Hi, The IP 213.201.24.127 has just been banned by Fail2Ban after 6 attempts against ssh. Here are more information about 213.201.24.127: % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See http://www.ripe.net/db/support/db-terms-conditions.pdf % Note: this output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '213.201.0.0 - 213.201.127.255' inetnum: 213.201.0.0 - 213.201.127.255 org: ORG-OA4-RIPE netname: ES-ONO-991122 descr: Cableuropa S.A.U. country: ES admin-c: OIM1-RIPE tech-c: OIM1-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-lower: ONO-MNT mnt-routes: ONO-MNT mnt-domains: ONO-MNT source: RIPE # Filtered organisation: ORG-OA4-RIPE org-name: Cableuropa S.A.U. org-type: LIR address: CABLEUROPA S.A. bruno forterre C/ Lepanto 350 08025 Barcelona SPAIN phone: +34 911809300 fax-no: +34 935020509 e-mail: ripe-tech@ono.es mnt-ref: ONO-MNT mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT source: RIPE # Filtered admin-c: OIM1-RIPE admin-c: DHC4-RIPE admin-c: BF1361-RIPE role: ONO IP MANAGER address: C/ Basauri, 5 address: Urbanizacion La Florida address: E-28023 Aravaca, Madrid address: SPAIN phone: +34911809300 fax-no: +34911809245 e-mail: ripe-tech@ono.es admin-c: OIM1-RIPE tech-c: OIM1-RIPE nic-hdl: OIM1-RIPE mnt-by: ONO-MNT source: RIPE # Filtered % Information related to '213.201.0.0/17AS6739' route: 213.201.0.0/17 descr: Route of ONO SAE - 2 origin: AS6739 mnt-by: ONO-MNT source: RIPE # Filtered Lines containing IP:213.201.24.127 in /var/log/auth.log Mar 1 16:01:05 mos sshd[26849]: Did not receive identification string from 213.201.24.127 Mar 1 18:29:37 mos sshd[28270]: Invalid user globus from 213.201.24.127 Mar 1 18:29:37 mos sshd[28270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com Mar 1 18:29:39 mos sshd[28270]: Failed password for invalid user globus from 213.201.24.127 port 54684 ssh2 Mar 1 18:29:46 mos sshd[28273]: Invalid user condor from 213.201.24.127 Mar 1 18:29:46 mos sshd[28273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com Mar 1 18:29:48 mos sshd[28273]: Failed password for invalid user condor from 213.201.24.127 port 54831 ssh2 Mar 1 18:29:53 mos sshd[28275]: Invalid user tomcat from 213.201.24.127 Mar 1 18:29:53 mos sshd[28275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com Mar 1 18:29:56 mos sshd[28275]: Failed password for invalid user tomcat from 213.201.24.127 port 55239 ssh2 Mar 1 18:29:58 mos sshd[28277]: Invalid user global from 213.201.24.127 Mar 1 18:29:58 mos sshd[28277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com Mar 1 18:30:01 mos sshd[28277]: Failed password for invalid user global from 213.201.24.127 port 48802 ssh2 Mar 1 18:30:09 mos sshd[28295]: Invalid user upload from 213.201.24.127 Mar 1 18:30:09 mos sshd[28295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com Mar 1 18:30:11 mos sshd[28295]: Failed password for invalid user upload from 213.201.24.127 port 49017 ssh2 Mar 1 20:28:53 mos sshd[30163]: Invalid user marine from 213.201.24.127 Mar 1 20:28:53 mos sshd[30163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com Mar 1 20:28:55 mos sshd[30163]: Failed password for invalid user marine from 213.201.24.127 port 52154 ssh2 Mar 1 20:29:05 mos sshd[30166]: Invalid user marine from 213.201.24.127 Mar 1 20:29:05 mos sshd[30166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com Mar 1 20:29:06 mos sshd[30166]: Failed password for invalid user marine from 213.201.24.127 port 52429 ssh2 Mar 1 21:49:55 mos sshd[31570]: Invalid user cadi from 213.201.24.127 Mar 1 21:49:55 mos sshd[31570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com Mar 1 21:49:57 mos sshd[31570]: Failed password for invalid user cadi from 213.201.24.127 port 49176 ssh2 Mar 1 22:12:32 mos sshd[31818]: User root from 213.201.24.127.static.user.ono.com not allowed because not listed in AllowUsers Mar 1 22:12:32 mos sshd[31818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com user=root Mar 1 22:12:34 mos sshd[31818]: Failed password for invalid user root from 213.201.24.127 port 43778 ssh2 Mar 1 22:12:37 mos sshd[31821]: User root from 213.201.24.127.static.user.ono.com not allowed because not listed in AllowUsers Mar 1 22:12:37 mos sshd[31821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com user=root Mar 1 22:12:39 mos sshd[31821]: Failed password for invalid user root from 213.201.24.127 port 43908 ssh2 Mar 1 22:12:42 mos sshd[31823]: User root from 213.201.24.127.static.user.ono.com not allowed because not listed in AllowUsers Mar 1 22:12:42 mos sshd[31823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com user=root Mar 1 22:12:44 mos sshd[31823]: Failed password for invalid user root from 213.201.24.127 port 44053 ssh2 Mar 1 22:12:50 mos sshd[31825]: User root from 213.201.24.127.static.user.ono.com not allowed because not listed in AllowUsers Mar 1 22:12:50 mos sshd[31825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com user=root Mar 1 22:12:52 mos sshd[31825]: Failed password for invalid user root from 213.201.24.127 port 44250 ssh2 Mar 1 22:12:56 mos sshd[31827]: User root from 213.201.24.127.static.user.ono.com not allowed because not listed in AllowUsers Mar 1 22:12:56 mos sshd[31827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com user=root Mar 1 22:12:58 mos sshd[31827]: Failed password for invalid user root from 213.201.24.127 port 44459 ssh2 Mar 1 22:13:00 mos sshd[31829]: User root from 213.201.24.127.static.user.ono.com not allowed because not listed in AllowUsers Mar 1 22:13:00 mos sshd[31829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com user=root Mar 1 22:13:02 mos sshd[31829]: Failed password for invalid user root from 213.201.24.127 port 44658 ssh2 Mar 1 22:13:09 mos sshd[31831]: User root from 213.201.24.127.static.user.ono.com not allowed because not listed in AllowUsers Mar 1 22:13:09 mos sshd[31831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com user=root Mar 1 22:13:11 mos sshd[31831]: Failed password for invalid user root from 213.201.24.127 port 44798 ssh2 Mar 1 22:13:17 mos sshd[31833]: User root from 213.201.24.127.static.user.ono.com not allowed because not listed in AllowUsers Mar 1 22:13:17 mos sshd[31833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com user=root Mar 1 22:13:19 mos sshd[31833]: Failed password for invalid user root from 213.201.24.127 port 45077 ssh2 Mar 1 22:13:23 mos sshd[31835]: User root from 213.201.24.127.static.user.ono.com not allowed because not listed in AllowUsers Mar 1 22:13:23 mos sshd[31835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com user=root Mar 1 22:13:25 mos sshd[31835]: Failed password for invalid user root from 213.201.24.127 port 45294 ssh2 Mar 1 22:13:27 mos sshd[31841]: User root from 213.201.24.127.static.user.ono.com not allowed because not listed in AllowUsers Mar 1 22:13:27 mos sshd[31841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com user=root Mar 1 22:13:29 mos sshd[31841]: Failed password for invalid user root from 213.201.24.127 port 45458 ssh2 Mar 1 22:13:37 mos sshd[31856]: User root from 213.201.24.127.static.user.ono.com not allowed because not listed in AllowUsers Mar 1 22:13:37 mos sshd[31856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com user=root Mar 1 22:13:39 mos sshd[31856]: Failed password for invalid user root from 213.201.24.127 port 45582 ssh2 Mar 2 00:00:24 mos sshd[1334]: Invalid user simoni from 213.201.24.127 Mar 2 00:00:24 mos sshd[1334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com Mar 2 00:00:26 mos sshd[1334]: Failed password for invalid user simoni from 213.201.24.127 port 43033 ssh2 Mar 2 00:00:28 mos sshd[1336]: Invalid user dilli from 213.201.24.127 Mar 2 00:00:28 mos sshd[1336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com Mar 2 00:00:30 mos sshd[1336]: Failed password for invalid user dilli from 213.201.24.127 port 43279 ssh2 Mar 2 00:00:38 mos sshd[1338]: User root from 213.201.24.127.static.user.ono.com not allowed because not listed in AllowUsers Mar 2 00:00:38 mos sshd[1338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.201.24.127.static.user.ono.com user=root Mar 2 00:00:40 mos sshd[1338]: Failed password for invalid user root from 213.201.24.127 port 43462 ssh2 Regards, Fail2Ban