
I noticed two weeks ago the number of IPs causing failed sshd login attempts
as measured by fail2ban was dropping. It was dropping so far I did some tests
to make sure all the rules were still working.
Things have returned to 'normal' now, attempts are back and quite visible
in the graphs.