Invalid user ubuntu from 202.72.243.198 port 45840

Received: from 3WTlqM3rR.61MwP2Ip61Jl.6fvOWane.B ([51.75.103.101]) 
 0
Date: Wed, 13 May 2020 08:53:01 -0000
From domain ->effelax.com       5.183.131.221
Subject: 8_Must-Haves During The Coronavirus Pandemic
Reply-To: " Smart Living Tips "  
 effelax.com   5.183.131.221

May 13 23:22:12 ift sshd\[62924\]: Failed password for root from 183.129.141.44 port 59220 ssh2May 13 23:24:30 ift sshd\[63251\]: Invalid user deploy from 183.129.141.44May 13 23:24:32 ift sshd\[63251\]: Failed password for invalid user deploy from 183.129.141.44 port 36112 ssh2May 13 23:26:49 ift sshd\[63687\]: Invalid user julio from 183.129.141.44May 13 23:26:51 ift sshd\[63687\]: Failed password for invalid user julio from 183.129.141.44 port 41234 ssh2
...

2020-05-13 14:31:23,283 fail2ban.actions: WARNING [ssh] Ban 59.110.216.153

wp-login.php

May 13 14:14:37 server1 sshd\[27619\]: Failed password for invalid user user from 213.184.249.95 port 58406 ssh2
May 13 14:18:20 server1 sshd\[28754\]: Invalid user admin from 213.184.249.95
May 13 14:18:20 server1 sshd\[28754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.184.249.95 
May 13 14:18:22 server1 sshd\[28754\]: Failed password for invalid user admin from 213.184.249.95 port 36910 ssh2
May 13 14:22:06 server1 sshd\[29972\]: Invalid user lucene from 213.184.249.95
...

May 13 20:30:16 srv-ubuntu-dev3 sshd[111564]: Invalid user test from 114.86.186.119
May 13 20:30:16 srv-ubuntu-dev3 sshd[111564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.86.186.119
May 13 20:30:16 srv-ubuntu-dev3 sshd[111564]: Invalid user test from 114.86.186.119
May 13 20:30:18 srv-ubuntu-dev3 sshd[111564]: Failed password for invalid user test from 114.86.186.119 port 35952 ssh2
May 13 20:32:52 srv-ubuntu-dev3 sshd[111976]: Invalid user work from 114.86.186.119
May 13 20:32:52 srv-ubuntu-dev3 sshd[111976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.86.186.119
May 13 20:32:52 srv-ubuntu-dev3 sshd[111976]: Invalid user work from 114.86.186.119
May 13 20:32:54 srv-ubuntu-dev3 sshd[111976]: Failed password for invalid user work from 114.86.186.119 port 40576 ssh2
May 13 20:35:31 srv-ubuntu-dev3 sshd[112417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser
...

Invalid user znc from 45.183.193.1 port 51268

2020-05-13T10:28:05.9506111495-001 sshd[30690]: Invalid user ubuntu from 73.41.116.240 port 37108
2020-05-13T10:28:07.5821781495-001 sshd[30690]: Failed password for invalid user ubuntu from 73.41.116.240 port 37108 ssh2
2020-05-13T10:32:21.8450111495-001 sshd[30812]: Invalid user wwwdata from 73.41.116.240 port 45254
2020-05-13T10:32:21.8525701495-001 sshd[30812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-41-116-240.hsd1.ca.comcast.net
2020-05-13T10:32:21.8450111495-001 sshd[30812]: Invalid user wwwdata from 73.41.116.240 port 45254
2020-05-13T10:32:23.6262081495-001 sshd[30812]: Failed password for invalid user wwwdata from 73.41.116.240 port 45254 ssh2
...

Automatic report - Port Scan Attack

Unauthorized connection attempt from IP address 171.61.139.66 on Port 445(SMB)

Unauthorized connection attempt from IP address 113.53.233.82 on Port 445(SMB)

Unauthorized connection attempt from IP address 187.59.127.190 on Port 445(SMB)

SSH bruteforce more then 50 syn to 22 port per 10 seconds.

[ES hit] Tried to deliver spam.