The IP 95.24.69.133 has just been banned by Fail2Ban after 18 attempts against SSH. Latest lines containing IP:95.24.69.133 in /var/log/syslog/sshd.log Aug 9 03:44:46 ftlogin1 sshd[17031]: Postponed keyboard-interactive for invalid user admin from 95.24.69.133 port 49512 ssh2 Aug 9 03:44:48 ftlogin1 sshd[17028]: error: PAM: User not known to the underlying authentication module for illegal user admin from 95.24.69.133 Aug 9 03:44:48 ftlogin1 sshd[17028]: Failed keyboard-interactive/pam for invalid user admin from 95.24.69.133 port 49512 ssh2 Aug 9 03:44:48 ftlogin1 sshd[17031]: Connection closed by 95.24.69.133 Aug 9 03:44:50 ftlogin1 sshd[17033]: Address 95.24.69.133 maps to 95-24-69-133.broadband.corbina.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 9 03:44:50 ftlogin1 sshd[17033]: Invalid user admin from 95.24.69.133 Aug 9 03:44:50 ftlogin1 sshd[17036]: Postponed keyboard-interactive for invalid user admin from 95.24.69.133 port 50466 ssh2 Aug 9 03:44:51 ftlogin1 sshd[17033]: error: PAM: User not known to the underlying authentication module for illegal user admin from 95.24.69.133 Aug 9 03:44:51 ftlogin1 sshd[17033]: Failed keyboard-interactive/pam for invalid user admin from 95.24.69.133 port 50466 ssh2 Aug 9 03:44:52 ftlogin1 sshd[17036]: Connection closed by 95.24.69.133 - Fail2ban on