The IP 97.74.4.54 has just been banned by Fail2Ban after 19 attempts against SSH. Latest lines containing IP:97.74.4.54 in /var/log/syslog/sshd.log Aug 12 07:12:27 ftlogin2 sshd[13485]: error: PAM: User not known to the underlying authentication module for illegal user admin from ip-97-74-4-54.ip.secureserver.net Aug 12 07:12:27 ftlogin2 sshd[13485]: Failed keyboard-interactive/pam for invalid user admin from 97.74.4.54 port 37032 ssh2 Aug 12 07:12:37 ftlogin2 sshd[13492]: Invalid user admin from 97.74.4.54 Aug 12 07:12:37 ftlogin2 sshd[13495]: Postponed keyboard-interactive for invalid user admin from 97.74.4.54 port 37267 ssh2 Aug 12 07:12:38 ftlogin2 sshd[13492]: error: PAM: User not known to the underlying authentication module for illegal user admin from ip-97-74-4-54.ip.secureserver.net Aug 12 07:12:38 ftlogin2 sshd[13492]: Failed keyboard-interactive/pam for invalid user admin from 97.74.4.54 port 37267 ssh2 Aug 12 07:12:38 ftlogin2 sshd[13495]: Postponed keyboard-interactive for invalid user admin from 97.74.4.54 port 37267 ssh2 Aug 12 07:12:39 ftlogin2 sshd[13492]: error: PAM: User not known to the underlying authentication module for illegal user admin from ip-97-74-4-54.ip.secureserver.net Aug 12 07:12:39 ftlogin2 sshd[13492]: Failed keyboard-interactive/pam for invalid user admin from 97.74.4.54 port 37267 ssh2 Aug 12 07:12:39 ftlogin2 sshd[13495]: Postponed keyboard-interactive for invalid user admin from 97.74.4.54 port 37267 ssh2 - Fail2ban on