Hi, The IP 200.29.98.177 has just been banned by Fail2Ban after 6 attempts against ssh-ddos. Here are more information about 200.29.98.177: % Joint Whois - whois.lacnic.net % This server accepts single ASN, IPv4 or IPv6 queries % LACNIC resource: whois.lacnic.net % Copyright LACNIC lacnic.net % The data below is provided for information purposes % and to assist persons in obtaining information about or % related to AS and IP numbers registrations % By submitting a whois query, you agree to use this data % only for lawful purposes. % 2012-04-14 07:15:56 (BRT -03:00) inetnum: 200.29.96/20 status: allocated aut-num: N/A owner: EMCATEL ownerid: CO-EMCA2-LACNIC responsible: Juan Carlos Vitta address: Calle 14 # 33 - 40 Telefonica COLON, 33, 40 address: 04 - Cali - VA country: CO phone: +57 2 3251860 [] owner-c: DBT tech-c: DBT abuse-c: DBT inetrev: 200.29.96/21 nserver: DNS1.EMCALI.NET.CO nsstat: 20120413 AA nslastaa: 20120413 nserver: DNS2.EMCALI.NET.CO nsstat: 20120413 AA nslastaa: 20120413 nserver: DNS3.EMCALI.NET.CO nsstat: 20120413 AA nslastaa: 20120413 created: 20041123 changed: 20041123 nic-hdl: DBT person: Armandy Trujillo - Harold Sarria e-mail: administradores@EMCALI.NET.CO address: Cl 14C CRA 73, 572, 5210023 address: 760033 - Cali - VA country: CO phone: +57 2 5210023 [] created: 20040305 changed: 20120311 % whois.lacnic.net accepts only direct match queries. % Types of queries are: POCs, ownerid, CIDR blocks, IP % and AS numbers. Lines containing IP:200.29.98.177 in /var/log/auth.log Apr 14 13:09:23 cosmos sshd[3209]: Did not receive identification string from 200.29.98.177 Apr 14 13:09:23 cosmos sshd[3210]: Did not receive identification string from 200.29.98.177 Apr 14 13:09:26 cosmos sshd[3211]: Did not receive identification string from 200.29.98.177 Apr 14 13:15:51 cosmos sshd[3368]: Did not receive identification string from 200.29.98.177 Apr 14 13:15:54 cosmos sshd[3372]: Did not receive identification string from 200.29.98.177 Apr 14 13:15:54 cosmos sshd[3373]: Did not receive identification string from 200.29.98.177 Regards, Fail2Ban