The IP 54.207.47.37 has just been banned by Fail2Ban after 19 attempts against SSH. Latest lines containing IP:54.207.47.37 in /var/log/syslog/sshd.log Aug 12 14:35:35 ftlogin2 sshd[11670]: error: PAM: User not known to the underlying authentication module for illegal user admin from ec2-54-207-47-37.sa-east-1.compute.amazonaws.com Aug 12 14:35:35 ftlogin2 sshd[11670]: Failed keyboard-interactive/pam for invalid user admin from 54.207.47.37 port 59755 ssh2 Aug 12 14:35:45 ftlogin2 sshd[12123]: Invalid user admin from 54.207.47.37 Aug 12 14:35:45 ftlogin2 sshd[12127]: Postponed keyboard-interactive for invalid user admin from 54.207.47.37 port 59950 ssh2 Aug 12 14:35:46 ftlogin2 sshd[12123]: error: PAM: User not known to the underlying authentication module for illegal user admin from ec2-54-207-47-37.sa-east-1.compute.amazonaws.com Aug 12 14:35:46 ftlogin2 sshd[12123]: Failed keyboard-interactive/pam for invalid user admin from 54.207.47.37 port 59950 ssh2 Aug 12 14:35:47 ftlogin2 sshd[12127]: Postponed keyboard-interactive for invalid user admin from 54.207.47.37 port 59950 ssh2 Aug 12 14:35:48 ftlogin2 sshd[12123]: error: PAM: User not known to the underlying authentication module for illegal user admin from ec2-54-207-47-37.sa-east-1.compute.amazonaws.com Aug 12 14:35:48 ftlogin2 sshd[12123]: Failed keyboard-interactive/pam for invalid user admin from 54.207.47.37 port 59950 ssh2 Aug 12 14:35:48 ftlogin2 sshd[12127]: Postponed keyboard-interactive for invalid user admin from 54.207.47.37 port 59950 ssh2 - Fail2ban on