The IP 103.41.124.28 has just been banned by Fail2Ban after 18 attempts against SSH. Latest lines containing IP:103.41.124.28 in /var/log/syslog/sshd.log Jan 25 05:47:49 ftlogin2 sshd[2395]: error: PAM: Authentication failure for root from 103.41.124.28 Jan 25 05:47:49 ftlogin2 sshd[2395]: Failed keyboard-interactive/pam for root from 103.41.124.28 port 51250 ssh2 Jan 25 05:47:49 ftlogin2 sshd[2398]: Postponed keyboard-interactive for root from 103.41.124.28 port 51250 ssh2 Jan 25 05:47:50 ftlogin2 sshd[2395]: error: PAM: Authentication failure for root from 103.41.124.28 Jan 25 05:47:50 ftlogin2 sshd[2395]: Failed keyboard-interactive/pam for root from 103.41.124.28 port 51250 ssh2 Jan 25 05:47:52 ftlogin2 sshd[2405]: error: PAM: Authentication failure for root from 103.41.124.28 Jan 25 05:47:52 ftlogin2 sshd[2408]: Postponed keyboard-interactive for root from 103.41.124.28 port 35177 ssh2 Jan 25 05:47:53 ftlogin2 sshd[2405]: error: PAM: Authentication failure for root from 103.41.124.28 Jan 25 05:47:53 ftlogin2 sshd[2405]: Failed keyboard-interactive/pam for root from 103.41.124.28 port 35177 ssh2 Jan 25 05:47:53 ftlogin2 sshd[2408]: Postponed keyboard-interactive for root from 103.41.124.28 port 35177 ssh2 - Fail2ban on