The IP 210.245.92.217 has just been banned by Fail2Ban after 19 attempts against SSH. Latest lines containing IP:210.245.92.217 in /var/log/syslog/sshd.log Aug 11 15:18:04 ftlogin2 sshd[1412]: error: PAM: User not known to the underlying authentication module for illegal user admin from 210.245.92.217 Aug 11 15:18:04 ftlogin2 sshd[1412]: Failed keyboard-interactive/pam for invalid user admin from 210.245.92.217 port 40727 ssh2 Aug 11 15:18:18 ftlogin2 sshd[1423]: Invalid user admin from 210.245.92.217 Aug 11 15:18:19 ftlogin2 sshd[1428]: Postponed keyboard-interactive for invalid user admin from 210.245.92.217 port 40906 ssh2 Aug 11 15:18:21 ftlogin2 sshd[1423]: error: PAM: User not known to the underlying authentication module for illegal user admin from 210.245.92.217 Aug 11 15:18:21 ftlogin2 sshd[1423]: Failed keyboard-interactive/pam for invalid user admin from 210.245.92.217 port 40906 ssh2 Aug 11 15:18:22 ftlogin2 sshd[1428]: Postponed keyboard-interactive for invalid user admin from 210.245.92.217 port 40906 ssh2 Aug 11 15:18:24 ftlogin2 sshd[1423]: error: PAM: User not known to the underlying authentication module for illegal user admin from 210.245.92.217 Aug 11 15:18:24 ftlogin2 sshd[1423]: Failed keyboard-interactive/pam for invalid user admin from 210.245.92.217 port 40906 ssh2 Aug 11 15:18:24 ftlogin2 sshd[1428]: Postponed keyboard-interactive for invalid user admin from 210.245.92.217 port 40906 ssh2 - Fail2ban on