The IP 119.207.76.98 has just been banned by Fail2Ban after 19 attempts against SSH. Latest lines containing IP:119.207.76.98 in /var/log/syslog/sshd.log Aug 9 13:04:07 ftlogin2 sshd[14363]: error: PAM: User not known to the underlying authentication module for illegal user admin from 119.207.76.98 Aug 9 13:04:07 ftlogin2 sshd[14363]: Failed keyboard-interactive/pam for invalid user admin from 119.207.76.98 port 7107 ssh2 Aug 9 13:04:18 ftlogin2 sshd[14371]: Invalid user admin from 119.207.76.98 Aug 9 13:04:18 ftlogin2 sshd[14374]: Postponed keyboard-interactive for invalid user admin from 119.207.76.98 port 7272 ssh2 Aug 9 13:04:19 ftlogin2 sshd[14371]: error: PAM: User not known to the underlying authentication module for illegal user admin from 119.207.76.98 Aug 9 13:04:19 ftlogin2 sshd[14371]: Failed keyboard-interactive/pam for invalid user admin from 119.207.76.98 port 7272 ssh2 Aug 9 13:04:19 ftlogin2 sshd[14374]: Postponed keyboard-interactive for invalid user admin from 119.207.76.98 port 7272 ssh2 Aug 9 13:04:21 ftlogin2 sshd[14371]: error: PAM: User not known to the underlying authentication module for illegal user admin from 119.207.76.98 Aug 9 13:04:21 ftlogin2 sshd[14371]: Failed keyboard-interactive/pam for invalid user admin from 119.207.76.98 port 7272 ssh2 Aug 9 13:04:21 ftlogin2 sshd[14374]: Postponed keyboard-interactive for invalid user admin from 119.207.76.98 port 7272 ssh2 - Fail2ban on