Symptoms
When you check /var/log/auth.log file you see that it abounds with errors of the following type:Feb 27 08:32:17 localhost sshd[30614]: Illegal user admin from [CP's IP]
Feb 27 08:32:17 localhost sshd[30614]: Failed none for illegal user admin from [CP's IP] port 48170