Spent the morning blocking and reporting a few IP Addresses:
46.101.214.197 (DigitalOcean) hosts a command and control server
147.182.224.216 (DigitalOcean) hosts an exploit script
62.60.130.0/24 (Cipher Operations Beograd) performs mass user login tries
51.79.141.52 and 51.75.155.49 (OVH) tries to exploit SMTP servers