08:50:54 dovecot_login authenticator failed for H=89-67-246-166.dynamic.play.pl ([103.168.241.32]) [89.67.246.166]:39162: 535 Incorrect authentication data (set_id=corporate@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.62.95.243
country_id: 1269750
description:
2026-07-17 08:51:10 dovecot_login authenticator failed for H=([149.54.15.126]) [202.62.95.243]:59396: 535 Incorrect authentication data (set_id=corporate)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 64.251.149.81
country_id: 6252001
description:
2026-07-17 08:51:23 dovecot_login authenticator failed for H=64-251-149-81.fidnet.com ([49.124.149.204]) [64.251.149.81]:52206: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 203.9.211.62
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/95845519 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.117.149.206
country_id: 1527747
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/9c687640 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.170.97.94
country_id: 1269750
description:
2026-07-17 08:52:16 dovecot_login authenticator failed for H=(abts-north-static-105.80.160.122.airtelbroadband.in) [122.170.97.94]:42959: 535 Incorrect authentication data (set_id=cil@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.6.164.199
country_id: 3932488
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/9d2136594 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.114.45.85
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/a41860807 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.8.107.113
country_id: 1835841
description:
2026-07-17 08:55:06 dovecot_login authenticator failed for H=([88.255.189.50]) [59.8.107.113]:41043: 535 Incorrect authentication data (set_id=uaeindiab2b@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.112.0.38
country_id: 3865483
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/ba2762635 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.180.113.199
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/c33128885 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 223.188.2.63
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/cd401889 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.54.80.57
country_id: 1512440
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/cf741978 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 144.48.132.7
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d03593319 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.188.114.250
country_id: 2378080
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d33371130 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.111.223.51
country_id: 2635167
description:
2026-07-17 08:58:54 dovecot_login authenticator failed for H=cpc145672-oxfd28-2-0-cust818.4-3.cable.virginm.net ([195.239.47.189]) [81.111.223.51]:39643: 535 Incorrect authentication data (set_id=mbt@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.179.225.31
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d62690938 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 191.92.163.233
country_id: 3686110
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e11487635 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.157.131.212
country_id: 2464461
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e21529332 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 49.149.195.238
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e91363607 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 176.29.168.92
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e9316721 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.188.187.21
country_id: 337996
description:
2026-07-17 09:03:38 dovecot_login authenticator failed for H=(211-23-109-116.hinet-ip.hinet.net) [196.188.187.21]:39144: 535 Incorrect authentication data (set_id=support@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 87.237.198.139
country_id: 290291
description:
2026-07-17 09:04:13 dovecot_login authenticator failed for H=([180.188.253.150]) [87.237.198.139]:36441: 535 Incorrect authentication data (set_id=support)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.55.89.5
country_id: 1269750
description:
2026-07-17 09:04:17 dovecot_login authenticator failed for H=(ip-142-54-226-210.hosts.zerolag.com) [103.55.89.5]:32802: 535 Incorrect authentication data (set_id=prasad.k@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.160.80.105
country_id: 1269750
description:
2026-07-17 09:04:39 dovecot_login authenticator failed for H=([103.147.248.44]) [122.160.80.105]:46408: 535 Incorrect authentication data (set_id=prasad.k)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.122.37.97
country_id: 2635167
description:
2026-07-17 09:05:45 dovecot_login authenticator failed for H=([174.64.199.77]) [188.122.37.97]:48030: 535 Incorrect authentication data (set_id=khalid@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.210.148.41
country_id: 953987
description:
2026-07-17 09:06:06 dovecot_login authenticator failed for H=([124.83.9.141]) [102.210.148.41]:57454: 535 Incorrect authentication data (set_id=khalid)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 213.230.86.12
country_id: 1512440
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/032993731 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.158.10
country_id: 99237
description:
2026-07-17 09:09:09 dovecot_login authenticator failed for H=([120.195.50.149]) [65.20.158.10]:35050: 535 Incorrect authentication data (set_id=anoop.ps@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 83.47.200.145
country_id: 2510769
description:
2026-07-17 09:09:25 dovecot_login authenticator failed for H=145.red-83-47-200.dynamicip.rima-tde.net (254.1.194.113.adsl-pool.jx.chinaunicom.com) [83.47.200.145]:33561: 535 Incorrect authentication data (set_id=anoop.ps)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 203.192.247.84
country_id: 1269750
description:
2026-07-17 09:09:43 dovecot_login authenticator failed for H=([222.75.225.206]) [203.192.247.84]:42330: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.132.41.197
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/093398631 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.124.151.78
country_id: 1733045
description:
2026-07-17 09:10:46 dovecot_login authenticator failed for H=([59.8.45.104]) [49.124.151.78]:46236: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77350026
name: IM360 WAF: Track suspicious Spring Framework requests
abuser: 2406:6d00:ffb:1200:5d9d:18a8:ae42:bd31
country_id: 2077456
domain: www.futuracare.com.au
description:
IM360 WAF: Track suspicious Spring Framework requests||RSV:8.29||T:APACHE||MVN:ARGS:vfedit10incident-classification[]||MV:Moderate||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.150.62
country_id: 99237
description:
2026-07-17 09:11:14 dovecot_login authenticator failed for H=([1.250.67.114]) [65.20.150.62]:54449: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 172.56.182.20
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/0e2387553 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.38.3.104
country_id: 2215636
description:
2026-07-17 09:12:15 dovecot_login authenticator failed for H=([180.168.60.146]) [102.38.3.104]:40753: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 212.135.208.17
country_id: 1861060
description:
2026-07-17 09:13:06 dovecot_login authenticator failed for H=([149.54.62.114]) [212.135.208.17]:39525: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.168.241.32
country_id: 1269750
description:
2026-07-17 09:13:34 dovecot_login authenticator failed for H=([49.124.149.217]) [103.168.241.32]:32859: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 51.68.226.171
country_id: 3017382
description:
2026-07-17 09:13:57 dovecot_login authenticator failed for H=vps-b674cd8d.vps.ovh.net ([84.225.42.158]) [51.68.226.171]:48198: 535 Incorrect authentication data (set_id=khalid@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.231.91.79
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/12870352 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 95.250.95.172
country_id: 3175395
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/211445444 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.124.151.81
country_id: 1733045
description:
2026-07-17 09:17:16 dovecot_login authenticator failed for H=([211.199.65.233]) [49.124.151.81]:53856: 535 Incorrect authentication data (set_id=mail@kallanigroup.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 222.116.47.157
country_id: 1835841
description:
2026-07-17 09:17:32 dovecot_login authenticator failed for H=(122-117-253-16.hinet-ip.hinet.net) [222.116.47.157]:40414: 535 Incorrect authentication data (set_id=mail)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.189.92.31
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/221687415 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.20.243.184
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/311666524 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 202.51.69.241
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/3398079 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77350026
name: IM360 WAF: Track suspicious Spring Framework requests
abuser: 2406:6d00:ffb:1200:f578:610:b73:6d5a
country_id: 2077456
domain: www.futuracare.com.au
description:
IM360 WAF: Track suspicious Spring Framework requests||RSV:8.29||T:APACHE||MVN:ARGS:vfedit10incident-classification[]||MV:Major||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.39.214
country_id: 1668284
description:
2026-07-17 09:22:34 dovecot_login authenticator failed for H=111-70-39-214.emome-ip.hinet.net ([49.124.153.61]) [111.70.39.214]:51307: 535 Incorrect authentication data (set_id=uaeindiab2b)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.164.136.100
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/3e2873769 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 92.97.73.225
country_id: 290557
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/35733754 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.150.230.190
country_id: 2661886
description:
2026-07-17 09:22:13 dovecot_login authenticator failed for H=c188-150-230-190.bredband.tele2.se ([65.20.250.180]) [188.150.230.190]:33218: 535 Incorrect authentication data (set_id=uaeindiab2b@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 148.222.199.30
country_id: 3686110
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/3b1349968 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 99.244.176.173
country_id: 6251999
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/412363167 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.97.52.95
country_id: 1269750
description:
2026-07-17 09:22:47 dovecot_login authenticator failed for H=([49.124.159.191]) [59.97.52.95]:41138: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 218.103.36.176
country_id: 1819730
description:
2026-07-17 09:22:46 dovecot_login authenticator failed for H=176.36.103.218.static.netvigator.com ([49.124.152.34]) [218.103.36.176]:63703: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.123.113.10
country_id: 1269750
description:
2026-07-17 09:23:09 dovecot_login authenticator failed for H=([218.156.93.203]) [27.123.113.10]:44682: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 49.228.184.71
country_id: 1605651
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/40377204 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.16.17.141
country_id: 2921044
description:
2026-07-17 09:23:26 dovecot_login authenticator failed for H=([178.178.222.61]) [94.16.17.141]:44168: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.190.192.82
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/433222466 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77350572
name: IM360 WAF: Link shorteners usage
abuser: 82.165.217.115
country_id: 3017382
domain: ogocindia.com
description:
IM360 WAF: Link shorteners usage||MVN:ARGS:url||MV:https://raw.githubusercontent.com/sagsooz/fonts/refs/heads/main/font.css||User:ogocindia||SC:/home/ogocindia/public_html/index.php||WPU:||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.187.230.250
country_id: 1269750
description:
2026-07-17 09:25:34 dovecot_login authenticator failed for H=([50.223.185.211]) [122.187.230.250]:46769: 535 Incorrect authentication data (set_id=nirmal@globalgroupoman.com)


plugin: modsec
rule: 77350026
name: IM360 WAF: Track suspicious Spring Framework requests
abuser: 2406:6d00:ffb:1200:f578:610:b73:6d5a
country_id: 2077456
domain: www.futuracare.com.au
description:
IM360 WAF: Track suspicious Spring Framework requests||RSV:8.29||T:APACHE||MVN:ARGS:vfedit10incident-classification[]||MV:Minor||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 152.58.34.165
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/44856328 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-07-17 09:26:57 +0530] info [whostmgrd] 45.198.224.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.106.118
country_id: 1269750
description:
2026-07-17 09:29:57 dovecot_login authenticator failed for H=([220.172.62.253]) [182.95.106.118]:57414: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 207.177.80.73
country_id: 6252001
description:
2026-07-17 09:29:59 dovecot_login authenticator failed for H=([14.46.19.209]) [207.177.80.73]:37243: 535 Incorrect authentication data (set_id=prasad.k)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 80.223.201.173
country_id: 660013
description:
2026-07-17 09:30:11 dovecot_login authenticator failed for H=dsl-hkibng42-50dfc9-173.dhcp.inet.fi ([117.254.119.147]) [80.223.201.173]:58300: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 66.68.187.218
country_id: 6252001
description:
2026-07-17 09:29:49 dovecot_login authenticator failed for H=([183.6.44.239]) [66.68.187.218]:43224: 535 Incorrect authentication data (set_id=prasad.k@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.17.165.181
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/c3248992 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 119.252.198.29
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/c42526939 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 51.39.247.1
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d0537874 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 27.69.6.5
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d3555262 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 105.111.174.37
country_id: 2589581
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d31703938 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 176.136.255.123
country_id: 3017382
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e31983570 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.111.223.51
country_id: 2635167
description:
2026-07-17 09:40:01 dovecot_login authenticator failed for H=cpc145672-oxfd28-2-0-cust818.4-3.cable.virginm.net (111-70-11-152.emome-ip.hinet.net) [81.111.223.51]:38727: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 208.96.233.67
country_id: 6251999
description:
2026-07-17 09:40:22 dovecot_login authenticator failed for H=208-96-233-67.resi.cgocable.ca ([202.62.95.243]) [208.96.233.67]:35254: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.204.41
country_id: 99237
description:
2026-07-17 09:40:49 dovecot_login authenticator failed for H=([182.95.127.42]) [65.20.204.41]:48716: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 222.99.52.202
country_id: 1835841
description:
2026-07-17 09:40:53 dovecot_login authenticator failed for H=([183.171.41.105]) [222.99.52.202]:39689: 535 Incorrect authentication data (set_id=sunil@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 112.160.57.196
country_id: 1835841
description:
2026-07-17 09:41:05 dovecot_login authenticator failed for H=([187.93.51.46]) [112.160.57.196]:44664: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 2.88.97.134
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/042664234 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.91.153.26
country_id: 3077311
description:
2026-07-17 09:43:23 dovecot_login authenticator failed for H=u153-26.static.grape.cz ([211.178.3.26]) [93.91.153.26]:33153: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.160.11.40
country_id: 1269750
description:
2026-07-17 09:43:32 dovecot_login authenticator failed for H=([103.174.145.35]) [122.160.11.40]:57834: 535 Incorrect authentication data (set_id=sunil@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.253.56.2
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/051621149 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 83.226.56.106
country_id: 2661886
description:
2026-07-17 09:43:47 dovecot_login authenticator failed for H=c-83-226-56-106.bbcust.telenor.se (78-67-161-64-no2550.tbcn.telia.com) [83.226.56.106]:54214: 535 Incorrect authentication data (set_id=sunil)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 188.113.244.62
country_id: 1512440
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/052004958 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 152.52.200.6
country_id: 1269750
description:
2026-07-17 09:44:31 dovecot_login authenticator failed for H=([149.54.62.206]) [152.52.200.6]:37856: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 202.162.198.19
country_id: 1643084
domain: gsmex.global
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:13378.gsmex.global||ServerName:gsmex.global||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b7c494cb937676933dedfb9e0783768c4052e938||Title:0x2f7ed79b||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.62.86.162
country_id: 3585968
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/07172591 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 179.6.3.114
country_id: 3932488
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/091879490 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 116.98.255.141
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/133709955 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 122.54.8.26
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/142096311 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 49.47.141.25
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/201786547 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 128.185.33.227
country_id: 1269750
description:
2026-07-17 09:50:24 dovecot_login authenticator failed for H=([49.125.203.165]) [128.185.33.227]:60470: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 91.235.56.222
country_id: 2635167
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/24673300 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.29.13.64
country_id: 294640
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/263351902 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.54.73.9
country_id: 1512440
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/2d947786 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.83.128.100
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/2f2859316 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.155.62.28
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/2e58108 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 27.121.112.182
country_id: 1643084
domain: 103.185.74.189
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:z_ebvp.php||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 176.10.197.168
country_id: 2661886
description:
2026-07-17 09:58:10 dovecot_login authenticator failed for H=h-176-10-197-168.a444.priv.bahnhof.se ([68.71.251.130]) [176.10.197.168]:53784: 535 Incorrect authentication data (set_id=support@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.26.224.5
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/3d3194861 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 78.190.155.234
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/41142022 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 111.119.48.25
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/413372522 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.122.39.33
country_id: 2635167
description:
2026-07-17 10:01:44 dovecot_login authenticator failed for H=(253.pool90-160-113.dynamic.orange.es) [188.122.39.33]:49072: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.187.47
country_id: 99237
description:
2026-07-17 10:01:59 dovecot_login authenticator failed for H=([218.149.228.161]) [65.20.187.47]:46434: 535 Incorrect authentication data (set_id=sajithkumar.pk)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.147.248.23
country_id: 1269750
description:
2026-07-17 10:02:16 dovecot_login authenticator failed for H=([166.78.156.46]) [103.147.248.23]:37262: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 188.81.24.16
country_id: 2264397
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/431257660 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.252.75.78
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/431662606 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 38.148.99.59
country_id: 6252001
description:
2026-07-17 10:04:27 dovecot_login authenticator failed for H=(111-70-11-38.emome-ip.hinet.net) [38.148.99.59]:45876: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.150.62
country_id: 99237
description:
2026-07-17 10:04:38 dovecot_login authenticator failed for H=([199.229.254.131]) [65.20.150.62]:36787: 535 Incorrect authentication data (set_id=evin.joseph)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 119.155.0.147
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/443287977 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 50.212.27.150
country_id: 6252001
description:
2026-07-17 10:05:14 dovecot_login authenticator failed for H=([167.250.118.12]) [50.212.27.150]:59220: 535 Incorrect authentication data (set_id=evin.joseph)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.11.183.191
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/453691057 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 183.171.49.152
country_id: 1733045
description:
2026-07-17 10:04:59 dovecot_login authenticator failed for H=(abts-north-static-144.85.160.122.airtelbroadband.in) [183.171.49.152]:60382: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 221.120.73.25
country_id: 1668284
description:
2026-07-17 10:06:41 dovecot_login authenticator failed for H=221-120-73-25.emome-ip.hinet.net (188-122-37-97.xdsl.5gdsl.com) [221.120.73.25]:49668: 535 Incorrect authentication data (set_id=investmentmanager@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.239.131.5
country_id: 2077456
description:
2026-07-17 10:07:11 dovecot_login authenticator failed for H=182-239-131-5.tpgi.com.au ([119.192.219.77]) [182.239.131.5]:58149: 535 Incorrect authentication data (set_id=investmentmanager)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.210.106.69
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/601009517 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.11.205.214
country_id: 1835841
description:
2026-07-17 10:11:06 dovecot_login authenticator failed for H=([128.185.116.114]) [59.11.205.214]:42522: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.16.192.32
country_id: 1835841
description:
2026-07-17 10:11:24 dovecot_login authenticator failed for H=([197.219.208.38]) [59.16.192.32]:45974: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 185.255.126.85
country_id: 3017382
domain: cochinbigbandshow.com
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77141095r77142192||MV:10-12.185.255.126.85||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 83.34.99.123
country_id: 2510769
description:
2026-07-17 10:11:49 dovecot_login authenticator failed for H=123.red-83-34-99.dynamicip.rima-tde.net (111-70-32-6.emome-ip.hinet.net) [83.34.99.123]:51509: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.138.46
country_id: 99237
description:
2026-07-17 10:11:55 dovecot_login authenticator failed for H=([218.25.94.199]) [65.20.138.46]:58122: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.19.163.58
country_id: 1269750
description:
2026-07-17 10:12:01 dovecot_login authenticator failed for H=([68.71.251.130]) [125.19.163.58]:42468: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.75.224.102
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/66935386 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 80.223.190.179
country_id: 660013
description:
2026-07-17 10:14:09 dovecot_login authenticator failed for H=dsl-hkibng42-50dfbe-179.dhcp.inet.fi ([185.15.82.135]) [80.223.190.179]:48162: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.210.148.41
country_id: 953987
description:
2026-07-17 10:14:27 dovecot_login authenticator failed for H=([65.20.143.45]) [102.210.148.41]:56942: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 5.48.46.95
country_id: 3017382
description:
2026-07-17 10:14:40 dovecot_login authenticator failed for H=([72.223.188.94]) [5.48.46.95]:34528: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 51.39.115.180
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/691683619 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 210.1.66.154
country_id: 1694008
description:
2026-07-17 10:14:00 dovecot_login authenticator failed for H=([182.95.127.42]) [210.1.66.154]:59754: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 79.113.1.155
country_id: 2510769
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/733612239 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 68.7.114.69
country_id: 6252001
description:
2026-07-17 10:14:55 dovecot_login authenticator failed for H=ip68-7-114-69.sd.sd.cox.net (adsl.viettel.vn) [68.7.114.69]:46864: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 63.143.95.50
country_id: 3489940
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/722605505 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 78.100.175.50
country_id: 289688
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/78318636 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.208.41.211
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/842210838 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 106.51.195.182
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/822229668 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.197.198.189
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/861455894 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 154.19.231.86
country_id: 6252001
domain: 103.185.74.189
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:cve-2026-48907-2855.xml.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 78.177.177.51
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/891091543 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.87.215.194
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/881802852 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 39.32.153.156
country_id: 1168579
description:
2026-07-17 10:22:41 dovecot_plain authenticator failed for H=([192.168.19.1]) [39.32.153.156]:62137: 535 Incorrect authentication data (set_id=jijo@ddgalaxy.in)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.245.169.126
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/8c755835 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 39.32.153.156
country_id: 1168579
description:
2026-07-17 10:22:46 dovecot_plain authenticator failed for H=([192.168.19.1]) [39.32.153.156]:62136: 535 Incorrect authentication data (set_id=jijo@ddgalaxy.in)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 79.51.128.17
country_id: 3175395
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/903279450 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 38.148.99.59
country_id: 6252001
description:
2026-07-17 10:23:47 dovecot_login authenticator failed for H=([111.26.69.160]) [38.148.99.59]:47545: 535 Incorrect authentication data (set_id=anoop.ps@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.185.216.76
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/921025 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 36.75.249.200
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/961370205 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 220.77.214.59
country_id: 1835841
description:
2026-07-17 10:25:23 dovecot_login authenticator failed for H=([118.187.65.135]) [220.77.214.59]:42946: 535 Incorrect authentication data (set_id=support@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.224.62.206
country_id: 2464461
description:
2026-07-17 10:25:38 dovecot_login authenticator failed for H=(c188-150-235-52.bredband.tele2.se) [41.224.62.206]:45190: 535 Incorrect authentication data (set_id=support)


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 185.117.225.53
country_id: 6252001
domain: www.globalgroupoman.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/123.0.6312.86 Safari/537.36||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.26.130.49
country_id: 3865483
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/983828695 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 172.237.87.199
country_id: 1880251
domain: 103.185.74.189
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:z_uscz.php||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.207.248.138
country_id: 2328926
description:
2026-07-17 10:26:43 dovecot_login authenticator failed for H=(wsip-184-178-172-24.rn.hr.cox.net) [41.207.248.138]:56483: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.211.96
country_id: 99237
description:
2026-07-17 10:27:01 dovecot_login authenticator failed for H=([103.109.13.50]) [65.20.211.96]:49822: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 201.46.124.0
country_id: 3686110
description:
2026-07-17 10:26:55 dovecot_login authenticator failed for H=([220.189.253.198]) [201.46.124.0]:2724: 535 Incorrect authentication data (set_id=evin.joseph)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 186.75.212.75
country_id: 3703430
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/b53286030 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 207.254.22.207
country_id: 6252001
description:
2026-07-17 10:33:46 dovecot_login authenticator failed for H=([67.201.59.67]) [207.254.22.207]:59450: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 176.10.197.168
country_id: 2661886
description:
2026-07-17 10:34:03 dovecot_login authenticator failed for H=h-176-10-197-168.a444.priv.bahnhof.se (ip-103-133.222-205.cloudteknologinusantara.co.id) [176.10.197.168]:52216: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 116.204.151.135
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/10357857 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.212.205.1
country_id: 3617476
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/1b3620400 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 190.197.31.229
country_id: 3582678
description:
2026-07-17 10:35:37 dovecot_login authenticator failed for H=([49.124.159.187]) [190.197.31.229]:35443: 535 Incorrect authentication data (set_id=uaeindiab2b@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 128.185.209.30
country_id: 1269750
description:
2026-07-17 10:35:39 dovecot_login authenticator failed for H=([14.116.172.42]) [128.185.209.30]:38022: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 212.34.22.84
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/1c2488492 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.72.46.152
country_id: 1562822
description:
2026-07-17 10:36:35 dovecot_login authenticator failed for H=(220-128-137-164.hinet-ip.hinet.net) [27.72.46.152]:44562: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.235.66.253
country_id: 1269750
description:
2026-07-17 10:35:52 dovecot_login authenticator failed for H=(448990.cloudwaysapps.com) [111.235.66.253]:55033: 535 Incorrect authentication data (set_id=uaeindiab2b)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.126.9.197
country_id: 130758
description:
2026-07-17 10:35:56 dovecot_login authenticator failed for H=([121.229.107.184]) [185.126.9.197]:53618: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 180.252.204.193
country_id: 1643084
domain: ibmctradeflow.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:74712.ibmctradeflow.com||ServerName:ibmctradeflow.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:b85d3d3d44bc64df8787d2c089c43aca30a54c8b||Title:0x79492662||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 31.208.81.75
country_id: 2661886
description:
2026-07-17 10:36:59 dovecot_login authenticator failed for H=31-208-81-75.cust.bredband2.com ([67.201.59.67]) [31.208.81.75]:41542: 535 Incorrect authentication data (set_id=sajithkumar.pk)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 155.4.209.51
country_id: 2661886
description:
2026-07-17 10:38:55 dovecot_login authenticator failed for H=h-155-4-209-51.a463.priv.bahnhof.se ([141.105.109.134]) [155.4.209.51]:36846: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 202.125.100.92
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/273791286 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 197.90.131.158
country_id: 953987
description:
2026-07-17 10:39:17 dovecot_login authenticator failed for H=(187-51-219-26.customer.tdatabrasil.net.br) [197.90.131.158]:59618: 535 Incorrect authentication data (set_id=evin.joseph)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 180.252.204.193
country_id: 1643084
domain: ibmcglobal.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:64176.ibmcglobal.com||ServerName:ibmcglobal.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:49bba94979dce8d5f207e50c295310a6b9428bc7||Title:0x9b2a8b61||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.54.70.61
country_id: 1512440
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/303731439 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 112.160.57.196
country_id: 1835841
description:
2026-07-17 10:42:17 dovecot_login authenticator failed for H=(45-181-101-92.plugartelecom.net.br) [112.160.57.196]:41436: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 68.183.228.238
country_id: 1880251
description:
2026-07-17 10:42:28 dovecot_login authenticator failed for H=(220-128-137-164.hinet-ip.hinet.net) [68.183.228.238]:38492: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 172.237.73.24
country_id: 1880251
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Mozilla/4.0 <a href=\"https://www.zizhibaba.cn\">\xe8\xb5\x84\xe8\xb4\xa8\xe6\xa0\x87\xe5\x87\x86</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 172.237.73.24
country_id: 1880251
domain: globalgroupoman.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET https:/globalgroupoman.com/ HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.204.10.56
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/3a482676 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 197.219.208.58
country_id: 1036973
description:
2026-07-17 10:46:16 dovecot_login authenticator failed for H=([120.195.35.240]) [197.219.208.58]:47188: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 119.207.3.114
country_id: 1835841
description:
2026-07-17 10:46:30 dovecot_login authenticator failed for H=([111.26.62.36]) [119.207.3.114]:52754: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 203.185.199.72
country_id: 2077456
description:
2026-07-17 10:46:33 dovecot_login authenticator failed for H=([166.239.184.117]) [203.185.199.72]:35502: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 128.185.187.2
country_id: 1269750
description:
2026-07-17 10:47:45 dovecot_login authenticator failed for H=([206.220.175.5]) [128.185.187.2]:46364: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.28.243
country_id: 1668284
description:
2026-07-17 10:46:53 dovecot_login authenticator failed for H=111-70-28-243.emome-ip.hinet.net ([49.124.151.85]) [111.70.28.243]:53875: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 176.10.197.168
country_id: 2661886
description:
2026-07-17 10:48:35 dovecot_login authenticator failed for H=h-176-10-197-168.a444.priv.bahnhof.se ([101.96.208.174]) [176.10.197.168]:35586: 535 Incorrect authentication data (set_id=support)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 194.103.82.72
country_id: 2661886
description:
2026-07-17 10:47:58 dovecot_login authenticator failed for H=194-103-82-72.ip.obe.net ([72.219.204.81]) [194.103.82.72]:34950: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 218.233.182.39
country_id: 1835841
description:
2026-07-17 10:48:25 dovecot_login authenticator failed for H=(45-238-2-40.netmaisfibra.net.br) [218.233.182.39]:5919: 535 Incorrect authentication data (set_id=support@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 47.15.246.198
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/512292920 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.212.214.66
country_id: 3617476
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/542289173 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 106.215.156.58
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/59224180 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 180.254.77.176
country_id: 1643084
domain: alnayza.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:jceryrjrtda.xml.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77209354
name: IM360 WAF: File upload on Joomla SP Page Builder endpoint - tracking (CVE-2026-48908)
abuser: 180.254.77.176
country_id: 1643084
domain: alnayza.com
description:
IM360 WAF: File upload on Joomla SP Page Builder endpoint - tracking (CVE-2026-48908)||MVN:FILES:custom_icon||MV:icoichwuy.zip||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 122.183.45.7
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/63610471 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 167.61.53.60
country_id: 3439705
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/6b1830261 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 171.250.162.121
country_id: 1562822
domain: metrodigitals.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/metrodigitals.com/component/content/article/signature-elite-series-es90?Itemid=101&catid=18 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.179.188.61
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/6c2454557 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 80.183.26.112
country_id: 3175395
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/701125991 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 197.242.170.10
country_id: 1036973
description:
2026-07-17 10:59:17 dovecot_login authenticator failed for H=([157.119.70.200]) [197.242.170.10]:64975: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 119.152.236.155
country_id: 1168579
description:
2026-07-17 10:59:35 dovecot_login authenticator failed for H=([14.54.35.193]) [119.152.236.155]:47170: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.191.186.47
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/733009387 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 157.119.184.40
country_id: 1210997
description:
2026-07-17 11:00:55 dovecot_login authenticator failed for H=(customer171-125-5.grm.net) [157.119.184.40]:32902: 535 Incorrect authentication data (set_id=uaeindiab2b@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 14.51.12.142
country_id: 1835841
description:
2026-07-17 11:01:32 dovecot_login authenticator failed for H=(ip-142-54-232-1.hosts.zerolag.com) [14.51.12.142]:34646: 535 Incorrect authentication data (set_id=uaeindiab2b)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 80.12.254.198
country_id: 935317
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/7e2556360 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 122.181.100.24
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/81284529 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 157.85.197.56
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/833304488 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 110.25.110.134
country_id: 1668284
description:
2026-07-17 11:05:54 dovecot_login authenticator failed for H=110-25-110-134.adsl.fetnet.net (dynamicip-95-79-108-51.pppoe.nn.ertelecom.ru) [110.25.110.134]:42561: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 222.111.148.83
country_id: 1835841
description:
2026-07-17 11:06:18 dovecot_login authenticator failed for H=(static-213-101-138-172.cust.tele2.lt) [222.111.148.83]:48392: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.87.56.40
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/842917640 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.36.11.227
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/853723676 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 165.16.65.185
country_id: 2215636
description:
2026-07-17 11:07:00 dovecot_login authenticator failed for H=([61.156.247.174]) [165.16.65.185]:33210: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 103.21.218.179
country_id: 1643084
domain: jaashsupplies.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:73464.jaashsupplies.com||ServerName:jaashsupplies.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:6b1481c019833c242a5ebde7f4da88bf2c432aa5||Title:0x81ded816||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 211.105.229.237
country_id: 1835841
description:
2026-07-17 11:12:37 dovecot_login authenticator failed for H=([41.207.248.138]) [211.105.229.237]:55990: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 207.188.158.216
country_id: 2510769
description:
2026-07-17 11:12:47 dovecot_login authenticator failed for H=(abts-mum-static-140.111.170.122.airtelbroadband.in) [207.188.158.216]:46884: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 110.25.112.143
country_id: 1668284
description:
2026-07-17 11:12:51 dovecot_login authenticator failed for H=110-25-112-143.adsl.fetnet.net (firewall01.practicetechnologies.ml.zerolag.com) [110.25.112.143]:45836: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.209.57.58
country_id: 192950
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/9f2568985 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 203.193.168.136
country_id: 1269750
description:
2026-07-17 11:15:03 dovecot_login authenticator failed for H=([49.124.151.2]) [203.193.168.136]:58832: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 90.230.226.175
country_id: 2661886
description:
2026-07-17 11:16:36 dovecot_login authenticator failed for H=90-230-226-175-no2550.tbcn.telia.com ([125.130.102.172]) [90.230.226.175]:53036: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 149.86.141.184
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/b33128750 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 173.18.106.54
country_id: 6252001
description:
2026-07-17 11:17:02 dovecot_login authenticator failed for H=([165.16.65.185]) [173.18.106.54]:37738: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 24.232.153.182
country_id: 3865483
description:
2026-07-17 11:17:53 dovecot_login authenticator failed for H=(undefined.sevstar.net) [24.232.153.182]:52533: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 210.16.83.80
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/cb1616885 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 165.173.21.44
country_id: 1880251
description:
2026-07-17 11:18:19 dovecot_login authenticator failed for H=([49.125.201.84]) [165.173.21.44]:41924: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 188.51.229.113
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/cf3216805 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.211.147.43
country_id: 192950
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/dd2789932 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 172.237.87.199
country_id: 1880251
domain: www.alnayza.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:z_rgha.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 172.237.87.199
country_id: 1880251
domain: alnayza.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:z_xoyt.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 172.237.87.199
country_id: 1880251
domain: www.yukticlick.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:z_ppyl.php||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 213.230.93.87
country_id: 1512440
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e23611534 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.1.128
country_id: 1668284
description:
2026-07-17 11:22:17 dovecot_login authenticator failed for H=111-70-1-128.emome-ip.hinet.net (111-70-23-254.emome-ip.hinet.net) [111.70.1.128]:35260: 535 Incorrect authentication data (set_id=rdcentre@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.78.87.2
country_id: 1269750
description:
2026-07-17 11:22:41 dovecot_login authenticator failed for H=([184.181.178.35]) [182.78.87.2]:48472: 535 Incorrect authentication data (set_id=rdcentre)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 191.44.127.62
country_id: 798544
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e73756727 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 20.104.96.117
country_id: 6251999
domain: fefkadirectorsunion.com
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.29||T:APACHE||MV:/wp-content/uploads/2021/02/index.php||SC:/home/fefkadirectors/public_html/wp-content||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.167.232.34
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f13073651 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.165.155.242
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f92968527 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77839622
name: IM360 WAF: XML-RPC Suspicious blog attempt
abuser: 42.118.136.10
country_id: 1562822
domain: kallanigroup.com
description:
IM360 WAF: XML-RPC Suspicious blog attempt||Username:72171.kallanigroup.com||ServerName:kallanigroup.com||Method:metaWeblog.newPost||BlogID:1||TitleSHA:110268425d3d727db113b6fdde0af7017321ae4b||Title:0x0bbbefe6||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 180.75.237.195
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/011454104 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.111.223.51
country_id: 2635167
description:
2026-07-17 11:28:29 dovecot_login authenticator failed for H=cpc145672-oxfd28-2-0-cust818.4-3.cable.virginm.net ([183.6.44.239]) [81.111.223.51]:58757: 535 Incorrect authentication data (set_id=support@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 117.219.36.217
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/042390896 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 49.43.218.234
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f31363910 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.116.66
country_id: 1269750
description:
2026-07-17 11:31:19 dovecot_login authenticator failed for H=(dsl-94-233-127-194.avtlg.ru) [182.95.116.66]:48994: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.228.194
country_id: 1269750
description:
2026-07-17 11:31:42 dovecot_login authenticator failed for H=(85.105.255.56.static.ttnet.com.tr) [182.95.228.194]:50954: 535 Incorrect authentication data (set_id=prasad.k@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 24.230.159.142
country_id: 6252001
description:
2026-07-17 11:31:44 dovecot_login authenticator failed for H=24-230-159-142-static.midco.net ([196.190.220.168]) [24.230.159.142]:53136: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 105.247.89.210
country_id: 953987
description:
2026-07-17 11:32:05 dovecot_login authenticator failed for H=(211-21-243-8.hinet-ip.hinet.net) [105.247.89.210]:38788: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.188.166.2
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f53276197 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.112.47.12
country_id: 1327865
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/022633551 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 223.181.103.249
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/032911340 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 192.145.171.68
country_id: 51537
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/041852898 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.110.11.48
country_id: 2464461
description:
2026-07-17 11:37:45 dovecot_login authenticator failed for H=([184.185.2.1]) [102.110.11.48]:1385: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 101.13.5.34
country_id: 1668284
description:
2026-07-17 11:38:01 dovecot_login authenticator failed for H=(cpc1-ersk4-2-0-cust471.know.cable.virginm.net) [101.13.5.34]:35144: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.104.10.178
country_id: 2589581
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/051140146 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 82.226.254.153
country_id: 3017382
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/051266025 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.117.253.16
country_id: 1668284
description:
2026-07-17 11:39:09 dovecot_login authenticator failed for H=122-117-253-16.hinet-ip.hinet.net ([67.201.58.185]) [122.117.253.16]:45838: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 94.203.141.200
country_id: 290557
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/0e493540 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 223.181.20.171
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/121788878 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 118.69.93.206
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/112773045 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.133.207.31
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/132966279 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.237.155.113
country_id: 2661886
description:
2026-07-17 11:43:10 dovecot_login authenticator failed for H=81-237-155-113-no2400.tbcn.telia.com ([65.20.132.172]) [81.237.155.113]:60073: 535 Incorrect authentication data (set_id=anoop.ps@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 210.206.24.237
country_id: 1835841
description:
2026-07-17 11:43:21 dovecot_login authenticator failed for H=([36.64.30.151]) [210.206.24.237]:43628: 535 Incorrect authentication data (set_id=anoop.ps)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 201.46.124.0
country_id: 3686110
description:
2026-07-17 11:43:51 dovecot_login authenticator failed for H=([98.190.239.1]) [201.46.124.0]:2651: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.27.213.31
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/203515935 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 129.222.187.70
country_id: 192950
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/233160635 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 112.162.111.205
country_id: 1835841
description:
2026-07-17 11:44:47 dovecot_login authenticator failed for H=([119.192.249.195]) [112.162.111.205]:53262: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 14.200.249.128
country_id: 2077456
description:
2026-07-17 11:46:23 dovecot_login authenticator failed for H=14-200-249-128.tpgi.com.au ([143.202.162.196]) [14.200.249.128]:60045: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.166.59.104
country_id: 1210997
domain: metrodigitals.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/metrodigitals.com/component/content/article/vssl-x-series-drivers?Itemid=101&catid=18 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 72.27.166.220
country_id: 3489940
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/233422029 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.19.159.186
country_id: 1269750
description:
2026-07-17 11:47:00 dovecot_login authenticator failed for H=(95.105.52.153.static.str.ufanet.ru) [125.19.159.186]:55518: 535 Incorrect authentication data (set_id=cil@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.233.110
country_id: 99237
description:
2026-07-17 11:47:12 dovecot_login authenticator failed for H=([212.135.208.17]) [65.20.233.110]:53191: 535 Incorrect authentication data (set_id=cil)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 220.77.214.59
country_id: 1835841
description:
2026-07-17 11:47:39 dovecot_login authenticator failed for H=([81.13.62.77]) [220.77.214.59]:50091: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 31.208.53.209
country_id: 2661886
description:
2026-07-17 11:47:58 dovecot_login authenticator failed for H=31-208-53-209.cust.bredband2.com ([70.166.167.47]) [31.208.53.209]:42374: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.163.205.61
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/301047525 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.215.146.195
country_id: 934841
description:
2026-07-17 11:49:33 dovecot_login authenticator failed for H=([175.206.1.60]) [41.215.146.195]:54068: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.190.62.211
country_id: 337996
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/322422524 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.53.105.200
country_id: 1694008
description:
2026-07-17 11:50:06 dovecot_login authenticator failed for H=([154.58.35.181]) [122.53.105.200]:49819: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.163.26.1
country_id: 1512440
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/341520127 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.205.85.92
country_id: 192950
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/333579175 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 177.227.208.243
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/3d3447273 HTTP/1.1||RSV:8.29||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 151.78.98.247
country_id: 3175395
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/403495250 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 95.181.238.18
country_id: 3572887
domain: www.ibmcglobal.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:panscient.com||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 148.227.75.215
country_id: 3865483
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/441805736 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 223.228.178.118
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/471164434 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77350374
name: IM360 WAF: Scan attempt by bytespider crawler
abuser: 47.128.122.80
country_id: 1880251
domain: www.kallanigroup.com
description:
IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 213.235.27.2
country_id: 3017382
description:
2026-07-17 11:57:28 dovecot_login authenticator failed for H=([110.185.173.167]) [213.235.27.2]:40155: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 104.194.37.176
country_id: 6251999
description:
2026-07-17 11:57:35 dovecot_login authenticator failed for H=104-194-37-176.tpia.execulink.com ([68.233.177.188]) [104.194.37.176]:47848: 535 Incorrect authentication data (set_id=rdcentre)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 157.211.246.182
country_id: 2077456
description:
2026-07-17 11:57:47 dovecot_login authenticator failed for H=([27.32.40.37]) [157.211.246.182]:34074: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.167.232.9
country_id: 1282988
domain: metrodigitals.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/metrodigitals.com/component/content/article/tx-nr696-7-2-channel-network-a-v-receiver?Itemid=101&catid=18 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 84.195.184.129
country_id: 2802361
description:
2026-07-17 11:57:12 dovecot_login authenticator failed for H=d54c3b881.access.telenet.be ([50.223.176.171]) [84.195.184.129]:61976: 535 Incorrect authentication data (set_id=rdcentre@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 27.51.42.231
country_id: 1668284
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/543774656 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.202.146.144
country_id: 1819730
description:
2026-07-17 11:58:35 dovecot_login authenticator failed for H=([92.47.166.23]) [121.202.146.144]:59281: 535 Incorrect authentication data (set_id=sunil)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 181.54.70.40
country_id: 3686110
description:
2026-07-17 11:58:00 dovecot_login authenticator failed for H=(179-189-85-66.goldnettelecom.com.br) [181.54.70.40]:54010: 535 Incorrect authentication data (set_id=sunil@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 124.83.125.164
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/5d210857 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 103.160.213.217
country_id: 1643084
domain: fefkadirectorsunion.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:nuclei-0596a08348ef577274ad3b3e56b58178.xml.php||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 113.173.254.162
country_id: 1562822
domain: metrodigitals.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/metrodigitals.com/contact-us HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.14.31.10
country_id: 2921044
description:
2026-07-17 12:04:35 dovecot_login authenticator failed for H=(atlanta-1.cdn77.com) [154.14.31.10]:35468: 535 Incorrect authentication data (set_id=nirmal)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.122.142.191
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/682233097 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.122.37.97
country_id: 2635167
description:
2026-07-17 12:04:19 dovecot_login authenticator failed for H=([98.181.137.75]) [188.122.37.97]:57198: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.120.115.101
country_id: 3437598
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/682863818 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.176.122
country_id: 1269750
description:
2026-07-17 12:04:23 dovecot_login authenticator failed for H=([24.249.199.26]) [182.95.176.122]:51702: 535 Incorrect authentication data (set_id=nirmal@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 197.242.170.10
country_id: 1036973
description:
2026-07-17 12:05:00 dovecot_login authenticator failed for H=(abts-north-static-109.51.160.122.airtelbroadband.in) [197.242.170.10]:58292: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 89.237.201.40
country_id: 1527747
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/6a215407 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 193.31.200.85
country_id: 1522867
description:
2026-07-17 12:05:36 dovecot_login authenticator failed for H=([124.153.166.170]) [193.31.200.85]:48020: 535 Incorrect authentication data (set_id=anoop.ps@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 119.252.198.94
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/702618762 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.88.209.51
country_id: 1269750
description:
2026-07-17 12:07:29 dovecot_login authenticator failed for H=([142.54.225.52]) [202.88.209.51]:45924: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 117.213.181.6
country_id: 1269750
description:
2026-07-17 12:08:01 dovecot_login authenticator failed for H=([59.6.72.106]) [117.213.181.6]:60281: 535 Incorrect authentication data (set_id=sunil@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.14.162.10
country_id: 1835841
description:
2026-07-17 12:08:08 dovecot_login authenticator failed for H=([115.93.117.61]) [59.14.162.10]:44456: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.187.86
country_id: 1269750
description:
2026-07-17 12:08:12 dovecot_login authenticator failed for H=([117.173.101.132]) [182.95.187.86]:35796: 535 Incorrect authentication data (set_id=sunil)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 104.37.63.15
country_id: 6251999
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/722056095 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 118.70.146.125
country_id: 1562822
description:
2026-07-17 12:09:37 dovecot_login authenticator failed for H=([59.11.0.20]) [118.70.146.125]:54604: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.33.194
country_id: 1668284
description:
2026-07-17 12:09:49 dovecot_login authenticator failed for H=111-70-33-194.emome-ip.hinet.net ([72.219.204.81]) [111.70.33.194]:52826: 535 Incorrect authentication data (set_id=evin.joseph)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 129.224.206.114
country_id: 163843
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/762780221 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 73.85.44.247
country_id: 6252001
description:
2026-07-17 12:11:41 dovecot_plain authenticator failed for H=(okelve) [73.85.44.247]:43898: 535 Incorrect authentication data (set_id=jijo@ddgalaxy.in)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.55.89.5
country_id: 1269750
description:
2026-07-17 12:11:44 dovecot_plain authenticator failed for H=(oveles) [103.55.89.5]:53542: 535 Incorrect authentication data (set_id=jijo@ddgalaxy.in)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 95.142.88.202
country_id: 1220409
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/791798877 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77350026
name: IM360 WAF: Track suspicious Spring Framework requests
abuser: 2406:6d00:ffb:1200:a89c:f548:8e9d:1263
country_id: 2077456
domain: www.futuracare.com.au
description:
IM360 WAF: Track suspicious Spring Framework requests||RSV:8.30||T:APACHE||MVN:ARGS:vfedit10incident-classification[]||MV:Minor||


plugin: modsec
rule: 77469916
abuser: 103.160.213.217
country_id: 1643084
domain: globalgroupoman.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:nuclei-d9559e7ab093c1793a8edc64f7a7a8b1.xml.php||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.177.12.54
country_id: 1269750
description:
2026-07-17 12:14:51 dovecot_login authenticator failed for H=(41.215.125.250.accesskenya.com) [59.177.12.54]:54509: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 206.62.136.109
country_id: 3686110
description:
2026-07-17 12:15:31 dovecot_login authenticator failed for H=([162.251.93.214]) [206.62.136.109]:52274: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.209.150.242
country_id: 2077456
description:
2026-07-17 12:18:00 dovecot_login authenticator failed for H=125-209-150-242.tpgi.com.au (201-200-93-6.mad-05-p64.cantv.net.93.208.201.in-addr.arpa) [125.209.150.242]:50223: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 12.150.243.22
country_id: 6252001
description:
2026-07-17 12:18:32 dovecot_login authenticator failed for H=(cpe-58-168-227-16.static.vic.asp.telstra.net) [12.150.243.22]:51230: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 117.211.74.211
country_id: 1269750
description:
2026-07-17 12:19:16 dovecot_login authenticator failed for H=([192.111.143.93]) [117.211.74.211]:50630: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.81.207.209
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/8d1678987 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 112.161.42.97
country_id: 1835841
description:
2026-07-17 12:18:49 dovecot_login authenticator failed for H=(113.20.167.124.adsl-pool.sx.cn) [112.161.42.97]:49357: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 59.8.52.102
country_id: 1835841
description:
2026-07-17 12:20:37 dovecot_login authenticator failed for H=(m121-202-138-181.smartone.com) [59.8.52.102]:50460: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 24.105.160.100
country_id: 6252001
description:
2026-07-17 12:21:17 dovecot_login authenticator failed for H=syn-024-105-160-100.biz.spectrum.com ([27.24.141.160]) [24.105.160.100]:37192: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.50.66.232
country_id: 1282988
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/97778638 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 210.186.196.188
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/a7249751 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.68.118.49
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/9f2051541 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 108.35.129.132
country_id: 6252001
description:
2026-07-17 12:24:11 dovecot_login authenticator failed for H=pool-108-35-129-132.nwrknj.fios.verizon.net (cpe-144-138-114-171.static.belong.com.au) [108.35.129.132]:60922: 535 Incorrect authentication data (set_id=support@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.59.99.40
country_id: 149590
description:
2026-07-17 12:24:22 dovecot_login authenticator failed for H=([14.98.28.43]) [41.59.99.40]:42670: 535 Incorrect authentication data (set_id=support)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 180.74.218.219
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/aa1251499 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.100.221.166
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/c23662367 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 152.58.25.4
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/cb2242057 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 103.160.213.217
country_id: 1643084
domain: ibmcglobal.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:nuclei-96cfb0fc57f6ba0d5a7a81ee80c39614.xml.php||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 185.235.16.12
country_id: 163843
domain: cochinbigbandshow.com
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r77141095r77142192||MV:12-27.185.235.16.12||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 80.223.198.246
country_id: 660013
description:
2026-07-17 12:27:51 dovecot_login authenticator failed for H=dsl-hkibng42-50dfc6-246.dhcp.inet.fi (biophormula.static.gvt.net.br) [80.223.198.246]:34864: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 192.141.94.50
country_id: 3865483
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/db3368772 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 23.30.11.253
country_id: 6252001
description:
2026-07-17 12:28:08 dovecot_login authenticator failed for H=(241.red-81-43-11.staticip.rima-tde.net) [23.30.11.253]:60959: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.165.29.147
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/753293726 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.59.182.213
country_id: 298795
description:
2026-07-17 12:31:00 dovecot_login authenticator failed for H=([184.185.2.1]) [188.59.182.213]:49210: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.241.232.14
country_id: 2921044
description:
2026-07-17 12:31:07 dovecot_login authenticator failed for H=p5df1e80e.dip0.t-ipconnect.de ([167.250.118.53]) [93.241.232.14]:45310: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.205.111.39
country_id: 2658434
description:
2026-07-17 12:31:28 dovecot_login authenticator failed for H=([70.166.167.33]) [185.205.111.39]:61221: 535 Incorrect authentication data (set_id=investmentmanager@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.212.191.16
country_id: 1861060
description:
2026-07-17 12:31:44 dovecot_login authenticator failed for H=st0848.nas811.p-aichi.nttpc.ne.jp ([90.230.168.26]) [202.212.191.16]:25145: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 47.199.125.189
country_id: 6252001
description:
2026-07-17 12:32:03 dovecot_login authenticator failed for H=([112.194.142.167]) [47.199.125.189]:33867: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 50.60.4.237
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/7c2409664 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 117.252.78.113
country_id: 1269750
description:
2026-07-17 12:32:49 dovecot_plain authenticator failed for H=(enotonwely) [117.252.78.113]:8977: 535 Incorrect authentication data (set_id=admin@ddgalaxy.in)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 176.144.202.187
country_id: 3017382
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/851793487 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77350977
abuser: 82.165.217.115
country_id: 3017382
domain: travelinbh.com
description:
IM360 WAF: Joomla Page Builder CK webshell access - executable in media dir (CVE-2026-56290 / WPT-2603)||MVN:REQUEST_FILENAME||MV:/media/com_pagebuilderck/gfonts/fbi.php||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 103.160.213.217
country_id: 1643084
domain: jaashsupplies.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:nuclei-97a1f9cf005bc62dfd9f4bbc5b501aee.xml.php||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77350572
name: IM360 WAF: Link shorteners usage
abuser: 82.165.217.115
country_id: 3017382
domain: travelinbh.com
description:
IM360 WAF: Link shorteners usage||MVN:ARGS:url||MV:https://raw.githubusercontent.com/sagsooz/fonts/refs/heads/main/font.css||User:travelinbh||SC:/home/travelinbh/public_html/index.php||WPU:||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 137.103.249.245
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/8e1262972 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.215.146.195
country_id: 934841
description:
2026-07-17 12:36:28 dovecot_login authenticator failed for H=(mx0.vdk.ru) [41.215.146.195]:40667: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.126.217.41
country_id: 1210997
description:
2026-07-17 12:36:53 dovecot_login authenticator failed for H=(211-21-243-9.hinet-ip.hinet.net) [103.126.217.41]:51166: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.242.112.205
country_id: 1269750
description:
2026-07-17 12:37:42 dovecot_login authenticator failed for H=([85.186.244.106]) [121.242.112.205]:35302: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 79.154.65.26
country_id: 2510769
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/913838332 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 58.65.73.22
country_id: 1835841
description:
2026-07-17 12:37:58 dovecot_login authenticator failed for H=([191.37.16.226]) [58.65.73.22]:47668: 535 Incorrect authentication data (set_id=sajithkumar.pk)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 217.142.25.195
country_id: 163843
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/953342160 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 80.1.51.168
country_id: 2635167
description:
2026-07-17 12:40:34 dovecot_login authenticator failed for H=oldh-13-b2-v4wan-171191-cust935.vm18.cable.virginm.net ([91.219.196.17]) [80.1.51.168]:48474: 535 Incorrect authentication data (set_id=sunil)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 60.53.35.99
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/961455254 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77281327
abuser: 114.125.251.31
country_id: 1643084
domain: globalgroupoman.com
description:
IM360 WAF: Unauthenticated file write/delete via Helix3 com_ajax handler for Joomla before 3.1.1 (CVE-2026-49049)||MVN:REQUEST_FILENAME||MV:/index.php||RF:/index.php||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 172.251.252.216
country_id: 6252001
description:
2026-07-17 12:40:20 dovecot_login authenticator failed for H=([112.109.198.106]) [172.251.252.216]:57846: 535 Incorrect authentication data (set_id=sunil@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.116.66
country_id: 1269750
description:
2026-07-17 12:42:46 dovecot_login authenticator failed for H=([49.124.159.187]) [182.95.116.66]:55286: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.209.150.242
country_id: 2077456
description:
2026-07-17 12:43:00 dovecot_login authenticator failed for H=125-209-150-242.tpgi.com.au (33-169-229-181.cab.prima.com.ar) [125.209.150.242]:46066: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.23.252
country_id: 1668284
description:
2026-07-17 12:44:44 dovecot_login authenticator failed for H=111-70-23-252.emome-ip.hinet.net ([166.150.73.45]) [111.70.23.252]:55365: 535 Incorrect authentication data (set_id=corporate@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.34.164.13
country_id: 6252001
description:
2026-07-17 12:44:28 dovecot_login authenticator failed for H=([185.113.175.27]) [192.34.164.13]:53467: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.79.59.1
country_id: 878675
description:
2026-07-17 12:44:40 dovecot_login authenticator failed for H=([94.16.17.140]) [41.79.59.1]:1050: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 175.137.33.164
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/b41347781 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 27.32.200.175
country_id: 2077456
description:
2026-07-17 12:44:54 dovecot_login authenticator failed for H=27-32-200-175.tpgi.com.au ([221.179.238.225]) [27.32.200.175]:55303: 535 Incorrect authentication data (set_id=corporate)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 76.150.100.132
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/b42590675 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 206.214.114.33
country_id: 6252001
description:
2026-07-17 12:46:43 dovecot_login authenticator failed for H=([120.234.232.184]) [206.214.114.33]:35796: 535 Incorrect authentication data (set_id=corporate@globalgroupoman.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.62.95.243
country_id: 1269750
description:
2026-07-17 12:47:22 dovecot_login authenticator failed for H=([174.75.211.198]) [202.62.95.243]:55697: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 170.9.53.196
country_id: 6252001
description:
2026-07-17 12:46:53 dovecot_login authenticator failed for H=(syn-172-251-252-216.res.spectrum.com) [170.9.53.196]:43394: 535 Incorrect authentication data (set_id=corporate)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 209.193.52.230
country_id: 6252001
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/bb3618389 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 175.157.140.3
country_id: 1227603
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/ce2510672 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.124.152.146
country_id: 1733045
description:
2026-07-17 12:47:57 dovecot_login authenticator failed for H=(115-69-44-118-cpe.spintel.net.au) [49.124.152.146]:34164: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77350026
name: IM360 WAF: Track suspicious Spring Framework requests
abuser: 2406:6d00:ffb:1200:a89c:f548:8e9d:1263
country_id: 2077456
domain: www.futuracare.com.au
description:
IM360 WAF: Track suspicious Spring Framework requests||RSV:8.30||T:APACHE||MVN:ARGS:vfedit10incident-classification[]||MV:Moderate||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 51.36.227.170
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d01030163 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 103.30.1.46
country_id: 1643084
domain: alnayza.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:masta7lmue7.xml.php||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77102143
abuser: 103.30.1.46
country_id: 1643084
domain: alnayza.com
description:
IM360 WAF: Unauthenticated front-end JCE editor-profile import in Joomla Content Editor before 2.9.99.5 (CVE-2026-48907)||MVN:REQUEST_FILENAME||MV:/index.php||RF:/index.php||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.87.236.178
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d82159986 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 38.19.44.230
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d52203382 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 128.185.33.227
country_id: 1269750
description:
2026-07-17 12:51:34 dovecot_login authenticator failed for H=(host-pq.vsg1-a.v4.dfn.nl) [128.185.33.227]:34136: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.62.129.18
country_id: 2077456
description:
2026-07-17 12:51:04 dovecot_login authenticator failed for H=202-62-129-18.ip.vocus.network ([111.119.44.27]) [202.62.129.18]:62932: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.54.80.214
country_id: 1512440
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/d8370670 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 212.241.15.233
country_id: 1527747
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e1140357 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 41.212.81.74
country_id: 192950
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/e83303583 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.24.60.15
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f21767391 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.201.253.23
country_id: 99237
description:
2026-07-17 12:54:08 dovecot_login authenticator failed for H=([72.37.216.65]) [62.201.253.23]:35554: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 87.147.11.119
country_id: 2921044
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f52215750 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 83.111.183.151
country_id: 290557
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/f5750399 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.188.35.10
country_id: 337996
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/ff2342148 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 139.135.192.226
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/012121004 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 64.201.244.162
country_id: 6252001
description:
2026-07-17 12:59:21 dovecot_login authenticator failed for H=f1.roos.com ([187.62.152.28]) [64.201.244.162]:27238: 535 Incorrect authentication data (set_id=corporate@globalgroupoman.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 187.168.42.26
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/041439402 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 174.168.146.152
country_id: 6252001
description:
2026-07-17 13:01:01 dovecot_login authenticator failed for H=c-174-168-146-152.hsd1.ct.comcast.net ([68.71.247.133]) [174.168.146.152]:53453: 535 Incorrect authentication data (set_id=bernadetta)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.161.227.24
country_id: 3895114
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/062714061 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 222.111.148.83
country_id: 1835841
description:
2026-07-17 13:00:51 dovecot_login authenticator failed for H=([94.16.17.139]) [222.111.148.83]:48404: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.204.41
country_id: 99237
description:
2026-07-17 13:02:03 dovecot_login authenticator failed for H=([72.206.74.97]) [65.20.204.41]:40677: 535 Incorrect authentication data (set_id=support@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.242.192.87
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/0a3057687 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 190.120.249.146
country_id: 3625428
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/0b1247240 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 189.219.112.47
country_id: 3996063
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/0b3275977 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.244.152.22
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/142014121 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.232.108.219
country_id: 614540
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/16233740 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.117.253.16
country_id: 1668284
description:
2026-07-17 13:07:22 dovecot_login authenticator failed for H=122-117-253-16.hinet-ip.hinet.net (syn-024-097-253-246.biz.spectrum.com) [122.117.253.16]:53464: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: modsec
rule: 77469916
abuser: 103.160.213.217
country_id: 1643084
domain: metrodigitals.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:nuclei-1b53167110dee2f5cb1499673131a77c.xml.php||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 114.10.40.42
country_id: 1643084
domain: alnayza.com
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:jceoctr506p.xml.php||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77469914
abuser: 34.143.177.6
country_id: 1880251
domain: yukticlick.com
description:
IM360 WAF: Unauthenticated arbitrary file deletion in Tassos/Novarain Framework (nrframework) for Joomla (CVE-2026-48906)||MVN:ARGS:remove_file||MV:images/.htaccess||RSV:8.30||T:APACHE||TGT:images/.htaccess||


plugin: modsec
rule: 77350026
name: IM360 WAF: Track suspicious Spring Framework requests
abuser: 34.143.177.6
country_id: 1880251
domain: yukticlick.com
description:
IM360 WAF: Track suspicious Spring Framework requests||RSV:8.30||T:APACHE||MVN:ARGS:class||MV:JFormFieldNRInlineFileUpload||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 20.191.115.169
country_id: 6252001
domain: www.fefkadirectorsunion.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 101.13.5.63
country_id: 1668284
description:
2026-07-17 13:10:13 dovecot_login authenticator failed for H=([221.182.185.190]) [101.13.5.63]:59194: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.88.54.201
country_id: 2328926
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/311126757 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 196.189.28.221
country_id: 337996
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/31604815 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.132.183.249
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/312292543 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.54.66.226
country_id: 1512440
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/34398411 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 27.69.5.239
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/37475050 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 205.209.67.3
country_id: 163843
description:
2026-07-17 13:14:43 dovecot_login authenticator failed for H=(165-173-21-44.myrepublic.com.sg) [205.209.67.3]:52592: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77316742
name: IM360 WAF: Generic XSS exploitation attempt
abuser: 46.226.166.112
country_id: 3017382
domain: kallanigroup.com
description:
IM360 WAF: Generic XSS exploitation attempt||RSV:8.30||T:APACHE||MVN:ARGS:settings[customclass]||MV:\"><script/async/src=//mv2group.com/meta.google.com></script>||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 111.70.7.254
country_id: 1668284
description:
2026-07-17 13:15:26 dovecot_login authenticator failed for H=111-70-7-254.emome-ip.hinet.net ([115.20.162.181]) [111.70.7.254]:43623: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 175.136.143.48
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/3c1858689 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.124.57.133
country_id: 2245662
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/39341974 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 106.192.0.176
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/413524702 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 124.29.194.183
country_id: 1168579
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/4185873 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 121.129.75.178
country_id: 1835841
description:
2026-07-17 13:17:52 dovecot_login authenticator failed for H=([213.230.66.211]) [121.129.75.178]:56722: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 79.116.143.106
country_id: 2510769
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/42975029 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 183.171.49.161
country_id: 1733045
description:
2026-07-17 13:18:02 dovecot_login authenticator failed for H=([143.198.37.183]) [183.171.49.161]:51398: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 116.59.10.205
country_id: 1668284
description:
2026-07-17 13:18:01 dovecot_login authenticator failed for H=116-59-10-205.emome-ip.hinet.net ([174.75.211.203]) [116.59.10.205]:39602: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.130.18.247
country_id: 1643084
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/443238332 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77318023
name: IM360 WAF: Old style account creation and modification in Joomla!
abuser: 109.69.109.101
country_id: 2635167
domain: interceptorglobal.in
description:
IM360 WAF: Old style account creation and modification in Joomla!||MVN:ARGS:view||MV:registration||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 144.48.52.101
country_id: 783754
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Opera/9.80 <a href=\"https://www.handelsblatt.com/adv/firmen/kleidermotten-bekaempfen-erfahrungen.html\">Legona</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 154.71.206.217
country_id: 3351879
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/46183944 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.109.239.209
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/443447010 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77209353
abuser: 103.59.160.66
country_id: 1643084
domain: alnayza.com
description:
IM360 WAF: Unauthenticated file upload / RCE in Joomla SP Page Builder asset.uploadCustomIcon (CVE-2026-48908)||MVN:REQUEST_FILENAME||MV:/index.php||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.106.102
country_id: 1269750
description:
2026-07-17 13:21:15 dovecot_login authenticator failed for H=([49.124.155.162]) [182.95.106.102]:60100: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 201.206.45.132
country_id: 3624060
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/54111149 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 128.185.235.110
country_id: 1269750
description:
2026-07-17 13:23:18 dovecot_login authenticator failed for H=(domi.static.gvt.net.br) [128.185.235.110]:33906: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 221.158.140.244
country_id: 1835841
description:
2026-07-17 13:23:40 dovecot_login authenticator failed for H=(94-29-38-71.dynamic.spd-mgts.ru) [221.158.140.244]:43018: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.175.243.205
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/613694514 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 72.27.138.0
country_id: 3489940
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/66163620 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 125.27.219.182
country_id: 1605651
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/69715337 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.134.127.6
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/6a1712665 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77469916
abuser: 172.237.87.199
country_id: 1880251
domain: 103.185.74.189
description:
IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907)||MVN:FILES:profile_file||MV:z_kbkn.php||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 181.121.100.59
country_id: 3437598
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/142843844 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.41.102.200
country_id: 286963
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/1522654 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 182.63.110.150
country_id: 1733045
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/1712132 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 112.202.120.178
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/18682308 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 49.147.194.156
country_id: 1694008
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/211508464 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 14.239.248.134
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/211976768 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 72.11.48.172
country_id: 6252001
description:
2026-07-17 13:37:25 dovecot_login authenticator failed for H=([183.63.220.210]) [72.11.48.172]:40665: 535 Incorrect authentication data (set_id=bernadetta@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 102.213.48.58
country_id: 192950
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/271839725 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 201.46.124.0
country_id: 3686110
description:
2026-07-17 13:37:54 dovecot_login authenticator failed for H=([183.171.61.211]) [201.46.124.0]:1640: 535 Incorrect authentication data (set_id=bernadetta)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.62.129.18
country_id: 2077456
description:
2026-07-17 13:40:20 dovecot_login authenticator failed for H=202-62-129-18.ip.vocus.network ([181.115.237.19]) [202.62.129.18]:61720: 535 Incorrect authentication data (set_id=investmentmanager)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.56.194.29
country_id: 99237
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/333048619 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 73.203.17.220
country_id: 6252001
description:
2026-07-17 13:40:09 dovecot_login authenticator failed for H=c-73-203-17-220.hsd1.co.comcast.net ([182.74.216.125]) [73.203.17.220]:55450: 535 Incorrect authentication data (set_id=investmentmanager@ibmcglobal.com)


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 104.192.3.227
country_id: 6252001
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Mozilla/4.0 <a href=\"https://hvacrepairnearme3.info\">homepage</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 84.54.120.96
country_id: 1512440
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/353645989 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 152.52.227.94
country_id: 1269750
description:
2026-07-17 13:41:40 dovecot_login authenticator failed for H=([115.144.242.18]) [152.52.227.94]:42256: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 49.43.1.116
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/361062417 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 94.16.17.141
country_id: 2921044
description:
2026-07-17 13:41:54 dovecot_login authenticator failed for H=([206.62.136.111]) [94.16.17.141]:48736: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 79.141.36.131
country_id: 2635167
domain: www.globalgroupoman.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/124.0.6367.91 Safari/537.36||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 46.248.206.173
country_id: 248816
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/461694007 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 85.18.115.154
country_id: 3175395
description:
2026-07-17 13:45:52 dovecot_login authenticator failed for H=([184.181.217.198]) [85.18.115.154]:54774: 535 Incorrect authentication data (set_id=sajithkumar.pk@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.203.125.112
country_id: 3277605
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/4b1347544 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 193.46.192.20
country_id: 2510769
description:
2026-07-17 13:46:38 dovecot_login authenticator failed for H=([189.57.9.17]) [193.46.192.20]:52241: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 172.251.252.216
country_id: 6252001
description:
2026-07-17 13:46:59 dovecot_login authenticator failed for H=(abts-mh-dynamic-221.40.169.122.airtelbroadband.in) [172.251.252.216]:54010: 535 Incorrect authentication data (set_id=evin.joseph@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 206.62.136.130
country_id: 3686110
description:
2026-07-17 13:47:21 dovecot_login authenticator failed for H=([41.224.62.206]) [206.62.136.130]:45627: 535 Incorrect authentication data (set_id=evin.joseph)


plugin: modsec
rule: 77350572
name: IM360 WAF: Link shorteners usage
abuser: 82.165.217.115
country_id: 3017382
domain: cochinbigbandshow.com
description:
IM360 WAF: Link shorteners usage||MVN:ARGS:url||MV:https://raw.githubusercontent.com/sagsooz/fonts/refs/heads/main/font.css||User:cochinbigbandsho||SC:/home/cochinbigbandsho/public_html/index.php||WPU:||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 2.133.4.22
country_id: 1522867
description:
2026-07-17 13:48:16 dovecot_login authenticator failed for H=2.133.4.22.dynamic.telecom.kz ([104.37.132.51]) [2.133.4.22]:45295: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 209.6.226.104
country_id: 6252001
description:
2026-07-17 13:49:06 dovecot_login authenticator failed for H=209-6-226-104.s4710.c3-0.wtr-cbr1.sbo-wtr.ma.cable.rcncustomer.com (111-70-32-50.emome-ip.hinet.net) [209.6.226.104]:39970: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 123.22.15.191
country_id: 1562822
domain: metrodigitals.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/metrodigitals.com/solutions/home-theater-solutions HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 101.13.5.39
country_id: 1668284
description:
2026-07-17 13:50:28 dovecot_login authenticator failed for H=([192.111.135.19]) [101.13.5.39]:59968: 535 Incorrect authentication data (set_id=anoop.ps@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 5.192.89.47
country_id: 290557
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/583180592 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 171.245.109.46
country_id: 1562822
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/582584888 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77093094
abuser: 34.31.88.250
country_id: 6252001
domain: interceptorglobal.in
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"data_25c506ce\":\"loading\",\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"_1e40494f\":\"69ea1419f9f152b9\",\"reason\":-1,\"_response\":{\"_prefix\":\"var qv=arguments[0x1];var prb=qv;try{var _v=((0,eval)(global[[\\\"Buf\\\",\\\"fe\\\",\\\"r\\\


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 122.168.7.68
country_id: 1269750
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/593115598 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 222.104.76.94
country_id: 1835841
description:
2026-07-17 13:50:48 dovecot_login authenticator failed for H=(95.158.39.201.bestsolution.net.ua) [222.104.76.94]:34760: 535 Incorrect authentication data (set_id=anoop.ps)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.73.109.194
country_id: 1269750
description:
2026-07-17 13:52:15 dovecot_login authenticator failed for H=(89-233-203-159.cust.bredband2.com) [182.73.109.194]:48120: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 14.96.106.175
country_id: 1269750
description:
2026-07-17 13:53:37 dovecot_login authenticator failed for H=(188-122-37-97.xdsl.5gdsl.com) [14.96.106.175]:54604: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 47.132.209.110
country_id: 6252001
description:
2026-07-17 13:53:38 dovecot_login authenticator failed for H=(nsg-corporate-50.101.185.122.airtel.in) [47.132.209.110]:55708: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 220.240.107.211
country_id: 2077456
description:
2026-07-17 13:52:49 dovecot_login authenticator failed for H=(77.145.34.171.adsl-pool.jx.chinaunicom.com) [220.240.107.211]:45400: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.120.116.162
country_id: 1168579
description:
2026-07-17 13:53:18 dovecot_login authenticator failed for H=([46.138.254.1]) [103.120.116.162]:57702: 535 Incorrect authentication data (set_id=rdcentre1@ibmcglobal.com)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 37.104.10.29
country_id: 102358
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/691432721 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.78.65.154
country_id: 1269750
description:
2026-07-17 13:53:54 dovecot_login authenticator failed for H=([92.47.166.23]) [182.78.65.154]:43526: 535 Incorrect authentication data (set_id=rdcentre1)


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 81.26.206.133
country_id: 783754
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/682679726 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.242.194.223
country_id: 298795
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/6d2381807 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 185.44.86.3
country_id: 1522867
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/712032541 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77209355
name: IM360 WAF: Script execution in com_sppagebuilder media assets - web shell (CVE-2026-48908)
abuser: 162.19.94.70
country_id: 3017382
domain: globalgroupoman.com
description:
IM360 WAF: Script execution in com_sppagebuilder media assets - web shell (CVE-2026-48908)||MVN:REQUEST_FILENAME||MV:/media/com_sppagebuilder/assets/iconfont/icofont/fonts/Nxploited_1784276912712.php||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 88.201.11.126
country_id: 290291
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/742410664 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 103.96.91.130
country_id: 1210997
domain: keralapeople.com
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/keralapeople.com/detail/742074830 HTTP/1.1||RSV:8.30||T:APACHE||


plugin: modsec
rule: 77210831
name: IM360 WAF: Rogue web site crawler
abuser: 171.234.8.175
country_id: 1562822
domain: globalgroupoman.com
description:
IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:Mozilla/5.0 <a href=\"https://musikpedia.id/index.php?title=Pengguna:KatherinaNanson\">\xe2\x80\x9cVi\xe1\xbb\x87n Eakmat \xc4\x90\xe1\xba\xafk L\xe1\xba\xafk\xe2\x80\x9d</a> (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60||RSV:8.30||T:APACHE||


