The IP 202.29.235.89 has just been banned by Fail2Ban after 19 attempts against SSH. Latest lines containing IP:202.29.235.89 in /var/log/syslog/sshd.log Aug 11 10:06:04 ftlogin2 sshd[21905]: error: PAM: User not known to the underlying authentication module for illegal user admin from 202.29.235.89 Aug 11 10:06:04 ftlogin2 sshd[21905]: Failed keyboard-interactive/pam for invalid user admin from 202.29.235.89 port 45652 ssh2 Aug 11 10:06:18 ftlogin2 sshd[21912]: Invalid user admin from 202.29.235.89 Aug 11 10:06:18 ftlogin2 sshd[21915]: Postponed keyboard-interactive for invalid user admin from 202.29.235.89 port 47474 ssh2 Aug 11 10:06:20 ftlogin2 sshd[21912]: error: PAM: User not known to the underlying authentication module for illegal user admin from 202.29.235.89 Aug 11 10:06:20 ftlogin2 sshd[21912]: Failed keyboard-interactive/pam for invalid user admin from 202.29.235.89 port 47474 ssh2 Aug 11 10:06:20 ftlogin2 sshd[21915]: Postponed keyboard-interactive for invalid user admin from 202.29.235.89 port 47474 ssh2 Aug 11 10:06:21 ftlogin2 sshd[21912]: error: PAM: User not known to the underlying authentication module for illegal user admin from 202.29.235.89 Aug 11 10:06:21 ftlogin2 sshd[21912]: Failed keyboard-interactive/pam for invalid user admin from 202.29.235.89 port 47474 ssh2 Aug 11 10:06:21 ftlogin2 sshd[21915]: Postponed keyboard-interactive for invalid user admin from 202.29.235.89 port 47474 ssh2 - Fail2ban on