The IP 115.239.228.12 has just been banned by Fail2Ban after 18 attempts against SSH. Latest lines containing IP:115.239.228.12 in /var/log/syslog/sshd.log Jan 25 10:53:14 ftlogin2 sshd[18715]: Postponed keyboard-interactive for root from 115.239.228.12 port 40366 ssh2 Jan 25 10:53:15 ftlogin2 sshd[18712]: error: PAM: Authentication failure for root from 115.239.228.12 Jan 25 10:53:15 ftlogin2 sshd[18712]: Failed keyboard-interactive/pam for root from 115.239.228.12 port 40366 ssh2 Jan 25 10:53:22 ftlogin2 sshd[18715]: Postponed keyboard-interactive for root from 115.239.228.12 port 40366 ssh2 Jan 25 10:53:23 ftlogin2 sshd[18712]: error: PAM: Authentication failure for root from 115.239.228.12 Jan 25 10:53:23 ftlogin2 sshd[18712]: Failed keyboard-interactive/pam for root from 115.239.228.12 port 40366 ssh2 Jan 25 10:53:33 ftlogin2 sshd[18834]: error: PAM: Authentication failure for root from 115.239.228.12 Jan 25 10:53:33 ftlogin2 sshd[18837]: Postponed keyboard-interactive for root from 115.239.228.12 port 54927 ssh2 Jan 25 10:53:35 ftlogin2 sshd[18834]: error: PAM: Authentication failure for root from 115.239.228.12 Jan 25 10:53:35 ftlogin2 sshd[18834]: Failed keyboard-interactive/pam for root from 115.239.228.12 port 54927 ssh2 - Fail2ban on