The IP 202.29.235.89 has just been banned by Fail2Ban after 19 attempts against SSH. Latest lines containing IP:202.29.235.89 in /var/log/syslog/sshd.log Aug 10 16:23:24 ftlogin2 sshd[9761]: error: PAM: User not known to the underlying authentication module for illegal user admin from 202.29.235.89 Aug 10 16:23:24 ftlogin2 sshd[9761]: Failed keyboard-interactive/pam for invalid user admin from 202.29.235.89 port 52111 ssh2 Aug 10 16:23:35 ftlogin2 sshd[9768]: Invalid user admin from 202.29.235.89 Aug 10 16:23:35 ftlogin2 sshd[9771]: Postponed keyboard-interactive for invalid user admin from 202.29.235.89 port 52318 ssh2 Aug 10 16:23:36 ftlogin2 sshd[9768]: error: PAM: User not known to the underlying authentication module for illegal user admin from 202.29.235.89 Aug 10 16:23:36 ftlogin2 sshd[9768]: Failed keyboard-interactive/pam for invalid user admin from 202.29.235.89 port 52318 ssh2 Aug 10 16:23:36 ftlogin2 sshd[9771]: Postponed keyboard-interactive for invalid user admin from 202.29.235.89 port 52318 ssh2 Aug 10 16:23:38 ftlogin2 sshd[9768]: error: PAM: User not known to the underlying authentication module for illegal user admin from 202.29.235.89 Aug 10 16:23:38 ftlogin2 sshd[9768]: Failed keyboard-interactive/pam for invalid user admin from 202.29.235.89 port 52318 ssh2 Aug 10 16:23:38 ftlogin2 sshd[9771]: Postponed keyboard-interactive for invalid user admin from 202.29.235.89 port 52318 ssh2 - Fail2ban on