Hi, The IP 88.46.75.27 has just been banned by Fail2Ban after 2 attempts against apache-w00tw00t. Here are more information about 88.46.75.27: % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See http://www.ripe.net/db/support/db-terms-conditions.pdf % Note: this output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '88.46.75.24 - 88.46.75.31' inetnum: 88.46.75.24 - 88.46.75.31 netname: PANORAMASPA descr: PANORAMA S.P.A. country: IT admin-c: MC990-RIPE tech-c: MC991-RIPE status: ASSIGNED PA mnt-by: INTERB-MNT source: RIPE # Filtered person: MARCO CORSI address: PANORAMA S.P.A. address: VIA DELLE INDUSTRIE 8 address: 30038 SPINEA address: Italy phone: +39415495111 fax-no: +39415495510 nic-hdl: MC990-RIPE source: RIPE # Filtered person: MARCO CORSI address: PANORAMA S.P.A. address: VIA DELLE INDUSTRIE 8 address: 30038 SPINEA address: Italy phone: +39406356250 fax-no: +39415495510 nic-hdl: MC991-RIPE source: RIPE # Filtered % Information related to '88.46.0.0/15AS3269' route: 88.46.0.0/15 descr: INTERBUSINESS origin: AS3269 remarks: ************************************************ remarks: * Pay attention * remarks: * Any communication sent to email different * remarks: * from the following will be ignored! * remarks: * Any abuse reports, please send them to * remarks: * abuse@business.telecomitalia.it * remarks: ************************************************ mnt-by: INTERB-MNT source: RIPE # Filtered % This query was served by the RIPE Database Query Service (proxy) version 1.4.6 (WHOIS1) Lines containing IP:88.46.75.27 in /var/log/apache*/*error.log /var/log/apache2/error.log:[Mon Mar 26 23:09:56 2012] [error] [client 88.46.75.27] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:) /var/log/apache2/error.log:[Mon Mar 26 23:09:56 2012] [error] [client 88.46.75.27] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:) /var/log/apache2/error.log:[Wed Mar 28 22:19:34 2012] [error] [client 88.46.75.27] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:) /var/log/apache2/error.log:[Wed Mar 28 22:19:34 2012] [error] [client 88.46.75.27] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:) /var/log/apache2/error.log:[Fri Mar 30 21:27:03 2012] [error] [client 88.46.75.27] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:) /var/log/apache2/error.log:[Fri Mar 30 21:27:03 2012] [error] [client 88.46.75.27] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:) Regards, Fail2Ban