The IP 125.76.228.64 has just been banned by Fail2Ban after 19 attempts against SSH. Latest lines containing IP:125.76.228.64 in /var/log/syslog/sshd.log Aug 13 14:35:12 ftlogin2 sshd[11449]: error: PAM: User not known to the underlying authentication module for illegal user admin from 125.76.228.64 Aug 13 14:35:12 ftlogin2 sshd[11449]: Failed keyboard-interactive/pam for invalid user admin from 125.76.228.64 port 41864 ssh2 Aug 13 14:35:27 ftlogin2 sshd[11496]: Invalid user admin from 125.76.228.64 Aug 13 14:35:27 ftlogin2 sshd[11500]: Postponed keyboard-interactive for invalid user admin from 125.76.228.64 port 42359 ssh2 Aug 13 14:35:29 ftlogin2 sshd[11496]: error: PAM: User not known to the underlying authentication module for illegal user admin from 125.76.228.64 Aug 13 14:35:29 ftlogin2 sshd[11496]: Failed keyboard-interactive/pam for invalid user admin from 125.76.228.64 port 42359 ssh2 Aug 13 14:35:29 ftlogin2 sshd[11500]: Postponed keyboard-interactive for invalid user admin from 125.76.228.64 port 42359 ssh2 Aug 13 14:35:30 ftlogin2 sshd[11496]: error: PAM: User not known to the underlying authentication module for illegal user admin from 125.76.228.64 Aug 13 14:35:30 ftlogin2 sshd[11496]: Failed keyboard-interactive/pam for invalid user admin from 125.76.228.64 port 42359 ssh2 Aug 13 14:35:30 ftlogin2 sshd[11500]: Postponed keyboard-interactive for invalid user admin from 125.76.228.64 port 42359 ssh2 - Fail2ban on