The IP 103.41.124.56 has just been banned by Fail2Ban after 18 attempts against SSH. Latest lines containing IP:103.41.124.56 in /var/log/syslog/sshd.log Jan 25 15:31:36 ftlogin1 sshd[15877]: error: PAM: Authentication failure for root from 103.41.124.56 Jan 25 15:31:36 ftlogin1 sshd[15877]: Failed keyboard-interactive/pam for root from 103.41.124.56 port 48472 ssh2 Jan 25 15:31:36 ftlogin1 sshd[15880]: Postponed keyboard-interactive for root from 103.41.124.56 port 48472 ssh2 Jan 25 15:31:37 ftlogin1 sshd[15877]: error: PAM: Authentication failure for root from 103.41.124.56 Jan 25 15:31:37 ftlogin1 sshd[15877]: Failed keyboard-interactive/pam for root from 103.41.124.56 port 48472 ssh2 Jan 25 15:31:39 ftlogin1 sshd[15884]: error: PAM: Authentication failure for root from 103.41.124.56 Jan 25 15:31:39 ftlogin1 sshd[15887]: Postponed keyboard-interactive for root from 103.41.124.56 port 59066 ssh2 Jan 25 15:31:40 ftlogin1 sshd[15884]: error: PAM: Authentication failure for root from 103.41.124.56 Jan 25 15:31:40 ftlogin1 sshd[15884]: Failed keyboard-interactive/pam for root from 103.41.124.56 port 59066 ssh2 Jan 25 15:31:40 ftlogin1 sshd[15887]: Postponed keyboard-interactive for root from 103.41.124.56 port 59066 ssh2 - Fail2ban on