The IP 185.10.49.29 has just been banned by Fail2Ban after 19 attempts against SSH. Latest lines containing IP:185.10.49.29 in /var/log/syslog/sshd.log Aug 8 18:02:02 ftlogin2 sshd[8683]: error: PAM: User not known to the underlying authentication module for illegal user admin from 185-10-49-29.colo.transip.net Aug 8 18:02:02 ftlogin2 sshd[8683]: Failed keyboard-interactive/pam for invalid user admin from 185.10.49.29 port 53413 ssh2 Aug 8 18:02:12 ftlogin2 sshd[8690]: Invalid user admin from 185.10.49.29 Aug 8 18:02:12 ftlogin2 sshd[8693]: Postponed keyboard-interactive for invalid user admin from 185.10.49.29 port 53623 ssh2 Aug 8 18:02:13 ftlogin2 sshd[8690]: error: PAM: User not known to the underlying authentication module for illegal user admin from 185-10-49-29.colo.transip.net Aug 8 18:02:13 ftlogin2 sshd[8690]: Failed keyboard-interactive/pam for invalid user admin from 185.10.49.29 port 53623 ssh2 Aug 8 18:02:13 ftlogin2 sshd[8693]: Postponed keyboard-interactive for invalid user admin from 185.10.49.29 port 53623 ssh2 Aug 8 18:02:14 ftlogin2 sshd[8690]: error: PAM: User not known to the underlying authentication module for illegal user admin from 185-10-49-29.colo.transip.net Aug 8 18:02:14 ftlogin2 sshd[8690]: Failed keyboard-interactive/pam for invalid user admin from 185.10.49.29 port 53623 ssh2 Aug 8 18:02:14 ftlogin2 sshd[8693]: Postponed keyboard-interactive for invalid user admin from 185.10.49.29 port 53623 ssh2 - Fail2ban on