The IP 14.63.212.77 has just been banned by Fail2Ban after 19 attempts against SSH. Latest lines containing IP:14.63.212.77 in /var/log/syslog/sshd.log Aug 13 14:03:16 ftlogin2 sshd[6862]: error: PAM: User not known to the underlying authentication module for illegal user admin from 14.63.212.77 Aug 13 14:03:16 ftlogin2 sshd[6862]: Failed keyboard-interactive/pam for invalid user admin from 14.63.212.77 port 46883 ssh2 Aug 13 14:03:26 ftlogin2 sshd[6870]: Invalid user admin from 14.63.212.77 Aug 13 14:03:27 ftlogin2 sshd[6873]: Postponed keyboard-interactive for invalid user admin from 14.63.212.77 port 47077 ssh2 Aug 13 14:03:28 ftlogin2 sshd[6870]: error: PAM: User not known to the underlying authentication module for illegal user admin from 14.63.212.77 Aug 13 14:03:28 ftlogin2 sshd[6870]: Failed keyboard-interactive/pam for invalid user admin from 14.63.212.77 port 47077 ssh2 Aug 13 14:03:28 ftlogin2 sshd[6873]: Postponed keyboard-interactive for invalid user admin from 14.63.212.77 port 47077 ssh2 Aug 13 14:03:29 ftlogin2 sshd[6870]: error: PAM: User not known to the underlying authentication module for illegal user admin from 14.63.212.77 Aug 13 14:03:29 ftlogin2 sshd[6870]: Failed keyboard-interactive/pam for invalid user admin from 14.63.212.77 port 47077 ssh2 Aug 13 14:03:30 ftlogin2 sshd[6873]: Postponed keyboard-interactive for invalid user admin from 14.63.212.77 port 47077 ssh2 - Fail2ban on