The IP 103.41.124.40 has just been banned by Fail2Ban after 18 attempts against SSH. Latest lines containing IP:103.41.124.40 in /var/log/syslog/sshd.log Jan 25 09:39:58 ftlogin1 sshd[26362]: error: PAM: Authentication failure for root from 103.41.124.40 Jan 25 09:39:58 ftlogin1 sshd[26362]: Failed keyboard-interactive/pam for root from 103.41.124.40 port 46131 ssh2 Jan 25 09:39:58 ftlogin1 sshd[26365]: Postponed keyboard-interactive for root from 103.41.124.40 port 46131 ssh2 Jan 25 09:39:59 ftlogin1 sshd[26362]: error: PAM: Authentication failure for root from 103.41.124.40 Jan 25 09:39:59 ftlogin1 sshd[26362]: Failed keyboard-interactive/pam for root from 103.41.124.40 port 46131 ssh2 Jan 25 09:40:01 ftlogin1 sshd[26388]: error: PAM: Authentication failure for root from 103.41.124.40 Jan 25 09:40:01 ftlogin1 sshd[26391]: Postponed keyboard-interactive for root from 103.41.124.40 port 57632 ssh2 Jan 25 09:40:02 ftlogin1 sshd[26388]: error: PAM: Authentication failure for root from 103.41.124.40 Jan 25 09:40:02 ftlogin1 sshd[26388]: Failed keyboard-interactive/pam for root from 103.41.124.40 port 57632 ssh2 Jan 25 09:40:02 ftlogin1 sshd[26391]: Postponed keyboard-interactive for root from 103.41.124.40 port 57632 ssh2 - Fail2ban on