The IP 103.41.124.56 has just been banned by Fail2Ban after 18 attempts against SSH. Latest lines containing IP:103.41.124.56 in /var/log/syslog/sshd.log Jan 25 09:39:56 ftlogin1 sshd[26351]: error: PAM: Authentication failure for root from 103.41.124.56 Jan 25 09:39:56 ftlogin1 sshd[26351]: Failed keyboard-interactive/pam for root from 103.41.124.56 port 40026 ssh2 Jan 25 09:39:56 ftlogin1 sshd[26354]: Postponed keyboard-interactive for root from 103.41.124.56 port 40026 ssh2 Jan 25 09:39:58 ftlogin1 sshd[26351]: error: PAM: Authentication failure for root from 103.41.124.56 Jan 25 09:39:58 ftlogin1 sshd[26351]: Failed keyboard-interactive/pam for root from 103.41.124.56 port 40026 ssh2 Jan 25 09:39:59 ftlogin1 sshd[26372]: error: PAM: Authentication failure for root from 103.41.124.56 Jan 25 09:39:59 ftlogin1 sshd[26375]: Postponed keyboard-interactive for root from 103.41.124.56 port 51082 ssh2 Jan 25 09:40:01 ftlogin1 sshd[26372]: error: PAM: Authentication failure for root from 103.41.124.56 Jan 25 09:40:01 ftlogin1 sshd[26372]: Failed keyboard-interactive/pam for root from 103.41.124.56 port 51082 ssh2 Jan 25 09:40:01 ftlogin1 sshd[26375]: Postponed keyboard-interactive for root from 103.41.124.56 port 51082 ssh2 - Fail2ban on