TCP (SYN) 193.118.53.202:27602 -> port 443, len 40

[2020-06-13 13:48:40] NOTICE[1273] chan_sip.c: Registration from '' failed for '8.129.168.101:54771' - Wrong password
[2020-06-13 13:48:40] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-13T13:48:40.023-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="0",SessionID="0x7f31c02f7128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/8.129.168.101/54771",Challenge="47f33cf3",ReceivedChallenge="47f33cf3",ReceivedHash="69900704c8a668437366ffee83bd8fbd"
[2020-06-13 13:48:40] NOTICE[1273] chan_sip.c: Registration from '' failed for '8.129.168.101:54769' - Wrong password
[2020-06-13 13:48:40] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-13T13:48:40.025-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="0",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/8.129.168.101/54769",Chal
...

2020-06-13T12:17:39.164667abusebot.cloudsearch.cf sshd[9128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31  user=root
2020-06-13T12:17:41.091632abusebot.cloudsearch.cf sshd[9128]: Failed password for root from 139.199.59.31 port 25567 ssh2
2020-06-13T12:20:11.589356abusebot.cloudsearch.cf sshd[9317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31  user=root
2020-06-13T12:20:13.716941abusebot.cloudsearch.cf sshd[9317]: Failed password for root from 139.199.59.31 port 52073 ssh2
2020-06-13T12:22:46.899166abusebot.cloudsearch.cf sshd[9466]: Invalid user teampspeak3 from 139.199.59.31 port 22078
2020-06-13T12:22:46.905643abusebot.cloudsearch.cf sshd[9466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31
2020-06-13T12:22:46.899166abusebot.cloudsearch.cf sshd[9466]: Invalid user teampspeak3 from 139.199.59.31 port 22078
2020-06-
...

SIP Server BruteForce Attack

[Sat Jun 13 01:56:52 2020 GMT] "Bloomberg xxxxet Alerts"  [], Subject: Be part of a covid test group

Jun 12 11:29:00 mail sshd[26041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.189.0 
Jun 12 11:29:02 mail sshd[26041]: Failed password for invalid user admin from 51.158.189.0 port 36668 ssh2
...

Jun 13 15:53:25 meumeu sshd[408854]: Invalid user frappe from 211.91.163.236 port 57998
Jun 13 15:53:25 meumeu sshd[408854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.91.163.236 
Jun 13 15:53:25 meumeu sshd[408854]: Invalid user frappe from 211.91.163.236 port 57998
Jun 13 15:53:27 meumeu sshd[408854]: Failed password for invalid user frappe from 211.91.163.236 port 57998 ssh2
Jun 13 15:55:26 meumeu sshd[408941]: Invalid user maprdev from 211.91.163.236 port 40422
Jun 13 15:55:26 meumeu sshd[408941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.91.163.236 
Jun 13 15:55:26 meumeu sshd[408941]: Invalid user maprdev from 211.91.163.236 port 40422
Jun 13 15:55:29 meumeu sshd[408941]: Failed password for invalid user maprdev from 211.91.163.236 port 40422 ssh2
Jun 13 15:57:31 meumeu sshd[409005]: Invalid user elsearch from 211.91.163.236 port 51079
...

2020-06-13 02:41:07 server sshd[6716]: Failed password for invalid user lmt from 103.104.119.66 port 53738 ssh2

Port probing on unauthorized port 23

Jun 13 15:11:48 vps647732 sshd[17069]: Failed password for root from 116.236.147.38 port 50592 ssh2
...

Jun 13 19:49:21 eventyay sshd[12043]: Failed password for root from 82.223.104.33 port 35182 ssh2
Jun 13 19:51:41 eventyay sshd[12089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.223.104.33
Jun 13 19:51:43 eventyay sshd[12089]: Failed password for invalid user sistem from 82.223.104.33 port 42908 ssh2
...

2020-06-13T14:22:36+02:00  exim[6226]: [1\70] 1jk5BC-0001cQ-8F H=server.sci9.org [198.154.99.189] X=TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256 CV=no F= rejected after DATA: This message scored 21.7 spam points.

2020-06-13T20:28:16.972332sd-86998 sshd[44201]: Invalid user postmaster from 187.189.65.51 port 57980
2020-06-13T20:28:16.979767sd-86998 sshd[44201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-189-65-51.totalplay.net
2020-06-13T20:28:16.972332sd-86998 sshd[44201]: Invalid user postmaster from 187.189.65.51 port 57980
2020-06-13T20:28:18.990338sd-86998 sshd[44201]: Failed password for invalid user postmaster from 187.189.65.51 port 57980 ssh2
2020-06-13T20:30:53.121780sd-86998 sshd[44745]: Invalid user monitor from 187.189.65.51 port 44700
...

$f2bV_matches

2020-06-13T18:22:31.775311shield sshd\[21841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183  user=root
2020-06-13T18:22:33.423845shield sshd\[21841\]: Failed password for root from 222.186.173.183 port 54288 ssh2
2020-06-13T18:22:36.713485shield sshd\[21841\]: Failed password for root from 222.186.173.183 port 54288 ssh2
2020-06-13T18:22:40.025073shield sshd\[21841\]: Failed password for root from 222.186.173.183 port 54288 ssh2
2020-06-13T18:22:43.275056shield sshd\[21841\]: Failed password for root from 222.186.173.183 port 54288 ssh2