# incident

plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 156.54.108.185
country_id: 3175395
description:
Dec  2 11:55:00 host2 sshd[1726101]: Disconnected from invalid user superadmin 156.54.108.185 port 54563 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 128.1.131.163
country_id: 1819730
description:
Dec  2 11:55:26 host2 sshd[1726526]: Disconnected from invalid user username 128.1.131.163 port 44566 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 156.54.108.185
country_id: 3175395
description:
Dec  2 11:56:10 host2 sshd[1727105]: Disconnected from invalid user deploy 156.54.108.185 port 55328 [preauth]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.185.6.51
country_id: 6252001
description:
[2025-12-02 11:57:14 +0530] info [whostmgrd] 73.185.6.51 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 78.100.64.148
country_id: 289688
description:
Dec  2 11:56:19 host2 sshd[1727183]: Disconnected from invalid user gns3 78.100.64.148 port 64312 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 149.102.232.27
country_id: 3057568
description:
2025-12-02 11:56:34 dovecot_login authenticator failed for (ADMIN) [149.102.232.27]:30693: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 159.223.45.112
country_id: 1880251
description:
Dec  2 11:58:03 host2 sshd[1728712]: Disconnected from invalid user ubuntu 159.223.45.112 port 40406 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 103.139.192.17
country_id: 1643084
description:
Dec  2 11:58:50 host2 sshd[1729318]: Disconnected from invalid user huawei 103.139.192.17 port 42934 [preauth]


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 71.6.134.233
country_id: 6252001
description:
Dec  2 11:59:29 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=71.6.134.233, lip=66.85.158.92, TLS: Connection closed, session=<IzzRN/JEpq9HBobp>


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 159.223.45.112
country_id: 1880251
description:
Dec  2 11:59:31 host2 sshd[1730016]: Disconnected from invalid user marvin 159.223.45.112 port 45722 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 36.93.249.106
country_id: 1643084
description:
Dec  2 11:59:17 host2 sshd[1729756]: Disconnected from invalid user nrk 36.93.249.106 port 39310 [preauth]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.134.138.193
country_id: 6252001
description:
[2025-12-02 12:01:53 +0530] info [whostmgrd] 174.134.138.193 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.2.240.199
country_id: 6252001
description:
[2025-12-02 12:01:52 +0530] info [cpaneld] 107.2.240.199 - host2 "GET /login/?login_only=1&user=host2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user host2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.21.168.225
country_id: 6252001
description:
[2025-12-02 12:01:54 +0530] info [cpaneld] 68.21.168.225 - host2phenomhostcom "GET /login/?login_only=1&user=host2phenomhostcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user host2phenomhostcom (has_cpuser_file failed)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 198.12.85.136
country_id: 6252001
description:
Dec  2 12:01:19 host2 sshd[1731806]: Disconnected from invalid user kyt 198.12.85.136 port 43470 [preauth]


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 36.93.249.106
country_id: 1643084
description:
Dec  2 12:01:49 host2 sshd[1732085]: Disconnected from invalid user gns3 36.93.249.106 port 47834 [preauth]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.110.153.46
country_id: 6252001
description:
[2025-12-02 12:01:51 +0530] info [cpaneld] 74.110.153.46 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.141.53.29
country_id: 6252001
description:
[2025-12-02 12:01:51 +0530] info [cpaneld] 76.141.53.29 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.182.226.249
country_id: 6252001
description:
[2025-12-02 12:01:55 +0530] info [cpaneld] 104.182.226.249 - host "GET /login/?login_only=1&user=host&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user host (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 32.219.216.66
country_id: 6252001
description:
[2025-12-02 12:01:57 +0530] info [cpaneld] 32.219.216.66 - ho "GET /login/?login_only=1&user=ho&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ho (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.48.164.34
country_id: 6252001
description:
[2025-12-02 12:01:56 +0530] info [cpaneld] 73.48.164.34 - hos "GET /login/?login_only=1&user=hos&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user hos (has_cpuser_file failed)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 103.139.192.17
country_id: 1643084
description:
Dec  2 12:02:14 host2 sshd[1732405]: Disconnected from invalid user superadmin 103.139.192.17 port 53678 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 78.100.64.148
country_id: 289688
description:
Dec  2 12:03:14 host2 sshd[1733690]: Disconnected from invalid user superadmin 78.100.64.148 port 52089 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 103.139.192.17
country_id: 1643084
description:
Dec  2 12:03:52 host2 sshd[1734013]: Disconnected from invalid user odin 103.139.192.17 port 35582 [preauth]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 43.245.222.27
country_id: 1819730
description:
[2025-12-02 12:04:04 +0530] info [cpaneld] 43.245.222.27 - ceyl "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceyl (has_cpuser_file failed)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 198.12.85.136
country_id: 6252001
description:
Dec  2 12:04:58 host2 sshd[1734892]: Disconnected from invalid user huawei 198.12.85.136 port 50602 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 152.32.135.139
country_id: 1819730
description:
Dec  2 12:05:44 host2 sshd[1735741]: Disconnected from invalid user nominatim 152.32.135.139 port 32800 [preauth]


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 198.12.85.136
country_id: 6252001
description:
Dec  2 12:08:22 host2 sshd[1737938]: Disconnected from invalid user usuario2 198.12.85.136 port 49626 [preauth]


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 194.165.16.163
country_id: 2993457
description:
Dec  2 12:08:47 host2 pure-ftpd[1738196]: (?@194.165.16.163) [INFO] New connection from 194.165.16.163


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 152.32.135.139
country_id: 1819730
description:
Dec  2 12:09:23 host2 sshd[1738738]: Disconnected from invalid user user1 152.32.135.139 port 47748 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 185.227.152.155
country_id: 2635167
description:
Dec  2 12:09:52 host2 sshd[1739031]: Disconnected from invalid user controlm 185.227.152.155 port 32884 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 198.12.85.136
country_id: 6252001
description:
Dec  2 12:10:25 host2 sshd[1739680]: Disconnected from invalid user developer 198.12.85.136 port 38874 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 98.227.25.115
country_id: 6252001
description:
2025-12-02 12:10:42 dovecot_plain authenticator failed for c-98-227-25-115.hsd1.il.comcast.net (amaraste) [98.227.25.115]:45396: 535 Incorrect authentication data (set_id=root@lezzarotech.com)


plugin: ossec
rule: 5718
name: Attempt to login using a denied user.
abuser: 62.60.135.104
country_id: 130758
description:
Dec  2 12:10:57 host2 sshd[1740005]: User agentallianz from 62.60.135.104 not allowed because a group is listed in DenyGroups


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 152.32.135.139
country_id: 1819730
description:
Dec  2 12:11:46 host2 sshd[1740643]: Disconnected from invalid user developer 152.32.135.139 port 39858 [preauth]


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 198.235.24.16
country_id: 6252001
description:
Dec  2 12:11:57 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=198.235.24.16, lip=66.85.158.91, TLS, session=<tr1oZPJEzuPG6xgQ>


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 185.227.152.155
country_id: 2635167
description:
Dec  2 12:12:55 host2 sshd[1741641]: Disconnected from invalid user admin1 185.227.152.155 port 50422 [preauth]


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 152.32.135.139
country_id: 1819730
description:
Dec  2 12:12:59 host2 sshd[1741665]: Disconnected from invalid user superadmin 152.32.135.139 port 50110 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 45.194.15.228
country_id: 1168579
description:
2025-12-02 12:14:08 dovecot_login authenticator failed for ([125.23.229.142]) [45.194.15.228]:55524: 535 Incorrect authentication data (set_id=isuru@euroentertainmentlk.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 46.8.240.26
country_id: 2017370
description:
2025-12-02 12:14:26 dovecot_login authenticator failed for (nsg-corporate-34.230.187.122.airtel.in) [46.8.240.26]:34524: 535 Incorrect authentication data (set_id=isuru)


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 185.247.137.104
country_id: 2635167
description:
Dec  2 12:14:53 host2 pure-ftpd[1743643]: (?@185.247.137.104) [INFO] New connection from 185.247.137.104


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.141.131.206
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 35.141.131.206 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.208.170.86
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 97.208.170.86 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.133.154.9
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 72.133.154.9 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.129.121
country_id: 6252001
description:
[2025-12-02 12:16:13 +0530] info [whostmgrd] 172.59.129.121 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 162.195.125.17
country_id: 6252001
description:
[2025-12-02 12:15:59 +0530] info [whostmgrd] 162.195.125.17 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.182.64.4
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 67.182.64.4 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.12.167.226
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 73.12.167.226 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.136.130.96
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 69.136.130.96 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.218.229
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 172.56.218.229 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 142.129.54.121
country_id: 6252001
description:
[2025-12-02 12:16:05 +0530] info [whostmgrd] 142.129.54.121 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.101.13.54
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 73.101.13.54 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.45.191.85
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 50.45.191.85 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.139.101.113
country_id: 6252001
description:
[2025-12-02 12:16:04 +0530] info [whostmgrd] 69.139.101.113 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.94.110.18
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 97.94.110.18 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.178.78.166
country_id: 6252001
description:
[2025-12-02 12:16:00 +0530] info [whostmgrd] 75.178.78.166 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.144.12.75
country_id: 6252001
description:
[2025-12-02 12:16:00 +0530] info [whostmgrd] 98.144.12.75 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.174.69.137
country_id: 6252001
description:
[2025-12-02 12:16:02 +0530] info [whostmgrd] 75.174.69.137 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.145.129.24
country_id: 6252001
description:
[2025-12-02 12:16:02 +0530] info [whostmgrd] 216.145.129.24 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.62.131.40
country_id: 6252001
description:
[2025-12-02 12:16:02 +0530] info [whostmgrd] 38.62.131.40 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.144.230.54
country_id: 6252001
description:
[2025-12-02 12:15:59 +0530] info [whostmgrd] 47.144.230.54 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.33.8.89
country_id: 6252001
description:
[2025-12-02 12:15:59 +0530] info [whostmgrd] 66.33.8.89 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.48.232.38
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 73.48.232.38 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.39.94.141
country_id: 6252001
description:
[2025-12-02 12:16:00 +0530] info [whostmgrd] 76.39.94.141 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.169.187.13
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 76.169.187.13 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.241.88.161
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 73.241.88.161 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 208.53.120.126
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 208.53.120.126 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 170.103.118.32
country_id: 6252001
description:
[2025-12-02 12:16:05 +0530] info [whostmgrd] 170.103.118.32 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.59.233.10
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 143.59.233.10 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.86.34.18
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 174.86.34.18 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.68.143.218
country_id: 6252001
description:
[2025-12-02 12:15:59 +0530] info [whostmgrd] 174.68.143.218 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.217.206.135
country_id: 6252001
description:
[2025-12-02 12:15:59 +0530] info [whostmgrd] 108.217.206.135 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.245.204.23
country_id: 6252001
description:
[2025-12-02 12:15:59 +0530] info [whostmgrd] 96.245.204.23 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.98.111.116
country_id: 6252001
description:
[2025-12-02 12:16:02 +0530] info [whostmgrd] 24.98.111.116 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.202.211.249
country_id: 6252001
description:
[2025-12-02 12:16:02 +0530] info [whostmgrd] 104.202.211.249 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.200.202.219
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 47.200.202.219 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.242.136.90
country_id: 6252001
description:
[2025-12-02 12:15:59 +0530] info [whostmgrd] 73.242.136.90 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.136.114.106
country_id: 6252001
description:
[2025-12-02 12:16:00 +0530] info [whostmgrd] 104.136.114.106 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.141.2.203
country_id: 6252001
description:
[2025-12-02 12:16:05 +0530] info [whostmgrd] 69.141.2.203 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.202.186.42
country_id: 6252001
description:
[2025-12-02 12:15:59 +0530] info [whostmgrd] 71.202.186.42 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.84.197.151
country_id: 6252001
description:
[2025-12-02 12:15:59 +0530] info [whostmgrd] 76.84.197.151 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.209.12.185
country_id: 6252001
description:
[2025-12-02 12:16:00 +0530] info [whostmgrd] 67.209.12.185 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.243.246
country_id: 6252001
description:
[2025-12-02 12:16:00 +0530] info [whostmgrd] 172.58.243.246 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.244.109.202
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 74.244.109.202 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.149.209.152
country_id: 6252001
description:
[2025-12-02 12:15:59 +0530] info [whostmgrd] 47.149.209.152 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.185.9.213
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 76.185.9.213 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.134.241.64
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 73.134.241.64 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.97.102.203
country_id: 6252001
description:
[2025-12-02 12:16:00 +0530] info [whostmgrd] 75.97.102.203 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 151.203.114.132
country_id: 6252001
description:
[2025-12-02 12:16:00 +0530] info [whostmgrd] 151.203.114.132 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.143.151.66
country_id: 6252001
description:
[2025-12-02 12:16:02 +0530] info [whostmgrd] 73.143.151.66 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.182.187.128
country_id: 6252001
description:
[2025-12-02 12:16:03 +0530] info [whostmgrd] 67.182.187.128 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.51.93.237
country_id: 6252001
description:
[2025-12-02 12:16:05 +0530] info [whostmgrd] 174.51.93.237 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 185.227.152.155
country_id: 2635167
description:
Dec  2 12:16:42 host2 sshd[1745403]: Disconnected from invalid user mcserver 185.227.152.155 port 45428 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 38.69.10.175
country_id: 6252001
description:
Dec  2 12:17:50 host2 sshd[1746173]: Invalid user cloudtourssrilan_travel from 38.69.10.175 port 59356


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.69.10.175
country_id: 6252001
description:
[2025-12-02 12:17:52 +0530] info [cpaneld] 38.69.10.175 - cloudtourssrilan_travel "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudtourssrilan_travel (has_cpuser_file failed)


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 185.227.152.155
country_id: 2635167
description:
Dec  2 12:20:18 host2 sshd[1748208]: Disconnected from invalid user nextcloud 185.227.152.155 port 40436 [preauth]


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 139.162.113.212
country_id: 1861060
description:
Dec  2 12:21:18 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=139.162.113.212, lip=66.85.158.92, TLS: Connection closed, session=<SlvRhfJEyOOLonHU>


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 35.216.156.249
country_id: 2658434
description:
Dec  2 12:22:13 host2 pure-ftpd[1750048]: (?@35.216.156.249) [INFO] New connection from 35.216.156.249


plugin: ossec
rule: 11307
name: Multiple connection attempts from same source
abuser: 35.216.156.249
country_id: 2658434
description:
Dec  2 12:22:17 host2 pure-ftpd[1750149]: (?@35.216.156.249) [INFO] New connection from 35.216.156.249


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 35.216.156.249
country_id: 2658434
description:
Dec  2 12:22:17 host2 pure-ftpd[1750133]: (?@35.216.156.249) [INFO] New connection from 35.216.156.249


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 212.102.39.131
country_id: 3077311
description:
2025-12-02 12:26:00 dovecot_login authenticator failed for (ADMIN) [212.102.39.131]:58050: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.81.229.181
country_id: 6252001
description:
2025-12-02 12:28:10 dovecot_login authenticator failed for (fabfibernet.com) [192.81.229.181]:59040: 535 Incorrect authentication data (set_id=hr@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 179.125.124.14
country_id: 3469034
description:
2025-12-02 12:28:32 dovecot_login authenticator failed for (vtx-b-124-014.virtex.com.br) [179.125.124.14]:52160: 535 Incorrect authentication data (set_id=hr)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.187.220.26
country_id: 1269750
description:
2025-12-02 12:29:29 dovecot_login authenticator failed for ([127.0.0.1]) [122.187.220.26]:53228: 535 Incorrect authentication data (set_id=kasunp@ksoft.lk)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 101.185.164.76
country_id: 2077456
description:
2025-12-02 12:29:39 dovecot_login authenticator failed for ([127.0.0.1]) [101.185.164.76]:48518: 535 Incorrect authentication data (set_id=kasunp)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 120.157.1.44
country_id: 2077456
description:
2025-12-02 12:31:16 dovecot_login authenticator failed for ([127.0.0.1]) [120.157.1.44]:50610: 535 Incorrect authentication data (set_id=chitral100@bostonlanka.com)


plugin: ossec
rule: 5718
name: Attempt to login using a denied user.
abuser: 62.60.135.107
country_id: 130758
description:
Dec  2 12:32:17 host2 sshd[1758386]: User agentallianz from 62.60.135.107 not allowed because a group is listed in DenyGroups


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 170.247.248.154
country_id: 3469034
description:
2025-12-02 12:31:25 dovecot_login authenticator failed for ([127.0.0.1]) [170.247.248.154]:58858: 535 Incorrect authentication data (set_id=chitral100)


plugin: ossec
rule: 5740
name: ssh connection reset by peer
description:
Dec  2 12:35:58 host2 sshd[1761480]: error: kex_exchange_identification: read: Connection reset by peer


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 24.144.93.160
country_id: 6252001
description:
Dec  2 12:45:08 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed: read(size=600) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=24.144.93.160, lip=66.85.158.92, TLS handshaking: read(size=600) failed: Connection reset by peer, session=<p80U2/JEdtkYkF2g>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 81.189.162.142
country_id: 2782113
description:
Dec  2 12:46:10 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 3 secs): user=<info@sivagnanamfoundation.com>, method=PLAIN, rip=81.189.162.142, lip=66.85.158.91, session=<c+ya3vJE8ktRvaKO>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 217.138.193.158
country_id: 290557
description:
2025-12-02 12:48:00 dovecot_login authenticator failed for (ADMIN) [217.138.193.158]:1719: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 89.117.42.108
country_id: 1668284
description:
Dec  2 12:51:05 host2 pure-ftpd[1773783]: (?@89.117.42.108) [INFO] New connection from 89.117.42.108


plugin: ossec
rule: 5718
name: Attempt to login using a denied user.
abuser: 62.60.135.28
country_id: 130758
description:
Dec  2 12:53:25 host2 sshd[1775405]: User agentallianz from 62.60.135.28 not allowed because a group is listed in DenyGroups


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 43.245.222.27
country_id: 1819730
description:
[2025-12-02 12:59:17 +0530] info [cpaneld] 43.245.222.27 - yash "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yash (has_cpuser_file failed)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 37.221.149.22
country_id: 690791
description:
Dec  2 12:59:32 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 18 secs): user=<info@jrdc.lk>, method=PLAIN, rip=37.221.149.22, lip=66.85.158.91, TLS, session=<8laFDfNEEpIl3ZUW>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 23.95.63.99
country_id: 6252001
description:
Dec  2 12:59:35 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 3 secs): user=<info@agronatureholdings.com>, method=PLAIN, rip=23.95.63.99, lip=66.85.158.91, session=<YxiZDvNEosgXXz9j>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 196.0.107.38
country_id: 226074
description:
Dec  2 12:59:54 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 19 secs): user=<info>, method=PLAIN, rip=196.0.107.38, lip=66.85.158.91, TLS, session=<TFS+DvNEldXEAGsm>


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 112.134.163.167
country_id: 1227603
description:
[2025-12-02 13:00:42 +0530] info [cpaneld] 112.134.163.167 - veneelk "GET /cpsess4972823214/frontend/jupiter/index.html HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [45.121.88.28] != Current IP Address [112.134.163.167]


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.97.27.72
country_id: 6252001
description:
[2025-12-02 13:04:51 +0530] info [cpaneld] 98.97.27.72 - trailslk "GET /login/?login_only=1&user=trailslk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user trailslk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.195.210.185
country_id: 6252001
description:
[2025-12-02 13:04:55 +0530] info [cpaneld] 75.195.210.185 - tra "GET /login/?login_only=1&user=tra&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tra (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.87.80.7
country_id: 6252001
description:
[2025-12-02 13:04:56 +0530] info [cpaneld] 76.87.80.7 - tr "GET /login/?login_only=1&user=tr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.206.213.118
country_id: 6252001
description:
[2025-12-02 13:04:47 +0530] info [cpaneld] 108.206.213.118 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.220.181.150
country_id: 6252001
description:
[2025-12-02 13:04:48 +0530] info [cpaneld] 73.220.181.150 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.211.226.7
country_id: 6252001
description:
[2025-12-02 13:04:51 +0530] info [whostmgrd] 108.211.226.7 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.29.26.48
country_id: 6252001
description:
[2025-12-02 13:04:49 +0530] info [cpaneld] 73.29.26.48 - trails "GET /login/?login_only=1&user=trails&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 65.30.37.47
country_id: 6252001
description:
[2025-12-02 13:04:53 +0530] info [cpaneld] 65.30.37.47 - trail "GET /login/?login_only=1&user=trail&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user trail (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.97.4.94
country_id: 6252001
description:
[2025-12-02 13:04:54 +0530] info [cpaneld] 98.97.4.94 - trai "GET /login/?login_only=1&user=trai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user trai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.145.50.70
country_id: 6252001
description:
[2025-12-02 13:05:26 +0530] info [cpaneld] 99.145.50.70 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.56.174.149
country_id: 6252001
description:
[2025-12-02 13:05:28 +0530] info [cpaneld] 71.56.174.149 - sobaherbal "GET /login/?login_only=1&user=sobaherbal&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sobaherbal (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.88.246.137
country_id: 6252001
description:
[2025-12-02 13:05:35 +0530] info [cpaneld] 99.88.246.137 - sobaher "GET /login/?login_only=1&user=sobaher&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sobaher (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.23.37.8
country_id: 6252001
description:
[2025-12-02 13:05:37 +0530] info [cpaneld] 184.23.37.8 - sobah "GET /login/?login_only=1&user=sobah&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sobah (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.172.169.221
country_id: 6252001
description:
[2025-12-02 13:05:29 +0530] info [whostmgrd] 67.172.169.221 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 177.130.168.49
country_id: 3469034
description:
Dec  2 13:05:33 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 19 secs): user=<info@systemtec.lk>, method=PLAIN, rip=177.130.168.49, lip=66.85.158.91, TLS, session=<cWT3IvNEisyxgqgx>


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.191.30
country_id: 6252001
description:
[2025-12-02 13:05:34 +0530] info [cpaneld] 172.59.191.30 - sobaherb "GET /login/?login_only=1&user=sobaherb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sobaherb (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.27.132.164
country_id: 6252001
description:
[2025-12-02 13:05:36 +0530] info [cpaneld] 50.27.132.164 - sobahe "GET /login/?login_only=1&user=sobahe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sobahe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.27.67.193
country_id: 6252001
description:
[2025-12-02 13:05:40 +0530] info [cpaneld] 24.27.67.193 - soba "GET /login/?login_only=1&user=soba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user soba (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.145.63.71
country_id: 6252001
description:
[2025-12-02 13:05:45 +0530] info [cpaneld] 35.145.63.71 - sobaher2 "GET /login/?login_only=1&user=sobaher2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sobaher2 (has_cpuser_file failed)


plugin: ossec
rule: 5718
name: Attempt to login using a denied user.
abuser: 62.60.135.106
country_id: 130758
description:
Dec  2 13:06:08 host2 sshd[1786836]: User agentallianz from 62.60.135.106 not allowed because a group is listed in DenyGroups


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.32.48.22
country_id: 6252001
description:
[2025-12-02 13:05:32 +0530] info [cpaneld] 76.32.48.22 - sobaherbalcom "GET /login/?login_only=1&user=sobaherbalcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sobaherbalcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.170.130.18
country_id: 6252001
description:
[2025-12-02 13:05:33 +0530] info [cpaneld] 70.170.130.18 - sobaherba "GET /login/?login_only=1&user=sobaherba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sobaherba (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.144.49.223
country_id: 6252001
description:
[2025-12-02 13:05:41 +0530] info [cpaneld] 35.144.49.223 - sob "GET /login/?login_only=1&user=sob&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sob (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.2.109.203
country_id: 6252001
description:
[2025-12-02 13:05:44 +0530] info [cpaneld] 73.2.109.203 - sobaher1 "GET /login/?login_only=1&user=sobaher1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sobaher1 (has_cpuser_file failed)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 181.191.223.36
country_id: 3865483
description:
Dec  2 13:05:54 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 19 secs): user=<info>, method=PLAIN, rip=181.191.223.36, lip=66.85.158.91, TLS, session=<H7Q4JPNEe5G1v98k>


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.253.243.169
country_id: 6252001
description:
[2025-12-02 13:05:27 +0530] info [cpaneld] 98.253.243.169 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.68.119.6
country_id: 6252001
description:
[2025-12-02 13:05:43 +0530] info [cpaneld] 71.68.119.6 - so "GET /login/?login_only=1&user=so&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user so (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.103.74.132
country_id: 6252001
description:
[2025-12-02 13:06:44 +0530] info [cpaneld] 174.103.74.132 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.223.229.9
country_id: 6252001
description:
[2025-12-02 13:06:47 +0530] info [cpaneld] 98.223.229.9 - ksoft "GET /login/?login_only=1&user=ksoft&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ksoft (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.145.220.145
country_id: 6252001
description:
[2025-12-02 13:06:49 +0530] info [cpaneld] 157.145.220.145 - ksoftweblk "GET /login/?login_only=1&user=ksoftweblk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ksoftweblk (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 87.103.126.54
country_id: 2264397
description:
2025-12-02 13:06:48 dovecot_plain authenticator failed for 54.126.103.87.rev.vodafone.pt (ineily) [87.103.126.54]:22522: 535 Incorrect authentication data (set_id=sysadmin@lezzarotech.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 12.74.154.105
country_id: 6252001
description:
[2025-12-02 13:06:50 +0530] info [cpaneld] 12.74.154.105 - ksof "GET /login/?login_only=1&user=ksof&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ksof (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.37.184.130
country_id: 6252001
description:
[2025-12-02 13:06:52 +0530] info [cpaneld] 76.37.184.130 - kso "GET /login/?login_only=1&user=kso&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kso (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.229.246.227
country_id: 6252001
description:
[2025-12-02 13:06:54 +0530] info [cpaneld] 47.229.246.227 - ks "GET /login/?login_only=1&user=ks&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ks (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.159.135.192
country_id: 6252001
description:
[2025-12-02 13:06:46 +0530] info [cpaneld] 104.159.135.192 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.18.246.178
country_id: 6252001
description:
[2025-12-02 13:06:48 +0530] info [whostmgrd] 73.18.246.178 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.141.4.81
country_id: 6252001
description:
[2025-12-02 13:07:52 +0530] info [cpaneld] 47.141.4.81 - askinternationalc "GET /login/?login_only=1&user=askinternationalc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinternationalc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.110.204.17
country_id: 6252001
description:
[2025-12-02 13:07:59 +0530] info [cpaneld] 46.110.204.17 - askinternat "GET /login/?login_only=1&user=askinternat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinternat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.244.36.22
country_id: 6252001
description:
[2025-12-02 13:08:11 +0530] info [cpaneld] 96.244.36.22 - ask "GET /login/?login_only=1&user=ask&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ask (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.145.51.92
country_id: 6252001
description:
[2025-12-02 13:08:12 +0530] info [cpaneld] 47.145.51.92 - as "GET /login/?login_only=1&user=as&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user as (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.136.143.138
country_id: 6252001
description:
[2025-12-02 13:07:47 +0530] info [whostmgrd] 71.136.143.138 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.204.248.137
country_id: 6252001
description:
[2025-12-02 13:07:49 +0530] info [cpaneld] 76.204.248.137 - askinternationalcons "GET /login/?login_only=1&user=askinternationalcons&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinternationalcons (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.107.162.15
country_id: 6252001
description:
[2025-12-02 13:07:54 +0530] info [cpaneld] 73.107.162.15 - askinternationa "GET /login/?login_only=1&user=askinternationa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinternationa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.163.101.108
country_id: 6252001
description:
[2025-12-02 13:08:04 +0530] info [cpaneld] 216.163.101.108 - askinte "GET /login/?login_only=1&user=askinte&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinte (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.55.153.216
country_id: 6252001
description:
[2025-12-02 13:07:44 +0530] info [cpaneld] 98.55.153.216 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.90.18.23
country_id: 6252001
description:
[2025-12-02 13:08:02 +0530] info [cpaneld] 71.90.18.23 - askintern "GET /login/?login_only=1&user=askintern&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askintern (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.219.91.231
country_id: 6252001
description:
[2025-12-02 13:08:10 +0530] info [cpaneld] 107.219.91.231 - aski "GET /login/?login_only=1&user=aski&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user aski (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.75.2.113
country_id: 6252001
description:
[2025-12-02 13:08:00 +0530] info [cpaneld] 99.75.2.113 - askinterna "GET /login/?login_only=1&user=askinterna&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinterna (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.201.28.236
country_id: 6252001
description:
[2025-12-02 13:07:46 +0530] info [cpaneld] 47.201.28.236 - askinternationalconsortium "GET /login/?login_only=1&user=askinternationalconsortium&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinternationalconsortium (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.82.66.176
country_id: 6252001
description:
[2025-12-02 13:07:53 +0530] info [cpaneld] 75.82.66.176 - askinternational "GET /login/?login_only=1&user=askinternational&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.3.162.254
country_id: 6252001
description:
[2025-12-02 13:07:55 +0530] info [cpaneld] 108.3.162.254 - askinternation "GET /login/?login_only=1&user=askinternation&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinternation (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.107.181.143
country_id: 6252001
description:
[2025-12-02 13:07:57 +0530] info [cpaneld] 72.107.181.143 - askinternatio "GET /login/?login_only=1&user=askinternatio&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinternatio (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.9.12.163
country_id: 6252001
description:
[2025-12-02 13:08:03 +0530] info [cpaneld] 99.9.12.163 - askinter "GET /login/?login_only=1&user=askinter&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinter (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.133.240.15
country_id: 6252001
description:
[2025-12-02 13:08:07 +0530] info [cpaneld] 73.133.240.15 - askint "GET /login/?login_only=1&user=askint&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askint (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.253.120.55
country_id: 6252001
description:
[2025-12-02 13:08:08 +0530] info [cpaneld] 67.253.120.55 - askin "GET /login/?login_only=1&user=askin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.41.63.42
country_id: 6252001
description:
[2025-12-02 13:08:13 +0530] info [cpaneld] 47.41.63.42 - askinte1 "GET /login/?login_only=1&user=askinte1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinte1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.73.202.54
country_id: 6252001
description:
[2025-12-02 13:07:45 +0530] info [cpaneld] 73.73.202.54 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 162.251.175.155
country_id: 6252001
description:
[2025-12-02 13:07:48 +0530] info [cpaneld] 162.251.175.155 - askinternationalconsortiumcom "GET /login/?login_only=1&user=askinternationalconsortiumcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinternationalconsortiumcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.8.199.247
country_id: 6252001
description:
[2025-12-02 13:07:51 +0530] info [cpaneld] 104.8.199.247 - askinternationalco "GET /login/?login_only=1&user=askinternationalco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinternationalco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.16.9.252
country_id: 6252001
description:
[2025-12-02 13:07:50 +0530] info [cpaneld] 100.16.9.252 - askinternationalcon "GET /login/?login_only=1&user=askinternationalcon&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinternationalcon (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.182.109.165
country_id: 6252001
description:
[2025-12-02 13:07:58 +0530] info [cpaneld] 67.182.109.165 - askinternati "GET /login/?login_only=1&user=askinternati&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinternati (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.25.229.136
country_id: 6252001
description:
[2025-12-02 13:08:13 +0530] info [cpaneld] 45.25.229.136 - askinte2 "GET /login/?login_only=1&user=askinte2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user askinte2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.43.211.169
country_id: 6252001
description:
[2025-12-02 13:09:11 +0530] info [cpaneld] 67.43.211.169 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 76.31.164.124
country_id: 6252001
description:
2025-12-02 13:08:34 dovecot_plain authenticator failed for c-76-31-164-124.hsd1.tx.comcast.net (glatercial) [76.31.164.124]:41686: 535 Incorrect authentication data (set_id=info@lezzarotech.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.210.226.140
country_id: 6252001
description:
[2025-12-02 13:09:43 +0530] info [cpaneld] 24.210.226.140 - epidgovlk "GET /login/?login_only=1&user=epidgovlk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user epidgovlk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.8.125.34
country_id: 6252001
description:
[2025-12-02 13:09:45 +0530] info [cpaneld] 100.8.125.34 - epi "GET /login/?login_only=1&user=epi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user epi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.35.37.49
country_id: 6252001
description:
[2025-12-02 13:09:26 +0530] info [cpaneld] 99.35.37.49 - epid "GET /login/?login_only=1&user=epid&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user epid (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.137.48.15
country_id: 6252001
description:
[2025-12-02 13:12:13 +0530] info [cpaneld] 73.137.48.15 - colourmarklabels "GET /login/?login_only=1&user=colourmarklabels&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.248.242.164
country_id: 6252001
description:
[2025-12-02 13:12:15 +0530] info [cpaneld] 76.248.242.164 - colourmarklabelscom "GET /login/?login_only=1&user=colourmarklabelscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colourmarklabelscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.62.196.210
country_id: 6252001
description:
[2025-12-02 13:12:19 +0530] info [cpaneld] 68.62.196.210 - colourmarklabe "GET /login/?login_only=1&user=colourmarklabe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colourmarklabe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.196.186.71
country_id: 6252001
description:
[2025-12-02 13:12:14 +0530] info [whostmgrd] 98.196.186.71 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.211.54.238
country_id: 6252001
description:
[2025-12-02 13:12:12 +0530] info [cpaneld] 107.211.54.238 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.115.32.174
country_id: 6252001
description:
[2025-12-02 13:12:11 +0530] info [cpaneld] 172.115.32.174 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 23.113.196.149
country_id: 6252001
description:
[2025-12-02 13:12:18 +0530] info [cpaneld] 23.113.196.149 - colourmarklabel "GET /login/?login_only=1&user=colourmarklabel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colourmarklabel (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.241.177.52
country_id: 3469034
description:
2025-12-02 13:11:55 dovecot_login authenticator failed for (ADMIN) [188.241.177.52]:51502: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.145.186.173
country_id: 6252001
description:
[2025-12-02 13:13:13 +0530] info [cpaneld] 47.145.186.173 - secondcoffeein "GET /login/?login_only=1&user=secondcoffeein&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcoffeein (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.189.131.45
country_id: 6252001
description:
[2025-12-02 13:12:28 +0530] info [cpaneld] 70.189.131.45 - colour "GET /login/?login_only=1&user=colour&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colour (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.201.107.116
country_id: 6252001
description:
[2025-12-02 13:12:38 +0530] info [cpaneld] 71.201.107.116 - co "GET /login/?login_only=1&user=co&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user co (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.222.122.184
country_id: 6252001
description:
[2025-12-02 13:12:41 +0530] info [cpaneld] 69.222.122.184 - colourm2 "GET /login/?login_only=1&user=colourm2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colourm2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.19.230.190
country_id: 6252001
description:
[2025-12-02 13:13:07 +0530] info [cpaneld] 96.19.230.190 - secondcoffeeintern "GET /login/?login_only=1&user=secondcoffeeintern&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcoffeeintern (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.242.118.191
country_id: 6252001
description:
[2025-12-02 13:12:25 +0530] info [cpaneld] 24.242.118.191 - colourmark "GET /login/?login_only=1&user=colourmark&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colourmark (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.113.201.195
country_id: 6252001
description:
[2025-12-02 13:12:39 +0530] info [cpaneld] 172.113.201.195 - colourm1 "GET /login/?login_only=1&user=colourm1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colourm1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.155.24.167
country_id: 6252001
description:
[2025-12-02 13:12:58 +0530] info [cpaneld] 47.155.24.167 - simp "GET /login/?login_only=1&user=simp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.175.225.178
country_id: 6252001
description:
[2025-12-02 13:13:04 +0530] info [cpaneld] 76.175.225.178 - secondcoffeeinternationalorg "GET /login/?login_only=1&user=secondcoffeeinternationalorg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcoffeeinternationalorg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.151.148.221
country_id: 6252001
description:
[2025-12-02 13:13:10 +0530] info [cpaneld] 73.151.148.221 - secondcoffeeinte "GET /login/?login_only=1&user=secondcoffeeinte&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcoffeeinte (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.251.197.154
country_id: 6252001
description:
[2025-12-02 13:13:16 +0530] info [cpaneld] 172.251.197.154 - secondcoffe "GET /login/?login_only=1&user=secondcoffe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcoffe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 162.226.65.39
country_id: 6252001
description:
[2025-12-02 13:13:15 +0530] info [cpaneld] 162.226.65.39 - secondcoffee "GET /login/?login_only=1&user=secondcoffee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcoffee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.229.17.1
country_id: 6252001
description:
[2025-12-02 13:12:21 +0530] info [cpaneld] 73.229.17.1 - colourmarklab "GET /login/?login_only=1&user=colourmarklab&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colourmarklab (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.172.4.102
country_id: 6252001
description:
[2025-12-02 13:12:27 +0530] info [cpaneld] 174.172.4.102 - colourm "GET /login/?login_only=1&user=colourm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colourm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.192.155.0
country_id: 6252001
description:
[2025-12-02 13:12:47 +0530] info [cpaneld] 108.192.155.0 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.207.179.30
country_id: 6252001
description:
[2025-12-02 13:12:48 +0530] info [cpaneld] 173.207.179.30 - simpurity "GET /login/?login_only=1&user=simpurity&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpurity (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.221.18.99
country_id: 6252001
description:
[2025-12-02 13:12:54 +0530] info [cpaneld] 72.221.18.99 - simpuri "GET /login/?login_only=1&user=simpuri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpuri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.150.116.94
country_id: 6252001
description:
[2025-12-02 13:12:57 +0530] info [cpaneld] 67.150.116.94 - simpu "GET /login/?login_only=1&user=simpu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.25.116.141
country_id: 6252001
description:
[2025-12-02 13:13:00 +0530] info [cpaneld] 73.25.116.141 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.92.32.42
country_id: 6252001
description:
[2025-12-02 13:13:05 +0530] info [cpaneld] 38.92.32.42 - secondcoffeeinternat "GET /login/?login_only=1&user=secondcoffeeinternat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcoffeeinternat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 208.161.86.88
country_id: 6252001
description:
[2025-12-02 13:12:24 +0530] info [cpaneld] 208.161.86.88 - colourmarkl "GET /login/?login_only=1&user=colourmarkl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colourmarkl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.58.103.197
country_id: 6252001
description:
[2025-12-02 13:12:47 +0530] info [cpaneld] 136.58.103.197 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.98.181.248
country_id: 6252001
description:
[2025-12-02 13:13:06 +0530] info [cpaneld] 75.98.181.248 - secondcoffeeinterna "GET /login/?login_only=1&user=secondcoffeeinterna&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcoffeeinterna (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.14.95.235
country_id: 6252001
description:
[2025-12-02 13:13:19 +0530] info [cpaneld] 73.14.95.235 - secondcof "GET /login/?login_only=1&user=secondcof&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcof (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.126.184.18
country_id: 6252001
description:
[2025-12-02 13:12:51 +0530] info [cpaneld] 172.126.184.18 - simpuritylk "GET /login/?login_only=1&user=simpuritylk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpuritylk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.190.117.135
country_id: 6252001
description:
[2025-12-02 13:12:59 +0530] info [cpaneld] 184.190.117.135 - sim "GET /login/?login_only=1&user=sim&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sim (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.34.94.91
country_id: 6252001
description:
[2025-12-02 13:13:04 +0530] info [whostmgrd] 98.34.94.91 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.26.129.123
country_id: 6252001
description:
[2025-12-02 13:13:14 +0530] info [cpaneld] 69.26.129.123 - secondcoffeei "GET /login/?login_only=1&user=secondcoffeei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcoffeei (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.110.148.74
country_id: 6252001
description:
[2025-12-02 13:13:18 +0530] info [cpaneld] 46.110.148.74 - secondcoff "GET /login/?login_only=1&user=secondcoff&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcoff (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 208.53.227.63
country_id: 6252001
description:
[2025-12-02 13:12:30 +0530] info [cpaneld] 208.53.227.63 - colou "GET /login/?login_only=1&user=colou&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.93.38.199
country_id: 6252001
description:
[2025-12-02 13:12:37 +0530] info [cpaneld] 73.93.38.199 - col "GET /login/?login_only=1&user=col&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user col (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.95.22.122
country_id: 6252001
description:
[2025-12-02 13:12:31 +0530] info [cpaneld] 76.95.22.122 - colo "GET /login/?login_only=1&user=colo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 8.22.68.200
country_id: 6252001
description:
[2025-12-02 13:12:51 +0530] info [whostmgrd] 8.22.68.200 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.129.205.83
country_id: 6252001
description:
[2025-12-02 13:13:00 +0530] info [cpaneld] 75.129.205.83 - si "GET /login/?login_only=1&user=si&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user si (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.105.115.116
country_id: 6252001
description:
[2025-12-02 13:13:01 +0530] info [cpaneld] 71.105.115.116 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.183.190.72
country_id: 6252001
description:
[2025-12-02 13:12:23 +0530] info [cpaneld] 67.183.190.72 - colourmarkla "GET /login/?login_only=1&user=colourmarkla&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colourmarkla (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.237.103.90
country_id: 6252001
description:
[2025-12-02 13:12:25 +0530] info [cpaneld] 76.237.103.90 - colourmar "GET /login/?login_only=1&user=colourmar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colourmar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.160.11.204
country_id: 6252001
description:
[2025-12-02 13:12:26 +0530] info [cpaneld] 73.160.11.204 - colourma "GET /login/?login_only=1&user=colourma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colourma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.160.180.156
country_id: 6252001
description:
[2025-12-02 13:12:53 +0530] info [cpaneld] 98.160.180.156 - simpurit "GET /login/?login_only=1&user=simpurit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.234.218.139
country_id: 6252001
description:
[2025-12-02 13:13:09 +0530] info [cpaneld] 66.234.218.139 - secondcoffeeinter "GET /login/?login_only=1&user=secondcoffeeinter&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcoffeeinter (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.97.3.15
country_id: 6252001
description:
[2025-12-02 13:13:11 +0530] info [cpaneld] 98.97.3.15 - secondcoffeeint "GET /login/?login_only=1&user=secondcoffeeint&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcoffeeint (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.135.184.205
country_id: 6252001
description:
[2025-12-02 13:12:56 +0530] info [cpaneld] 69.135.184.205 - simpur "GET /login/?login_only=1&user=simpur&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpur (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 162.227.20.179
country_id: 6252001
description:
[2025-12-02 13:13:02 +0530] info [cpaneld] 162.227.20.179 - secondcoffeeinternational "GET /login/?login_only=1&user=secondcoffeeinternational&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondcoffeeinternational (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.17.85.214
country_id: 6252001
description:
[2025-12-02 13:13:27 +0530] info [cpaneld] 108.17.85.214 - seco "GET /login/?login_only=1&user=seco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user seco (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.33.48.11
country_id: 6252001
description:
[2025-12-02 13:13:33 +0530] info [cpaneld] 76.33.48.11 - secondc1 "GET /login/?login_only=1&user=secondc1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondc1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.202.63.231
country_id: 6252001
description:
[2025-12-02 13:13:31 +0530] info [cpaneld] 73.202.63.231 - se "GET /login/?login_only=1&user=se&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user se (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.3.198.186
country_id: 6252001
description:
[2025-12-02 13:13:23 +0530] info [cpaneld] 104.3.198.186 - secondco "GET /login/?login_only=1&user=secondco&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.160.132.35
country_id: 6252001
description:
[2025-12-02 13:13:26 +0530] info [cpaneld] 174.160.132.35 - secon "GET /login/?login_only=1&user=secon&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secon (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.140.103.215
country_id: 6252001
description:
[2025-12-02 13:13:30 +0530] info [cpaneld] 73.140.103.215 - sec "GET /login/?login_only=1&user=sec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.195.101.101
country_id: 6252001
description:
[2025-12-02 13:13:33 +0530] info [cpaneld] 71.195.101.101 - secondc2 "GET /login/?login_only=1&user=secondc2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondc2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.143.2.227
country_id: 6252001
description:
[2025-12-02 13:13:24 +0530] info [cpaneld] 76.143.2.227 - second "GET /login/?login_only=1&user=second&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user second (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.15.188.50
country_id: 6252001
description:
[2025-12-02 13:13:23 +0530] info [cpaneld] 73.15.188.50 - secondc "GET /login/?login_only=1&user=secondc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user secondc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.99.144.27
country_id: 6252001
description:
[2025-12-02 13:14:52 +0530] info [cpaneld] 172.99.144.27 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 146.115.89.141
country_id: 6252001
description:
[2025-12-02 13:15:00 +0530] info [cpaneld] 146.115.89.141 - dataesit "GET /login/?login_only=1&user=dataesit&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.194.157.108
country_id: 6252001
description:
[2025-12-02 13:15:01 +0530] info [cpaneld] 38.194.157.108 - dataesi "GET /login/?login_only=1&user=dataesi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dataesi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.50.54.9
country_id: 6252001
description:
[2025-12-02 13:15:06 +0530] info [cpaneld] 76.50.54.9 - dat "GET /login/?login_only=1&user=dat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.206.135.155
country_id: 6252001
description:
[2025-12-02 13:14:53 +0530] info [cpaneld] 73.206.135.155 - dataesite "GET /login/?login_only=1&user=dataesite&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dataesite (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 150.221.218.111
country_id: 6252001
description:
[2025-12-02 13:15:03 +0530] info [cpaneld] 150.221.218.111 - dataes "GET /login/?login_only=1&user=dataes&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dataes (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.135.156.188
country_id: 6252001
description:
[2025-12-02 13:15:05 +0530] info [cpaneld] 71.135.156.188 - data "GET /login/?login_only=1&user=data&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user data (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.248.160.180
country_id: 6252001
description:
[2025-12-02 13:14:54 +0530] info [whostmgrd] 67.248.160.180 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.133.6.223
country_id: 6252001
description:
[2025-12-02 13:14:59 +0530] info [cpaneld] 47.133.6.223 - dataesitelk "GET /login/?login_only=1&user=dataesitelk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dataesitelk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.116.188.54
country_id: 6252001
description:
[2025-12-02 13:15:04 +0530] info [cpaneld] 73.116.188.54 - datae "GET /login/?login_only=1&user=datae&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user datae (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.241.227.50
country_id: 6252001
description:
[2025-12-02 13:15:07 +0530] info [cpaneld] 72.241.227.50 - da "GET /login/?login_only=1&user=da&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user da (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.244.240.61
country_id: 6252001
description:
[2025-12-02 13:14:49 +0530] info [cpaneld] 96.244.240.61 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.148.100.243
country_id: 6252001
description:
[2025-12-02 13:16:20 +0530] info [cpaneld] 73.148.100.243 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 146.56.47.137
country_id: 1835841
description:
Dec  2 13:15:57 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<sales@melanifinefood.com>, method=PLAIN, rip=146.56.47.137, lip=66.85.158.91, session=<c4EmSfNEqMaSOC+J>


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.32.217.140
country_id: 6252001
description:
[2025-12-02 13:16:24 +0530] info [whostmgrd] 75.32.217.140 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 23.242.116.252
country_id: 6252001
description:
[2025-12-02 13:16:31 +0530] info [cpaneld] 23.242.116.252 - syste "GET /login/?login_only=1&user=syste&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user syste (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.133.212.153
country_id: 6252001
description:
[2025-12-02 13:16:30 +0530] info [cpaneld] 107.133.212.153 - system "GET /login/?login_only=1&user=system&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user system (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.3.84.240
country_id: 6252001
description:
[2025-12-02 13:16:32 +0530] info [cpaneld] 107.3.84.240 - sys "GET /login/?login_only=1&user=sys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.149.9.56
country_id: 6252001
description:
[2025-12-02 13:17:13 +0530] info [cpaneld] 47.149.9.56 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 162.195.229.164
country_id: 6252001
description:
[2025-12-02 13:16:23 +0530] info [cpaneld] 162.195.229.164 - systemtec "GET /login/?login_only=1&user=systemtec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user systemtec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.220.180.8
country_id: 6252001
description:
[2025-12-02 13:16:25 +0530] info [cpaneld] 104.220.180.8 - systemteclk "GET /login/?login_only=1&user=systemteclk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user systemteclk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.166.20.231
country_id: 6252001
description:
[2025-12-02 13:16:28 +0530] info [cpaneld] 67.166.20.231 - systemte "GET /login/?login_only=1&user=systemte&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.151.37.112
country_id: 6252001
description:
[2025-12-02 13:17:17 +0530] info [cpaneld] 47.151.37.112 - dragon "GET /login/?login_only=1&user=dragon&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.110.153.128
country_id: 6252001
description:
[2025-12-02 13:17:16 +0530] info [cpaneld] 74.110.153.128 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.62.134.75
country_id: 6252001
description:
[2025-12-02 13:16:29 +0530] info [cpaneld] 24.62.134.75 - systemt "GET /login/?login_only=1&user=systemt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user systemt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.144.50.128
country_id: 6252001
description:
[2025-12-02 13:16:31 +0530] info [cpaneld] 35.144.50.128 - syst "GET /login/?login_only=1&user=syst&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user syst (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.248.41.41
country_id: 6252001
description:
[2025-12-02 13:16:33 +0530] info [cpaneld] 167.248.41.41 - sy "GET /login/?login_only=1&user=sy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sy (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.208.160.136
country_id: 6252001
description:
[2025-12-02 13:17:20 +0530] info [whostmgrd] 73.208.160.136 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.146.154.195
country_id: 6252001
description:
[2025-12-02 13:16:21 +0530] info [cpaneld] 47.146.154.195 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.249.35.220
country_id: 6252001
description:
[2025-12-02 13:17:55 +0530] info [cpaneld] 67.249.35.220 - ka "GET /login/?login_only=1&user=ka&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ka (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.244.25.91
country_id: 6252001
description:
[2025-12-02 13:17:25 +0530] info [cpaneld] 74.244.25.91 - dra "GET /login/?login_only=1&user=dra&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dra (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.27.107.105
country_id: 6252001
description:
[2025-12-02 13:17:47 +0530] info [cpaneld] 47.27.107.105 - kamechot "GET /login/?login_only=1&user=kamechot&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.135.223.28
country_id: 6252001
description:
[2025-12-02 13:17:50 +0530] info [cpaneld] 71.135.223.28 - kamec "GET /login/?login_only=1&user=kamec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kamec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.114.252.211
country_id: 6252001
description:
[2025-12-02 13:17:52 +0530] info [cpaneld] 68.114.252.211 - kame "GET /login/?login_only=1&user=kame&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kame (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.197.28.183
country_id: 6252001
description:
[2025-12-02 13:17:56 +0530] info [cpaneld] 108.197.28.183 - kamecho1 "GET /login/?login_only=1&user=kamecho1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kamecho1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.230.64.158
country_id: 6252001
description:
[2025-12-02 13:17:22 +0530] info [cpaneld] 47.230.64.158 - drago "GET /login/?login_only=1&user=drago&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user drago (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.146.116.52
country_id: 6252001
description:
[2025-12-02 13:17:21 +0530] info [cpaneld] 35.146.116.52 - dragonlk "GET /login/?login_only=1&user=dragonlk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dragonlk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.197.105.92
country_id: 6252001
description:
[2025-12-02 13:17:23 +0530] info [cpaneld] 209.197.105.92 - drag "GET /login/?login_only=1&user=drag&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user drag (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.168.115.71
country_id: 6252001
description:
[2025-12-02 13:17:39 +0530] info [cpaneld] 24.168.115.71 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.229.243.60
country_id: 6252001
description:
[2025-12-02 13:17:45 +0530] info [cpaneld] 70.229.243.60 - kamechotec "GET /login/?login_only=1&user=kamechotec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kamechotec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.177.13.133
country_id: 6252001
description:
[2025-12-02 13:17:57 +0530] info [cpaneld] 66.177.13.133 - kamecho2 "GET /login/?login_only=1&user=kamecho2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kamecho2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.159.151.103
country_id: 6252001
description:
[2025-12-02 13:17:42 +0530] info [whostmgrd] 72.159.151.103 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.9.164.202
country_id: 6252001
description:
[2025-12-02 13:17:41 +0530] info [cpaneld] 73.9.164.202 - kamechotech "GET /login/?login_only=1&user=kamechotech&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kamechotech (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.183.12.97
country_id: 6252001
description:
[2025-12-02 13:17:44 +0530] info [cpaneld] 97.183.12.97 - kamechotechcom "GET /login/?login_only=1&user=kamechotechcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kamechotechcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.97.154.104
country_id: 6252001
description:
[2025-12-02 13:17:46 +0530] info [cpaneld] 98.97.154.104 - kamechote "GET /login/?login_only=1&user=kamechote&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kamechote (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.127.73.197
country_id: 6252001
description:
[2025-12-02 13:17:49 +0530] info [cpaneld] 70.127.73.197 - kamecho "GET /login/?login_only=1&user=kamecho&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kamecho (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.235.14.174
country_id: 6252001
description:
[2025-12-02 13:17:26 +0530] info [cpaneld] 73.235.14.174 - dr "GET /login/?login_only=1&user=dr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.221.177.90
country_id: 6252001
description:
[2025-12-02 13:17:40 +0530] info [cpaneld] 172.221.177.90 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.240.124.203
country_id: 6252001
description:
[2025-12-02 13:17:50 +0530] info [cpaneld] 76.240.124.203 - kamech "GET /login/?login_only=1&user=kamech&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kamech (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.20.49.33
country_id: 6252001
description:
[2025-12-02 13:17:53 +0530] info [cpaneld] 98.20.49.33 - kam "GET /login/?login_only=1&user=kam&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kam (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.51.227.201
country_id: 6252001
description:
[2025-12-02 13:19:07 +0530] info [cpaneld] 75.51.227.201 - simpleengineerin "GET /login/?login_only=1&user=simpleengineerin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: User simpleengineerin has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 198.72.191.189
country_id: 6252001
description:
[2025-12-02 13:19:06 +0530] info [cpaneld] 198.72.191.189 - simpleengineeringlk "GET /login/?login_only=1&user=simpleengineeringlk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpleengineeringlk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.222.252.83
country_id: 6252001
description:
[2025-12-02 13:19:09 +0530] info [cpaneld] 129.222.252.83 - simpleengineer "GET /login/?login_only=1&user=simpleengineer&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpleengineer (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 162.249.101.80
country_id: 6252001
description:
[2025-12-02 13:19:05 +0530] info [whostmgrd] 162.249.101.80 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.194.159.221
country_id: 6252001
description:
[2025-12-02 13:19:03 +0530] info [cpaneld] 38.194.159.221 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.250.84.71
country_id: 6252001
description:
[2025-12-02 13:19:11 +0530] info [cpaneld] 172.250.84.71 - simpleengine "GET /login/?login_only=1&user=simpleengine&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpleengine (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 135.134.177.26
country_id: 6252001
description:
[2025-12-02 13:19:12 +0530] info [cpaneld] 135.134.177.26 - simpleengi "GET /login/?login_only=1&user=simpleengi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpleengi (has_cpuser_file failed)


plugin: ossec
rule: 5718
name: Attempt to login using a denied user.
abuser: 62.60.135.105
country_id: 130758
description:
Dec  2 13:18:53 host2 sshd[1797358]: User agentallianz from 62.60.135.105 not allowed because a group is listed in DenyGroups


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 23.93.212.178
country_id: 6252001
description:
[2025-12-02 13:19:04 +0530] info [cpaneld] 23.93.212.178 - simpleengineering "GET /login/?login_only=1&user=simpleengineering&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpleengineering (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.41.172.24
country_id: 6252001
description:
[2025-12-02 13:19:08 +0530] info [cpaneld] 47.41.172.24 - simpleengineeri "GET /login/?login_only=1&user=simpleengineeri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpleengineeri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 148.170.98.121
country_id: 6252001
description:
[2025-12-02 13:19:10 +0530] info [cpaneld] 148.170.98.121 - simpleenginee "GET /login/?login_only=1&user=simpleenginee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpleenginee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.237.210.153
country_id: 6252001
description:
[2025-12-02 13:19:11 +0530] info [cpaneld] 108.237.210.153 - simpleengin "GET /login/?login_only=1&user=simpleengin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpleengin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.190.18.167
country_id: 6252001
description:
[2025-12-02 13:19:14 +0530] info [cpaneld] 67.190.18.167 - simpleeng "GET /login/?login_only=1&user=simpleeng&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpleeng (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.61.81.184
country_id: 6252001
description:
[2025-12-02 13:19:21 +0530] info [cpaneld] 73.61.81.184 - simpleen "GET /login/?login_only=1&user=simpleen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpleen (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.40.228.30
country_id: 6252001
description:
[2025-12-02 13:19:02 +0530] info [cpaneld] 173.40.228.30 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.103.199.62
country_id: 6252001
description:
[2025-12-02 13:19:59 +0530] info [cpaneld] 74.103.199.62 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.80.109.47
country_id: 6252001
description:
[2025-12-02 13:20:06 +0530] info [whostmgrd] 173.80.109.47 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.22.38.24
country_id: 6252001
description:
[2025-12-02 13:20:10 +0530] info [cpaneld] 64.22.38.24 - asrgr "GET /login/?login_only=1&user=asrgr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user asrgr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.148.218.98
country_id: 6252001
description:
[2025-12-02 13:20:12 +0530] info [cpaneld] 47.148.218.98 - asr "GET /login/?login_only=1&user=asr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user asr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.14.152.216
country_id: 6252001
description:
[2025-12-02 13:19:24 +0530] info [cpaneld] 100.14.152.216 - simple "GET /login/?login_only=1&user=simple&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simple (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.94.8.253
country_id: 6252001
description:
[2025-12-02 13:19:26 +0530] info [cpaneld] 76.94.8.253 - sim "GET /login/?login_only=1&user=sim&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sim (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.61.16.196
country_id: 6252001
description:
[2025-12-02 13:20:10 +0530] info [cpaneld] 173.61.16.196 - asrgro "GET /login/?login_only=1&user=asrgro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user asrgro (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 142.129.34.188
country_id: 6252001
description:
[2025-12-02 13:20:11 +0530] info [cpaneld] 142.129.34.188 - asrg "GET /login/?login_only=1&user=asrg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user asrg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.25.17.178
country_id: 6252001
description:
[2025-12-02 13:19:22 +0530] info [cpaneld] 108.25.17.178 - simplee "GET /login/?login_only=1&user=simplee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simplee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.180.252.149
country_id: 6252001
description:
[2025-12-02 13:19:25 +0530] info [cpaneld] 73.180.252.149 - simp "GET /login/?login_only=1&user=simp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.164.18.175
country_id: 6252001
description:
[2025-12-02 13:20:04 +0530] info [cpaneld] 97.164.18.175 - asrgroup "GET /login/?login_only=1&user=asrgroup&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.33.64.107
country_id: 6252001
description:
[2025-12-02 13:19:30 +0530] info [cpaneld] 76.33.64.107 - simplee2 "GET /login/?login_only=1&user=simplee2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simplee2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.149.209.152
country_id: 6252001
description:
[2025-12-02 13:19:30 +0530] info [cpaneld] 47.149.209.152 - simplee1 "GET /login/?login_only=1&user=simplee1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simplee1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.185.229.21
country_id: 6252001
description:
[2025-12-02 13:20:13 +0530] info [cpaneld] 47.185.229.21 - as "GET /login/?login_only=1&user=as&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user as (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.241.227.50
country_id: 6252001
description:
[2025-12-02 13:20:09 +0530] info [cpaneld] 72.241.227.50 - asrgrou "GET /login/?login_only=1&user=asrgrou&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user asrgrou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.142.156.250
country_id: 6252001
description:
[2025-12-02 13:20:07 +0530] info [cpaneld] 76.142.156.250 - asrgrouplk "GET /login/?login_only=1&user=asrgrouplk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user asrgrouplk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.170.53.184
country_id: 6252001
description:
[2025-12-02 13:19:24 +0530] info [cpaneld] 70.170.53.184 - simpl "GET /login/?login_only=1&user=simpl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user simpl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.224.174.97
country_id: 6252001
description:
[2025-12-02 13:19:29 +0530] info [cpaneld] 97.224.174.97 - si "GET /login/?login_only=1&user=si&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user si (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.97.161.104
country_id: 6252001
description:
[2025-12-02 13:20:01 +0530] info [cpaneld] 99.97.161.104 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.233.200.33
country_id: 6252001
description:
[2025-12-02 13:25:14 +0530] info [cpaneld] 76.233.200.33 - anandao1 "GET /login/?login_only=1&user=anandao1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anandao1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.149.125.155
country_id: 6252001
description:
[2025-12-02 13:24:52 +0530] info [whostmgrd] 98.149.125.155 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.168.103.22
country_id: 6252001
description:
[2025-12-02 13:24:56 +0530] info [cpaneld] 76.168.103.22 - weeratrad "GET /login/?login_only=1&user=weeratrad&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user weeratrad (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.189.26
country_id: 6252001
description:
[2025-12-02 13:25:04 +0530] info [cpaneld] 172.56.189.26 - weeratr1 "GET /login/?login_only=1&user=weeratr1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user weeratr1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.185.98.124
country_id: 6252001
description:
[2025-12-02 13:25:06 +0530] info [cpaneld] 73.185.98.124 - anan "GET /login/?login_only=1&user=anan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.210.251.195
country_id: 6252001
description:
[2025-12-02 13:25:00 +0530] info [cpaneld] 73.210.251.195 - anandaob "GET /login/?login_only=1&user=anandaob&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.149.153.218
country_id: 6252001
description:
[2025-12-02 13:25:00 +0530] info [cpaneld] 47.149.153.218 - weer "GET /login/?login_only=1&user=weer&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user weer (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.226.32.121
country_id: 6252001
description:
[2025-12-02 13:24:51 +0530] info [cpaneld] 64.226.32.121 - weeratrading "GET /login/?login_only=1&user=weeratrading&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user weeratrading (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.159.142.172
country_id: 6252001
description:
[2025-12-02 13:24:53 +0530] info [cpaneld] 50.159.142.172 - weeratradingcom "GET /login/?login_only=1&user=weeratradingcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user weeratradingcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.109.210.63
country_id: 6252001
description:
[2025-12-02 13:24:58 +0530] info [cpaneld] 98.109.210.63 - anandaobau "GET /login/?login_only=1&user=anandaobau&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anandaobau (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.168.180.255
country_id: 6252001
description:
[2025-12-02 13:24:59 +0530] info [cpaneld] 67.168.180.255 - anandaoba "GET /login/?login_only=1&user=anandaoba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anandaoba (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.208.173.11
country_id: 6252001
description:
[2025-12-02 13:24:51 +0530] info [cpaneld] 72.208.173.11 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.49.15.39
country_id: 6252001
description:
[2025-12-02 13:24:56 +0530] info [cpaneld] 98.49.15.39 - anandaobauaeorg "GET /login/?login_only=1&user=anandaobauaeorg&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anandaobauaeorg (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.13.67.175
country_id: 6252001
description:
[2025-12-02 13:24:50 +0530] info [cpaneld] 99.13.67.175 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.160.119.225
country_id: 6252001
description:
[2025-12-02 13:24:53 +0530] info [cpaneld] 108.160.119.225 - weeratradin "GET /login/?login_only=1&user=weeratradin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user weeratradin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.228.56.130
country_id: 6252001
description:
[2025-12-02 13:25:15 +0530] info [cpaneld] 216.228.56.130 - anandao2 "GET /login/?login_only=1&user=anandao2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anandao2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.243.97.72
country_id: 6252001
description:
[2025-12-02 13:24:58 +0530] info [cpaneld] 24.243.97.72 - weeratr "GET /login/?login_only=1&user=weeratr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user weeratr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.48.196.59
country_id: 6252001
description:
[2025-12-02 13:25:00 +0530] info [cpaneld] 108.48.196.59 - weera "GET /login/?login_only=1&user=weera&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user weera (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.104.144.2
country_id: 6252001
description:
[2025-12-02 13:25:02 +0530] info [cpaneld] 97.104.144.2 - wee "GET /login/?login_only=1&user=wee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user wee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.210.245.102
country_id: 6252001
description:
[2025-12-02 13:24:46 +0530] info [cpaneld] 73.210.245.102 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.34.247.98
country_id: 6252001
description:
[2025-12-02 13:24:50 +0530] info [cpaneld] 76.34.247.98 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.232.112.2
country_id: 6252001
description:
[2025-12-02 13:24:54 +0530] info [cpaneld] 96.232.112.2 - weeratradi "GET /login/?login_only=1&user=weeratradi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user weeratradi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.193.116.49
country_id: 6252001
description:
[2025-12-02 13:24:53 +0530] info [whostmgrd] 72.193.116.49 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.185.74.116
country_id: 6252001
description:
[2025-12-02 13:24:57 +0530] info [cpaneld] 47.185.74.116 - anandaobaua "GET /login/?login_only=1&user=anandaobaua&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anandaobaua (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.112.156.96
country_id: 6252001
description:
[2025-12-02 13:25:03 +0530] info [cpaneld] 73.112.156.96 - ananda "GET /login/?login_only=1&user=ananda&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ananda (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.214.163.30
country_id: 6252001
description:
[2025-12-02 13:25:03 +0530] info [cpaneld] 98.214.163.30 - we "GET /login/?login_only=1&user=we&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user we (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.169.45.220
country_id: 6252001
description:
[2025-12-02 13:25:05 +0530] info [cpaneld] 67.169.45.220 - anand "GET /login/?login_only=1&user=anand&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anand (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 206.174.167.215
country_id: 6252001
description:
[2025-12-02 13:25:07 +0530] info [cpaneld] 206.174.167.215 - ana "GET /login/?login_only=1&user=ana&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ana (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.141.38.46
country_id: 6252001
description:
[2025-12-02 13:24:57 +0530] info [cpaneld] 47.141.38.46 - weeratra "GET /login/?login_only=1&user=weeratra&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.39.223.159
country_id: 6252001
description:
[2025-12-02 13:25:01 +0530] info [cpaneld] 64.39.223.159 - anandao "GET /login/?login_only=1&user=anandao&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anandao (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.45.153.88
country_id: 6252001
description:
[2025-12-02 13:25:10 +0530] info [cpaneld] 24.45.153.88 - an "GET /login/?login_only=1&user=an&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user an (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.160.143.126
country_id: 6252001
description:
[2025-12-02 13:24:52 +0530] info [cpaneld] 70.160.143.126 - anandaobauae "GET /login/?login_only=1&user=anandaobauae&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user anandaobauae (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 23.125.253.240
country_id: 6252001
description:
[2025-12-02 13:24:59 +0530] info [cpaneld] 23.125.253.240 - weerat "GET /login/?login_only=1&user=weerat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user weerat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.2.130.121
country_id: 6252001
description:
[2025-12-02 13:25:09 +0530] info [cpaneld] 24.2.130.121 - weeratr2 "GET /login/?login_only=1&user=weeratr2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user weeratr2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.171.220
country_id: 6252001
description:
[2025-12-02 13:25:45 +0530] info [cpaneld] 172.56.171.220 - seyawincom "GET /login/?login_only=1&user=seyawincom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user seyawincom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.85.68.229
country_id: 6252001
description:
[2025-12-02 13:25:47 +0530] info [cpaneld] 67.85.68.229 - seyaw "GET /login/?login_only=1&user=seyaw&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user seyaw (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.228.35.8
country_id: 6252001
description:
[2025-12-02 13:25:51 +0530] info [cpaneld] 129.228.35.8 - sey "GET /login/?login_only=1&user=sey&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sey (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.254.97.169
country_id: 6252001
description:
[2025-12-02 13:25:42 +0530] info [cpaneld] 76.254.97.169 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.115.197.124
country_id: 6252001
description:
[2025-12-02 13:25:43 +0530] info [cpaneld] 75.115.197.124 - seyawin "GET /login/?login_only=1&user=seyawin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user seyawin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.80.186.16
country_id: 6252001
description:
[2025-12-02 13:25:44 +0530] info [whostmgrd] 69.80.186.16 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.80.66.23
country_id: 6252001
description:
[2025-12-02 13:25:46 +0530] info [cpaneld] 71.80.66.23 - seyawi "GET /login/?login_only=1&user=seyawi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user seyawi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.193.59.63
country_id: 6252001
description:
[2025-12-02 13:25:48 +0530] info [cpaneld] 73.193.59.63 - seya "GET /login/?login_only=1&user=seya&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user seya (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.148.209.217
country_id: 6252001
description:
[2025-12-02 13:25:56 +0530] info [cpaneld] 47.148.209.217 - sey "GET /login/?login_only=1&user=sey&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sey (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.32.250.174
country_id: 6252001
description:
[2025-12-02 13:25:57 +0530] info [cpaneld] 76.32.250.174 - se "GET /login/?login_only=1&user=se&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user se (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.10.27.20
country_id: 6252001
description:
[2025-12-02 13:25:39 +0530] info [cpaneld] 172.10.27.20 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.109.150.78
country_id: 6252001
description:
[2025-12-02 13:26:56 +0530] info [cpaneld] 143.109.150.78 - kiriaswan "GET /login/?login_only=1&user=kiriaswan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kiriaswan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.170.149.243
country_id: 6252001
description:
[2025-12-02 13:27:03 +0530] info [cpaneld] 173.170.149.243 - kiria "GET /login/?login_only=1&user=kiria&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kiria (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.70.107.80
country_id: 6252001
description:
[2025-12-02 13:27:15 +0530] info [cpaneld] 174.70.107.80 - kiriasw2 "GET /login/?login_only=1&user=kiriasw2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kiriasw2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.68.38.119
country_id: 6252001
description:
[2025-12-02 13:27:14 +0530] info [cpaneld] 99.68.38.119 - kiriasw1 "GET /login/?login_only=1&user=kiriasw1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kiriasw1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.111.146.154
country_id: 6252001
description:
[2025-12-02 13:26:52 +0530] info [cpaneld] 73.111.146.154 - kiriaswanu "GET /login/?login_only=1&user=kiriaswanu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kiriaswanu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.62.133.46
country_id: 6252001
description:
[2025-12-02 13:26:54 +0530] info [cpaneld] 38.62.133.46 - kiriaswanucom "GET /login/?login_only=1&user=kiriaswanucom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kiriaswanucom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.133.104.212
country_id: 6252001
description:
[2025-12-02 13:27:00 +0530] info [cpaneld] 76.133.104.212 - kiriasw "GET /login/?login_only=1&user=kiriasw&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kiriasw (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.179.141.95
country_id: 6252001
description:
[2025-12-02 13:27:01 +0530] info [cpaneld] 174.179.141.95 - kirias "GET /login/?login_only=1&user=kirias&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kirias (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.9.142.5
country_id: 6252001
description:
[2025-12-02 13:27:10 +0530] info [cpaneld] 73.9.142.5 - ki "GET /login/?login_only=1&user=ki&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ki (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.66.116.58
country_id: 6252001
description:
[2025-12-02 13:26:47 +0530] info [cpaneld] 173.66.116.58 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.81.250.211
country_id: 6252001
description:
[2025-12-02 13:26:51 +0530] info [cpaneld] 97.81.250.211 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 208.104.54.106
country_id: 6252001
description:
[2025-12-02 13:27:09 +0530] info [cpaneld] 208.104.54.106 - kir "GET /login/?login_only=1&user=kir&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kir (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.96.232
country_id: 6252001
description:
[2025-12-02 13:27:05 +0530] info [cpaneld] 172.59.96.232 - kiri "GET /login/?login_only=1&user=kiri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kiri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.103.9.246
country_id: 6252001
description:
[2025-12-02 13:26:53 +0530] info [whostmgrd] 76.103.9.246 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.169.234.58
country_id: 6252001
description:
[2025-12-02 13:26:57 +0530] info [cpaneld] 76.169.234.58 - kiriaswa "GET /login/?login_only=1&user=kiriaswa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.173.171.166
country_id: 6252001
description:
[2025-12-02 13:28:32 +0530] info [cpaneld] 104.173.171.166 - greentaraceyl "GET /login/?login_only=1&user=greentaraceyl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user greentaraceyl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.170.0.81
country_id: 6252001
description:
[2025-12-02 13:28:32 +0530] info [cpaneld] 70.170.0.81 - greentaracey "GET /login/?login_only=1&user=greentaracey&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user greentaracey (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.2.58.82
country_id: 6252001
description:
[2025-12-02 13:28:33 +0530] info [cpaneld] 104.2.58.82 - greentarace "GET /login/?login_only=1&user=greentarace&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user greentarace (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.234.150.88
country_id: 6252001
description:
[2025-12-02 13:28:42 +0530] info [cpaneld] 96.234.150.88 - greenta1 "GET /login/?login_only=1&user=greenta1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user greenta1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.133.128.25
country_id: 6252001
description:
[2025-12-02 13:28:29 +0530] info [whostmgrd] 76.133.128.25 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 138.43.94.43
country_id: 6252001
description:
[2025-12-02 13:28:31 +0530] info [cpaneld] 138.43.94.43 - greentaraceylo "GET /login/?login_only=1&user=greentaraceylo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user greentaraceylo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.142.144.116
country_id: 6252001
description:
[2025-12-02 13:28:30 +0530] info [cpaneld] 35.142.144.116 - greentaraceyloncom "GET /login/?login_only=1&user=greentaraceyloncom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user greentaraceyloncom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.85.93.146
country_id: 6252001
description:
[2025-12-02 13:28:36 +0530] info [cpaneld] 67.85.93.146 - greentara "GET /login/?login_only=1&user=greentara&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user greentara (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.15.127.179
country_id: 6252001
description:
[2025-12-02 13:28:40 +0530] info [cpaneld] 73.15.127.179 - gree "GET /login/?login_only=1&user=gree&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gree (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.136.53.177
country_id: 6252001
description:
[2025-12-02 13:28:25 +0530] info [cpaneld] 73.136.53.177 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.118.19.103
country_id: 6252001
description:
[2025-12-02 13:28:27 +0530] info [cpaneld] 172.118.19.103 - greentaraceylon "GET /login/?login_only=1&user=greentaraceylon&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user greentaraceylon (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.31.39.176
country_id: 6252001
description:
[2025-12-02 13:28:34 +0530] info [cpaneld] 76.31.39.176 - greentarac "GET /login/?login_only=1&user=greentarac&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user greentarac (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.80.204.59
country_id: 6252001
description:
[2025-12-02 13:28:39 +0530] info [cpaneld] 73.80.204.59 - green "GET /login/?login_only=1&user=green&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user green (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 135.135.75.222
country_id: 6252001
description:
[2025-12-02 13:28:38 +0530] info [cpaneld] 135.135.75.222 - greent "GET /login/?login_only=1&user=greent&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user greent (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.105.247.54
country_id: 6252001
description:
[2025-12-02 13:28:26 +0530] info [cpaneld] 143.105.247.54 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.169.120.156
country_id: 6252001
description:
[2025-12-02 13:28:36 +0530] info [cpaneld] 209.169.120.156 - greentar "GET /login/?login_only=1&user=greentar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user greentar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.239.149.232
country_id: 6252001
description:
[2025-12-02 13:28:37 +0530] info [cpaneld] 71.239.149.232 - greenta "GET /login/?login_only=1&user=greenta&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user greenta (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.32.80.130
country_id: 6252001
description:
[2025-12-02 13:28:41 +0530] info [cpaneld] 76.32.80.130 - gre "GET /login/?login_only=1&user=gre&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gre (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.93.122.133
country_id: 6252001
description:
[2025-12-02 13:28:42 +0530] info [cpaneld] 73.93.122.133 - gr "GET /login/?login_only=1&user=gr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.131.140.42
country_id: 6252001
description:
[2025-12-02 13:28:43 +0530] info [cpaneld] 75.131.140.42 - greenta2 "GET /login/?login_only=1&user=greenta2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user greenta2 (has_cpuser_file failed)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 23.95.63.99
country_id: 6252001
description:
Dec  2 13:30:13 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<info@agronatureholdings.com>, method=PLAIN, rip=23.95.63.99, lip=66.85.158.91, session=<I7MSfPNE+KMXXz9j>


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.131.115.234
country_id: 6252001
description:
[2025-12-02 13:31:38 +0530] info [cpaneld] 72.131.115.234 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 65.255.79.128
country_id: 6252001
description:
[2025-12-02 13:31:53 +0530] info [cpaneld] 65.255.79.128 - gnetuniver "GET /login/?login_only=1&user=gnetuniver&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gnetuniver (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 180.181.2.192
country_id: 6252001
description:
[2025-12-02 13:31:57 +0530] info [cpaneld] 180.181.2.192 - gnetun "GET /login/?login_only=1&user=gnetun&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gnetun (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.7.32.247
country_id: 6252001
description:
[2025-12-02 13:32:04 +0530] info [cpaneld] 68.7.32.247 - saar "GET /login/?login_only=1&user=saar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user saar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.229.250.181
country_id: 6252001
description:
[2025-12-02 13:31:40 +0530] info [cpaneld] 73.229.250.181 - gnetuniversals "GET /login/?login_only=1&user=gnetuniversals&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.149.26.78
country_id: 6252001
description:
[2025-12-02 13:31:39 +0530] info [cpaneld] 35.149.26.78 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.9.90.46
country_id: 6252001
description:
[2025-12-02 13:32:01 +0530] info [cpaneld] 66.9.90.46 - gnetu "GET /login/?login_only=1&user=gnetu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gnetu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.90.185.146
country_id: 6252001
description:
[2025-12-02 13:31:44 +0530] info [cpaneld] 73.90.185.146 - gnetuniversalscom "GET /login/?login_only=1&user=gnetuniversalscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gnetuniversalscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 149.19.121.28
country_id: 6252001
description:
[2025-12-02 13:31:50 +0530] info [cpaneld] 149.19.121.28 - gnetuniversa "GET /login/?login_only=1&user=gnetuniversa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gnetuniversa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.35.31.88
country_id: 6252001
description:
[2025-12-02 13:31:53 +0530] info [cpaneld] 68.35.31.88 - gnetunivers "GET /login/?login_only=1&user=gnetunivers&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gnetunivers (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.169.118.26
country_id: 6252001
description:
[2025-12-02 13:31:55 +0530] info [cpaneld] 67.169.118.26 - gnetuniv "GET /login/?login_only=1&user=gnetuniv&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gnetuniv (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.201.243.9
country_id: 6252001
description:
[2025-12-02 13:32:03 +0530] info [cpaneld] 71.201.243.9 - gne "GET /login/?login_only=1&user=gne&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gne (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.40.15.181
country_id: 6252001
description:
[2025-12-02 13:32:07 +0530] info [cpaneld] 173.40.15.181 - sa "GET /login/?login_only=1&user=sa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.222.165.113
country_id: 6252001
description:
[2025-12-02 13:31:53 +0530] info [cpaneld] 98.222.165.113 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.10.77.144
country_id: 6252001
description:
[2025-12-02 13:32:02 +0530] info [cpaneld] 24.10.77.144 - saaralk "GET /login/?login_only=1&user=saaralk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user saaralk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.151.252.246
country_id: 6252001
description:
[2025-12-02 13:32:06 +0530] info [cpaneld] 24.151.252.246 - gn "GET /login/?login_only=1&user=gn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.126.59.37
country_id: 6252001
description:
[2025-12-02 13:32:01 +0530] info [whostmgrd] 73.126.59.37 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.83.11.250
country_id: 6252001
description:
[2025-12-02 13:32:08 +0530] info [cpaneld] 73.83.11.250 - gnetuni2 "GET /login/?login_only=1&user=gnetuni2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gnetuni2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.92.21.77
country_id: 6252001
description:
[2025-12-02 13:32:02 +0530] info [cpaneld] 173.92.21.77 - gnet "GET /login/?login_only=1&user=gnet&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gnet (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.220.17.88
country_id: 6252001
description:
[2025-12-02 13:32:07 +0530] info [cpaneld] 98.220.17.88 - gnetuni1 "GET /login/?login_only=1&user=gnetuni1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gnetuni1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.59.215.217
country_id: 6252001
description:
[2025-12-02 13:31:54 +0530] info [cpaneld] 184.59.215.217 - gnetunive "GET /login/?login_only=1&user=gnetunive&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gnetunive (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.32.87.162
country_id: 6252001
description:
[2025-12-02 13:31:57 +0530] info [cpaneld] 76.32.87.162 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.222.45.248
country_id: 6252001
description:
[2025-12-02 13:32:05 +0530] info [cpaneld] 129.222.45.248 - saa "GET /login/?login_only=1&user=saa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user saa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.23.180.151
country_id: 6252001
description:
[2025-12-02 13:31:42 +0530] info [whostmgrd] 72.23.180.151 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.39.223.181
country_id: 6252001
description:
[2025-12-02 13:31:45 +0530] info [cpaneld] 64.39.223.181 - gnetuniversal "GET /login/?login_only=1&user=gnetuniversal&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user gnetuniversal (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.13.201.170
country_id: 6252001
description:
[2025-12-02 13:31:59 +0530] info [cpaneld] 72.13.201.170 - saara "GET /login/?login_only=1&user=saara&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.181.110.108
country_id: 6252001
description:
[2025-12-02 13:33:15 +0530] info [cpaneld] 67.181.110.108 - euroenterta "GET /login/?login_only=1&user=euroenterta&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroenterta (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.230.17.29
country_id: 6252001
description:
[2025-12-02 13:33:09 +0530] info [cpaneld] 47.230.17.29 - euroentertainmentl "GET /login/?login_only=1&user=euroentertainmentl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroentertainmentl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.215.108.87
country_id: 6252001
description:
[2025-12-02 13:33:12 +0530] info [cpaneld] 73.215.108.87 - euroentertainm "GET /login/?login_only=1&user=euroentertainm&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroentertainm (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.110.170.188
country_id: 6252001
description:
[2025-12-02 13:33:05 +0530] info [cpaneld] 216.110.170.188 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.57.128.244
country_id: 6252001
description:
[2025-12-02 13:33:11 +0530] info [cpaneld] 174.57.128.244 - euroentertainme "GET /login/?login_only=1&user=euroentertainme&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroentertainme (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.37.215.247
country_id: 6252001
description:
[2025-12-02 13:33:06 +0530] info [cpaneld] 100.37.215.247 - euroentertainmentlk "GET /login/?login_only=1&user=euroentertainmentlk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroentertainmentlk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.137.68.220
country_id: 6252001
description:
[2025-12-02 13:33:15 +0530] info [cpaneld] 73.137.68.220 - euroentertai "GET /login/?login_only=1&user=euroentertai&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroentertai (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 43.245.222.27
country_id: 1819730
description:
[2025-12-02 13:32:58 +0530] info [cpaneld] 43.245.222.27 - ceylon "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceylon (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.194.66.253
country_id: 6252001
description:
[2025-12-02 13:33:07 +0530] info [whostmgrd] 68.194.66.253 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 199.192.71.73
country_id: 6252001
description:
[2025-12-02 13:33:10 +0530] info [cpaneld] 199.192.71.73 - euroentertainmen "GET /login/?login_only=1&user=euroentertainmen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.144.164.241
country_id: 6252001
description:
[2025-12-02 13:33:10 +0530] info [cpaneld] 76.144.164.241 - euroentertainment "GET /login/?login_only=1&user=euroentertainment&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroentertainment (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.116.43.17
country_id: 6252001
description:
[2025-12-02 13:33:13 +0530] info [cpaneld] 172.116.43.17 - euroentertain "GET /login/?login_only=1&user=euroentertain&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroentertain (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.177.82.140
country_id: 6252001
description:
[2025-12-02 13:33:03 +0530] info [cpaneld] 76.177.82.140 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.91.205.69
country_id: 6252001
description:
[2025-12-02 13:33:08 +0530] info [cpaneld] 172.91.205.69 - euroentertainmentlkcom "GET /login/?login_only=1&user=euroentertainmentlkcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroentertainmentlkcom (has_cpuser_file failed)


plugin: ossec
rule: 5740
name: ssh connection reset by peer
description:
Dec  2 13:33:46 host2 sshd[1808758]: error: kex_exchange_identification: read: Connection reset by peer


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.243.73
country_id: 6252001
description:
[2025-12-02 13:33:29 +0530] info [cpaneld] 172.58.243.73 - euroen "GET /login/?login_only=1&user=euroen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroen (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.244.110.206
country_id: 6252001
description:
[2025-12-02 13:33:31 +0530] info [cpaneld] 74.244.110.206 - euro "GET /login/?login_only=1&user=euro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euro (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 143.105.191.213
country_id: 6252001
description:
[2025-12-02 13:33:33 +0530] info [cpaneld] 143.105.191.213 - euroent1 "GET /login/?login_only=1&user=euroent1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroent1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.215.186.223
country_id: 6252001
description:
[2025-12-02 13:33:27 +0530] info [cpaneld] 107.215.186.223 - euroent "GET /login/?login_only=1&user=euroent&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroent (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.14.219.253
country_id: 6252001
description:
[2025-12-02 13:33:32 +0530] info [cpaneld] 69.14.219.253 - eu "GET /login/?login_only=1&user=eu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user eu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 139.60.57.81
country_id: 6252001
description:
[2025-12-02 13:33:22 +0530] info [cpaneld] 139.60.57.81 - euroenter "GET /login/?login_only=1&user=euroenter&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroenter (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.138.169.148
country_id: 6252001
description:
[2025-12-02 13:33:30 +0530] info [cpaneld] 73.138.169.148 - euroe "GET /login/?login_only=1&user=euroe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.113.48.41
country_id: 6252001
description:
[2025-12-02 13:33:34 +0530] info [cpaneld] 24.113.48.41 - euroent2 "GET /login/?login_only=1&user=euroent2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroent2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.176.103.59
country_id: 6252001
description:
[2025-12-02 13:33:26 +0530] info [cpaneld] 72.176.103.59 - euroente "GET /login/?login_only=1&user=euroente&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroente (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.113.246.128
country_id: 6252001
description:
[2025-12-02 13:33:32 +0530] info [cpaneld] 69.113.246.128 - eur "GET /login/?login_only=1&user=eur&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user eur (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.228.42.124
country_id: 6252001
description:
[2025-12-02 13:33:21 +0530] info [cpaneld] 108.228.42.124 - euroentert "GET /login/?login_only=1&user=euroentert&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user euroentert (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 212.32.49.68
country_id: 6252001
description:
2025-12-02 13:35:14 dovecot_login authenticator failed for (ADMIN) [212.32.49.68]:50878: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.52.58.201
country_id: 6252001
description:
[2025-12-02 13:36:19 +0530] info [cpaneld] 184.52.58.201 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.23.68.78
country_id: 6252001
description:
[2025-12-02 13:36:21 +0530] info [cpaneld] 73.23.68.78 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.189.12.55
country_id: 6252001
description:
[2025-12-02 13:36:21 +0530] info [cpaneld] 173.189.12.55 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.51.68.5
country_id: 6252001
description:
[2025-12-02 13:36:22 +0530] info [cpaneld] 98.51.68.5 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.84.147.238
country_id: 6252001
description:
[2025-12-02 13:36:26 +0530] info [cpaneld] 76.84.147.238 - ksoftlk "GET /login/?login_only=1&user=ksoftlk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ksoftlk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 199.45.196.178
country_id: 6252001
description:
[2025-12-02 13:36:26 +0530] info [cpaneld] 199.45.196.178 - myproteinboxlk "GET /login/?login_only=1&user=myproteinboxlk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user myproteinboxlk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.105.4.11
country_id: 6252001
description:
[2025-12-02 13:36:36 +0530] info [cpaneld] 174.105.4.11 - sivagnanamfoundatio "GET /login/?login_only=1&user=sivagnanamfoundatio&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagnanamfoundatio (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.227.9
country_id: 6252001
description:
[2025-12-02 13:36:41 +0530] info [cpaneld] 172.59.227.9 - myprote1 "GET /login/?login_only=1&user=myprote1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user myprote1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.33.180.134
country_id: 6252001
description:
[2025-12-02 13:36:27 +0530] info [cpaneld] 76.33.180.134 - myproteinbo "GET /login/?login_only=1&user=myproteinbo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user myproteinbo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.118.209.239
country_id: 6252001
description:
[2025-12-02 13:36:30 +0530] info [cpaneld] 172.118.209.239 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.167.151
country_id: 6252001
description:
[2025-12-02 13:36:42 +0530] info [cpaneld] 172.58.167.151 - myprote2 "GET /login/?login_only=1&user=myprote2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user myprote2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.45.116.136
country_id: 6252001
description:
[2025-12-02 13:36:27 +0530] info [cpaneld] 99.45.116.136 - ksof "GET /login/?login_only=1&user=ksof&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ksof (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.243.246
country_id: 6252001
description:
[2025-12-02 13:36:30 +0530] info [cpaneld] 172.58.243.246 - myprotein "GET /login/?login_only=1&user=myprotein&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user myprotein (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 158.41.172.111
country_id: 6252001
description:
[2025-12-02 13:36:31 +0530] info [cpaneld] 158.41.172.111 - myprotei "GET /login/?login_only=1&user=myprotei&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user myprotei (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.160.170.10
country_id: 6252001
description:
[2025-12-02 13:36:32 +0530] info [cpaneld] 68.160.170.10 - myprote "GET /login/?login_only=1&user=myprote&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user myprote (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 135.135.178.239
country_id: 6252001
description:
[2025-12-02 13:36:37 +0530] info [cpaneld] 135.135.178.239 - mypr "GET /login/?login_only=1&user=mypr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mypr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.82.148.244
country_id: 6252001
description:
[2025-12-02 13:36:38 +0530] info [cpaneld] 108.82.148.244 - sivagnanamfoundat "GET /login/?login_only=1&user=sivagnanamfoundat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagnanamfoundat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.182.157.164
country_id: 6252001
description:
[2025-12-02 13:36:41 +0530] info [cpaneld] 75.182.157.164 - sivagnanamfoun "GET /login/?login_only=1&user=sivagnanamfoun&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagnanamfoun (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.36.97.112
country_id: 6252001
description:
[2025-12-02 13:37:03 +0530] info [cpaneld] 136.36.97.112 - sivagna2 "GET /login/?login_only=1&user=sivagna2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagna2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.150.146.149
country_id: 6252001
description:
[2025-12-02 13:36:25 +0530] info [whostmgrd] 35.150.146.149 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.90.19.114
country_id: 6252001
description:
[2025-12-02 13:36:31 +0530] info [cpaneld] 24.90.19.114 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.87.18.233
country_id: 6252001
description:
[2025-12-02 13:36:33 +0530] info [whostmgrd] 172.87.18.233 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 208.82.98.242
country_id: 6252001
description:
[2025-12-02 13:36:40 +0530] info [cpaneld] 208.82.98.242 - sivagnanamfound "GET /login/?login_only=1&user=sivagnanamfound&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagnanamfound (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.16.194.26
country_id: 6252001
description:
[2025-12-02 13:36:40 +0530] info [cpaneld] 100.16.194.26 - my "GET /login/?login_only=1&user=my&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user my (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.15.151.250
country_id: 6252001
description:
[2025-12-02 13:36:52 +0530] info [cpaneld] 73.15.151.250 - sivagnan "GET /login/?login_only=1&user=sivagnan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagnan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.114.146.125
country_id: 6252001
description:
[2025-12-02 13:36:53 +0530] info [cpaneld] 71.114.146.125 - sivagna "GET /login/?login_only=1&user=sivagna&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagna (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.193.77.17
country_id: 6252001
description:
[2025-12-02 13:36:32 +0530] info [cpaneld] 47.193.77.17 - sivagnanamfoundation "GET /login/?login_only=1&user=sivagnanamfoundation&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagnanamfoundation (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.190.146
country_id: 6252001
description:
[2025-12-02 13:36:23 +0530] info [cpaneld] 172.59.190.146 - ksoft "GET /login/?login_only=1&user=ksoft&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ksoft (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.32.50.21
country_id: 6252001
description:
[2025-12-02 13:36:24 +0530] info [whostmgrd] 76.32.50.21 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 166.70.229.219
country_id: 6252001
description:
[2025-12-02 13:36:39 +0530] info [cpaneld] 166.70.229.219 - sivagnanamfounda "GET /login/?login_only=1&user=sivagnanamfounda&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.188.75.111
country_id: 6252001
description:
[2025-12-02 13:36:45 +0530] info [cpaneld] 67.188.75.111 - sivagnanamf "GET /login/?login_only=1&user=sivagnanamf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagnanamf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.116.205.164
country_id: 6252001
description:
[2025-12-02 13:36:49 +0530] info [cpaneld] 172.116.205.164 - sivagnanam "GET /login/?login_only=1&user=sivagnanam&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagnanam (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.64.196.34
country_id: 6252001
description:
[2025-12-02 13:36:50 +0530] info [cpaneld] 108.64.196.34 - sivagnana "GET /login/?login_only=1&user=sivagnana&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagnana (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.150.245.69
country_id: 6252001
description:
[2025-12-02 13:36:55 +0530] info [cpaneld] 35.150.245.69 - sivag "GET /login/?login_only=1&user=sivag&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivag (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.56.249.28
country_id: 6252001
description:
[2025-12-02 13:36:24 +0530] info [cpaneld] 172.56.249.28 - myproteinbox "GET /login/?login_only=1&user=myproteinbox&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.236.94.65
country_id: 6252001
description:
[2025-12-02 13:36:29 +0530] info [cpaneld] 71.236.94.65 - myproteinb "GET /login/?login_only=1&user=myproteinb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user myproteinb (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.253.187.142
country_id: 6252001
description:
[2025-12-02 13:36:28 +0530] info [cpaneld] 24.253.187.142 - kso "GET /login/?login_only=1&user=kso&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kso (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.252.16.40
country_id: 6252001
description:
[2025-12-02 13:36:35 +0530] info [cpaneld] 68.252.16.40 - mypro "GET /login/?login_only=1&user=mypro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mypro (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.188.127.125
country_id: 6252001
description:
[2025-12-02 13:36:38 +0530] info [cpaneld] 97.188.127.125 - myp "GET /login/?login_only=1&user=myp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user myp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.186.238.185
country_id: 6252001
description:
[2025-12-02 13:37:02 +0530] info [cpaneld] 24.186.238.185 - sivagna1 "GET /login/?login_only=1&user=sivagna1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagna1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.12.227.52
country_id: 6252001
description:
[2025-12-02 13:36:57 +0530] info [cpaneld] 24.12.227.52 - siva "GET /login/?login_only=1&user=siva&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user siva (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.53.18.208
country_id: 6252001
description:
[2025-12-02 13:36:29 +0530] info [cpaneld] 108.53.18.208 - ks "GET /login/?login_only=1&user=ks&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ks (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.219.22
country_id: 6252001
description:
[2025-12-02 13:36:34 +0530] info [cpaneld] 172.59.219.22 - myprot "GET /login/?login_only=1&user=myprot&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user myprot (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.232.228.180
country_id: 6252001
description:
[2025-12-02 13:36:34 +0530] info [cpaneld] 71.232.228.180 - sivagnanamfoundationcom "GET /login/?login_only=1&user=sivagnanamfoundationcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagnanamfoundationcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.11.17.140
country_id: 6252001
description:
[2025-12-02 13:36:37 +0530] info [cpaneld] 99.11.17.140 - sivagnanamfoundati "GET /login/?login_only=1&user=sivagnanamfoundati&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagnanamfoundati (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.240.39.164
country_id: 6252001
description:
[2025-12-02 13:36:42 +0530] info [cpaneld] 173.240.39.164 - sivagnanamfou "GET /login/?login_only=1&user=sivagnanamfou&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagnanamfou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.1.28.186
country_id: 6252001
description:
[2025-12-02 13:36:44 +0530] info [cpaneld] 73.1.28.186 - sivagnanamfo "GET /login/?login_only=1&user=sivagnanamfo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagnanamfo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.185.1.238
country_id: 6252001
description:
[2025-12-02 13:36:54 +0530] info [cpaneld] 47.185.1.238 - sivagn "GET /login/?login_only=1&user=sivagn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sivagn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 23.121.161.67
country_id: 6252001
description:
[2025-12-02 13:36:58 +0530] info [cpaneld] 23.121.161.67 - siv "GET /login/?login_only=1&user=siv&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user siv (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.123.221.202
country_id: 6252001
description:
[2025-12-02 13:37:01 +0530] info [cpaneld] 73.123.221.202 - si "GET /login/?login_only=1&user=si&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user si (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.222.168.205
country_id: 6252001
description:
[2025-12-02 13:38:18 +0530] info [cpaneld] 216.222.168.205 - nsteele "GET /login/?login_only=1&user=nsteele&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nsteele (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.34.81.104
country_id: 6252001
description:
[2025-12-02 13:38:17 +0530] info [cpaneld] 76.34.81.104 - nsteelen "GET /login/?login_only=1&user=nsteelen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nsteelen (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.82.224.43
country_id: 6252001
description:
[2025-12-02 13:38:16 +0530] info [cpaneld] 174.82.224.43 - nsteelengcom "GET /login/?login_only=1&user=nsteelengcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nsteelengcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.151.102.205
country_id: 6252001
description:
[2025-12-02 13:38:14 +0530] info [cpaneld] 73.151.102.205 - nsteeleng "GET /login/?login_only=1&user=nsteeleng&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.3.4.94
country_id: 6252001
description:
[2025-12-02 13:38:15 +0530] info [whostmgrd] 99.3.4.94 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.4.248.125
country_id: 6252001
description:
[2025-12-02 13:38:19 +0530] info [cpaneld] 107.4.248.125 - nsteel "GET /login/?login_only=1&user=nsteel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nsteel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.187.182
country_id: 6252001
description:
[2025-12-02 13:38:12 +0530] info [cpaneld] 172.59.187.182 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 147.124.27.16
country_id: 6252001
description:
[2025-12-02 13:38:11 +0530] info [cpaneld] 147.124.27.16 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.164.18.210
country_id: 6252001
description:
[2025-12-02 13:38:26 +0530] info [cpaneld] 67.164.18.210 - nst "GET /login/?login_only=1&user=nst&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nst (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.186.27.48
country_id: 6252001
description:
[2025-12-02 13:38:29 +0530] info [cpaneld] 67.186.27.48 - ns "GET /login/?login_only=1&user=ns&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ns (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 192.184.225.255
country_id: 6252001
description:
[2025-12-02 13:38:22 +0530] info [cpaneld] 192.184.225.255 - nstee "GET /login/?login_only=1&user=nstee&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nstee (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.66.247.183
country_id: 6252001
description:
[2025-12-02 13:38:24 +0530] info [cpaneld] 173.66.247.183 - nste "GET /login/?login_only=1&user=nste&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user nste (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.214.175.132
country_id: 6252001
description:
[2025-12-02 13:41:13 +0530] info [cpaneld] 24.214.175.132 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.113.156.240
country_id: 6252001
description:
[2025-12-02 13:41:18 +0530] info [cpaneld] 24.113.156.240 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.135.12.174
country_id: 6252001
description:
[2025-12-02 13:41:19 +0530] info [cpaneld] 70.135.12.174 - neotechlk "GET /login/?login_only=1&user=neotechlk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user neotechlk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.117.36.62
country_id: 6252001
description:
[2025-12-02 13:41:21 +0530] info [cpaneld] 99.117.36.62 - neotechlkcom "GET /login/?login_only=1&user=neotechlkcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user neotechlkcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.100.195.143
country_id: 6252001
description:
[2025-12-02 13:41:20 +0530] info [whostmgrd] 99.100.195.143 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.72.248.114
country_id: 6252001
description:
[2025-12-02 13:41:29 +0530] info [cpaneld] 73.72.248.114 - ne "GET /login/?login_only=1&user=ne&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ne (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.210.51.140
country_id: 6252001
description:
[2025-12-02 13:41:27 +0530] info [cpaneld] 72.210.51.140 - neot "GET /login/?login_only=1&user=neot&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user neot (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.102.152.248
country_id: 6252001
description:
[2025-12-02 13:41:23 +0530] info [cpaneld] 50.102.152.248 - neotechl "GET /login/?login_only=1&user=neotechl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user neotechl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.220.2.240
country_id: 6252001
description:
[2025-12-02 13:41:24 +0530] info [cpaneld] 73.220.2.240 - neotech "GET /login/?login_only=1&user=neotech&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.186.73.204
country_id: 6252001
description:
[2025-12-02 13:41:26 +0530] info [cpaneld] 73.186.73.204 - neote "GET /login/?login_only=1&user=neote&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user neote (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.29.6.70
country_id: 6252001
description:
[2025-12-02 13:41:25 +0530] info [cpaneld] 108.29.6.70 - neotec "GET /login/?login_only=1&user=neotec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user neotec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.234.76.78
country_id: 6252001
description:
[2025-12-02 13:41:28 +0530] info [cpaneld] 70.234.76.78 - neo "GET /login/?login_only=1&user=neo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user neo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.168.85.13
country_id: 6252001
description:
[2025-12-02 13:43:45 +0530] info [cpaneld] 76.168.85.13 - agentallia "GET /login/?login_only=1&user=agentallia&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agentallia (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.167.222.223
country_id: 6252001
description:
[2025-12-02 13:44:07 +0530] info [whostmgrd] 69.167.222.223 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.35.139.6
country_id: 6252001
description:
[2025-12-02 13:44:13 +0530] info [cpaneld] 76.35.139.6 - dandag "GET /login/?login_only=1&user=dandag&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dandag (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.94.138.85
country_id: 6252001
description:
[2025-12-02 13:43:49 +0530] info [cpaneld] 97.94.138.85 - agental "GET /login/?login_only=1&user=agental&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agental (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.225.52.5
country_id: 6252001
description:
[2025-12-02 13:43:35 +0530] info [cpaneld] 97.225.52.5 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.114.117.31
country_id: 6252001
description:
[2025-12-02 13:43:39 +0530] info [whostmgrd] 71.114.117.31 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.69.195.32
country_id: 6252001
description:
[2025-12-02 13:43:46 +0530] info [cpaneld] 71.69.195.32 - agentalli "GET /login/?login_only=1&user=agentalli&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agentalli (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.91.39.143
country_id: 6252001
description:
[2025-12-02 13:43:58 +0530] info [cpaneld] 75.91.39.143 - agental1 "GET /login/?login_only=1&user=agental1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agental1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.3.72.208
country_id: 6252001
description:
[2025-12-02 13:44:01 +0530] info [cpaneld] 98.3.72.208 - agental2 "GET /login/?login_only=1&user=agental2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agental2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.53.11.14
country_id: 6252001
description:
[2025-12-02 13:44:11 +0530] info [cpaneld] 50.53.11.14 - dandagam "GET /login/?login_only=1&user=dandagam&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.192.56.173
country_id: 6252001
description:
[2025-12-02 13:44:18 +0530] info [cpaneld] 71.192.56.173 - danda "GET /login/?login_only=1&user=danda&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user danda (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 23.242.230.91
country_id: 6252001
description:
[2025-12-02 13:43:38 +0530] info [cpaneld] 23.242.230.91 - agentallianz "GET /login/?login_only=1&user=agentallianz&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: User agentallianz has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.54.192.174
country_id: 6252001
description:
[2025-12-02 13:44:02 +0530] info [cpaneld] 108.54.192.174 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.205.57.215
country_id: 6252001
description:
[2025-12-02 13:44:06 +0530] info [cpaneld] 47.205.57.215 - dandagamuwa "GET /login/?login_only=1&user=dandagamuwa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dandagamuwa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.51.52.75
country_id: 6252001
description:
[2025-12-02 13:44:09 +0530] info [cpaneld] 104.51.52.75 - dandagamuw "GET /login/?login_only=1&user=dandagamuw&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dandagamuw (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.211.100.34
country_id: 6252001
description:
[2025-12-02 13:44:09 +0530] info [cpaneld] 98.211.100.34 - dandagamu "GET /login/?login_only=1&user=dandagamu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dandagamu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.2.112.118
country_id: 6252001
description:
[2025-12-02 13:43:37 +0530] info [cpaneld] 73.2.112.118 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.190.221.255
country_id: 6252001
description:
[2025-12-02 13:43:51 +0530] info [cpaneld] 104.190.221.255 - agen "GET /login/?login_only=1&user=agen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agen (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.118.25.181
country_id: 6252001
description:
[2025-12-02 13:43:53 +0530] info [cpaneld] 69.118.25.181 - age "GET /login/?login_only=1&user=age&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user age (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.23.207.58
country_id: 6252001
description:
[2025-12-02 13:43:56 +0530] info [cpaneld] 45.23.207.58 - ag "GET /login/?login_only=1&user=ag&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ag (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.32.92.33
country_id: 6252001
description:
[2025-12-02 13:44:12 +0530] info [cpaneld] 104.32.92.33 - dandaga "GET /login/?login_only=1&user=dandaga&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dandaga (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.73.136.93
country_id: 6252001
description:
[2025-12-02 13:43:43 +0530] info [cpaneld] 73.73.136.93 - agentallian "GET /login/?login_only=1&user=agentallian&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agentallian (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.177.86.81
country_id: 6252001
description:
[2025-12-02 13:43:49 +0530] info [cpaneld] 67.177.86.81 - agenta "GET /login/?login_only=1&user=agenta&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agenta (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.242.83.75
country_id: 6252001
description:
[2025-12-02 13:44:20 +0530] info [cpaneld] 73.242.83.75 - dan "GET /login/?login_only=1&user=dan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.90.41.120
country_id: 6252001
description:
[2025-12-02 13:43:40 +0530] info [cpaneld] 76.90.41.120 - agentallianzcom "GET /login/?login_only=1&user=agentallianzcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agentallianzcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 207.255.13.103
country_id: 6252001
description:
[2025-12-02 13:43:47 +0530] info [cpaneld] 207.255.13.103 - agentall "GET /login/?login_only=1&user=agentall&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agentall (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.46.147.89
country_id: 6252001
description:
[2025-12-02 13:43:50 +0530] info [cpaneld] 98.46.147.89 - agent "GET /login/?login_only=1&user=agent&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agent (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.84.160.219
country_id: 6252001
description:
[2025-12-02 13:44:03 +0530] info [cpaneld] 97.84.160.219 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.146.76.66
country_id: 6252001
description:
[2025-12-02 13:44:08 +0530] info [cpaneld] 76.146.76.66 - dandagamuwalk "GET /login/?login_only=1&user=dandagamuwalk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dandagamuwalk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.148.23.136
country_id: 6252001
description:
[2025-12-02 13:44:19 +0530] info [cpaneld] 47.148.23.136 - dand "GET /login/?login_only=1&user=dand&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dand (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 206.194.237.217
country_id: 6252001
description:
[2025-12-02 13:45:10 +0530] info [cpaneld] 206.194.237.217 - jrdc "GET /login/?login_only=1&user=jrdc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user jrdc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.101.44.223
country_id: 6252001
description:
[2025-12-02 13:45:15 +0530] info [whostmgrd] 24.101.44.223 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.206.142.222
country_id: 6252001
description:
[2025-12-02 13:45:18 +0530] info [cpaneld] 98.206.142.222 - jrdclk "GET /login/?login_only=1&user=jrdclk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.178.34.85
country_id: 6252001
description:
[2025-12-02 13:45:20 +0530] info [cpaneld] 24.178.34.85 - jr "GET /login/?login_only=1&user=jr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user jr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.171.129.186
country_id: 6252001
description:
[2025-12-02 13:44:23 +0530] info [cpaneld] 73.171.129.186 - da "GET /login/?login_only=1&user=da&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user da (has_cpuser_file failed)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 23.95.63.99
country_id: 6252001
description:
Dec  2 13:45:07 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 6 secs): user=<info@bostonlanka.com>, method=PLAIN, rip=23.95.63.99, lip=66.85.158.91, session=<OaI4sfNEsL0XXz9j>


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.36.232.153
country_id: 6252001
description:
[2025-12-02 13:45:08 +0530] info [cpaneld] 76.36.232.153 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.137.199.253
country_id: 6252001
description:
[2025-12-02 13:45:09 +0530] info [cpaneld] 35.137.199.253 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.47.253.250
country_id: 6252001
description:
[2025-12-02 13:45:19 +0530] info [cpaneld] 136.47.253.250 - jrd "GET /login/?login_only=1&user=jrd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user jrd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.37.137.164
country_id: 6252001
description:
[2025-12-02 13:44:24 +0530] info [cpaneld] 76.37.137.164 - dandaga1 "GET /login/?login_only=1&user=dandaga1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dandaga1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.209.111.176
country_id: 6252001
description:
[2025-12-02 13:44:29 +0530] info [cpaneld] 73.209.111.176 - dandaga2 "GET /login/?login_only=1&user=dandaga2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user dandaga2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.243.221.147
country_id: 6252001
description:
[2025-12-02 13:46:14 +0530] info [cpaneld] 97.243.221.147 - visionsolut "GET /login/?login_only=1&user=visionsolut&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visionsolut (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.6.2.153
country_id: 6252001
description:
[2025-12-02 13:45:55 +0530] info [cpaneld] 24.6.2.153 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.85.254.71
country_id: 6252001
description:
[2025-12-02 13:45:59 +0530] info [cpaneld] 64.85.254.71 - visionsolutionshospitalcom "GET /login/?login_only=1&user=visionsolutionshospitalcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visionsolutionshospitalcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.48.134
country_id: 6252001
description:
[2025-12-02 13:46:02 +0530] info [cpaneld] 172.58.48.134 - visionsolutionshos "GET /login/?login_only=1&user=visionsolutionshos&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visionsolutionshos (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.34.208.181
country_id: 6252001
description:
[2025-12-02 13:46:05 +0530] info [cpaneld] 47.34.208.181 - visionsolutionsho "GET /login/?login_only=1&user=visionsolutionsho&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visionsolutionsho (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.203.221.216
country_id: 6252001
description:
[2025-12-02 13:46:13 +0530] info [cpaneld] 64.203.221.216 - visionsoluti "GET /login/?login_only=1&user=visionsoluti&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visionsoluti (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.1.86.40
country_id: 6252001
description:
[2025-12-02 13:45:57 +0530] info [cpaneld] 100.1.86.40 - visionsolutionshospital "GET /login/?login_only=1&user=visionsolutionshospital&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visionsolutionshospital (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.80.51.8
country_id: 6252001
description:
[2025-12-02 13:46:00 +0530] info [cpaneld] 68.80.51.8 - visionsolutionshospi "GET /login/?login_only=1&user=visionsolutionshospi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visionsolutionshospi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.80.156.208
country_id: 6252001
description:
[2025-12-02 13:46:09 +0530] info [cpaneld] 72.80.156.208 - visionsolutionsh "GET /login/?login_only=1&user=visionsolutionsh&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.16.158.114
country_id: 6252001
description:
[2025-12-02 13:46:12 +0530] info [cpaneld] 99.16.158.114 - visionsolutio "GET /login/?login_only=1&user=visionsolutio&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visionsolutio (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.7.185.166
country_id: 6252001
description:
[2025-12-02 13:46:11 +0530] info [cpaneld] 24.7.185.166 - visionsolution "GET /login/?login_only=1&user=visionsolution&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visionsolution (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.254.80.200
country_id: 6252001
description:
[2025-12-02 13:45:58 +0530] info [whostmgrd] 71.254.80.200 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 146.12.83.23
country_id: 6252001
description:
[2025-12-02 13:46:10 +0530] info [cpaneld] 146.12.83.23 - visionsolutions "GET /login/?login_only=1&user=visionsolutions&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visionsolutions (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.198.30.212
country_id: 6252001
description:
[2025-12-02 13:46:18 +0530] info [cpaneld] 107.198.30.212 - visionso "GET /login/?login_only=1&user=visionso&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visionso (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.164.252.255
country_id: 6252001
description:
[2025-12-02 13:46:20 +0530] info [cpaneld] 24.164.252.255 - vision "GET /login/?login_only=1&user=vision&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vision (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.29.50.39
country_id: 6252001
description:
[2025-12-02 13:45:56 +0530] info [cpaneld] 45.29.50.39 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.64.76.242
country_id: 6252001
description:
[2025-12-02 13:46:01 +0530] info [cpaneld] 108.64.76.242 - visionsolutionshosp "GET /login/?login_only=1&user=visionsolutionshosp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visionsolutionshosp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.35.182.55
country_id: 6252001
description:
[2025-12-02 13:46:16 +0530] info [cpaneld] 98.35.182.55 - visionsol "GET /login/?login_only=1&user=visionsol&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visionsol (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.8.97.183
country_id: 6252001
description:
[2025-12-02 13:46:19 +0530] info [cpaneld] 73.8.97.183 - visions "GET /login/?login_only=1&user=visions&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visions (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.95.52.46
country_id: 6252001
description:
[2025-12-02 13:46:25 +0530] info [cpaneld] 99.95.52.46 - vi "GET /login/?login_only=1&user=vi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.113.117.172
country_id: 6252001
description:
[2025-12-02 13:47:16 +0530] info [cpaneld] 75.113.117.172 - bostonlank "GET /login/?login_only=1&user=bostonlank&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bostonlank (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.97.25.65
country_id: 6252001
description:
[2025-12-02 13:47:15 +0530] info [cpaneld] 98.97.25.65 - bostonlankacom "GET /login/?login_only=1&user=bostonlankacom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bostonlankacom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.111.96.19
country_id: 6252001
description:
[2025-12-02 13:47:20 +0530] info [cpaneld] 76.111.96.19 - boston "GET /login/?login_only=1&user=boston&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user boston (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.44.123.180
country_id: 6252001
description:
[2025-12-02 13:47:11 +0530] info [cpaneld] 99.44.123.180 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.170.242.34
country_id: 6252001
description:
[2025-12-02 13:46:21 +0530] info [cpaneld] 67.170.242.34 - visio "GET /login/?login_only=1&user=visio&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visio (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.226.229.4
country_id: 6252001
description:
[2025-12-02 13:46:22 +0530] info [cpaneld] 98.226.229.4 - visi "GET /login/?login_only=1&user=visi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.148.192.41
country_id: 6252001
description:
[2025-12-02 13:46:26 +0530] info [cpaneld] 73.148.192.41 - visions1 "GET /login/?login_only=1&user=visions1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visions1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.56.168.14
country_id: 6252001
description:
[2025-12-02 13:46:29 +0530] info [cpaneld] 68.56.168.14 - visions2 "GET /login/?login_only=1&user=visions2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user visions2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.8.216.202
country_id: 6252001
description:
[2025-12-02 13:47:12 +0530] info [cpaneld] 24.8.216.202 - bostonlanka "GET /login/?login_only=1&user=bostonlanka&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.143.195.234
country_id: 6252001
description:
[2025-12-02 13:47:17 +0530] info [cpaneld] 47.143.195.234 - bostonlan "GET /login/?login_only=1&user=bostonlan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bostonlan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.105.84.37
country_id: 6252001
description:
[2025-12-02 13:47:19 +0530] info [cpaneld] 73.105.84.37 - bostonl "GET /login/?login_only=1&user=bostonl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bostonl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.94.201.174
country_id: 6252001
description:
[2025-12-02 13:47:18 +0530] info [cpaneld] 71.94.201.174 - bostonla "GET /login/?login_only=1&user=bostonla&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bostonla (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.210.90
country_id: 6252001
description:
[2025-12-02 13:46:23 +0530] info [cpaneld] 172.58.210.90 - vis "GET /login/?login_only=1&user=vis&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vis (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.147.241.170
country_id: 6252001
description:
[2025-12-02 13:47:11 +0530] info [cpaneld] 24.147.241.170 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.185.204.189
country_id: 6252001
description:
[2025-12-02 13:47:14 +0530] info [whostmgrd] 70.185.204.189 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.22.217.254
country_id: 6252001
description:
[2025-12-02 13:47:25 +0530] info [cpaneld] 70.22.217.254 - bos "GET /login/?login_only=1&user=bos&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bos (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 150.228.105.162
country_id: 6252001
description:
[2025-12-02 13:47:28 +0530] info [cpaneld] 150.228.105.162 - bo "GET /login/?login_only=1&user=bo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.35.198.13
country_id: 6252001
description:
[2025-12-02 13:47:30 +0530] info [cpaneld] 76.35.198.13 - bostonl1 "GET /login/?login_only=1&user=bostonl1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bostonl1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.117.162.132
country_id: 6252001
description:
[2025-12-02 13:47:32 +0530] info [cpaneld] 70.117.162.132 - bostonl2 "GET /login/?login_only=1&user=bostonl2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bostonl2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.228.22.26
country_id: 6252001
description:
[2025-12-02 13:47:22 +0530] info [cpaneld] 75.228.22.26 - bosto "GET /login/?login_only=1&user=bosto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bosto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.33.90.104
country_id: 6252001
description:
[2025-12-02 13:47:23 +0530] info [cpaneld] 76.33.90.104 - bost "GET /login/?login_only=1&user=bost&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user bost (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 162.142.56.118
country_id: 6252001
description:
[2025-12-02 13:49:16 +0530] info [cpaneld] 162.142.56.118 - cloudtourssri "GET /login/?login_only=1&user=cloudtourssri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudtourssri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.143.63.12
country_id: 6252001
description:
[2025-12-02 13:49:17 +0530] info [cpaneld] 24.143.63.12 - cloudtourssr "GET /login/?login_only=1&user=cloudtourssr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudtourssr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.238.26.242
country_id: 6252001
description:
[2025-12-02 13:49:19 +0530] info [cpaneld] 96.238.26.242 - cloudtour "GET /login/?login_only=1&user=cloudtour&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudtour (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.144.89.11
country_id: 6252001
description:
[2025-12-02 13:49:07 +0530] info [cpaneld] 35.144.89.11 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.97.14.8
country_id: 6252001
description:
[2025-12-02 13:49:10 +0530] info [whostmgrd] 98.97.14.8 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.138.124.45
country_id: 6252001
description:
[2025-12-02 13:49:14 +0530] info [cpaneld] 74.138.124.45 - cloudtourssrila "GET /login/?login_only=1&user=cloudtourssrila&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudtourssrila (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.88.246.137
country_id: 6252001
description:
[2025-12-02 13:49:19 +0530] info [cpaneld] 99.88.246.137 - cloudtours "GET /login/?login_only=1&user=cloudtours&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudtours (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.150.166.122
country_id: 6252001
description:
[2025-12-02 13:49:11 +0530] info [cpaneld] 169.150.166.122 - cloudtourssrilankacom "GET /login/?login_only=1&user=cloudtourssrilankacom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudtourssrilankacom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 140.106.45.161
country_id: 6252001
description:
[2025-12-02 13:49:12 +0530] info [cpaneld] 140.106.45.161 - cloudtourssrilank "GET /login/?login_only=1&user=cloudtourssrilank&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudtourssrilank (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.249.48.134
country_id: 6252001
description:
[2025-12-02 13:49:13 +0530] info [cpaneld] 98.249.48.134 - cloudtourssrilan "GET /login/?login_only=1&user=cloudtourssrilan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.130.182.15
country_id: 6252001
description:
[2025-12-02 13:49:15 +0530] info [cpaneld] 24.130.182.15 - cloudtourssril "GET /login/?login_only=1&user=cloudtourssril&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudtourssril (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.192.52.143
country_id: 6252001
description:
[2025-12-02 13:49:20 +0530] info [cpaneld] 71.192.52.143 - cloudtou "GET /login/?login_only=1&user=cloudtou&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudtou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 15.218.69.122
country_id: 6252001
description:
[2025-12-02 13:49:09 +0530] info [cpaneld] 15.218.69.122 - cloudtourssrilanka "GET /login/?login_only=1&user=cloudtourssrilanka&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudtourssrilanka (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.13.21.121
country_id: 6252001
description:
[2025-12-02 13:49:08 +0530] info [cpaneld] 72.13.21.121 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.144.175.203
country_id: 6252001
description:
[2025-12-02 13:49:18 +0530] info [cpaneld] 47.144.175.203 - cloudtourss "GET /login/?login_only=1&user=cloudtourss&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudtourss (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.86.2.57
country_id: 6252001
description:
[2025-12-02 13:49:22 +0530] info [cpaneld] 174.86.2.57 - cloudto "GET /login/?login_only=1&user=cloudto&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudto (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.23.188.218
country_id: 6252001
description:
[2025-12-02 13:49:25 +0530] info [cpaneld] 73.23.188.218 - clo "GET /login/?login_only=1&user=clo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user clo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.4.64.120
country_id: 6252001
description:
[2025-12-02 13:49:24 +0530] info [cpaneld] 47.4.64.120 - clou "GET /login/?login_only=1&user=clou&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user clou (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.24.16.15
country_id: 6252001
description:
[2025-12-02 13:49:28 +0530] info [cpaneld] 72.24.16.15 - cloudto1 "GET /login/?login_only=1&user=cloudto1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudto1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.94.195.244
country_id: 6252001
description:
[2025-12-02 13:49:26 +0530] info [cpaneld] 167.94.195.244 - cl "GET /login/?login_only=1&user=cl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.22.220.228
country_id: 6252001
description:
[2025-12-02 13:49:29 +0530] info [cpaneld] 73.22.220.228 - cloudto2 "GET /login/?login_only=1&user=cloudto2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudto2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 137.118.181.240
country_id: 6252001
description:
[2025-12-02 13:49:24 +0530] info [cpaneld] 137.118.181.240 - cloud "GET /login/?login_only=1&user=cloud&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloud (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.151.59.230
country_id: 6252001
description:
[2025-12-02 13:49:23 +0530] info [cpaneld] 73.151.59.230 - cloudt "GET /login/?login_only=1&user=cloudt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cloudt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.0.34.195
country_id: 6252001
description:
[2025-12-02 13:50:32 +0530] info [cpaneld] 100.0.34.195 - colperla "GET /login/?login_only=1&user=colperla&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colperla (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.129.65.181
country_id: 6252001
description:
[2025-12-02 13:50:33 +0530] info [cpaneld] 68.129.65.181 - colperl "GET /login/?login_only=1&user=colperl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colperl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.66.209.27
country_id: 6252001
description:
[2025-12-02 13:50:35 +0530] info [cpaneld] 99.66.209.27 - colper "GET /login/?login_only=1&user=colper&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colper (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.39.239.120
country_id: 6252001
description:
[2025-12-02 13:50:37 +0530] info [cpaneld] 76.39.239.120 - colp "GET /login/?login_only=1&user=colp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.144.61.41
country_id: 6252001
description:
[2025-12-02 13:50:28 +0530] info [cpaneld] 35.144.61.41 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.67.8.82
country_id: 6252001
description:
[2025-12-02 13:50:30 +0530] info [whostmgrd] 108.67.8.82 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.32.217.135
country_id: 6252001
description:
[2025-12-02 13:50:31 +0530] info [cpaneld] 76.32.217.135 - colperlabcom "GET /login/?login_only=1&user=colperlabcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colperlabcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.73.203.248
country_id: 6252001
description:
[2025-12-02 13:50:38 +0530] info [cpaneld] 173.73.203.248 - co "GET /login/?login_only=1&user=co&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user co (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.99.161.217
country_id: 6252001
description:
[2025-12-02 13:50:27 +0530] info [cpaneld] 99.99.161.217 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.20.91.135
country_id: 6252001
description:
[2025-12-02 13:50:36 +0530] info [cpaneld] 76.20.91.135 - colpe "GET /login/?login_only=1&user=colpe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user colpe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.147.121.17
country_id: 6252001
description:
[2025-12-02 13:50:29 +0530] info [cpaneld] 216.147.121.17 - colperlab "GET /login/?login_only=1&user=colperlab&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.2.215.98
country_id: 6252001
description:
[2025-12-02 13:50:37 +0530] info [cpaneld] 68.2.215.98 - col "GET /login/?login_only=1&user=col&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user col (has_cpuser_file failed)


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 175.157.38.255
country_id: 1227603
description:
[2025-12-02 13:51:19 +0530] info [cpaneld] 175.157.38.255 - fhbhealt "POST /cpsess6013837282/3rdparty/phpMyAdmin/index.php?route=/ HTTP/1.1" DEFERRED LOGIN cpaneld: cookie ip check: IP address has changed: IP Address [112.135.212.181] != Current IP Address [175.157.38.255]


plugin: ossec
rule: 5718
name: Attempt to login using a denied user.
abuser: 62.60.135.28
country_id: 130758
description:
Dec  2 13:52:32 host2 sshd[1824771]: User agentallianz from 62.60.135.28 not allowed because a group is listed in DenyGroups


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.58.205.222
country_id: 6252001
description:
[2025-12-02 13:54:10 +0530] info [cpaneld] 104.58.205.222 - essenceceylontea "GET /login/?login_only=1&user=essenceceylontea&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: User essenceceylontea has their account suspended. Login blocked.


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.226.37.205
country_id: 6252001
description:
[2025-12-02 13:53:40 +0530] info [cpaneld] 64.226.37.205 - sunriselanka "GET /login/?login_only=1&user=sunriselanka&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.178.134.169
country_id: 6252001
description:
[2025-12-02 13:53:56 +0530] info [cpaneld] 98.178.134.169 - sunrise2 "GET /login/?login_only=1&user=sunrise2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sunrise2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.205.75.90
country_id: 6252001
description:
[2025-12-02 13:53:55 +0530] info [cpaneld] 24.205.75.90 - sunrise1 "GET /login/?login_only=1&user=sunrise1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sunrise1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 160.7.244.17
country_id: 6252001
description:
[2025-12-02 13:54:07 +0530] info [cpaneld] 160.7.244.17 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.217.244.234
country_id: 6252001
description:
[2025-12-02 13:54:15 +0530] info [cpaneld] 107.217.244.234 - essenceceylon "GET /login/?login_only=1&user=essenceceylon&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essenceceylon (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.161.53.145
country_id: 6252001
description:
[2025-12-02 13:53:43 +0530] info [cpaneld] 67.161.53.145 - sunriselank "GET /login/?login_only=1&user=sunriselank&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sunriselank (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.162.234.178
country_id: 6252001
description:
[2025-12-02 13:53:52 +0530] info [cpaneld] 67.162.234.178 - sunr "GET /login/?login_only=1&user=sunr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sunr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.12.241.254
country_id: 6252001
description:
[2025-12-02 13:53:54 +0530] info [cpaneld] 73.12.241.254 - su "GET /login/?login_only=1&user=su&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user su (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.197.43.196
country_id: 6252001
description:
[2025-12-02 13:53:41 +0530] info [whostmgrd] 107.197.43.196 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.170.16.85
country_id: 6252001
description:
[2025-12-02 13:53:50 +0530] info [cpaneld] 73.170.16.85 - sunrise "GET /login/?login_only=1&user=sunrise&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sunrise (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.31.177.83
country_id: 6252001
description:
[2025-12-02 13:54:20 +0530] info [cpaneld] 108.31.177.83 - essenceceyl "GET /login/?login_only=1&user=essenceceyl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essenceceyl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.116.150.130
country_id: 6252001
description:
[2025-12-02 13:54:20 +0530] info [cpaneld] 73.116.150.130 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.140.182.58
country_id: 6252001
description:
[2025-12-02 13:53:38 +0530] info [cpaneld] 69.140.182.58 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.211.38.179
country_id: 6252001
description:
[2025-12-02 13:53:48 +0530] info [cpaneld] 74.211.38.179 - sunrisela "GET /login/?login_only=1&user=sunrisela&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sunrisela (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.11.105.234
country_id: 6252001
description:
[2025-12-02 13:53:49 +0530] info [cpaneld] 66.11.105.234 - sunrisel "GET /login/?login_only=1&user=sunrisel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sunrisel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.182.117.4
country_id: 6252001
description:
[2025-12-02 13:54:11 +0530] info [whostmgrd] 174.182.117.4 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.96.184.242
country_id: 6252001
description:
[2025-12-02 13:54:12 +0530] info [cpaneld] 174.96.184.242 - essenceceylonteacom "GET /login/?login_only=1&user=essenceceylonteacom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essenceceylonteacom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.150.150.99
country_id: 6252001
description:
[2025-12-02 13:53:42 +0530] info [cpaneld] 35.150.150.99 - sunriselankalk "GET /login/?login_only=1&user=sunriselankalk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sunriselankalk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 8.9.95.16
country_id: 6252001
description:
[2025-12-02 13:54:13 +0530] info [cpaneld] 8.9.95.16 - essenceceylonte "GET /login/?login_only=1&user=essenceceylonte&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essenceceylonte (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.38.215.172
country_id: 6252001
description:
[2025-12-02 13:54:14 +0530] info [cpaneld] 98.38.215.172 - essenceceylont "GET /login/?login_only=1&user=essenceceylont&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essenceceylont (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.63.63.167
country_id: 6252001
description:
[2025-12-02 13:54:18 +0530] info [cpaneld] 71.63.63.167 - essenceceylo "GET /login/?login_only=1&user=essenceceylo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essenceceylo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.94.195.130
country_id: 6252001
description:
[2025-12-02 13:53:53 +0530] info [cpaneld] 167.94.195.130 - sun "GET /login/?login_only=1&user=sun&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sun (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.181.219.118
country_id: 6252001
description:
[2025-12-02 13:53:51 +0530] info [cpaneld] 67.181.219.118 - sunris "GET /login/?login_only=1&user=sunris&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sunris (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.93.38.198
country_id: 6252001
description:
[2025-12-02 13:54:08 +0530] info [cpaneld] 73.93.38.198 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.27.254.27
country_id: 6252001
description:
[2025-12-02 13:53:37 +0530] info [cpaneld] 47.27.254.27 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.236.226.152
country_id: 6252001
description:
[2025-12-02 13:53:52 +0530] info [cpaneld] 98.236.226.152 - sunri "GET /login/?login_only=1&user=sunri&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sunri (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 157.131.198.50
country_id: 6252001
description:
[2025-12-02 13:53:46 +0530] info [cpaneld] 157.131.198.50 - sunriselan "GET /login/?login_only=1&user=sunriselan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sunriselan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.149.2.80
country_id: 6252001
description:
[2025-12-02 13:54:37 +0530] info [cpaneld] 35.149.2.80 - melanifi "GET /login/?login_only=1&user=melanifi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user melanifi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.202.214.206
country_id: 6252001
description:
[2025-12-02 13:54:45 +0530] info [cpaneld] 104.202.214.206 - melan "GET /login/?login_only=1&user=melan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user melan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.110.111.154
country_id: 6252001
description:
[2025-12-02 13:54:24 +0530] info [whostmgrd] 46.110.111.154 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.139.120.192
country_id: 6252001
description:
[2025-12-02 13:54:26 +0530] info [cpaneld] 76.139.120.192 - essence "GET /login/?login_only=1&user=essence&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essence (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.120.44.230
country_id: 6252001
description:
[2025-12-02 13:54:31 +0530] info [cpaneld] 50.120.44.230 - melanifinef "GET /login/?login_only=1&user=melanifinef&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user melanifinef (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.220.0.129
country_id: 6252001
description:
[2025-12-02 13:54:27 +0530] info [cpaneld] 98.220.0.129 - melanifinefoo "GET /login/?login_only=1&user=melanifinefoo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user melanifinefoo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.41.117.86
country_id: 6252001
description:
[2025-12-02 13:54:33 +0530] info [cpaneld] 73.41.117.86 - esse "GET /login/?login_only=1&user=esse&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user esse (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.19.108.73
country_id: 6252001
description:
[2025-12-02 13:54:37 +0530] info [cpaneld] 73.19.108.73 - ess "GET /login/?login_only=1&user=ess&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ess (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.115.40.189
country_id: 6252001
description:
[2025-12-02 13:54:40 +0530] info [cpaneld] 172.115.40.189 - melanif "GET /login/?login_only=1&user=melanif&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user melanif (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.71.200.79
country_id: 6252001
description:
[2025-12-02 13:54:49 +0530] info [cpaneld] 73.71.200.79 - me "GET /login/?login_only=1&user=me&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user me (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.175.136.240
country_id: 6252001
description:
[2025-12-02 13:54:52 +0530] info [cpaneld] 73.175.136.240 - melanif2 "GET /login/?login_only=1&user=melanif2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user melanif2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.94.184.99
country_id: 6252001
description:
[2025-12-02 13:54:21 +0530] info [cpaneld] 209.94.184.99 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.216.171.205
country_id: 6252001
description:
[2025-12-02 13:54:44 +0530] info [cpaneld] 24.216.171.205 - es "GET /login/?login_only=1&user=es&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user es (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.184.83.84
country_id: 6252001
description:
[2025-12-02 13:54:48 +0530] info [cpaneld] 64.184.83.84 - essence2 "GET /login/?login_only=1&user=essence2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essence2 (has_cpuser_file failed)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 191.240.36.111
country_id: 3469034
description:
Dec  2 13:54:51 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 20 secs): user=<info>, method=PLAIN, rip=191.240.36.111, lip=66.85.158.91, TLS, session=<dAQ10/NERte/8CRv>


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.64.239.108
country_id: 6252001
description:
[2025-12-02 13:54:22 +0530] info [cpaneld] 75.64.239.108 - essencecey "GET /login/?login_only=1&user=essencecey&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essencecey (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.171.16.229
country_id: 6252001
description:
[2025-12-02 13:54:28 +0530] info [cpaneld] 76.171.16.229 - melanifinefo "GET /login/?login_only=1&user=melanifinefo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user melanifinefo (has_cpuser_file failed)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 186.209.251.149
country_id: 3469034
description:
Dec  2 13:54:29 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 21 secs): user=<info@sivagnanamfoundation.com>, method=PLAIN, rip=186.209.251.149, lip=66.85.158.91, TLS, session=<gD/Z0fNEVpy60fuV>


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.146.45.105
country_id: 6252001
description:
[2025-12-02 13:54:33 +0530] info [cpaneld] 67.146.45.105 - melanifine "GET /login/?login_only=1&user=melanifine&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user melanifine (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.97.253.132
country_id: 6252001
description:
[2025-12-02 13:54:47 +0530] info [cpaneld] 97.97.253.132 - essence1 "GET /login/?login_only=1&user=essence1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essence1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.173.139.48
country_id: 6252001
description:
[2025-12-02 13:54:48 +0530] info [cpaneld] 73.173.139.48 - mel "GET /login/?login_only=1&user=mel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.105.201.100
country_id: 6252001
description:
[2025-12-02 13:54:50 +0530] info [cpaneld] 72.105.201.100 - melanif1 "GET /login/?login_only=1&user=melanif1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user melanif1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.82.178.246
country_id: 6252001
description:
[2025-12-02 13:54:25 +0530] info [cpaneld] 75.82.178.246 - essencec "GET /login/?login_only=1&user=essencec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essencec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 23.240.4.47
country_id: 6252001
description:
[2025-12-02 13:54:29 +0530] info [cpaneld] 23.240.4.47 - essenc "GET /login/?login_only=1&user=essenc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essenc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.162.254.38
country_id: 6252001
description:
[2025-12-02 13:54:35 +0530] info [cpaneld] 71.162.254.38 - melanifin "GET /login/?login_only=1&user=melanifin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user melanifin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.224.27.70
country_id: 6252001
description:
[2025-12-02 13:54:42 +0530] info [cpaneld] 98.224.27.70 - melani "GET /login/?login_only=1&user=melani&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user melani (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.73.232.50
country_id: 6252001
description:
[2025-12-02 13:54:23 +0530] info [cpaneld] 73.73.232.50 - essencece "GET /login/?login_only=1&user=essencece&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essencece (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 137.25.243.209
country_id: 6252001
description:
[2025-12-02 13:54:32 +0530] info [cpaneld] 137.25.243.209 - essen "GET /login/?login_only=1&user=essen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user essen (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.140.106.146
country_id: 6252001
description:
[2025-12-02 13:54:46 +0530] info [cpaneld] 99.140.106.146 - mela "GET /login/?login_only=1&user=mela&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mela (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.118.20.75
country_id: 6252001
description:
[2025-12-02 13:54:23 +0530] info [cpaneld] 76.118.20.75 - melanifinefood "GET /login/?login_only=1&user=melanifinefood&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.225.47.162
country_id: 6252001
description:
[2025-12-02 13:54:26 +0530] info [cpaneld] 96.225.47.162 - melanifinefoodcom "GET /login/?login_only=1&user=melanifinefoodcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user melanifinefoodcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.53.181.123
country_id: 6252001
description:
[2025-12-02 13:57:33 +0530] info [cpaneld] 24.53.181.123 - agronaturehol "GET /login/?login_only=1&user=agronaturehol&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronaturehol (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.126.171.45
country_id: 6252001
description:
[2025-12-02 13:57:43 +0530] info [cpaneld] 172.126.171.45 - agronat "GET /login/?login_only=1&user=agronat&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronat (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.173.121.214
country_id: 6252001
description:
[2025-12-02 13:57:50 +0530] info [cpaneld] 104.173.121.214 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.108.141.239
country_id: 6252001
description:
[2025-12-02 14:00:19 +0530] info [cpaneld] 68.108.141.239 - lakwelholdings "GET /login/?login_only=1&user=lakwelholdings&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.42.143.144
country_id: 6252001
description:
[2025-12-02 14:00:25 +0530] info [cpaneld] 69.42.143.144 - lakwelholding "GET /login/?login_only=1&user=lakwelholding&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lakwelholding (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.130.154.210
country_id: 6252001
description:
[2025-12-02 13:57:21 +0530] info [cpaneld] 74.130.154.210 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.237.170.31
country_id: 6252001
description:
[2025-12-02 13:57:09 +0530] info [cpaneld] 71.237.170.31 - maximsholdin "GET /login/?login_only=1&user=maximsholdin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maximsholdin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.129.163.173
country_id: 6252001
description:
[2025-12-02 13:57:54 +0530] info [cpaneld] 74.129.163.173 - agronat2 "GET /login/?login_only=1&user=agronat2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronat2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.148.223.207
country_id: 6252001
description:
[2025-12-02 14:00:27 +0530] info [cpaneld] 47.148.223.207 - lakwelholdin "GET /login/?login_only=1&user=lakwelholdin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lakwelholdin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.6.34.35
country_id: 6252001
description:
[2025-12-02 14:00:36 +0530] info [cpaneld] 24.6.34.35 - lakwelh "GET /login/?login_only=1&user=lakwelh&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lakwelh (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.203.207.146
country_id: 6252001
description:
[2025-12-02 13:57:05 +0530] info [cpaneld] 107.203.207.146 - maximsholdingscom "GET /login/?login_only=1&user=maximsholdingscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maximsholdingscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.21.172.253
country_id: 6252001
description:
[2025-12-02 13:59:09 +0530] info [whostmgrd] 98.21.172.253 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.150.141.25
country_id: 6252001
description:
[2025-12-02 14:00:17 +0530] info [cpaneld] 47.150.141.25 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.49.144.22
country_id: 6252001
description:
[2025-12-02 13:57:04 +0530] info [whostmgrd] 68.49.144.22 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.207.249.84
country_id: 6252001
description:
[2025-12-02 13:57:20 +0530] info [cpaneld] 98.207.249.84 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.43.25.221
country_id: 6252001
description:
[2025-12-02 13:57:21 +0530] info [cpaneld] 38.43.25.221 - maximsh "GET /login/?login_only=1&user=maximsh&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maximsh (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.51.254.223
country_id: 6252001
description:
[2025-12-02 13:57:41 +0530] info [cpaneld] 45.51.254.223 - agronatur "GET /login/?login_only=1&user=agronatur&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronatur (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.97.8.29
country_id: 6252001
description:
[2025-12-02 13:57:53 +0530] info [cpaneld] 98.97.8.29 - tfab "GET /login/?login_only=1&user=tfab&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tfab (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.119.13.153
country_id: 6252001
description:
[2025-12-02 14:00:35 +0530] info [cpaneld] 99.119.13.153 - lakwelho "GET /login/?login_only=1&user=lakwelho&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lakwelho (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.157.245.107
country_id: 6252001
description:
[2025-12-02 14:00:49 +0530] info [cpaneld] 47.157.245.107 - lakwelh2 "GET /login/?login_only=1&user=lakwelh2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lakwelh2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.14.143.200
country_id: 6252001
description:
[2025-12-02 13:57:40 +0530] info [cpaneld] 24.14.143.200 - agronature "GET /login/?login_only=1&user=agronature&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronature (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.86.142.231
country_id: 6252001
description:
[2025-12-02 13:59:12 +0530] info [cpaneld] 76.86.142.231 - vdepl "GET /login/?login_only=1&user=vdepl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vdepl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.104.61.126
country_id: 6252001
description:
[2025-12-02 14:00:38 +0530] info [cpaneld] 68.104.61.126 - lakwe "GET /login/?login_only=1&user=lakwe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lakwe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.96.162
country_id: 6252001
description:
[2025-12-02 14:00:48 +0530] info [cpaneld] 172.59.96.162 - lakwelh1 "GET /login/?login_only=1&user=lakwelh1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lakwelh1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.130.16.19
country_id: 6252001
description:
[2025-12-02 13:57:35 +0530] info [cpaneld] 24.130.16.19 - agronatureho "GET /login/?login_only=1&user=agronatureho&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronatureho (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.71.169.55
country_id: 6252001
description:
[2025-12-02 13:57:52 +0530] info [cpaneld] 209.71.169.55 - ag "GET /login/?login_only=1&user=ag&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ag (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.126.67.253
country_id: 6252001
description:
[2025-12-02 14:00:34 +0530] info [cpaneld] 76.126.67.253 - lakwelhol "GET /login/?login_only=1&user=lakwelhol&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lakwelhol (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.177.15.14
country_id: 6252001
description:
[2025-12-02 14:00:47 +0530] info [cpaneld] 47.177.15.14 - la "GET /login/?login_only=1&user=la&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user la (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.44.198.141
country_id: 6252001
description:
[2025-12-02 13:57:01 +0530] info [cpaneld] 38.44.198.141 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.16.128.93
country_id: 6252001
description:
[2025-12-02 13:57:58 +0530] info [cpaneld] 99.16.128.93 - tf "GET /login/?login_only=1&user=tf&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tf (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.72.42.47
country_id: 6252001
description:
[2025-12-02 13:57:29 +0530] info [cpaneld] 75.72.42.47 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.235.177.58
country_id: 6252001
description:
[2025-12-02 13:59:14 +0530] info [cpaneld] 96.235.177.58 - vdep "GET /login/?login_only=1&user=vdep&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vdep (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.10.243.41
country_id: 6252001
description:
[2025-12-02 13:59:18 +0530] info [cpaneld] 24.10.243.41 - vd "GET /login/?login_only=1&user=vd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.62.249.123
country_id: 6252001
description:
[2025-12-02 14:00:45 +0530] info [cpaneld] 99.62.249.123 - lakw "GET /login/?login_only=1&user=lakw&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lakw (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.235.40.90
country_id: 6252001
description:
[2025-12-02 14:00:46 +0530] info [cpaneld] 73.235.40.90 - lak "GET /login/?login_only=1&user=lak&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lak (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.174.154.125
country_id: 6252001
description:
[2025-12-02 13:57:13 +0530] info [cpaneld] 67.174.154.125 - maximsho "GET /login/?login_only=1&user=maximsho&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maximsho (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.150.197.81
country_id: 6252001
description:
[2025-12-02 13:57:24 +0530] info [whostmgrd] 47.150.197.81 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.82.14.22
country_id: 6252001
description:
[2025-12-02 13:57:25 +0530] info [cpaneld] 71.82.14.22 - maxim "GET /login/?login_only=1&user=maxim&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maxim (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.112.171.159
country_id: 6252001
description:
[2025-12-02 13:57:27 +0530] info [cpaneld] 24.112.171.159 - max "GET /login/?login_only=1&user=max&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user max (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.198.177.126
country_id: 6252001
description:
[2025-12-02 13:57:31 +0530] info [cpaneld] 24.198.177.126 - agronatureholdi "GET /login/?login_only=1&user=agronatureholdi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronatureholdi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.248.116.183
country_id: 6252001
description:
[2025-12-02 13:57:43 +0530] info [cpaneld] 167.248.116.183 - agronatu "GET /login/?login_only=1&user=agronatu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronatu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.243.202.236
country_id: 6252001
description:
[2025-12-02 13:57:54 +0530] info [whostmgrd] 69.243.202.236 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.54.125.239
country_id: 6252001
description:
[2025-12-02 14:00:33 +0530] info [cpaneld] 68.54.125.239 - lakwelhold "GET /login/?login_only=1&user=lakwelhold&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lakwelhold (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.215.204.61
country_id: 6252001
description:
[2025-12-02 13:57:10 +0530] info [cpaneld] 66.215.204.61 - maximsholdi "GET /login/?login_only=1&user=maximsholdi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maximsholdi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 167.100.13.47
country_id: 6252001
description:
[2025-12-02 13:57:28 +0530] info [cpaneld] 167.100.13.47 - agronatureholdin "GET /login/?login_only=1&user=agronatureholdin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.115.226.76
country_id: 6252001
description:
[2025-12-02 13:57:34 +0530] info [cpaneld] 66.115.226.76 - maximsh2 "GET /login/?login_only=1&user=maximsh2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maximsh2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.35.217.95
country_id: 6252001
description:
[2025-12-02 13:59:07 +0530] info [cpaneld] 108.35.217.95 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.54.100.91
country_id: 6252001
description:
[2025-12-02 13:59:08 +0530] info [cpaneld] 75.54.100.91 - vdeploy "GET /login/?login_only=1&user=vdeploy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.130.96.10
country_id: 6252001
description:
[2025-12-02 14:00:16 +0530] info [cpaneld] 64.130.96.10 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.205.167.30
country_id: 6252001
description:
[2025-12-02 14:00:38 +0530] info [cpaneld] 97.205.167.30 - lakwel "GET /login/?login_only=1&user=lakwel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lakwel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.97.172.39
country_id: 6252001
description:
[2025-12-02 13:57:22 +0530] info [cpaneld] 98.97.172.39 - maxims "GET /login/?login_only=1&user=maxims&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maxims (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 66.91.227.223
country_id: 6252001
description:
[2025-12-02 13:57:25 +0530] info [cpaneld] 66.91.227.223 - agronatureholdingscom "GET /login/?login_only=1&user=agronatureholdingscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronatureholdingscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.105.33.168
country_id: 6252001
description:
[2025-12-02 13:57:32 +0530] info [cpaneld] 70.105.33.168 - maximsh1 "GET /login/?login_only=1&user=maximsh1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maximsh1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.222.47.154
country_id: 6252001
description:
[2025-12-02 13:57:51 +0530] info [cpaneld] 129.222.47.154 - agr "GET /login/?login_only=1&user=agr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.108.246.169
country_id: 6252001
description:
[2025-12-02 13:59:10 +0530] info [cpaneld] 73.108.246.169 - vdeploycom "GET /login/?login_only=1&user=vdeploycom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vdeploycom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.65.225.128
country_id: 6252001
description:
[2025-12-02 13:57:11 +0530] info [cpaneld] 174.65.225.128 - maximshol "GET /login/?login_only=1&user=maximshol&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maximshol (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.33.230.42
country_id: 6252001
description:
[2025-12-02 13:57:11 +0530] info [cpaneld] 76.33.230.42 - maximshold "GET /login/?login_only=1&user=maximshold&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maximshold (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 129.222.87.202
country_id: 6252001
description:
[2025-12-02 13:57:49 +0530] info [cpaneld] 129.222.87.202 - agro "GET /login/?login_only=1&user=agro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agro (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.99.201.138
country_id: 6252001
description:
[2025-12-02 14:00:23 +0530] info [whostmgrd] 68.99.201.138 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.213.113.180
country_id: 6252001
description:
[2025-12-02 13:57:06 +0530] info [cpaneld] 47.213.113.180 - maximsholding "GET /login/?login_only=1&user=maximsholding&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maximsholding (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.153.248.25
country_id: 6252001
description:
[2025-12-02 13:57:26 +0530] info [cpaneld] 47.153.248.25 - maxi "GET /login/?login_only=1&user=maxi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user maxi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 97.184.178.195
country_id: 6252001
description:
[2025-12-02 13:57:32 +0530] info [cpaneld] 97.184.178.195 - agronaturehold "GET /login/?login_only=1&user=agronaturehold&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronaturehold (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.10.132.117
country_id: 6252001
description:
[2025-12-02 13:57:55 +0530] info [cpaneld] 67.10.132.117 - tfablk "GET /login/?login_only=1&user=tfablk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.4.88.46
country_id: 6252001
description:
[2025-12-02 14:00:31 +0530] info [cpaneld] 73.4.88.46 - lakwelholdi "GET /login/?login_only=1&user=lakwelholdi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lakwelholdi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 16.98.101.16
country_id: 6252001
description:
[2025-12-02 13:57:26 +0530] info [cpaneld] 16.98.101.16 - agronatureholding "GET /login/?login_only=1&user=agronatureholding&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronatureholding (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.216.171.73
country_id: 6252001
description:
[2025-12-02 13:57:45 +0530] info [cpaneld] 24.216.171.73 - agron "GET /login/?login_only=1&user=agron&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agron (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.199.106.183
country_id: 6252001
description:
[2025-12-02 13:59:06 +0530] info [cpaneld] 71.199.106.183 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.189.24.140
country_id: 6252001
description:
[2025-12-02 13:59:15 +0530] info [cpaneld] 67.189.24.140 - vde "GET /login/?login_only=1&user=vde&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vde (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.245.15.59
country_id: 6252001
description:
[2025-12-02 13:57:22 +0530] info [cpaneld] 108.245.15.59 - agronatureholdings "GET /login/?login_only=1&user=agronatureholdings&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronatureholdings (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.202.219.120
country_id: 6252001
description:
[2025-12-02 13:57:44 +0530] info [cpaneld] 104.202.219.120 - agrona "GET /login/?login_only=1&user=agrona&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agrona (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.18.94.174
country_id: 6252001
description:
[2025-12-02 13:57:52 +0530] info [cpaneld] 73.18.94.174 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.62.164.134
country_id: 6252001
description:
[2025-12-02 13:57:53 +0530] info [cpaneld] 24.62.164.134 - agronat1 "GET /login/?login_only=1&user=agronat1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronat1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.140.52.142
country_id: 6252001
description:
[2025-12-02 13:57:56 +0530] info [cpaneld] 35.140.52.142 - tfa "GET /login/?login_only=1&user=tfa&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user tfa (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 141.224.148.2
country_id: 6252001
description:
[2025-12-02 13:57:38 +0530] info [cpaneld] 141.224.148.2 - agronatureh "GET /login/?login_only=1&user=agronatureh&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user agronatureh (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.93.36.160
country_id: 6252001
description:
[2025-12-02 13:56:58 +0530] info [cpaneld] 108.93.36.160 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.3.163.205
country_id: 6252001
description:
[2025-12-02 13:57:03 +0530] info [cpaneld] 108.3.163.205 - maximsholdings "GET /login/?login_only=1&user=maximsholdings&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.151.230.19
country_id: 6252001
description:
[2025-12-02 13:59:11 +0530] info [cpaneld] 35.151.230.19 - vdeplo "GET /login/?login_only=1&user=vdeplo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user vdeplo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.32.230.77
country_id: 6252001
description:
[2025-12-02 14:00:24 +0530] info [cpaneld] 24.32.230.77 - lakwelholdingscom "GET /login/?login_only=1&user=lakwelholdingscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lakwelholdingscom (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 95.181.233.21
country_id: 2993457
description:
2025-12-02 13:56:04 dovecot_login authenticator failed for (ADMIN) [95.181.233.21]:27915: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.173.76.52
country_id: 6252001
description:
[2025-12-02 14:02:19 +0530] info [cpaneld] 104.173.76.52 - monarc "GET /login/?login_only=1&user=monarc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user monarc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.187.45.114
country_id: 6252001
description:
[2025-12-02 14:01:45 +0530] info [cpaneld] 75.187.45.114 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.111.225.191
country_id: 6252001
description:
[2025-12-02 14:01:46 +0530] info [cpaneld] 99.111.225.191 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.187.43.142
country_id: 6252001
description:
[2025-12-02 14:01:56 +0530] info [cpaneld] 71.187.43.142 - emlprope "GET /login/?login_only=1&user=emlprope&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emlprope (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.244.110.81
country_id: 6252001
description:
[2025-12-02 14:02:02 +0530] info [cpaneld] 74.244.110.81 - emlp "GET /login/?login_only=1&user=emlp&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emlp (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.41.38.79
country_id: 6252001
description:
[2025-12-02 14:02:04 +0530] info [cpaneld] 98.41.38.79 - eml "GET /login/?login_only=1&user=eml&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user eml (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.68.164.244
country_id: 6252001
description:
[2025-12-02 14:02:17 +0530] info [cpaneld] 72.68.164.244 - monarchds "GET /login/?login_only=1&user=monarchds&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user monarchds (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.189.22.105
country_id: 6252001
description:
[2025-12-02 14:01:57 +0530] info [cpaneld] 24.189.22.105 - emlprop "GET /login/?login_only=1&user=emlprop&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emlprop (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.65.231.167
country_id: 6252001
description:
[2025-12-02 14:02:01 +0530] info [cpaneld] 38.65.231.167 - emlpr "GET /login/?login_only=1&user=emlpr&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emlpr (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.163.27.6
country_id: 6252001
description:
[2025-12-02 14:02:11 +0530] info [cpaneld] 67.163.27.6 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.38.123.204
country_id: 6252001
description:
[2025-12-02 14:02:15 +0530] info [whostmgrd] 136.38.123.204 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 152.117.107.38
country_id: 6252001
description:
[2025-12-02 14:02:16 +0530] info [cpaneld] 152.117.107.38 - monarchdsscom "GET /login/?login_only=1&user=monarchdsscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user monarchdsscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.24.238.240
country_id: 6252001
description:
[2025-12-02 14:02:18 +0530] info [cpaneld] 24.24.238.240 - monarch "GET /login/?login_only=1&user=monarch&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user monarch (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.149.44.18
country_id: 6252001
description:
[2025-12-02 14:01:51 +0530] info [cpaneld] 35.149.44.18 - emlpropertie "GET /login/?login_only=1&user=emlpropertie&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emlpropertie (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.139.237.185
country_id: 6252001
description:
[2025-12-02 14:01:54 +0530] info [cpaneld] 35.139.237.185 - emlpropert "GET /login/?login_only=1&user=emlpropert&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emlpropert (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.5.101.247
country_id: 6252001
description:
[2025-12-02 14:02:20 +0530] info [cpaneld] 98.5.101.247 - monar "GET /login/?login_only=1&user=monar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user monar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.186.227.254
country_id: 6252001
description:
[2025-12-02 14:01:48 +0530] info [cpaneld] 72.186.227.254 - emlproperties "GET /login/?login_only=1&user=emlproperties&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emlproperties (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.184.25.65
country_id: 6252001
description:
[2025-12-02 14:02:00 +0530] info [cpaneld] 47.184.25.65 - emlpro "GET /login/?login_only=1&user=emlpro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emlpro (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.37.245.221
country_id: 6252001
description:
[2025-12-02 14:02:14 +0530] info [cpaneld] 73.37.245.221 - monarchdss "GET /login/?login_only=1&user=monarchdss&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.78.200.246
country_id: 6252001
description:
[2025-12-02 14:01:50 +0530] info [cpaneld] 38.78.200.246 - emlpropertieslk "GET /login/?login_only=1&user=emlpropertieslk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emlpropertieslk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 46.110.28.32
country_id: 6252001
description:
[2025-12-02 14:02:13 +0530] info [cpaneld] 46.110.28.32 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.235.244.107
country_id: 6252001
description:
[2025-12-02 14:02:18 +0530] info [cpaneld] 70.235.244.107 - monarchd "GET /login/?login_only=1&user=monarchd&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user monarchd (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.86.60.147
country_id: 6252001
description:
[2025-12-02 14:01:52 +0530] info [cpaneld] 172.86.60.147 - emlproperti "GET /login/?login_only=1&user=emlproperti&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emlproperti (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.104.89.189
country_id: 6252001
description:
[2025-12-02 14:02:06 +0530] info [cpaneld] 50.104.89.189 - em "GET /login/?login_only=1&user=em&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user em (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.58.208.26
country_id: 6252001
description:
[2025-12-02 14:02:08 +0530] info [cpaneld] 172.58.208.26 - emlprop2 "GET /login/?login_only=1&user=emlprop2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emlprop2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.56.196.150
country_id: 6252001
description:
[2025-12-02 14:01:49 +0530] info [whostmgrd] 108.56.196.150 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.208.244.245
country_id: 6252001
description:
[2025-12-02 14:01:55 +0530] info [cpaneld] 71.208.244.245 - emlproper "GET /login/?login_only=1&user=emlproper&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emlproper (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.232.21.97
country_id: 6252001
description:
[2025-12-02 14:02:07 +0530] info [cpaneld] 96.232.21.97 - emlprop1 "GET /login/?login_only=1&user=emlprop1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user emlprop1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.187.135.171
country_id: 6252001
description:
[2025-12-02 14:02:25 +0530] info [cpaneld] 67.187.135.171 - monarch1 "GET /login/?login_only=1&user=monarch1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user monarch1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.40.117.200
country_id: 6252001
description:
[2025-12-02 14:02:24 +0530] info [cpaneld] 96.40.117.200 - mo "GET /login/?login_only=1&user=mo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.55.157.177
country_id: 6252001
description:
[2025-12-02 14:02:26 +0530] info [cpaneld] 174.55.157.177 - monarch2 "GET /login/?login_only=1&user=monarch2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user monarch2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.39.211.125
country_id: 6252001
description:
[2025-12-02 14:02:22 +0530] info [cpaneld] 108.39.211.125 - mona "GET /login/?login_only=1&user=mona&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mona (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 208.93.179.49
country_id: 6252001
description:
[2025-12-02 14:02:23 +0530] info [cpaneld] 208.93.179.49 - mon "GET /login/?login_only=1&user=mon&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mon (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.187.163.129
country_id: 6252001
description:
[2025-12-02 14:03:29 +0530] info [cpaneld] 67.187.163.129 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.18.50.29
country_id: 6252001
description:
[2025-12-02 14:03:30 +0530] info [cpaneld] 45.18.50.29 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.70.29.205
country_id: 6252001
description:
[2025-12-02 14:03:35 +0530] info [cpaneld] 173.70.29.205 - kamech "GET /login/?login_only=1&user=kamech&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kamech (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.185.192.206
country_id: 6252001
description:
[2025-12-02 14:03:37 +0530] info [cpaneld] 173.185.192.206 - kamec "GET /login/?login_only=1&user=kamec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kamec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.185.15.32
country_id: 6252001
description:
[2025-12-02 14:03:38 +0530] info [cpaneld] 73.185.15.32 - kam "GET /login/?login_only=1&user=kam&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kam (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 184.57.155.189
country_id: 6252001
description:
[2025-12-02 14:03:32 +0530] info [cpaneld] 184.57.155.189 - kamecho "GET /login/?login_only=1&user=kamecho&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kamecho (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.247.60.178
country_id: 6252001
description:
[2025-12-02 14:03:33 +0530] info [whostmgrd] 69.247.60.178 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.15.98.62
country_id: 6252001
description:
[2025-12-02 14:03:34 +0530] info [cpaneld] 71.15.98.62 - kamecholk "GET /login/?login_only=1&user=kamecholk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kamecholk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.48.75.135
country_id: 6252001
description:
[2025-12-02 14:03:37 +0530] info [cpaneld] 45.48.75.135 - kame "GET /login/?login_only=1&user=kame&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user kame (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.135.235.74
country_id: 6252001
description:
[2025-12-02 14:03:42 +0530] info [cpaneld] 74.135.235.74 - ka "GET /login/?login_only=1&user=ka&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ka (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 108.207.130.133
country_id: 6252001
description:
[2025-12-02 14:05:19 +0530] info [whostmgrd] 108.207.130.133 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 8.33.19.201
country_id: 6252001
description:
[2025-12-02 14:05:17 +0530] info [cpaneld] 8.33.19.201 - ajsstarlog "GET /login/?login_only=1&user=ajsstarlog&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.193.190.239
country_id: 6252001
description:
[2025-12-02 14:05:20 +0530] info [cpaneld] 68.193.190.239 - ajsstarlogcom "GET /login/?login_only=1&user=ajsstarlogcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ajsstarlogcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.61.219.226
country_id: 6252001
description:
[2025-12-02 14:05:16 +0530] info [cpaneld] 174.61.219.226 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.161.3.29
country_id: 6252001
description:
[2025-12-02 14:05:15 +0530] info [cpaneld] 47.161.3.29 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.7.144.210
country_id: 6252001
description:
[2025-12-02 14:05:21 +0530] info [cpaneld] 75.7.144.210 - ajsstarlo "GET /login/?login_only=1&user=ajsstarlo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ajsstarlo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 107.221.125.101
country_id: 6252001
description:
[2025-12-02 14:05:24 +0530] info [cpaneld] 107.221.125.101 - ajsst "GET /login/?login_only=1&user=ajsst&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ajsst (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.154.242.175
country_id: 6252001
description:
[2025-12-02 14:05:25 +0530] info [cpaneld] 47.154.242.175 - ajss "GET /login/?login_only=1&user=ajss&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ajss (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.5.53.220
country_id: 6252001
description:
[2025-12-02 14:05:28 +0530] info [cpaneld] 24.5.53.220 - ajsstar1 "GET /login/?login_only=1&user=ajsstar1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ajsstar1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.72.78.62
country_id: 6252001
description:
[2025-12-02 14:05:27 +0530] info [cpaneld] 172.72.78.62 - aj "GET /login/?login_only=1&user=aj&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user aj (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.41.38.79
country_id: 6252001
description:
[2025-12-02 14:05:29 +0530] info [cpaneld] 98.41.38.79 - ajsstar2 "GET /login/?login_only=1&user=ajsstar2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ajsstar2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.82.194.204
country_id: 6252001
description:
[2025-12-02 14:05:22 +0530] info [cpaneld] 99.82.194.204 - ajsstar "GET /login/?login_only=1&user=ajsstar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ajsstar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 162.230.192.177
country_id: 6252001
description:
[2025-12-02 14:05:22 +0530] info [cpaneld] 162.230.192.177 - ajsstarl "GET /login/?login_only=1&user=ajsstarl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ajsstarl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.213.4.201
country_id: 6252001
description:
[2025-12-02 14:05:24 +0530] info [cpaneld] 67.213.4.201 - ajssta "GET /login/?login_only=1&user=ajssta&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ajssta (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.244.51.238
country_id: 6252001
description:
[2025-12-02 14:05:26 +0530] info [cpaneld] 136.244.51.238 - ajs "GET /login/?login_only=1&user=ajs&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ajs (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.157.170.47
country_id: 6252001
description:
[2025-12-02 14:06:38 +0530] info [cpaneld] 47.157.170.47 - manaharasupercente "GET /login/?login_only=1&user=manaharasupercente&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manaharasupercente (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.143.196.174
country_id: 6252001
description:
[2025-12-02 14:06:46 +0530] info [cpaneld] 76.143.196.174 - manaharasupe "GET /login/?login_only=1&user=manaharasupe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manaharasupe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.200.5.108
country_id: 6252001
description:
[2025-12-02 14:06:48 +0530] info [cpaneld] 73.200.5.108 - manaharasu "GET /login/?login_only=1&user=manaharasu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manaharasu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 204.95.10.49
country_id: 6252001
description:
[2025-12-02 14:06:34 +0530] info [cpaneld] 204.95.10.49 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.180.27.52
country_id: 6252001
description:
[2025-12-02 14:06:34 +0530] info [cpaneld] 70.180.27.52 - manaharasupercenter "GET /login/?login_only=1&user=manaharasupercenter&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manaharasupercenter (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.35.204.244
country_id: 6252001
description:
[2025-12-02 14:06:37 +0530] info [cpaneld] 72.35.204.244 - manaharasupercenterlk "GET /login/?login_only=1&user=manaharasupercenterlk&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manaharasupercenterlk (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.2.124.228
country_id: 6252001
description:
[2025-12-02 14:06:39 +0530] info [cpaneld] 24.2.124.228 - manaharasupercent "GET /login/?login_only=1&user=manaharasupercent&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manaharasupercent (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.84.12.127
country_id: 6252001
description:
[2025-12-02 14:06:41 +0530] info [cpaneld] 67.84.12.127 - manaharasuperce "GET /login/?login_only=1&user=manaharasuperce&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manaharasuperce (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 169.150.186.154
country_id: 6252001
description:
[2025-12-02 14:06:44 +0530] info [cpaneld] 169.150.186.154 - manaharasuper "GET /login/?login_only=1&user=manaharasuper&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manaharasuper (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.231.162.82
country_id: 6252001
description:
[2025-12-02 14:06:47 +0530] info [cpaneld] 96.231.162.82 - manaharasup "GET /login/?login_only=1&user=manaharasup&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manaharasup (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.147.123.40
country_id: 6252001
description:
[2025-12-02 14:06:52 +0530] info [cpaneld] 47.147.123.40 - manahara "GET /login/?login_only=1&user=manahara&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manahara (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.30.109.204
country_id: 6252001
description:
[2025-12-02 14:06:33 +0530] info [cpaneld] 76.30.109.204 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.137.163.99
country_id: 6252001
description:
[2025-12-02 14:06:55 +0530] info [cpaneld] 76.137.163.99 - manah "GET /login/?login_only=1&user=manah&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manah (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.38.207.228
country_id: 6252001
description:
[2025-12-02 14:06:57 +0530] info [cpaneld] 73.38.207.228 - man "GET /login/?login_only=1&user=man&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user man (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.42.99.17
country_id: 6252001
description:
[2025-12-02 14:06:56 +0530] info [cpaneld] 50.42.99.17 - mana "GET /login/?login_only=1&user=mana&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mana (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.20.218.57
country_id: 6252001
description:
[2025-12-02 14:07:03 +0530] info [cpaneld] 24.20.218.57 - ma "GET /login/?login_only=1&user=ma&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ma (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 168.245.187.8
country_id: 6252001
description:
[2025-12-02 14:07:04 +0530] info [cpaneld] 168.245.187.8 - manahar1 "GET /login/?login_only=1&user=manahar1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manahar1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.53.204.75
country_id: 6252001
description:
[2025-12-02 14:06:51 +0530] info [cpaneld] 104.53.204.75 - manaharas "GET /login/?login_only=1&user=manaharas&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manaharas (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.189.74.230
country_id: 6252001
description:
[2025-12-02 14:06:53 +0530] info [cpaneld] 104.189.74.230 - manahar "GET /login/?login_only=1&user=manahar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manahar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.175.72.182
country_id: 6252001
description:
[2025-12-02 14:06:40 +0530] info [cpaneld] 99.175.72.182 - manaharasupercen "GET /login/?login_only=1&user=manaharasupercen&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manaharasupercen (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.34.218.121
country_id: 6252001
description:
[2025-12-02 14:06:42 +0530] info [cpaneld] 38.34.218.121 - manaharasuperc "GET /login/?login_only=1&user=manaharasuperc&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manaharasuperc (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.64.208.142
country_id: 6252001
description:
[2025-12-02 14:06:54 +0530] info [cpaneld] 68.64.208.142 - manaha "GET /login/?login_only=1&user=manaha&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manaha (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.54.223.56
country_id: 6252001
description:
[2025-12-02 14:07:05 +0530] info [cpaneld] 174.54.223.56 - manahar2 "GET /login/?login_only=1&user=manahar2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user manahar2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.123.106.232
country_id: 6252001
description:
[2025-12-02 14:06:36 +0530] info [whostmgrd] 76.123.106.232 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 64.92.32.12
country_id: 6252001
description:
[2025-12-02 14:09:01 +0530] info [cpaneld] 64.92.32.12 - lankaher "GET /login/?login_only=1&user=lankaher&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.224.43.74
country_id: 6252001
description:
[2025-12-02 14:08:39 +0530] info [cpaneld] 96.224.43.74 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.196.52.128
country_id: 6252001
description:
[2025-12-02 14:08:40 +0530] info [whostmgrd] 71.196.52.128 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.238.79.9
country_id: 6252001
description:
[2025-12-02 14:08:45 +0530] info [cpaneld] 73.238.79.9 - lezzarot "GET /login/?login_only=1&user=lezzarot&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lezzarot (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.138.139.98
country_id: 6252001
description:
[2025-12-02 14:08:46 +0530] info [cpaneld] 69.138.139.98 - lankaherbalsolutions "GET /login/?login_only=1&user=lankaherbalsolutions&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankaherbalsolutions (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 99.10.250.10
country_id: 6252001
description:
[2025-12-02 14:08:51 +0530] info [cpaneld] 99.10.250.10 - lankaherbalsolut "GET /login/?login_only=1&user=lankaherbalsolut&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankaherbalsolut (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.237.22.3
country_id: 6252001
description:
[2025-12-02 14:08:53 +0530] info [cpaneld] 24.237.22.3 - lez "GET /login/?login_only=1&user=lez&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lez (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.182.168.98
country_id: 6252001
description:
[2025-12-02 14:08:55 +0530] info [cpaneld] 104.182.168.98 - lankaherbalsol "GET /login/?login_only=1&user=lankaherbalsol&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankaherbalsol (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.174.166.9
country_id: 6252001
description:
[2025-12-02 14:08:44 +0530] info [cpaneld] 104.174.166.9 - lezzarote "GET /login/?login_only=1&user=lezzarote&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lezzarote (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 149.75.147.56
country_id: 6252001
description:
[2025-12-02 14:08:48 +0530] info [cpaneld] 149.75.147.56 - lankaherbalsolution "GET /login/?login_only=1&user=lankaherbalsolution&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankaherbalsolution (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.166.48.91
country_id: 6252001
description:
[2025-12-02 14:08:55 +0530] info [cpaneld] 24.166.48.91 - lezzaro1 "GET /login/?login_only=1&user=lezzaro1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lezzaro1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.45.133.225
country_id: 6252001
description:
[2025-12-02 14:09:07 +0530] info [cpaneld] 71.45.133.225 - lanka "GET /login/?login_only=1&user=lanka&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lanka (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.28.106.44
country_id: 6252001
description:
[2025-12-02 14:09:10 +0530] info [cpaneld] 75.28.106.44 - lankahe1 "GET /login/?login_only=1&user=lankahe1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankahe1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.184.86.147
country_id: 6252001
description:
[2025-12-02 14:08:32 +0530] info [cpaneld] 67.184.86.147 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.209.162.13
country_id: 6252001
description:
[2025-12-02 14:08:49 +0530] info [cpaneld] 98.209.162.13 - lankaherbalsolutio "GET /login/?login_only=1&user=lankaherbalsolutio&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankaherbalsolutio (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.133.31.231
country_id: 6252001
description:
[2025-12-02 14:08:54 +0530] info [cpaneld] 47.133.31.231 - lankaherbalsolu "GET /login/?login_only=1&user=lankaherbalsolu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankaherbalsolu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.129.188.101
country_id: 6252001
description:
[2025-12-02 14:08:57 +0530] info [cpaneld] 73.129.188.101 - lankaherbals "GET /login/?login_only=1&user=lankaherbals&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankaherbals (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 136.32.70.142
country_id: 6252001
description:
[2025-12-02 14:09:08 +0530] info [cpaneld] 136.32.70.142 - lank "GET /login/?login_only=1&user=lank&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lank (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.158.137.22
country_id: 6252001
description:
[2025-12-02 14:09:10 +0530] info [cpaneld] 73.158.137.22 - la "GET /login/?login_only=1&user=la&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user la (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.183.194.81
country_id: 6252001
description:
[2025-12-02 14:08:43 +0530] info [cpaneld] 71.183.194.81 - lezzarotec "GET /login/?login_only=1&user=lezzarotec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lezzarotec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.112.85.162
country_id: 6252001
description:
[2025-12-02 14:08:44 +0530] info [cpaneld] 24.112.85.162 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.128.75.206
country_id: 6252001
description:
[2025-12-02 14:08:46 +0530] info [whostmgrd] 24.128.75.206 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 137.25.169.203
country_id: 6252001
description:
[2025-12-02 14:08:47 +0530] info [cpaneld] 137.25.169.203 - lezza "GET /login/?login_only=1&user=lezza&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lezza (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.14.151.17
country_id: 6252001
description:
[2025-12-02 14:09:00 +0530] info [cpaneld] 100.14.151.17 - lankaherb "GET /login/?login_only=1&user=lankaherb&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankaherb (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.4.153.142
country_id: 6252001
description:
[2025-12-02 14:09:02 +0530] info [cpaneld] 24.4.153.142 - lankahe "GET /login/?login_only=1&user=lankahe&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankahe (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.36.186.181
country_id: 6252001
description:
[2025-12-02 14:08:47 +0530] info [cpaneld] 98.36.186.181 - lankaherbalsolutionscom "GET /login/?login_only=1&user=lankaherbalsolutionscom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankaherbalsolutionscom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.35.126.5
country_id: 6252001
description:
[2025-12-02 14:08:54 +0530] info [cpaneld] 73.35.126.5 - le "GET /login/?login_only=1&user=le&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user le (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 172.59.130.133
country_id: 6252001
description:
[2025-12-02 14:08:56 +0530] info [cpaneld] 172.59.130.133 - lankaherbalso "GET /login/?login_only=1&user=lankaherbalso&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankaherbalso (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.9.148.208
country_id: 6252001
description:
[2025-12-02 14:08:56 +0530] info [cpaneld] 104.9.148.208 - lezzaro2 "GET /login/?login_only=1&user=lezzaro2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lezzaro2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.187.207.168
country_id: 6252001
description:
[2025-12-02 14:09:09 +0530] info [cpaneld] 67.187.207.168 - lan "GET /login/?login_only=1&user=lan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.202.154.122
country_id: 6252001
description:
[2025-12-02 14:08:45 +0530] info [cpaneld] 104.202.154.122 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.120.61.204
country_id: 6252001
description:
[2025-12-02 14:08:46 +0530] info [cpaneld] 70.120.61.204 - lezzaro "GET /login/?login_only=1&user=lezzaro&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lezzaro (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 85.116.163.16
country_id: 6252001
description:
[2025-12-02 14:08:47 +0530] info [cpaneld] 85.116.163.16 - lezzar "GET /login/?login_only=1&user=lezzar&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lezzar (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.33.14.106
country_id: 6252001
description:
[2025-12-02 14:08:58 +0530] info [cpaneld] 76.33.14.106 - lankaherbal "GET /login/?login_only=1&user=lankaherbal&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankaherbal (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.53.7.190
country_id: 6252001
description:
[2025-12-02 14:09:05 +0530] info [cpaneld] 69.53.7.190 - lankah "GET /login/?login_only=1&user=lankah&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankah (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 148.64.110.101
country_id: 6252001
description:
[2025-12-02 14:09:11 +0530] info [cpaneld] 148.64.110.101 - lankahe2 "GET /login/?login_only=1&user=lankahe2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankahe2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 209.182.116.77
country_id: 6252001
description:
[2025-12-02 14:08:39 +0530] info [cpaneld] 209.182.116.77 - lezzarotech "GET /login/?login_only=1&user=lezzarotech&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lezzarotech (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 16.98.111.188
country_id: 6252001
description:
[2025-12-02 14:08:42 +0530] info [cpaneld] 16.98.111.188 - lezzarotechcom "GET /login/?login_only=1&user=lezzarotechcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lezzarotechcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.192.201.8
country_id: 6252001
description:
[2025-12-02 14:08:48 +0530] info [cpaneld] 73.192.201.8 - lezz "GET /login/?login_only=1&user=lezz&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lezz (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.33.12.252
country_id: 6252001
description:
[2025-12-02 14:08:50 +0530] info [cpaneld] 68.33.12.252 - lankaherbalsoluti "GET /login/?login_only=1&user=lankaherbalsoluti&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankaherbalsoluti (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.48.205.175
country_id: 6252001
description:
[2025-12-02 14:08:59 +0530] info [cpaneld] 45.48.205.175 - lankaherba "GET /login/?login_only=1&user=lankaherba&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user lankaherba (has_cpuser_file failed)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 195.199.210.194
country_id: 719819
description:
Dec  2 14:09:34 host2 sshd[1836312]: Disconnected from invalid user ubuntu 195.199.210.194 port 38906 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.250.191.189
country_id: 458258
description:
2025-12-02 14:11:01 dovecot_plain authenticator failed for (untentra) [178.250.191.189]:58308: 535 Incorrect authentication data (set_id=service@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 95.209.141.149
country_id: 2661886
description:
2025-12-02 14:12:07 dovecot_login authenticator failed for 95.209.141.149.bredband.tre.se [95.209.141.149]:36762: 535 Incorrect authentication data (set_id=washeera@lezzarotech.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.12.190.167
country_id: 6252001
description:
[2025-12-02 14:12:10 +0530] info [cpaneld] 73.12.190.167 - ayuzonelanka "GET /login/?login_only=1&user=ayuzonelanka&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 216.222.177.238
country_id: 6252001
description:
[2025-12-02 14:12:10 +0530] info [whostmgrd] 216.222.177.238 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.210.168.110
country_id: 6252001
description:
[2025-12-02 14:12:13 +0530] info [cpaneld] 47.210.168.110 - ayuzonelank "GET /login/?login_only=1&user=ayuzonelank&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayuzonelank (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.181.165.146
country_id: 6252001
description:
[2025-12-02 14:12:16 +0530] info [cpaneld] 24.181.165.146 - ayuzonela "GET /login/?login_only=1&user=ayuzonela&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayuzonela (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.46.6.167
country_id: 6252001
description:
[2025-12-02 14:12:14 +0530] info [cpaneld] 45.46.6.167 - ayuzonelan "GET /login/?login_only=1&user=ayuzonelan&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayuzonelan (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.243.73.51
country_id: 6252001
description:
[2025-12-02 14:12:17 +0530] info [cpaneld] 98.243.73.51 - ayuzonel "GET /login/?login_only=1&user=ayuzonel&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayuzonel (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.114.130.252
country_id: 6252001
description:
[2025-12-02 14:12:20 +0530] info [cpaneld] 76.114.130.252 - ayuzone "GET /login/?login_only=1&user=ayuzone&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayuzone (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.23.144.154
country_id: 6252001
description:
[2025-12-02 14:12:09 +0530] info [cpaneld] 73.23.144.154 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 69.154.200.246
country_id: 6252001
description:
[2025-12-02 14:12:12 +0530] info [cpaneld] 69.154.200.246 - ayuzonelankacom "GET /login/?login_only=1&user=ayuzonelankacom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayuzonelankacom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 50.43.184.28
country_id: 6252001
description:
[2025-12-02 14:12:21 +0530] info [cpaneld] 50.43.184.28 - ayuzon "GET /login/?login_only=1&user=ayuzon&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayuzon (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 38.44.194.137
country_id: 6252001
description:
[2025-12-02 14:12:02 +0530] info [cpaneld] 38.44.194.137 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.177.169.41
country_id: 6252001
description:
[2025-12-02 14:12:28 +0530] info [cpaneld] 67.177.169.41 - ayuzone1 "GET /login/?login_only=1&user=ayuzone1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayuzone1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 70.94.76.158
country_id: 6252001
description:
[2025-12-02 14:13:13 +0530] info [cpaneld] 70.94.76.158 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 162.202.32.124
country_id: 6252001
description:
[2025-12-02 14:13:15 +0530] info [whostmgrd] 162.202.32.124 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.179.157.23
country_id: 6252001
description:
[2025-12-02 14:13:19 +0530] info [cpaneld] 76.179.157.23 - ceylondige "GET /login/?login_only=1&user=ceylondige&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceylondige (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 35.148.99.152
country_id: 6252001
description:
[2025-12-02 14:12:25 +0530] info [cpaneld] 35.148.99.152 - ayu "GET /login/?login_only=1&user=ayu&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayu (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 100.1.122.243
country_id: 6252001
description:
[2025-12-02 14:13:09 +0530] info [cpaneld] 100.1.122.243 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 96.249.235.243
country_id: 6252001
description:
[2025-12-02 14:12:23 +0530] info [cpaneld] 96.249.235.243 - ayuz "GET /login/?login_only=1&user=ayuz&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayuz (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.97.26.241
country_id: 6252001
description:
[2025-12-02 14:12:27 +0530] info [cpaneld] 98.97.26.241 - ay "GET /login/?login_only=1&user=ay&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ay (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.252.197.136
country_id: 6252001
description:
[2025-12-02 14:13:16 +0530] info [cpaneld] 73.252.197.136 - ceylondigestcom "GET /login/?login_only=1&user=ceylondigestcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceylondigestcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.75.55.6
country_id: 6252001
description:
[2025-12-02 14:13:18 +0530] info [cpaneld] 74.75.55.6 - ceylondiges "GET /login/?login_only=1&user=ceylondiges&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceylondiges (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 135.129.119.33
country_id: 6252001
description:
[2025-12-02 14:12:22 +0530] info [cpaneld] 135.129.119.33 - ayuzo "GET /login/?login_only=1&user=ayuzo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayuzo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 67.160.43.5
country_id: 6252001
description:
[2025-12-02 14:12:29 +0530] info [cpaneld] 67.160.43.5 - ayuzone2 "GET /login/?login_only=1&user=ayuzone2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ayuzone2 (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 202.137.142.246
country_id: 1655842
description:
2025-12-02 14:12:34 dovecot_login authenticator failed for ([202.137.142.246]) [202.137.142.246]:43105: 535 Incorrect authentication data (set_id=washeera)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.66.135.42
country_id: 6252001
description:
[2025-12-02 14:13:14 +0530] info [cpaneld] 73.66.135.42 - ceylondigest "GET /login/?login_only=1&user=ceylondigest&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 75.142.57.58
country_id: 6252001
description:
[2025-12-02 14:13:28 +0530] info [cpaneld] 75.142.57.58 - ceyl "GET /login/?login_only=1&user=ceyl&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceyl (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 162.196.254.122
country_id: 6252001
description:
[2025-12-02 14:13:27 +0530] info [cpaneld] 162.196.254.122 - ceylo "GET /login/?login_only=1&user=ceylo&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceylo (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.46.252.15
country_id: 6252001
description:
[2025-12-02 14:13:22 +0530] info [cpaneld] 98.46.252.15 - ceylondig "GET /login/?login_only=1&user=ceylondig&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceylondig (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.194.173.81
country_id: 6252001
description:
[2025-12-02 14:13:24 +0530] info [cpaneld] 73.194.173.81 - ceylond "GET /login/?login_only=1&user=ceylond&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceylond (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 173.175.139.153
country_id: 6252001
description:
[2025-12-02 14:13:29 +0530] info [cpaneld] 173.175.139.153 - cey "GET /login/?login_only=1&user=cey&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user cey (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.147.137.180
country_id: 6252001
description:
[2025-12-02 14:13:30 +0530] info [cpaneld] 24.147.137.180 - ce "GET /login/?login_only=1&user=ce&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ce (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.10.46.98
country_id: 6252001
description:
[2025-12-02 14:13:31 +0530] info [cpaneld] 73.10.46.98 - ceylond1 "GET /login/?login_only=1&user=ceylond1&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceylond1 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 72.87.81.112
country_id: 6252001
description:
[2025-12-02 14:13:23 +0530] info [cpaneld] 72.87.81.112 - ceylondi "GET /login/?login_only=1&user=ceylondi&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceylondi (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 71.80.186.180
country_id: 6252001
description:
[2025-12-02 14:13:26 +0530] info [cpaneld] 71.80.186.180 - ceylon "GET /login/?login_only=1&user=ceylon&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceylon (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 98.11.37.175
country_id: 6252001
description:
[2025-12-02 14:13:34 +0530] info [cpaneld] 98.11.37.175 - ceylond2 "GET /login/?login_only=1&user=ceylond2&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceylond2 (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.158.147.251
country_id: 6252001
description:
[2025-12-02 14:15:12 +0530] info [cpaneld] 24.158.147.251 - admin "GET /login/?login_only=1&user=admin&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user admin (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.97.125.129
country_id: 6252001
description:
[2025-12-02 14:15:14 +0530] info [cpaneld] 68.97.125.129 - sysnytech "GET /login/?login_only=1&user=sysnytech&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.66.214.49
country_id: 6252001
description:
[2025-12-02 14:15:20 +0530] info [cpaneld] 73.66.214.49 - sysnytechcom "GET /login/?login_only=1&user=sysnytechcom&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sysnytechcom (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.154.174.137
country_id: 6252001
description:
[2025-12-02 14:15:10 +0530] info [cpaneld] 47.154.174.137 - global "GET /login/?login_only=1&user=global&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user global (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 74.36.124.96
country_id: 6252001
description:
[2025-12-02 14:15:16 +0530] info [whostmgrd] 74.36.124.96 - root "GET /login/?login_only=1&user=root&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 23.95.63.99
country_id: 6252001
description:
Dec  2 14:15:21 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 3 secs): user=<info@bostonlanka.com>, method=PLAIN, rip=23.95.63.99, lip=66.85.158.91, session=<K+WMHfREBswXXz9j>


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 191.185.168.78
country_id: 3469034
description:
Dec  2 14:14:45 host2 sshd[1839319]: Disconnected from invalid user sonarqube 191.185.168.78 port 53854 [preauth]


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 15.204.227.190
country_id: 6252001
description:
Dec  2 14:16:06 host2 sshd[1840189]: Disconnected from invalid user minecraft 15.204.227.190 port 57236 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 152.52.192.74
country_id: 1269750
description:
2025-12-02 14:16:21 dovecot_login authenticator failed for ([110.189.153.136]) [152.52.192.74]:53100: 535 Incorrect authentication data (set_id=washeera@lezzarotech.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 76.33.137.152
country_id: 6252001
description:
[2025-12-02 14:15:25 +0530] info [cpaneld] 76.33.137.152 - sysnyt "GET /login/?login_only=1&user=sysnyt&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sysnyt (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 174.69.5.99
country_id: 6252001
description:
[2025-12-02 14:15:30 +0530] info [cpaneld] 174.69.5.99 - sysn "GET /login/?login_only=1&user=sysn&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sysn (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 73.253.11.9
country_id: 6252001
description:
[2025-12-02 14:15:32 +0530] info [cpaneld] 73.253.11.9 - sys "GET /login/?login_only=1&user=sys&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sys (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 68.107.8.245
country_id: 6252001
description:
[2025-12-02 14:15:23 +0530] info [cpaneld] 68.107.8.245 - sysnyte "GET /login/?login_only=1&user=sysnyte&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sysnyte (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 24.245.29.120
country_id: 6252001
description:
[2025-12-02 14:15:35 +0530] info [cpaneld] 24.245.29.120 - sy "GET /login/?login_only=1&user=sy&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sy (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.53.15.17
country_id: 2542007
description:
2025-12-02 14:15:54 dovecot_plain authenticator failed for (kilgaliss) [102.53.15.17]:57128: 535 Incorrect authentication data (set_id=sales@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.19.248.170
country_id: 1269750
description:
2025-12-02 14:16:06 dovecot_login authenticator failed for ([61.32.221.143]) [125.19.248.170]:38902: 535 Incorrect authentication data (set_id=washeera@lezzarotech.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 65.141.247.8
country_id: 6252001
description:
[2025-12-02 14:15:22 +0530] info [cpaneld] 65.141.247.8 - sysnytec "GET /login/?login_only=1&user=sysnytec&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sysnytec (has_cpuser_file failed)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 47.185.85.202
country_id: 6252001
description:
[2025-12-02 14:15:26 +0530] info [cpaneld] 47.185.85.202 - sysny "GET /login/?login_only=1&user=sysny&pass=__HIDDEN__&goto_uri=%2F HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user sysny (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 137.184.193.67
country_id: 6252001
description:
2025-12-02 14:16:29 dovecot_login authenticator failed for ([194.179.135.174]) [137.184.193.67]:52056: 535 Incorrect authentication data (set_id=washeera)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 2.57.121.112
country_id: 798549
description:
Dec  2 14:17:10 host2 sshd[1840771]: Disconnected from invalid user 1234 2.57.121.112 port 63253 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 15.204.227.190
country_id: 6252001
description:
Dec  2 14:18:08 host2 sshd[1841272]: Disconnected from invalid user gg 15.204.227.190 port 44276 [preauth]


plugin: ossec
rule: 5718
name: Attempt to login using a denied user.
abuser: 62.60.135.105
country_id: 130758
description:
Dec  2 14:17:41 host2 sshd[1841010]: User agentallianz from 62.60.135.105 not allowed because a group is listed in DenyGroups


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 191.185.168.78
country_id: 3469034
description:
Dec  2 14:17:43 host2 sshd[1841018]: Disconnected from invalid user qw 191.185.168.78 port 52574 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 213.142.151.38
country_id: 298795
description:
Dec  2 14:18:38 host2 sshd[1841651]: Disconnected from invalid user kyt 213.142.151.38 port 33240 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 195.199.210.194
country_id: 719819
description:
Dec  2 14:18:59 host2 sshd[1841795]: Disconnected from invalid user sftpuser 195.199.210.194 port 34812 [preauth]


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 213.142.151.38
country_id: 298795
description:
Dec  2 14:20:12 host2 sshd[1842612]: Disconnected from invalid user testuser 213.142.151.38 port 54406 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 191.96.37.105
country_id: 6252001
description:
2025-12-02 14:19:24 dovecot_login authenticator failed for (ADMIN) [191.96.37.105]:25045: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 154.144.255.208
country_id: 2542007
description:
2025-12-02 14:20:37 dovecot_plain authenticator failed for (herrehous) [154.144.255.208]:59676: 535 Incorrect authentication data (set_id=sysadmin@lezzarotech.com)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 191.185.168.78
country_id: 3469034
description:
Dec  2 14:20:50 host2 sshd[1843046]: Disconnected from invalid user pivpn 191.185.168.78 port 51652 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.79.87.18
country_id: 1269750
description:
2025-12-02 14:21:03 dovecot_login authenticator failed for ([127.0.0.1]) [182.79.87.18]:52672: 535 Incorrect authentication data (set_id=contact@bostonlanka.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 213.204.216.60
country_id: 2661886
description:
2025-12-02 14:21:15 dovecot_login authenticator failed for ([127.0.0.1]) [213.204.216.60]:55324: 535 Incorrect authentication data (set_id=contact)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 213.142.151.38
country_id: 298795
description:
Dec  2 14:21:44 host2 sshd[1843604]: Disconnected from invalid user gg 213.142.151.38 port 49130 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 45.78.227.217
country_id: 1880251
description:
Dec  2 14:21:27 host2 sshd[1843450]: Disconnected from invalid user client 45.78.227.217 port 55380 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 93.85.230.107
country_id: 630336
description:
2025-12-02 14:23:06 dovecot_login authenticator failed for ([58.58.130.22]) [93.85.230.107]:55394: 535 Incorrect authentication data (set_id=careers@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 50.188.204.213
country_id: 6252001
description:
2025-12-02 14:23:30 dovecot_login authenticator failed for ([186.5.178.229]) [50.188.204.213]:54409: 535 Incorrect authentication data (set_id=careers)


plugin: ossec
rule: 5718
name: Attempt to login using a denied user.
abuser: 62.60.135.108
country_id: 130758
description:
Dec  2 14:23:48 host2 sshd[1845045]: User agentallianz from 62.60.135.108 not allowed because a group is listed in DenyGroups


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 13.53.126.26
country_id: 2661886
description:
[2025-12-02 14:24:21 +0530] info [cpaneld] 13.53.126.26 - kamechot "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 65.20.157.169
country_id: 99237
description:
Dec  2 14:25:12 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 17 secs): user=<info>, method=PLAIN, rip=65.20.157.169, lip=66.85.158.91, TLS, session=<zQb1P/REf6FBFJ2p>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 190.89.136.175
country_id: 3469034
description:
Dec  2 14:24:54 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 18 secs): user=<info@sivagnanamfoundation.com>, method=PLAIN, rip=190.89.136.175, lip=66.85.158.91, TLS, session=<Je/GPvREdpy+WYiv>


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 43.245.222.27
country_id: 1819730
description:
[2025-12-02 14:25:56 +0530] info [cpaneld] 43.245.222.27 - yashih "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yashih (has_cpuser_file failed)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 95.39.201.205
country_id: 2510769
description:
Dec  2 14:27:14 host2 sshd[1847212]: Disconnected from invalid user gg 95.39.201.205 port 34430 [preauth]


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 95.39.201.205
country_id: 2510769
description:
Dec  2 14:32:15 host2 sshd[1849899]: Disconnected from invalid user roots 95.39.201.205 port 49486 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 2.57.121.112
country_id: 798549
description:
Dec  2 14:35:07 host2 sshd[1851828]: Disconnected from invalid user admin 2.57.121.112 port 46461 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 158.173.21.152
country_id: 2750405
description:
2025-12-02 14:38:11 dovecot_login authenticator failed for (ADMIN) [158.173.21.152]:55564: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.255.212.178
country_id: 732800
description:
2025-12-02 14:39:20 dovecot_login authenticator failed for ([185.255.212.178]) [185.255.212.178]:42929: 535 Incorrect authentication data (set_id=marketing@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 2.54.85.220
country_id: 294640
description:
2025-12-02 14:39:42 dovecot_login authenticator failed for (2-54-85-220.orange.net.il) [2.54.85.220]:55003: 535 Incorrect authentication data (set_id=marketing)


plugin: ossec
rule: 5740
name: ssh connection reset by peer
description:
Dec  2 14:42:01 host2 sshd[1856963]: error: kex_exchange_identification: read: Connection reset by peer


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 147.185.132.82
country_id: 6252001
description:
Dec  2 14:41:23 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=147.185.132.82, lip=66.85.158.91, TLS, session=<GjLMevRErOWTuYRS>


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 194.233.74.228
country_id: 1880251
description:
Dec  2 14:42:51 host2 sshd[1857546]: Disconnected from invalid user g 194.233.74.228 port 39552 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 2.57.121.25
country_id: 798549
description:
Dec  2 14:44:15 host2 sshd[1858497]: Disconnected from invalid user user 2.57.121.25 port 40241 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 45.78.227.217
country_id: 1880251
description:
Dec  2 14:45:42 host2 sshd[1859756]: Disconnected from invalid user admin1 45.78.227.217 port 46168 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 194.233.74.228
country_id: 1880251
description:
Dec  2 14:46:53 host2 sshd[1860674]: Disconnected from invalid user tuan 194.233.74.228 port 33780 [preauth]


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 194.233.74.228
country_id: 1880251
description:
Dec  2 14:48:22 host2 sshd[1862038]: Disconnected from invalid user ntps 194.233.74.228 port 50774 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 23.30.11.253
country_id: 6252001
description:
2025-12-02 14:48:33 dovecot_plain authenticator failed for (euted) [23.30.11.253]:53150: 535 Incorrect authentication data (set_id=service@lezzarotech.com)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 194.233.74.228
country_id: 1880251
description:
Dec  2 14:52:44 host2 sshd[1864823]: Disconnected from invalid user postgres 194.233.74.228 port 47346 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 95.181.236.7
country_id: 614540
description:
2025-12-02 15:00:02 dovecot_login authenticator failed for (ADMIN) [95.181.236.7]:12052: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 11301
name: New FTP connection.
abuser: 89.117.42.108
country_id: 1668284
description:
Dec  2 15:00:21 host2 pure-ftpd[1870671]: (?@89.117.42.108) [INFO] New connection from 89.117.42.108


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 104.243.40.140
country_id: 6252001
description:
Dec  2 15:00:46 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (disconnected before auth was ready, waited 0 secs): user=<>, rip=104.243.40.140, lip=66.85.158.91, TLS handshaking: Connection closed, session=<0twowPREqpJo8yiM>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 204.144.187.198
country_id: 6252001
description:
Dec  2 15:01:35 host2 dovecot[3366265]: imap-login: Disconnected: Aborted login by logging out (auth failed, 2 attempts in 9 secs): user=<env_eng@lezzarotech.com>, method=PLAIN, rip=204.144.187.198, lip=66.85.158.91, TLS, session=<NcmJwvRE7svMkLvG>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 70.174.168.45
country_id: 6252001
description:
2025-12-02 15:02:54 dovecot_login authenticator failed for ([70.174.168.45]) [70.174.168.45]:47677: 535 Incorrect authentication data (set_id=contact@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 70.174.174.186
country_id: 6252001
description:
2025-12-02 15:02:56 dovecot_login authenticator failed for (WIN-T54PTGSAAGM) [70.174.174.186]:48168: 535 Incorrect authentication data (set_id=env_eng@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 117.211.15.93
country_id: 1269750
description:
2025-12-02 15:03:28 dovecot_login authenticator failed for (static.ill.117.211.15.93.bsnl.co.in) [117.211.15.93]:39826: 535 Incorrect authentication data (set_id=contact)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 109.226.27.227
country_id: 294640
description:
2025-12-02 15:04:25 dovecot_plain authenticator failed for (bulacet) [109.226.27.227]:56313: 535 Incorrect authentication data (set_id=office@lezzarotech.com)


plugin: ossec
rule: 5718
name: Attempt to login using a denied user.
abuser: 62.60.135.93
country_id: 130758
description:
Dec  2 15:13:37 host2 sshd[1882680]: User agentallianz from 62.60.135.93 not allowed because a group is listed in DenyGroups


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.131.84.55
country_id: 130758
description:
2025-12-02 15:15:18 dovecot_login authenticator failed for (ADMIN) [178.131.84.55]:53747: 535 Incorrect authentication data (set_id=info@ayuzonelanka.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.97.161.172
country_id: 3144096
description:
2025-12-02 15:20:04 dovecot_login authenticator failed for ([127.0.0.1]) [62.97.161.172]:47575: 535 Incorrect authentication data (set_id=careers@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.232.122.247
country_id: 3144096
description:
2025-12-02 15:20:11 dovecot_login authenticator failed for ([127.0.0.1]) [178.232.122.247]:49750: 535 Incorrect authentication data (set_id=careers)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 62.60.131.157
country_id: 130758
description:
Dec  2 15:23:05 host2 sshd[1894525]: Disconnected from invalid user corina 62.60.131.157 port 24634 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.216.81.126
country_id: 49518
description:
2025-12-02 15:23:38 dovecot_login authenticator failed for ([105.73.196.19]) [196.216.81.126]:54308: 535 Incorrect authentication data (set_id=hr)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 2.57.121.112
country_id: 798549
description:
Dec  2 15:24:10 host2 sshd[1896089]: Disconnected from invalid user admin 2.57.121.112 port 22923 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.107.36.18
country_id: 1269750
description:
2025-12-02 15:23:27 dovecot_login authenticator failed for ([218.87.21.146]) [103.107.36.18]:58076: 535 Incorrect authentication data (set_id=hr@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 212.32.50.175
country_id: 6252001
description:
2025-12-02 15:26:46 dovecot_login authenticator failed for (ADMIN) [212.32.50.175]:35812: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 5718
name: Attempt to login using a denied user.
abuser: 62.60.135.107
country_id: 130758
description:
Dec  2 15:26:17 host2 sshd[1898801]: User agentallianz from 62.60.135.107 not allowed because a group is listed in DenyGroups


plugin: ossec
rule: 5740
name: ssh connection reset by peer
description:
Dec  2 15:37:17 host2 sshd[1910518]: error: kex_exchange_identification: read: Connection reset by peer


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 172.248.47.114
country_id: 6252001
description:
2025-12-02 15:38:13 dovecot_login authenticator failed for ([218.58.73.238]) [172.248.47.114]:51205: 535 Incorrect authentication data (set_id=marketing@lezzarotech.com)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 165.154.0.193
country_id: 1819730
description:
Dec  2 15:38:15 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=165.154.0.193, lip=66.85.158.91, session=<arMsRvVE5gmlmgDB>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.239.80.71
country_id: 1819730
description:
2025-12-02 15:38:51 dovecot_login authenticator failed for ([195.222.57.190]) [182.239.80.71]:42770: 535 Incorrect authentication data (set_id=marketing)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 45.142.154.34
country_id: 1819730
description:
Dec  2 15:39:08 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=45.142.154.34, lip=66.85.158.92, TLS handshaking: Connection closed, session=<pTdbSfVEEp0tjpoi>


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 150.5.169.138
country_id: 1819730
description:
Dec  2 15:41:56 host2 sshd[1914367]: Disconnected from invalid user cesar 150.5.169.138 port 56368 [preauth]


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 66.132.153.123
country_id: 6252001
description:
Dec  2 15:42:18 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=66.132.153.123, lip=66.85.158.91, TLS: Connection closed, session=<zdyvVPVEdhxChJl7>


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 150.5.169.138
country_id: 1819730
description:
Dec  2 15:43:17 host2 sshd[1915352]: Disconnected from invalid user ghost 150.5.169.138 port 33362 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 150.5.169.138
country_id: 1819730
description:
Dec  2 15:44:39 host2 sshd[1916541]: Disconnected from invalid user lab 150.5.169.138 port 34120 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 150.5.169.138
country_id: 1819730
description:
Dec  2 15:47:07 host2 sshd[1918785]: Disconnected from invalid user user 150.5.169.138 port 50004 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 181.214.164.242
country_id: 6252001
description:
2025-12-02 15:47:36 dovecot_login authenticator failed for (ADMIN) [181.214.164.242]:4661: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 12.150.243.22
country_id: 6252001
description:
2025-12-02 15:50:45 dovecot_plain authenticator failed for (chydel) [12.150.243.22]:25286: 535 Incorrect authentication data (set_id=webmaster@lezzarotech.com)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 194.44.78.154
country_id: 690791
description:
Dec  2 15:52:14 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 17 secs): user=<info@jrdc.lk>, method=PLAIN, rip=194.44.78.154, lip=66.85.158.91, TLS, session=<A4Iwd/VEaJXCLE6a>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 170.247.76.154
country_id: 3865483
description:
Dec  2 15:52:35 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 18 secs): user=<info>, method=PLAIN, rip=170.247.76.154, lip=66.85.158.91, TLS, session=<z39iePVEMLqq90ya>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.107.36.18
country_id: 1269750
description:
2025-12-02 16:05:33 dovecot_login authenticator failed for ([103.107.36.18]) [103.107.36.18]:43178: 535 Incorrect authentication data (set_id=info@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.150.135.19
country_id: 690791
description:
2025-12-02 16:06:05 dovecot_login authenticator failed for (19.135.150.178.triolan.net) [178.150.135.19]:29517: 535 Incorrect authentication data (set_id=info)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 62.133.47.12
country_id: 1522867
description:
2025-12-02 16:08:51 dovecot_login authenticator failed for (ADMIN) [62.133.47.12]:55662: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 34.84.162.177
country_id: 1861060
description:
2025-12-02 16:09:33 dovecot_login authenticator failed for 177.162.84.34.bc.googleusercontent.com ([49.124.133.103]) [34.84.162.177]:51252: 535 Incorrect authentication data (set_id=marketing@lezzarotech.com)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 81.189.162.142
country_id: 2782113
description:
Dec  2 16:09:38 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (auth service reported temporary failure): user=<info@simple-engineering.lk>, method=PLAIN, rip=81.189.162.142, lip=66.85.158.91, session=<V9xDtvVEEtdRvaKO>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 75.64.207.52
country_id: 6252001
description:
2025-12-02 16:12:26 dovecot_login authenticator failed for c-75-64-207-52.hsd1.la.comcast.net (221-120-4-37.emome-ip.hinet.net) [75.64.207.52]:37762: 535 Incorrect authentication data (set_id=marketing@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 5.32.107.6
country_id: 290557
description:
2025-12-02 16:13:06 dovecot_login authenticator failed for ([5.32.107.6]) [5.32.107.6]:40323: 535 Incorrect authentication data (set_id=washeera@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 200.216.168.226
country_id: 3469034
description:
2025-12-02 16:13:15 dovecot_login authenticator failed for (200216168226.user.veloxzone.com.br) [200.216.168.226]:50638: 535 Incorrect authentication data (set_id=dev@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.34.128.202
country_id: 6252001
description:
2025-12-02 16:13:26 dovecot_login authenticator failed for ([192.34.128.202]) [192.34.128.202]:39704: 535 Incorrect authentication data (set_id=washeera)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 203.147.89.158
country_id: 1269750
description:
2025-12-02 16:13:37 dovecot_login authenticator failed for ([203.147.89.38]) [203.147.89.158]:56896: 535 Incorrect authentication data (set_id=dev)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.50.5.94
country_id: 1269750
description:
2025-12-02 16:22:06 dovecot_login authenticator failed for ([31.173.67.141]) [103.50.5.94]:37973: 535 Incorrect authentication data (set_id=hr@lezzarotech.com)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 178.219.103.27
country_id: 798544
description:
Dec  2 16:24:49 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 17 secs): user=<info@systemtec.lk>, method=PLAIN, rip=178.219.103.27, lip=66.85.158.91, TLS, session=<F5+76/VE5Iay22cb>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 138.94.203.35
country_id: 3469034
description:
Dec  2 16:25:20 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 18 secs): user=<info>, method=PLAIN, rip=138.94.203.35, lip=66.85.158.91, TLS, session=<pDV67fVEOpSKXssj>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 78.156.0.88
country_id: 3144096
description:
2025-12-02 16:27:30 dovecot_login authenticator failed for ([127.0.0.1]) [78.156.0.88]:48023: 535 Incorrect authentication data (set_id=contact@bostonlanka.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 201.173.216.251
country_id: 3996063
description:
2025-12-02 16:27:42 dovecot_login authenticator failed for ([127.0.0.1]) [201.173.216.251]:44872: 535 Incorrect authentication data (set_id=contact)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 71.62.34.216
country_id: 6252001
description:
2025-12-02 16:28:44 dovecot_plain authenticator failed for c-71-62-34-216.hsd1.va.comcast.net (inaburs) [71.62.34.216]:35918: 535 Incorrect authentication data (set_id=awanish@maximsholdings.com)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 62.60.131.157
country_id: 130758
description:
Dec  2 16:29:13 host2 sshd[1947880]: Disconnected from invalid user corina 62.60.131.157 port 43485 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 185.141.132.26
country_id: 130758
description:
Dec  2 16:30:16 host2 sshd[1948584]: Disconnected from invalid user msf 185.141.132.26 port 57288 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 95.181.233.20
country_id: 2993457
description:
2025-12-02 16:30:39 dovecot_login authenticator failed for (ADMIN) [95.181.233.20]:47187: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 2.57.121.25
country_id: 798549
description:
Dec  2 16:31:38 host2 sshd[1949277]: Disconnected from invalid user user 2.57.121.25 port 8854 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 173.25.186.130
country_id: 6252001
description:
2025-12-02 16:32:22 dovecot_login authenticator failed for (173-25-186-130.client.mchsi.com) [173.25.186.130]:53757: 535 Incorrect authentication data (set_id=marketing@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 68.52.119.193
country_id: 6252001
description:
2025-12-02 16:32:23 dovecot_plain authenticator failed for c-68-52-119-193.hsd1.tn.comcast.net (drilly) [68.52.119.193]:54792: 535 Incorrect authentication data (set_id=webmaster@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 71.229.43.123
country_id: 6252001
description:
2025-12-02 16:32:26 dovecot_plain authenticator failed for c-71-229-43-123.hsd1.ga.comcast.net (biliat) [71.229.43.123]:56162: 535 Incorrect authentication data (set_id=webmaster@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 36.37.203.28
country_id: 1831722
description:
2025-12-02 16:32:52 dovecot_login authenticator failed for ([36.37.203.28]) [36.37.203.28]:45898: 535 Incorrect authentication data (set_id=marketing)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 62.60.135.106
country_id: 130758
description:
Dec  2 16:34:17 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=62.60.135.106, lip=66.85.158.91, session=</AiaDvZE9II+PIdq>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 66.132.153.112
country_id: 6252001
description:
Dec  2 16:33:30 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed: read(size=600) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=66.132.153.112, lip=66.85.158.91, TLS handshaking: read(size=600) failed: Connection reset by peer, session=<OhXGC/ZECppChJlw>


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 205.185.115.224
country_id: 6252001
description:
Dec  2 16:34:54 host2 sshd[1950979]: Disconnected from invalid user g 205.185.115.224 port 50498 [preauth]


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 185.141.132.26
country_id: 130758
description:
Dec  2 16:35:38 host2 sshd[1951578]: Disconnected from invalid user g 185.141.132.26 port 45306 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 205.185.115.224
country_id: 6252001
description:
Dec  2 16:36:06 host2 sshd[1951927]: Disconnected from invalid user toor 205.185.115.224 port 47392 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 205.185.115.224
country_id: 6252001
description:
Dec  2 16:37:17 host2 sshd[1952516]: Disconnected from invalid user user 205.185.115.224 port 44286 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 98.222.93.199
country_id: 6252001
description:
2025-12-02 16:38:08 dovecot_plain authenticator failed for c-98-222-93-199.hsd1.il.comcast.net (ablenast) [98.222.93.199]:51194: 535 Incorrect authentication data (set_id=webmaster@lezzarotech.com)


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 205.185.115.224
country_id: 6252001
description:
Dec  2 16:39:31 host2 sshd[1953807]: Disconnected from invalid user bitnami 205.185.115.224 port 38074 [preauth]


plugin: ossec
rule: 5740
name: ssh connection reset by peer
description:
Dec  2 16:41:01 host2 sshd[1954746]: error: kex_exchange_identification: read: Connection reset by peer


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 23.95.63.99
country_id: 6252001
description:
Dec  2 16:41:16 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<info@ayuzonelanka.com>, method=PLAIN, rip=23.95.63.99, lip=66.85.158.91, session=<xFZwJ/ZEys0XXz9j>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 3.132.23.201
country_id: 6252001
description:
Dec  2 16:42:38 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:1408F09C:SSL routines:ssl3_get_record:http request (no auth attempts in 0 secs): user=<>, rip=3.132.23.201, lip=66.85.158.91, TLS handshaking: SSL_accept() failed: error:1408F09C:SSL routines:ssl3_get_record:http request, session=<DHN2LPZEMuwDhBfJ>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 3.132.23.201
country_id: 6252001
description:
Dec  2 16:43:39 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 10 secs): user=<>, rip=3.132.23.201, lip=66.85.158.91, TLS handshaking: Connection closed, session=<e/UZMPZE/NIDhBfJ>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 3.132.23.201
country_id: 6252001
description:
Dec  2 16:44:18 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:1408F09C:SSL routines:ssl3_get_record:http request (no auth attempts in 0 secs): user=<>, rip=3.132.23.201, lip=66.85.158.91, TLS handshaking: SSL_accept() failed: error:1408F09C:SSL routines:ssl3_get_record:http request, session=<jdtqMvZEwK4DhBfJ>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 66.132.153.124
country_id: 6252001
description:
Dec  2 16:45:46 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=66.132.153.124, lip=66.85.158.91, TLS: Connection closed, session=<sGOfN/ZEzvdChJl8>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 3.132.23.201
country_id: 6252001
description:
Dec  2 16:46:00 host2 dovecot[3366265]: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=3.132.23.201, lip=66.85.158.91, TLS, session=<bUmBOPZEfosDhBfJ>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 159.223.23.82
country_id: 2921044
description:
Dec  2 16:48:12 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed: read(size=1026) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=159.223.23.82, lip=66.85.158.91, session=<q4ZdQPZEQ/Gf3xdS>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 46.101.114.136
country_id: 2921044
description:
Dec  2 16:48:13 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=46.101.114.136, lip=66.85.158.91, session=<nN5sQPZEmo4uZXKI>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 3.132.23.201
country_id: 6252001
description:
Dec  2 16:48:44 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 10 secs): user=<>, rip=3.132.23.201, lip=66.85.158.91, TLS handshaking: Connection closed, session=<evg6QvZEJqUDhBfJ>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 3.132.23.201
country_id: 6252001
description:
Dec  2 16:49:20 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:1408F10B:SSL routines:ssl3_get_record:wrong version number (no auth attempts in 0 secs): user=<>, rip=3.132.23.201, lip=66.85.158.91, TLS handshaking: SSL_accept() failed: error:1408F10B:SSL routines:ssl3_get_record:wrong version number, session=<mF9nRPZEst4DhBfJ>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 3.132.23.201
country_id: 6252001
description:
Dec  2 16:50:35 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=3.132.23.201, lip=66.85.158.91, TLS, session=<mfjXSPZEDJMDhBfJ>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 176.125.228.10
country_id: 2589581
description:
2025-12-02 16:51:09 dovecot_login authenticator failed for (ADMIN) [176.125.228.10]:5097: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 62.60.131.157
country_id: 130758
description:
Dec  2 17:06:51 host2 sshd[1971928]: Disconnected from invalid user cristobal 62.60.131.157 port 39279 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.73.188.251
country_id: 290557
description:
2025-12-02 17:06:53 dovecot_plain authenticator failed for (nition) [91.73.188.251]:51027: 535 Incorrect authentication data (set_id=admin@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 196.47.172.253
country_id: 2287781
description:
2025-12-02 17:06:56 dovecot_plain authenticator failed for host-196-47-172-253.afnet.net (stomak) [196.47.172.253]:35831: 535 Incorrect authentication data (set_id=admin@lezzarotech.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 43.245.222.27
country_id: 1819730
description:
[2025-12-02 17:09:07 +0530] info [cpaneld] 43.245.222.27 - yashihol "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user yashihol (has_cpuser_file failed)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 23.95.63.99
country_id: 6252001
description:
Dec  2 17:09:59 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<info@ayuzonelanka.com>, method=PLAIN, rip=23.95.63.99, lip=66.85.158.91, session=<BRgdjvZEAOgXXz9j>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 156.146.41.201
country_id: 3175395
description:
2025-12-02 17:11:18 dovecot_login authenticator failed for (ADMIN) [156.146.41.201]:46664: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.19.157.158
country_id: 1269750
description:
2025-12-02 17:23:19 dovecot_login authenticator failed for ([128.185.70.193]) [125.19.157.158]:34282: 535 Incorrect authentication data (set_id=help@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 87.200.171.25
country_id: 290557
description:
2025-12-02 17:24:14 dovecot_login authenticator failed for ([87.200.171.25]) [87.200.171.25]:60287: 535 Incorrect authentication data (set_id=help)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 187.161.198.68
country_id: 3996063
description:
2025-12-02 17:26:01 dovecot_plain authenticator failed for (conoll) [187.161.198.68]:50850: 535 Incorrect authentication data (set_id=backup@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 181.214.165.160
country_id: 6252001
description:
2025-12-02 17:28:50 dovecot_login authenticator failed for (ADMIN) [181.214.165.160]:61208: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 81.225.30.107
country_id: 2661886
description:
2025-12-02 17:32:40 dovecot_plain authenticator failed for 81-225-30-107-no2380.tbcn.telia.com (conei) [81.225.30.107]:50365: 535 Incorrect authentication data (set_id=administrator@lezzarotech.com)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 195.184.76.126
country_id: 6252001
description:
Dec  2 17:32:54 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=195.184.76.126, lip=66.85.158.92, TLS handshaking: Connection closed, session=<aqE24PZEm9TDuEx+>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 195.184.76.99
country_id: 6252001
description:
Dec  2 17:33:04 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 10 secs): user=<>, rip=195.184.76.99, lip=66.85.158.92, TLS: Connection closed, session=<pV3T4PZES5LDuExj>


plugin: ossec
rule: 9708
name: Dovecot Aborted Login with empty user
abuser: 71.6.146.186
country_id: 6252001
description:
Dec  2 17:32:12 host2 dovecot[3366265]: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=71.6.146.186, lip=66.85.158.92, session=<rzS43fZEuMZHBpK6>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 71.6.146.186
country_id: 6252001
description:
Dec  2 17:32:15 host2 dovecot[3366265]: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=71.6.146.186, lip=66.85.158.92, session=<Y+no3fZElstHBpK6>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 195.184.76.98
country_id: 6252001
description:
Dec  2 17:33:14 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed: read(size=600) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=195.184.76.98, lip=66.85.158.92, TLS handshaking: read(size=600) failed: Connection reset by peer, session=<EUxm4fZEMbzDuExi>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 195.184.76.100
country_id: 6252001
description:
Dec  2 17:33:17 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 3 secs): user=<>, rip=195.184.76.100, lip=66.85.158.92, TLS: Connection closed, session=<RBGV4fZES9bDuExk>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 187.161.136.37
country_id: 3996063
description:
2025-12-02 17:34:25 dovecot_login authenticator failed for ([127.0.0.1]) [187.161.136.37]:35055: 535 Incorrect authentication data (set_id=art@bostonlanka.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 70.174.173.246
country_id: 6252001
description:
2025-12-02 17:34:32 dovecot_login authenticator failed for ([127.0.0.1]) [70.174.173.246]:49731: 535 Incorrect authentication data (set_id=art)


plugin: ossec
rule: 5740
name: ssh connection reset by peer
description:
Dec  2 17:35:40 host2 sshd[1991050]: error: kex_exchange_identification: read: Connection reset by peer


plugin: ossec
rule: 5740
name: ssh connection reset by peer
description:
Dec  2 17:36:30 host2 sshd[1991415]: error: kex_exchange_identification: read: Connection reset by peer


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 102.53.15.17
country_id: 2542007
description:
2025-12-02 17:36:14 dovecot_plain authenticator failed for (ghara) [102.53.15.17]:40122: 535 Incorrect authentication data (set_id=admin@lezzarotech.com)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 159.203.12.58
country_id: 6251999
description:
Dec  2 17:41:41 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed: read(size=600) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=159.203.12.58, lip=66.85.158.92, TLS handshaking: read(size=600) failed: Connection reset by peer, session=<3weh//ZEqrmfyww6>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 102.64.40.35
country_id: 953987
description:
Dec  2 17:43:36 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 19 secs): user=<info>, method=PLAIN, rip=102.64.40.35, lip=66.85.158.91, TLS, session=<fYBSBfdEJ+tmQCgj>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 176.103.4.218
country_id: 690791
description:
Dec  2 17:43:14 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 21 secs): user=<info@systemtec.lk>, method=PLAIN, rip=176.103.4.218, lip=66.85.158.91, TLS, session=<9X7vA/dElrawZwTa>


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 2.57.121.25
country_id: 798549
description:
Dec  2 17:49:59 host2 sshd[2000490]: Disconnected from invalid user user 2.57.121.25 port 20541 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 191.96.37.50
country_id: 6252001
description:
2025-12-02 17:50:02 dovecot_login authenticator failed for (ADMIN) [191.96.37.50]:37178: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 76.16.7.82
country_id: 6252001
description:
2025-12-02 17:51:44 dovecot_plain authenticator failed for c-76-16-7-82.hsd1.il.comcast.net (tegelly) [76.16.7.82]:56595: 535 Incorrect authentication data (set_id=backup@lezzarotech.com)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 62.60.135.104
country_id: 130758
description:
Dec  2 17:52:39 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=62.60.135.104, lip=66.85.158.91, session=<wwHWJvdEpsg+PIdo>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 149.34.211.139
country_id: 298795
description:
Dec  2 17:53:01 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 17 secs): user=<info@jrdc.lk>, method=PLAIN, rip=149.34.211.139, lip=66.85.158.91, TLS, session=<FYklJ/dEqISVItOL>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 185.15.171.167
country_id: 3175395
description:
Dec  2 17:53:24 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 20 secs): user=<info>, method=PLAIN, rip=185.15.171.167, lip=66.85.158.91, TLS, session=<SqlPKPdEhau5D6un>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.51.26.198
country_id: 1269750
description:
2025-12-02 17:56:56 dovecot_plain authenticator failed for (warecal) [103.51.26.198]:43172: 535 Incorrect authentication data (set_id=training@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 23.30.11.253
country_id: 6252001
description:
2025-12-02 17:58:54 dovecot_plain authenticator failed for (kidebric) [23.30.11.253]:41552: 535 Incorrect authentication data (set_id=alert@lezzarotech.com)


plugin: ossec
rule: 9708
name: Dovecot Aborted Login with empty user
abuser: 87.236.176.170
country_id: 2635167
description:
Dec  2 18:01:01 host2 dovecot[3366265]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 6 secs): user=<>, rip=87.236.176.170, lip=66.85.158.92, TLS, session=<LynHRPdEp95X7LCq>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 46.227.39.222
country_id: 798544
description:
Dec  2 18:01:34 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 17 secs): user=<info>, method=PLAIN, rip=46.227.39.222, lip=66.85.158.91, TLS, session=<Rlu+RfdEo6wu4yfe>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 154.127.36.139
country_id: 2395170
description:
Dec  2 18:01:16 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 17 secs): user=<info@sivagnanamfoundation.com>, method=PLAIN, rip=154.127.36.139, lip=66.85.158.91, TLS, session=<16SfRPdEmaqafySL>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 73.0.191.33
country_id: 6252001
description:
2025-12-02 18:01:28 dovecot_plain authenticator failed for c-73-0-191-33.hsd1.fl.comcast.net (gasts) [73.0.191.33]:40882: 535 Incorrect authentication data (set_id=awanish@maximsholdings.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 34.29.104.32
country_id: 6252001
description:
2025-12-02 18:02:39 dovecot_login authenticator failed for 32.104.29.34.bc.googleusercontent.com ([49.125.201.72]) [34.29.104.32]:45104: 535 Incorrect authentication data (set_id=hr@lezzarotech.com)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 35.202.9.133
country_id: 6252001
description:
Dec  2 18:06:39 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=35.202.9.133, lip=66.85.158.92, TLS: Connection closed, session=<iiLsWPdExtojygmF>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 12.202.15.69
country_id: 6252001
description:
2025-12-02 18:07:00 dovecot_login authenticator failed for ([12.202.15.69]) [12.202.15.69]:57674: 535 Incorrect authentication data (set_id=washeera@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.55.89.5
country_id: 1269750
description:
2025-12-02 18:07:22 dovecot_login authenticator failed for ([103.55.89.5]) [103.55.89.5]:42616: 535 Incorrect authentication data (set_id=washeera)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 173.244.49.96
country_id: 1668284
description:
2025-12-02 18:08:57 dovecot_login authenticator failed for (ADMIN) [173.244.49.96]:20434: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 9708
name: Dovecot Aborted Login with empty user
abuser: 71.6.146.186
country_id: 6252001
description:
Dec  2 18:12:21 host2 dovecot[3366265]: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 2 secs): user=<>, rip=71.6.146.186, lip=66.85.158.91, session=<ILJFbfdEINlHBpK6>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 71.6.146.186
country_id: 6252001
description:
Dec  2 18:12:24 host2 dovecot[3366265]: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=71.6.146.186, lip=66.85.158.91, session=<0B10bfdEauFHBpK6>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 36.50.167.81
country_id: 1269750
description:
2025-12-02 18:15:00 dovecot_login authenticator failed for (connect.velocitymedical.com) [36.50.167.81]:43740: 535 Incorrect authentication data (set_id=hr@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 209.23.72.144
country_id: 6252001
description:
2025-12-02 18:15:33 dovecot_login authenticator failed for ([112.232.252.106]) [209.23.72.144]:38484: 535 Incorrect authentication data (set_id=hr)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 91.196.152.185
country_id: 3017382
description:
Dec  2 18:20:56 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=91.196.152.185, lip=66.85.158.92, TLS handshaking: Connection closed, session=<ZVD5i/dEPZ9bxJi5>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 91.196.152.221
country_id: 3017382
description:
Dec  2 18:21:06 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 10 secs): user=<>, rip=91.196.152.221, lip=66.85.158.92, TLS: Connection closed, session=<7hGZjPdEJ7xbxJjd>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 91.196.152.222
country_id: 3017382
description:
Dec  2 18:21:21 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed: read(size=600) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=91.196.152.222, lip=66.85.158.92, TLS handshaking: read(size=600) failed: Connection reset by peer, session=<jQd9jfdEYd5bxJje>


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 168.194.164.218
country_id: 3469034
description:
Dec  2 18:26:57 host2 sshd[2030579]: Disconnected from invalid user desliga 168.194.164.218 port 56990 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 168.194.164.218
country_id: 3469034
description:
Dec  2 18:29:50 host2 sshd[2032697]: Disconnected from invalid user webuser 168.194.164.218 port 39683 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.32.96.252
country_id: 3017382
description:
2025-12-02 18:29:59 dovecot_login authenticator failed for ip252.ip-178-32-96.eu (ADMIN) [178.32.96.252]:60152: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.79.127.86
country_id: 1269750
description:
2025-12-02 18:30:00 dovecot_login authenticator failed for (1522312565.colombiatel.co) [182.79.127.86]:44624: 535 Incorrect authentication data (set_id=hr)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 107.85.14.208
country_id: 6252001
description:
2025-12-02 18:29:39 dovecot_login authenticator failed for ([128.185.217.150]) [107.85.14.208]:48332: 535 Incorrect authentication data (set_id=hr@lezzarotech.com)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 23.95.63.99
country_id: 6252001
description:
Dec  2 18:29:43 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<shipping@askinternationalconsortium.com>, method=PLAIN, rip=23.95.63.99, lip=66.85.158.91, session=<JtFIq/dE2pkXXz9j>


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 168.194.164.218
country_id: 3469034
description:
Dec  2 18:32:27 host2 sshd[2034311]: Disconnected from invalid user dd 168.194.164.218 port 49000 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 208.109.38.143
country_id: 6252001
description:
2025-12-02 18:33:29 dovecot_login authenticator failed for 143.38.109.208.host.secureserver.net [208.109.38.143]:45898: 535 Incorrect authentication data (set_id=hostmaster@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.93.37.178
country_id: 1269750
description:
2025-12-02 18:33:44 dovecot_login authenticator failed for ([103.93.37.178]) [103.93.37.178]:57520: 535 Incorrect authentication data (set_id=hostmaster)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 168.194.164.218
country_id: 3469034
description:
Dec  2 18:37:45 host2 sshd[2037729]: Disconnected from invalid user sales1 168.194.164.218 port 39416 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 182.253.156.173
country_id: 1643084
description:
Dec  2 18:37:59 host2 sshd[2037902]: Disconnected from invalid user user2 182.253.156.173 port 32994 [preauth]


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 62.60.135.107
country_id: 130758
description:
Dec  2 18:38:18 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=62.60.135.107, lip=66.85.158.91, session=<cHoSyvdEYNA+PIdr>


plugin: ossec
rule: 5740
name: ssh connection reset by peer
description:
Dec  2 18:39:57 host2 sshd[2039172]: error: kex_exchange_identification: read: Connection reset by peer


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 182.253.156.173
country_id: 1643084
description:
Dec  2 18:39:29 host2 sshd[2038883]: Disconnected from invalid user myuser 182.253.156.173 port 54520 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 2.57.121.25
country_id: 798549
description:
Dec  2 18:39:30 host2 sshd[2038894]: Disconnected from invalid user user 2.57.121.25 port 10189 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 168.194.164.218
country_id: 3469034
description:
Dec  2 18:40:30 host2 sshd[2039711]: Disconnected from invalid user system 168.194.164.218 port 50040 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 182.253.156.173
country_id: 1643084
description:
Dec  2 18:40:59 host2 sshd[2039981]: Disconnected from invalid user blue 182.253.156.173 port 38766 [preauth]


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 182.253.156.173
country_id: 1643084
description:
Dec  2 18:43:48 host2 sshd[2041988]: Disconnected from invalid user stperez 182.253.156.173 port 52842 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 50.235.31.47
country_id: 6252001
description:
2025-12-02 18:43:50 dovecot_login authenticator failed for (netmail.nasmhpd.org) [50.235.31.47]:49818: 535 Incorrect authentication data (set_id=marketing@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 122.187.228.231
country_id: 1269750
description:
2025-12-02 18:44:07 dovecot_login authenticator failed for (nsg-corporate-231.228.187.122.airtel.in) [122.187.228.231]:56162: 535 Incorrect authentication data (set_id=marketing)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.73.188.251
country_id: 290557
description:
2025-12-02 18:44:52 dovecot_plain authenticator failed for (synalimpan) [91.73.188.251]:42185: 535 Incorrect authentication data (set_id=hr@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 46.10.56.170
country_id: 732800
description:
2025-12-02 18:45:39 dovecot_login authenticator failed for 46-10-56-170.ip.btc-net.bg ([38.159.46.35]) [46.10.56.170]:53506: 535 Incorrect authentication data (set_id=hr@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.144.37.102
country_id: 1269750
description:
2025-12-02 18:46:09 dovecot_login authenticator failed for ([49.124.142.131]) [103.144.37.102]:32771: 535 Incorrect authentication data (set_id=hr)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 98.40.101.10
country_id: 6252001
description:
2025-12-02 18:46:19 dovecot_plain authenticator failed for c-98-40-101-10.hsd1.tn.comcast.net (cunmens) [98.40.101.10]:56602: 535 Incorrect authentication data (set_id=careers@v-deploy.com)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 2.57.121.112
country_id: 798549
description:
Dec  2 18:48:16 host2 sshd[2045057]: Disconnected from invalid user  2.57.121.112 port 64099 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 24.1.200.187
country_id: 6252001
description:
2025-12-02 18:54:31 dovecot_plain authenticator failed for c-24-1-200-187.hsd1.il.comcast.net (sacrost) [24.1.200.187]:57662: 535 Incorrect authentication data (set_id=administrator@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.133.4
country_id: 99237
description:
2025-12-02 18:54:36 dovecot_plain authenticator failed for (irism) [65.20.133.4]:50982: 535 Incorrect authentication data (set_id=administrator@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 192.81.229.181
country_id: 6252001
description:
2025-12-02 18:54:39 dovecot_plain authenticator failed for (collikeron) [192.81.229.181]:60352: 535 Incorrect authentication data (set_id=administrator@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 143.244.52.64
country_id: 798549
description:
2025-12-02 18:54:38 dovecot_login authenticator failed for (ADMIN) [143.244.52.64]:27248: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 2502
name: User missed the password more than one time
abuser: 66.69.42.134
country_id: 6252001
description:
Dec  2 18:56:06 host2 sshd[2051404]: Disconnecting authenticating user root 66.69.42.134 port 35252: Too many authentication failures [preauth]


plugin: ossec
rule: 5758
name: Maximum authentication attempts exceeded.
abuser: 66.69.42.134
country_id: 6252001
description:
Dec  2 18:56:06 host2 sshd[2051404]: error: maximum authentication attempts exceeded for root from 66.69.42.134 port 35252 ssh2 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 67.173.58.47
country_id: 6252001
description:
2025-12-02 18:56:15 dovecot_plain authenticator failed for c-67-173-58-47.hsd1.il.comcast.net (puperon) [67.173.58.47]:50856: 535 Incorrect authentication data (set_id=administrator@lezzarotech.com)


plugin: ossec
rule: 2502
name: User missed the password more than one time
abuser: 66.69.42.134
country_id: 6252001
description:
Dec  2 18:56:10 host2 sshd[2051494]: Disconnecting authenticating user root 66.69.42.134 port 36290: Too many authentication failures [preauth]


plugin: ossec
rule: 5758
name: Maximum authentication attempts exceeded.
abuser: 66.69.42.134
country_id: 6252001
description:
Dec  2 18:56:10 host2 sshd[2051494]: error: maximum authentication attempts exceeded for root from 66.69.42.134 port 36290 ssh2 [preauth]


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 23.95.63.99
country_id: 6252001
description:
Dec  2 18:58:06 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<finance@askinternationalconsortium.com>, method=PLAIN, rip=23.95.63.99, lip=66.85.158.91, session=<cNfKEPhESIQXXz9j>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 50.74.136.134
country_id: 6252001
description:
2025-12-02 19:02:28 dovecot_plain authenticator failed for syn-050-074-136-134.biz.spectrum.com (mentatic) [50.74.136.134]:58444: 535 Incorrect authentication data (set_id=awanish@maximsholdings.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.220.118.201
country_id: 6290252
description:
2025-12-02 19:06:00 dovecot_plain authenticator failed for 178-220-118-201.static.isp.telekom.rs (eltenonati) [178.220.118.201]:54785: 535 Incorrect authentication data (set_id=backup@lezzarotech.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 43.245.222.27
country_id: 1819730
description:
[2025-12-02 19:10:38 +0530] info [cpaneld] 43.245.222.27 - ceylon "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user ceylon (has_cpuser_file failed)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 178.131.84.55
country_id: 130758
description:
2025-12-02 19:11:31 dovecot_login authenticator failed for (ADMIN) [178.131.84.55]:57963: 535 Incorrect authentication data (set_id=info@ayuzonelanka.com)


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 2.57.121.112
country_id: 798549
description:
Dec  2 19:13:31 host2 sshd[2063144]: Disconnected from invalid user admin 2.57.121.112 port 30260 [preauth]


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 64.62.156.66
country_id: 6252001
description:
Dec  2 19:13:59 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 3 secs): user=<>, rip=64.62.156.66, lip=66.85.158.91, TLS handshaking: Connection closed, session=<5wWzSfhEXB1APpxC>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 149.62.239.4
country_id: 732800
description:
2025-12-02 19:13:59 dovecot_plain authenticator failed for (unbromped) [149.62.239.4]:56822: 535 Incorrect authentication data (set_id=admin@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 64.72.74.162
country_id: 6252001
description:
2025-12-02 19:14:01 dovecot_plain authenticator failed for (coppylless) [64.72.74.162]:51419: 535 Incorrect authentication data (set_id=admin@lezzarotech.com)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 64.62.156.66
country_id: 6252001
description:
Dec  2 19:14:16 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 3 secs): user=<>, rip=64.62.156.66, lip=66.85.158.91, TLS handshaking: Connection closed, session=<4xa6SvhEmNJAPpxC>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 124.246.114.111
country_id: 1880251
description:
2025-12-02 19:16:51 dovecot_login authenticator failed for ([103.115.252.60]) [124.246.114.111]:57501: 535 Incorrect authentication data (set_id=washeera@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 185.246.255.183
country_id: 294640
description:
2025-12-02 19:17:08 dovecot_login authenticator failed for (static.vnpt.vn) [185.246.255.183]:33776: 535 Incorrect authentication data (set_id=washeera)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 91.90.126.99
country_id: 3703430
description:
2025-12-02 19:17:52 dovecot_login authenticator failed for (ADMIN) [91.90.126.99]:54126: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 67.172.54.29
country_id: 6252001
description:
2025-12-02 19:19:27 dovecot_plain authenticator failed for c-67-172-54-29.hsd1.pa.comcast.net (restred) [67.172.54.29]:50544: 535 Incorrect authentication data (set_id=administrator@lezzarotech.com)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 62.60.135.104
country_id: 130758
description:
Dec  2 19:20:56 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=62.60.135.104, lip=66.85.158.91, session=<mSiUYvhEeLI+PIdo>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 49.43.40.13
country_id: 1269750
description:
2025-12-02 19:21:55 dovecot_plain authenticator failed for (Q171B58071) [49.43.40.13]:55021: 535 Incorrect authentication data (set_id=env_eng@lezzarotech.com)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 81.189.162.142
country_id: 2782113
description:
Dec  2 19:29:16 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<info@sobaherbal.com>, method=PLAIN, rip=81.189.162.142, lip=66.85.158.91, session=<H5g+gPhEVDlRvaKO>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 69.123.219.82
country_id: 6252001
description:
2025-12-02 19:36:54 dovecot_plain authenticator failed for ool-457bdb52.dyn.optonline.net (indesynce) [69.123.219.82]:47320: 535 Incorrect authentication data (set_id=backup@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 146.70.59.15
country_id: 2264397
description:
2025-12-02 19:38:08 dovecot_login authenticator failed for (ADMIN) [146.70.59.15]:40664: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 152.59.47.25
country_id: 1269750
description:
2025-12-02 19:42:34 dovecot_plain authenticator failed for (5HJ30XO6291) [152.59.47.25]:63647: 535 Incorrect authentication data (set_id=marketing@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.153.146
country_id: 99237
description:
2025-12-02 19:42:52 dovecot_plain authenticator failed for (miters) [65.20.153.146]:46465: 535 Incorrect authentication data (set_id=alert@lezzarotech.com)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 139.162.116.22
country_id: 1861060
description:
Dec  2 19:42:55 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=139.162.116.22, lip=66.85.158.91, TLS: Connection closed, session=<aeMwsfhEDr2LonQW>


plugin: ossec
rule: 11324
name: Stealth SSH user enumeration attack detected
abuser: 74.249.246.151
country_id: 6252001
description:
Dec  2 19:43:46 host2 sshd[2083159]: Disconnected from invalid user superadmin 74.249.246.151 port 40738 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 116.48.138.69
country_id: 1819730
description:
2025-12-02 19:44:36 dovecot_login authenticator failed for 069.138.48.116.static.netvigator.com [116.48.138.69]:52073: 535 Incorrect authentication data (set_id=info@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 125.19.160.206
country_id: 1269750
description:
2025-12-02 19:44:50 dovecot_login authenticator failed for ([128.185.23.89]) [125.19.160.206]:37904: 535 Incorrect authentication data (set_id=info)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 74.249.246.151
country_id: 6252001
description:
Dec  2 19:45:05 host2 sshd[2084150]: Disconnected from invalid user user1 74.249.246.151 port 59106 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 84.210.149.45
country_id: 3144096
description:
2025-12-02 19:46:56 dovecot_login authenticator failed for ([127.0.0.1]) [84.210.149.45]:60730: 535 Incorrect authentication data (set_id=training@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 201.173.92.217
country_id: 3996063
description:
2025-12-02 19:47:03 dovecot_login authenticator failed for ([127.0.0.1]) [201.173.92.217]:46729: 535 Incorrect authentication data (set_id=training)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 74.249.246.151
country_id: 6252001
description:
Dec  2 19:47:39 host2 sshd[2086576]: Disconnected from invalid user smart 74.249.246.151 port 54908 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.160.107
country_id: 99237
description:
2025-12-02 19:52:12 dovecot_plain authenticator failed for (eating) [65.20.160.107]:41878: 535 Incorrect authentication data (set_id=marketing@lezzarotech.com)


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 2.57.121.25
country_id: 798549
description:
Dec  2 19:57:20 host2 sshd[2094699]: Disconnected from invalid user user 2.57.121.25 port 13731 [preauth]


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 41.33.183.28
country_id: 357994
description:
2025-12-02 19:57:57 dovecot_plain authenticator failed for (trove) [41.33.183.28]:41731: 535 Incorrect authentication data (set_id=marketing@lezzarotech.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 188.213.34.23
country_id: 298795
description:
2025-12-02 19:58:37 dovecot_login authenticator failed for (ADMIN) [188.213.34.23]:20719: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 142.93.99.71
country_id: 2921044
description:
Dec  2 19:58:37 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=142.93.99.71, lip=66.85.158.91, session=<X4JS6fhEqSaOXWNH>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 134.122.91.234
country_id: 2921044
description:
Dec  2 19:58:38 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=134.122.91.234, lip=66.85.158.91, session=<J8pf6fhEssuGelvq>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 188.166.120.143
country_id: 2750405
description:
Dec  2 20:02:02 host2 dovecot[3366265]: pop3-login: Disconnected: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=188.166.120.143, lip=66.85.158.91, TLS, session=<by2U9fhEXsa8pniP>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 65.20.148.165
country_id: 99237
description:
2025-12-02 20:03:47 dovecot_plain authenticator failed for (mochies) [65.20.148.165]:45904: 535 Incorrect authentication data (set_id=alert@lezzarotech.com)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 103.58.65.151
country_id: 1269750
description:
Dec  2 20:12:13 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 18 secs): user=<info@systemtec.lk>, method=PLAIN, rip=103.58.65.151, lip=66.85.158.91, TLS, session=<AUDhGPlEtNtnOkGX>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 41.139.18.21
country_id: 2300660
description:
Dec  2 20:12:36 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 20 secs): user=<info>, method=PLAIN, rip=41.139.18.21, lip=66.85.158.91, TLS, session=<rFsiGvlE7ucpixIV>


plugin: ossec
rule: 5740
name: ssh connection reset by peer
description:
Dec  2 20:16:14 host2 sshd[2106726]: error: kex_exchange_identification: read: Connection reset by peer


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.113.192.187
country_id: 1210997
description:
2025-12-02 20:16:19 dovecot_plain authenticator failed for (LE7AQH53ZALJ4) [103.113.192.187]:55519: 535 Incorrect authentication data (set_id=env_eng@lezzarotech.com)


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 89.249.55.106
country_id: 2017370
description:
[2025-11-13 10:40:03 +0530] info [cpaneld] 89.249.55.106 - 2stravel "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid user name specified


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 103.59.39.65
country_id: 1210997
description:
2025-12-02 20:19:56 dovecot_plain authenticator failed for (UJZECE2W) [103.59.39.65]:54969: 535 Incorrect authentication data (set_id=hr@lezzarotech.com)


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 35.203.210.66
country_id: 2635167
description:
Dec  2 20:19:58 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed: read(size=779) failed: Connection reset by peer (no auth attempts in 14 secs): user=<>, rip=35.203.210.66, lip=66.85.158.91, TLS handshaking: read(size=779) failed: Connection reset by peer, session=<n1ysNflEd8cjy9JC>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 35.203.210.66
country_id: 2635167
description:
Dec  2 20:20:44 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed: read(size=403) failed: Connection reset by peer (no auth attempts in 1 secs): user=<>, rip=35.203.210.66, lip=66.85.158.91, TLS: read(size=403) failed: Connection reset by peer, session=<e4tnOPlEyP0jy9JC>


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 46.246.8.62
country_id: 2661886
description:
2025-12-02 20:21:21 dovecot_login authenticator failed for (ADMIN) [46.246.8.62]:20539: 535 Incorrect authentication data (set_id=info@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 98.185.120.22
country_id: 6252001
description:
2025-12-02 20:26:35 dovecot_login authenticator failed for ([127.0.0.1]) [98.185.120.22]:35052: 535 Incorrect authentication data (set_id=careers@v-deploy.com)


plugin: ossec
rule: 13001
name: Exim Auth failed
abuser: 182.95.58.62
country_id: 1269750
description:
2025-12-02 20:26:49 dovecot_login authenticator failed for ([127.0.0.1]) [182.95.58.62]:45122: 535 Incorrect authentication data (set_id=careers)


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 102.66.2.62
country_id: 953987
description:
Dec  2 20:28:07 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 21 secs): user=<info@sivagnanamfoundation.com>, method=PLAIN, rip=102.66.2.62, lip=66.85.158.91, TLS, session=<bEqWUflEENRmQgI+>


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 35.203.210.66
country_id: 2635167
description:
Dec  2 20:28:23 host2 dovecot[3366265]: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=35.203.210.66, lip=66.85.158.91, TLS, session=<gAvKU/lE1O4jy9JC>


plugin: ossec
rule: 9710
name: Dovecot Auth failed on disconnected session.
abuser: 192.141.249.96
country_id: 3469034
description:
Dec  2 20:28:26 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 17 secs): user=<info>, method=PLAIN, rip=192.141.249.96, lip=66.85.158.91, TLS, session=<jxDwUvlEKJvAjflg>


plugin: ossec
rule: 5710
name: Attempt to login using a non-existent user
abuser: 43.133.254.75
country_id: 1835841
description:
Dec  2 20:37:17 host2 sshd[2119638]: Disconnected from invalid user user 43.133.254.75 port 56732 [preauth]


plugin: ossec
rule: 9706
name: Dovecot Session Disconnected.
abuser: 184.105.139.69
country_id: 6252001
description:
Dec  2 20:38:26 host2 dovecot[3366265]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=184.105.139.69, lip=66.85.158.92, session=<qBG0d/lEEma4aYtF>


