[2020-02-06 09:49:47] NOTICE[1148] chan_sip.c: Registration from '"733"' failed for '163.172.119.155:8736' - Wrong password
[2020-02-06 09:49:47] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-06T09:49:47.747-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="733",SessionID="0x7fd82c590bc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.119.155/8736",Challenge="1ae19a4b",ReceivedChallenge="1ae19a4b",ReceivedHash="b41dbd5c537f12f616d296025909c5ec"
[2020-02-06 09:51:04] NOTICE[1148] chan_sip.c: Registration from '"734"' failed for '163.172.119.155:8782' - Wrong password
[2020-02-06 09:51:04] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-06T09:51:04.027-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="734",SessionID="0x7fd82c590bc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.
...

[2020-02-05 01:22:39] NOTICE[1148] chan_sip.c: Registration from '"632"' failed for '163.172.119.155:5466' - Wrong password
[2020-02-05 01:22:39] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-05T01:22:39.776-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="632",SessionID="0x7fd82cb29a68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.119.155/5466",Challenge="4bb3438a",ReceivedChallenge="4bb3438a",ReceivedHash="3c85cbdc978facaa3f216cc11c78bf6e"
[2020-02-05 01:23:59] NOTICE[1148] chan_sip.c: Registration from '"633"' failed for '163.172.119.155:5566' - Wrong password
[2020-02-05 01:23:59] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-05T01:23:59.725-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="633",SessionID="0x7fd82c2348d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.
...

[2020-02-01 11:14:22] NOTICE[1148] chan_sip.c: Registration from '"375"' failed for '163.172.119.155:9792' - Wrong password
[2020-02-01 11:14:22] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-01T11:14:22.088-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="375",SessionID="0x7fd82c590bc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.119.155/9792",Challenge="3485d740",ReceivedChallenge="3485d740",ReceivedHash="db32002de787d17d9766d8889437382b"
[2020-02-01 11:14:38] NOTICE[1148] chan_sip.c: Registration from '"375"' failed for '163.172.119.155:9825' - Wrong password
[2020-02-01 11:14:38] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-01T11:14:38.320-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="375",SessionID="0x7fd82c2bd8a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.
...

[2020-02-01 01:26:04] NOTICE[1148] chan_sip.c: Registration from '"344"' failed for '163.172.119.155:7208' - Wrong password
[2020-02-01 01:26:04] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-01T01:26:04.024-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="344",SessionID="0x7fd82cd25138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.119.155/7208",Challenge="6e224f25",ReceivedChallenge="6e224f25",ReceivedHash="1dcb68c3849739faf002f95e43a1a826"
[2020-02-01 01:26:36] NOTICE[1148] chan_sip.c: Registration from '"344"' failed for '163.172.119.155:7254' - Wrong password
[2020-02-01 01:26:36] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-01T01:26:36.651-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="344",SessionID="0x7fd82cd25138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.
...

[2020-01-30 07:48:52] NOTICE[1148] chan_sip.c: Registration from '"219"' failed for '163.172.119.155:7127' - Wrong password
[2020-01-30 07:48:52] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-30T07:48:52.911-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="219",SessionID="0x7fd82c31abc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.119.155/7127",Challenge="7d8b3f2a",ReceivedChallenge="7d8b3f2a",ReceivedHash="710c91bde4470dffc50229bb92dc06da"
[2020-01-30 07:49:36] NOTICE[1148] chan_sip.c: Registration from '"219"' failed for '163.172.119.155:7158' - Wrong password
[2020-01-30 07:49:36] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-30T07:49:36.618-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="219",SessionID="0x7fd82c31abc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.
...

[2020-01-29 03:57:49] NOTICE[1148] chan_sip.c: Registration from '"150"' failed for '163.172.119.155:6058' - Wrong password
[2020-01-29 03:57:49] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-29T03:57:49.335-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="150",SessionID="0x7fd82c81d868",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.119.155/6058",Challenge="104056b1",ReceivedChallenge="104056b1",ReceivedHash="16df1ed0b30b58133ae584e6179ab984"
[2020-01-29 03:58:01] NOTICE[1148] chan_sip.c: Registration from '"151"' failed for '163.172.119.155:6138' - Wrong password
[2020-01-29 03:58:01] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-29T03:58:01.330-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="151",SessionID="0x7fd82c31abc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.
...

2020-10-12T23:46:03.661963mail.standpoint.com.ua sshd[17565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=246.119.172.163.rev.fhocorp.net
2020-10-12T23:46:03.658921mail.standpoint.com.ua sshd[17565]: Invalid user nuke from 163.172.119.246 port 60606
2020-10-12T23:46:05.323915mail.standpoint.com.ua sshd[17565]: Failed password for invalid user nuke from 163.172.119.246 port 60606 ssh2
2020-10-12T23:46:29.177579mail.standpoint.com.ua sshd[17624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=246.119.172.163.rev.fhocorp.net  user=root
2020-10-12T23:46:31.409846mail.standpoint.com.ua sshd[17624]: Failed password for root from 163.172.119.246 port 33149 ssh2
...

2020-10-12T23:46:03.661963mail.standpoint.com.ua sshd[17565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=246.119.172.163.rev.fhocorp.net
2020-10-12T23:46:03.658921mail.standpoint.com.ua sshd[17565]: Invalid user nuke from 163.172.119.246 port 60606
2020-10-12T23:46:05.323915mail.standpoint.com.ua sshd[17565]: Failed password for invalid user nuke from 163.172.119.246 port 60606 ssh2
2020-10-12T23:46:29.177579mail.standpoint.com.ua sshd[17624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=246.119.172.163.rev.fhocorp.net  user=root
2020-10-12T23:46:31.409846mail.standpoint.com.ua sshd[17624]: Failed password for root from 163.172.119.246 port 33149 ssh2
...

Trolling for resource vulnerabilities

Looking for resource vulnerabilities

goldgier-uhren-ankauf.de:80 163.172.119.161 - - [08/Jan/2020:22:10:54 +0100] "GET /wp-content/themes/u-design/image/timthumb.php HTTP/1.1" 301 585 "-" "Mozilla/5.0 (Windows NT 6.1.7600; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0"
goldgier-uhren-ankauf.de 163.172.119.161 [08/Jan/2020:22:10:55 +0100] "GET /wp-content/themes/u-design/image/timthumb.php HTTP/1.1" 302 4454 "-" "Mozilla/5.0 (Windows NT 6.1.7600; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0"
www.goldgier.de 163.172.119.161 [08/Jan/2020:22:10:55 +0100] "GET /wp-content/themes/u-design/image/timthumb.php HTTP/1.1" 404 4252 "-" "Mozilla/5.0 (Windows NT 6.1.7600; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0"

Unauthorized connection attempt from IP address 185.125.23.252 on Port 445(SMB)

Aug 20 22:06:51 journals sshd\[102823\]: Invalid user spark from 49.233.192.22
Aug 20 22:06:51 journals sshd\[102823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.192.22
Aug 20 22:06:52 journals sshd\[102823\]: Failed password for invalid user spark from 49.233.192.22 port 53944 ssh2
Aug 20 22:12:02 journals sshd\[103377\]: Invalid user gerry from 49.233.192.22
Aug 20 22:12:02 journals sshd\[103377\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.192.22
...

Aug 20 21:19:16 haigwepa sshd[7599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.157 
Aug 20 21:19:18 haigwepa sshd[7599]: Failed password for invalid user admin from 141.98.9.157 port 41563 ssh2
...

Aug 20 11:34:30 mx sshd[18205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93
Aug 20 11:34:32 mx sshd[18205]: Failed password for invalid user malaga from 139.59.93.93 port 42080 ssh2

2020-08-20T18:38:23.332102abusebot-8.cloudsearch.cf sshd[6433]: Invalid user jerome from 202.83.54.167 port 45418
2020-08-20T18:38:23.340434abusebot-8.cloudsearch.cf sshd[6433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.83.54.167
2020-08-20T18:38:23.332102abusebot-8.cloudsearch.cf sshd[6433]: Invalid user jerome from 202.83.54.167 port 45418
2020-08-20T18:38:25.315744abusebot-8.cloudsearch.cf sshd[6433]: Failed password for invalid user jerome from 202.83.54.167 port 45418 ssh2
2020-08-20T18:45:24.897735abusebot-8.cloudsearch.cf sshd[6552]: Invalid user pandora from 202.83.54.167 port 54276
2020-08-20T18:45:24.905002abusebot-8.cloudsearch.cf sshd[6552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.83.54.167
2020-08-20T18:45:24.897735abusebot-8.cloudsearch.cf sshd[6552]: Invalid user pandora from 202.83.54.167 port 54276
2020-08-20T18:45:27.343646abusebot-8.cloudsearch.cf sshd[6552]: Failed 
...

$f2bV_matches

" "

Invalid user admin from 190.167.13.59 port 42874

Aug 20 16:04:36 firewall sshd[28620]: Failed password for invalid user gas from 103.139.102.110 port 50922 ssh2
Aug 20 16:08:42 firewall sshd[28761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.102.110  user=root
Aug 20 16:08:44 firewall sshd[28761]: Failed password for root from 103.139.102.110 port 50922 ssh2
...

20/8/20@08:00:55: FAIL: Alarm-Network address from=103.199.145.66
20/8/20@08:00:55: FAIL: Alarm-Network address from=103.199.145.66
...

ET CINS Active Threat Intelligence Poor Reputation IP group 88 - port: 24576 proto: udp cat: Misc Attackbytes: 71

ET DROP Dshield Block Listed Source group 1 - port: 21622 proto: tcp cat: Misc Attackbytes: 60

Brute Force

Unauthorized connection attempt from IP address 24.112.118.252 on Port 445(SMB)

Unauthorized connection attempt from IP address 94.29.126.9 on Port 445(SMB)