[2020-10-13 15:19:26] NOTICE[1182] chan_sip.c: Registration from '"301" ' failed for '45.143.221.103:5683' - Wrong password
[2020-10-13 15:19:26] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T15:19:26.829-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f22f80ac0a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5683",Challenge="7a628e30",ReceivedChallenge="7a628e30",ReceivedHash="0119f7e30ee57384234432f30b70c098"
[2020-10-13 15:19:26] NOTICE[1182] chan_sip.c: Registration from '"301" ' failed for '45.143.221.103:5683' - Wrong password
[2020-10-13 15:19:26] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T15:19:26.966-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.14
...

[2020-10-13 06:46:57] NOTICE[1182] chan_sip.c: Registration from '"3333" ' failed for '45.143.221.103:5645' - Wrong password
[2020-10-13 06:46:57] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T06:46:57.038-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3333",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5645",Challenge="3439c4fc",ReceivedChallenge="3439c4fc",ReceivedHash="3062dbecaf2621780fa5e34eb195d058"
[2020-10-13 06:46:57] NOTICE[1182] chan_sip.c: Registration from '"3333" ' failed for '45.143.221.103:5645' - Wrong password
[2020-10-13 06:46:57] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T06:46:57.188-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3333",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP
...

Automatic report - Banned IP Access

[2020-10-12 16:53:29] NOTICE[1182] chan_sip.c: Registration from '"101" ' failed for '45.143.221.110:5615' - Wrong password
[2020-10-12 16:53:29] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-12T16:53:29.550-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5615",Challenge="0ad9c2aa",ReceivedChallenge="0ad9c2aa",ReceivedHash="886a00a66a8cbf6f214248f22ce3a6c8"
[2020-10-12 16:53:29] NOTICE[1182] chan_sip.c: Registration from '"101" ' failed for '45.143.221.110:5615' - Wrong password
[2020-10-12 16:53:29] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-12T16:53:29.962-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.14
...

[2020-10-11 16:12:54] NOTICE[1182] chan_sip.c: Registration from '"3000" ' failed for '45.143.221.110:5288' - Wrong password
[2020-10-11 16:12:54] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T16:12:54.204-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3000",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5288",Challenge="526e051c",ReceivedChallenge="526e051c",ReceivedHash="7428017ede0270c83e0c7304a25a34ab"
[2020-10-11 16:12:54] NOTICE[1182] chan_sip.c: Registration from '"3000" ' failed for '45.143.221.110:5288' - Wrong password
[2020-10-11 16:12:54] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T16:12:54.355-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3000",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP
...

TCP port : 5060

[2020-10-11 12:22:47] NOTICE[1182][C-00002dff] chan_sip.c: Call from '' (45.143.221.96:5071) to extension '972595778361' rejected because extension not found in context 'public'.
[2020-10-11 12:22:47] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T12:22:47.182-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595778361",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.96/5071",ACLName="no_extension_match"
[2020-10-11 12:31:40] NOTICE[1182][C-00002e08] chan_sip.c: Call from '' (45.143.221.96:5080) to extension '011972595778361' rejected because extension not found in context 'public'.
[2020-10-11 12:31:40] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T12:31:40.743-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.22
...

ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 5070 proto: udp cat: Misc Attackbytes: 454

[2020-10-11 12:04:24] NOTICE[1182] chan_sip.c: Registration from '"9900" ' failed for '45.143.221.41:7384' - Wrong password
[2020-10-11 12:04:24] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T12:04:24.226-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9900",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/7384",Challenge="680a328f",ReceivedChallenge="680a328f",ReceivedHash="1e6e62d2c5d20e0f03dc77bd5f78bb79"
[2020-10-11 12:04:24] NOTICE[1182] chan_sip.c: Registration from '"9900" ' failed for '45.143.221.41:7384' - Wrong password
[2020-10-11 12:04:24] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T12:04:24.402-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9900",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45
...

[2020-10-11 08:58:48] NOTICE[1182] chan_sip.c: Registration from '"3071" ' failed for '45.143.221.110:5956' - Wrong password
[2020-10-11 08:58:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T08:58:48.652-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3071",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5956",Challenge="2bf8793a",ReceivedChallenge="2bf8793a",ReceivedHash="b66b2e9d962113daef388dc0c0e3980a"
[2020-10-11 08:58:48] NOTICE[1182] chan_sip.c: Registration from '"3071" ' failed for '45.143.221.110:5956' - Wrong password
[2020-10-11 08:58:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T08:58:48.770-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3071",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP
...

TCP port : 5060

[2020-10-11 05:57:59] NOTICE[1182][C-00002cca] chan_sip.c: Call from '' (45.143.221.96:5071) to extension '972595778361' rejected because extension not found in context 'public'.
[2020-10-11 05:57:59] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T05:57:59.878-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595778361",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.96/5071",ACLName="no_extension_match"
[2020-10-11 05:59:57] NOTICE[1182][C-00002ccf] chan_sip.c: Call from '' (45.143.221.96:5070) to extension '011972595778361' rejected because extension not found in context 'public'.
[2020-10-11 05:59:57] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T05:59:57.598-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.22
...

[2020-10-11 02:15:56] NOTICE[1182] chan_sip.c: Registration from '"654321" ' failed for '45.143.221.103:5703' - Wrong password
[2020-10-11 02:15:56] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T02:15:56.179-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="654321",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5703",Challenge="2fa01f1f",ReceivedChallenge="2fa01f1f",ReceivedHash="b9e3f4d835296970b0072df2ccd108c6"
[2020-10-11 02:15:56] NOTICE[1182] chan_sip.c: Registration from '"654321" ' failed for '45.143.221.103:5703' - Wrong password
[2020-10-11 02:15:56] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T02:15:56.319-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="654321",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddre
...

ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 5070 proto: udp cat: Misc Attackbytes: 456

[2020-10-11 03:27:05] NOTICE[1182] chan_sip.c: Registration from '"1004" ' failed for '45.143.221.41:5938' - Wrong password
[2020-10-11 03:27:05] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T03:27:05.440-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1004",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/5938",Challenge="304b0393",ReceivedChallenge="304b0393",ReceivedHash="8b3a810e211de8db8067cab412f11f68"
[2020-10-11 03:27:05] NOTICE[1182] chan_sip.c: Registration from '"1004" ' failed for '45.143.221.41:5938' - Wrong password
[2020-10-11 03:27:05] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T03:27:05.679-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1004",SessionID="0x7f22f83116b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45
...

UTC: 2019-10-21 port: 123/udp

10/22/2019-05:03:01.661142 185.216.140.252 Protocol: 6 ET DROP Dshield Block Listed Source group 1

Oct 22 10:47:52 vpn01 sshd[31143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.25.193.25
Oct 22 10:47:54 vpn01 sshd[31143]: Failed password for invalid user acoustics from 171.25.193.25 port 46556 ssh2
...

Oct 22 10:36:54 [munged] sshd[2924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.221.69.246

Oct 22 05:31:21 ny01 sshd[15909]: Failed password for root from 222.186.173.215 port 24984 ssh2
Oct 22 05:31:39 ny01 sshd[15909]: error: maximum authentication attempts exceeded for root from 222.186.173.215 port 24984 ssh2 [preauth]
Oct 22 05:31:50 ny01 sshd[15956]: Failed password for root from 222.186.173.215 port 12486 ssh2

2019-10-22T08:33:53.662590shield sshd\[8734\]: Invalid user suva from 217.30.75.78 port 60796
2019-10-22T08:33:53.667023shield sshd\[8734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-217-030-075-078.aim-net.cz
2019-10-22T08:33:55.869464shield sshd\[8734\]: Failed password for invalid user suva from 217.30.75.78 port 60796 ssh2
2019-10-22T08:37:47.023054shield sshd\[9173\]: Invalid user norma from 217.30.75.78 port 51933
2019-10-22T08:37:47.027112shield sshd\[9173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-217-030-075-078.aim-net.cz

(From sales@chronicwatch.com)  Dear Health care provider
Medicare Care Management Program reimburses $46 per patient per month for non face-to-face care of 20 minutes by a MA. You can continue to see patients in the office face to face and get reimbursed for the same. This is just additional revenue for the practice to help patients better manage their chronic conditions. Medicare reimburses around $100 for some of your patients that qualify to be "sickest of the sick" when you provide additional non face-to-face care of 60 minutes.

Can we schedule a demo and small webinar to explain the Medicare CCM program and how we can help.

Thanks
ChronicWatch, Inc.

10/21/2019-23:51:11.799582 179.52.76.53 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433

Oct 21 12:03:37 rdssrv1 sshd[9055]: Invalid user eliot from 34.67.171.194
Oct 21 12:03:39 rdssrv1 sshd[9055]: Failed password for invalid user eliot from 34.67.171.194 port 60590 ssh2
Oct 21 12:21:30 rdssrv1 sshd[11817]: Invalid user zh from 34.67.171.194
Oct 21 12:21:32 rdssrv1 sshd[11817]: Failed password for invalid user zh from 34.67.171.194 port 36702 ssh2
Oct 21 12:25:38 rdssrv1 sshd[12482]: Invalid user server from 34.67.171.194
Oct 21 12:25:40 rdssrv1 sshd[12482]: Failed password for invalid user server from 34.67.171.194 port 49400 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=34.67.171.194

UTC: 2019-10-21 port: 23/tcp

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/145.239.83.231/ 
 
 FR - 1H : (62)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : FR 
 NAME ASN : ASN16276 
 
 IP : 145.239.83.231 
 
 CIDR : 145.239.0.0/16 
 
 PREFIX COUNT : 132 
 
 UNIQUE IP COUNT : 3052544 
 
 
 ATTACKS DETECTED ASN16276 :  
  1H - 3 
  3H - 5 
  6H - 7 
 12H - 16 
 24H - 44 
 
 DateTime : 2019-10-22 05:51:13 
 
 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN  - data recovery

UTC: 2019-10-21 port: 23/tcp

Port Scan: TCP/6000

firewall-block, port(s): 3389/tcp

22.10.2019 05:51:09 - Login Fail on hMailserver 
Detected by ELinOX-hMail-A2F