Hi,

The IP 46.17.100.243 has just been banned by Fail2Ban after
1 attempts against modsec.


Here are more information about 46.17.100.243:

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '46.17.100.182 - 46.17.101.15'

inetnum:         46.17.100.182 - 46.17.101.15
netname:         MIR-TELEMATIKI
descr:           hostkey network
descr:           abuse-mailbox: abuse@hostkey.com
country:         RU
admin-c:         ANSH13-RIPE
tech-c:          ANSH13-RIPE
status:          ASSIGNED PA
mnt-by:          MTLM-MNT
source:          RIPE # Filtered

person:         Andrey Shevchenko
address:        Navitel Rusconnect
address:        19/2 Lva Tolstogo st.
address:        Moscow 119034
address:        Russia
e-mail:         andrey@nconnect.ru
phone:          +7(926)3232878
nic-hdl:        ANSH13-RIPE
mnt-by:         NCONNECT-MNT
source:         RIPE # Filtered

% Information related to '46.17.96.0/21AS48211'

route:          46.17.96.0/21
descr:          hostkey network
origin:         AS48211
mnt-by:         MTLM-MNT
source:         RIPE # Filtered

% Information related to '46.17.96.0/21AS49335'

route:           46.17.96.0/21
descr:           NCONNECT-NET direct announce
origin:          AS49335
mnt-by:          MTLM-MNT
source:          RIPE # Filtered

% This query was served by the RIPE Database Query Service (proxy) version 1.4.6 (WHOIS4)


Lines containing IP:46.17.100.243 in /var/log/modsecurity/audit.log

[28/Mar/2012:20:27:17 +0300] T3NJ9H8AAAEAABcpEV4AAAAJ 46.17.100.243 1130 95.211.47.207 80
[28/Mar/2012:21:48:07 +0300] T3Nc538AAAEAACN0ArYAAAAD 46.17.100.243 4102 95.211.47.207 80
[29/Mar/2012:18:02:27 +0300] T3R5gn8AAAEAAAbDBMUAAAAC 46.17.100.243 3169 95.211.47.207 80


Regards,

Fail2Ban