Dear Sir/Madam, We have detected abuse from the IP address X.X.X.X, which according to a whois lookup is on your network. We would appreciate if you would investigate and take action as appropriate. Log lines are given below, but please ask if you require any further information. (If you are not the correct person to contact about this please accept our apologies - your e-mail address was extracted from the whois record by an automated process. This mail was generated by Fail2Ban.) Note: Local timezone is +0100 (BST) domainname X.X.X.X - - [14/Jul/2013:07:59:54 +0100] "POST /wp-login.php HTTP/1.1" 401 344 "http://domainname/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0" 326/484 (67%)