The IP 50.63.84.70 has just been banned by Fail2Ban after 19 attempts against SSH. Latest lines containing IP:50.63.84.70 in /var/log/syslog/sshd.log Aug 10 02:35:44 ftlogin2 sshd[26384]: error: PAM: User not known to the underlying authentication module for illegal user admin from ip-50-63-84-70.ip.secureserver.net Aug 10 02:35:44 ftlogin2 sshd[26384]: Failed keyboard-interactive/pam for invalid user admin from 50.63.84.70 port 47210 ssh2 Aug 10 02:35:54 ftlogin2 sshd[26526]: Invalid user admin from 50.63.84.70 Aug 10 02:35:54 ftlogin2 sshd[26529]: Postponed keyboard-interactive for invalid user admin from 50.63.84.70 port 47403 ssh2 Aug 10 02:35:55 ftlogin2 sshd[26526]: error: PAM: User not known to the underlying authentication module for illegal user admin from ip-50-63-84-70.ip.secureserver.net Aug 10 02:35:55 ftlogin2 sshd[26526]: Failed keyboard-interactive/pam for invalid user admin from 50.63.84.70 port 47403 ssh2 Aug 10 02:35:55 ftlogin2 sshd[26529]: Postponed keyboard-interactive for invalid user admin from 50.63.84.70 port 47403 ssh2 Aug 10 02:35:56 ftlogin2 sshd[26526]: error: PAM: User not known to the underlying authentication module for illegal user admin from ip-50-63-84-70.ip.secureserver.net Aug 10 02:35:56 ftlogin2 sshd[26526]: Failed keyboard-interactive/pam for invalid user admin from 50.63.84.70 port 47403 ssh2 Aug 10 02:35:56 ftlogin2 sshd[26529]: Postponed keyboard-interactive for invalid user admin from 50.63.84.70 port 47403 ssh2 - Fail2ban on