The IP 95.24.69.133 has just been banned by Fail2Ban after 18 attempts against SSH. Latest lines containing IP:95.24.69.133 in /var/log/syslog/sshd.log Aug 9 03:44:45 ftlogin2 sshd[13966]: Postponed keyboard-interactive for invalid user admin from 95.24.69.133 port 56525 ssh2 Aug 9 03:44:47 ftlogin2 sshd[13963]: error: PAM: User not known to the underlying authentication module for illegal user admin from 95.24.69.133 Aug 9 03:44:47 ftlogin2 sshd[13963]: Failed keyboard-interactive/pam for invalid user admin from 95.24.69.133 port 56525 ssh2 Aug 9 03:44:47 ftlogin2 sshd[13966]: Connection closed by 95.24.69.133 Aug 9 03:44:48 ftlogin2 sshd[13968]: Address 95.24.69.133 maps to 95-24-69-133.broadband.corbina.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 9 03:44:48 ftlogin2 sshd[13968]: Invalid user admin from 95.24.69.133 Aug 9 03:44:48 ftlogin2 sshd[13971]: Postponed keyboard-interactive for invalid user admin from 95.24.69.133 port 54504 ssh2 Aug 9 03:44:50 ftlogin2 sshd[13968]: error: PAM: User not known to the underlying authentication module for illegal user admin from 95.24.69.133 Aug 9 03:44:50 ftlogin2 sshd[13968]: Failed keyboard-interactive/pam for invalid user admin from 95.24.69.133 port 54504 ssh2 Aug 9 03:44:50 ftlogin2 sshd[13971]: Connection closed by 95.24.69.133 - Fail2ban on