I notice unauthorised attacks +/- 10 time per day :
I have Dynamic IP and TeamViewer 14 start with windows.
I have the impression that the attacks only take place when Teamviewer is ON ?!
Do you have the same event ID?