Add fail2ban to stop these malicious ips ;-;

fail2ban/jail.d/defaults.conf

@@ -0,0 +1,4 @@
+[DEFAULT]
+# Ignore localhost; add your home IP after the comma
+ignoreip = 127.0.0.1/8 ::1
+banaction = iptables-multiport

fail2ban/jail.d/nginx-4xx.conf

@@ -0,0 +1,7 @@
+[nginx-4xx]
+enabled  = true
+filter   = nginx-4xx
+logpath  = /var/log/nginx/access.log
+maxretry = 20
+findtime = 300
+bantime  = 3600

fail2ban/jail.d/nginx-login.conf

@@ -0,0 +1,7 @@
+[nginx-login]
+enabled  = true
+filter   = nginx-login
+logpath  = /var/log/nginx/access.log
+maxretry = 5
+findtime = 600
+bantime  = 3600

fail2ban/jail.d/sshd.conf

@@ -0,0 +1,7 @@
+[sshd]
+enabled  = true
+filter   = sshd
+logpath  = /var/log/auth.log
+maxretry = 5
+findtime = 600
+bantime  = 3600