The IP 103.41.124.52 has just been banned by Fail2Ban after 18 attempts against SSH. Latest lines containing IP:103.41.124.52 in /var/log/syslog/sshd.log Jan 25 12:49:56 ftlogin1 sshd[23407]: error: PAM: Authentication failure for root from 103.41.124.52 Jan 25 12:49:56 ftlogin1 sshd[23407]: Failed keyboard-interactive/pam for root from 103.41.124.52 port 58700 ssh2 Jan 25 12:49:56 ftlogin1 sshd[23410]: Postponed keyboard-interactive for root from 103.41.124.52 port 58700 ssh2 Jan 25 12:49:57 ftlogin1 sshd[23407]: error: PAM: Authentication failure for root from 103.41.124.52 Jan 25 12:49:57 ftlogin1 sshd[23407]: Failed keyboard-interactive/pam for root from 103.41.124.52 port 58700 ssh2 Jan 25 12:49:59 ftlogin1 sshd[23414]: error: PAM: Authentication failure for root from 103.41.124.52 Jan 25 12:49:59 ftlogin1 sshd[23417]: Postponed keyboard-interactive for root from 103.41.124.52 port 40968 ssh2 Jan 25 12:50:00 ftlogin1 sshd[23414]: error: PAM: Authentication failure for root from 103.41.124.52 Jan 25 12:50:00 ftlogin1 sshd[23414]: Failed keyboard-interactive/pam for root from 103.41.124.52 port 40968 ssh2 Jan 25 12:50:00 ftlogin1 sshd[23417]: Postponed keyboard-interactive for root from 103.41.124.52 port 40968 ssh2 - Fail2ban on