The IP 115.239.228.12 has just been banned by Fail2Ban after 18 attempts against SSH. Latest lines containing IP:115.239.228.12 in /var/log/syslog/sshd.log Jan 24 15:04:25 ftlogin1 sshd[16349]: error: PAM: Authentication failure for root from 115.239.228.12 Jan 24 15:04:25 ftlogin1 sshd[16349]: Failed keyboard-interactive/pam for root from 115.239.228.12 port 58870 ssh2 Jan 24 15:04:25 ftlogin1 sshd[16352]: Postponed keyboard-interactive for root from 115.239.228.12 port 58870 ssh2 Jan 24 15:04:27 ftlogin1 sshd[16349]: error: PAM: Authentication failure for root from 115.239.228.12 Jan 24 15:04:27 ftlogin1 sshd[16349]: Failed keyboard-interactive/pam for root from 115.239.228.12 port 58870 ssh2 Jan 24 15:04:32 ftlogin1 sshd[16381]: error: PAM: Authentication failure for root from 115.239.228.12 Jan 24 15:04:32 ftlogin1 sshd[16384]: Postponed keyboard-interactive for root from 115.239.228.12 port 47523 ssh2 Jan 24 15:04:33 ftlogin1 sshd[16381]: error: PAM: Authentication failure for root from 115.239.228.12 Jan 24 15:04:33 ftlogin1 sshd[16381]: Failed keyboard-interactive/pam for root from 115.239.228.12 port 47523 ssh2 Jan 24 15:04:34 ftlogin1 sshd[16384]: Postponed keyboard-interactive for root from 115.239.228.12 port 47523 ssh2 - Fail2ban on