167.99.37.1

denied traffic to a honeypot network. destination port 5003.

tcp/8808 (2 or more attempts)

167.99.37.1 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 233B. Report generated by Endlessh Report Generator v1.2.3

167.99.37.1 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 233B. Report generated by Endlessh Report Generator v1.2.3

167.99.37.1 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 233B. Report generated by Endlessh Report Generator v1.2.3

Jan 24 12:16:41 GMNH10459 sshd[1903098]: Invalid user tempuser from 167.99.37.1 port 35462 ...

Jan 24 16:14:36 lnxmail62 sshd[13404]: Invalid user tempuser from 167.99.37.1 port 39262 ...

Jan 24 16:01:40 v2202301167543214332 sshd[3788133]: Invalid user es from 167.99.37.1 port 60284 Jan 24 16:01:40 v2202301167543214332 sshd[3788133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.37.1 J ... show more Jan 24 16:01:40 v2202301167543214332 sshd[3788133]: Invalid user es from 167.99.37.1 port 60284 Jan 24 16:01:40 v2202301167543214332 sshd[3788133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.37.1 Jan 24 16:01:40 v2202301167543214332 sshd[3788133]: Invalid user es from 167.99.37.1 port 60284 Jan 24 16:01:41 v2202301167543214332 sshd[3788133]: Failed password for invalid user es from 167.99.37.1 port 60284 ssh2 Jan 24 16:02:11 v2202301167543214332 sshd[3788158]: Invalid user es from 167.99.37.1 port 51618 ... show less

Jan 24 15:00:41 instance-20241026-2018 sshd[2738094]: Failed password for invalid user es from 167.99.37.1 port 51116 ssh2 Jan 24 15:01:11 instance-20241026-2018 sshd[2738128]: Invalid user es from 167.99.37.1 port 38874 Jan 24 15:01:11 instance-2024 ... show more Jan 24 15:00:41 instance-20241026-2018 sshd[2738094]: Failed password for invalid user es from 167.99.37.1 port 51116 ssh2 Jan 24 15:01:11 instance-20241026-2018 sshd[2738128]: Invalid user es from 167.99.37.1 port 38874 Jan 24 15:01:11 instance-20241026-2018 sshd[2738128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.37.1 Jan 24 15:01:13 instance-20241026-2018 sshd[2738128]: Failed password for invalid user es from 167.99.37.1 port 38874 ssh2 Jan 24 15:01:43 instance-20241026-2018 sshd[2738159]: Invalid user es from 167.99.37.1 port 52704 ... show less

2026-01-24T14:56:56.690025+00:00 node1-eu-es sshd[747111]: Invalid user es from 167.99.37.1 port 58512 2026-01-24T14:57:28.391196+00:00 node1-eu-es sshd[747158]: Invalid user es from 167.99.37.1 port 37340 2026-01-24T14:58:00.401965+00:00 node1-eu-es ... show more 2026-01-24T14:56:56.690025+00:00 node1-eu-es sshd[747111]: Invalid user es from 167.99.37.1 port 58512 2026-01-24T14:57:28.391196+00:00 node1-eu-es sshd[747158]: Invalid user es from 167.99.37.1 port 37340 2026-01-24T14:58:00.401965+00:00 node1-eu-es sshd[747204]: Invalid user es from 167.99.37.1 port 47668 ... show less

Reported from fail2ban historical logs. (Detected at 2026-01-24 21:45:25)

2026-01-24T15:44:41.414225+01:00 mail sshd[4132953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.37.1 2026-01-24T15:44:43.486444+01:00 mail sshd[4132953]: Failed password for invalid user mysql from ... show more 2026-01-24T15:44:41.414225+01:00 mail sshd[4132953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.37.1 2026-01-24T15:44:43.486444+01:00 mail sshd[4132953]: Failed password for invalid user mysql from 167.99.37.1 port 34808 ssh2 2026-01-24T15:45:11.539983+01:00 mail sshd[4133193]: Invalid user mysql from 167.99.37.1 port 54566 ... show less

2026-01-24T14:43:56.695818Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 167.99.37.1:34784 (158.69.22.11:2222) [session: 10a31a605a9c] 2026-01-24T14:44:26.702775Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 167.99.37.1:43606 (158.6 ... show more 2026-01-24T14:43:56.695818Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 167.99.37.1:34784 (158.69.22.11:2222) [session: 10a31a605a9c] 2026-01-24T14:44:26.702775Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 167.99.37.1:43606 (158.69.22.11:2222) [session: 4ea862134fac] ... show less

Jan 24 15:37:52 v2202301167543214332 sshd[3787778]: Invalid user nginx from 167.99.37.1 port 39014 Jan 24 15:37:52 v2202301167543214332 sshd[3787778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.37.1 ... show more Jan 24 15:37:52 v2202301167543214332 sshd[3787778]: Invalid user nginx from 167.99.37.1 port 39014 Jan 24 15:37:52 v2202301167543214332 sshd[3787778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.37.1 Jan 24 15:37:52 v2202301167543214332 sshd[3787778]: Invalid user nginx from 167.99.37.1 port 39014 Jan 24 15:37:54 v2202301167543214332 sshd[3787778]: Failed password for invalid user nginx from 167.99.37.1 port 39014 ssh2 Jan 24 15:38:22 v2202301167543214332 sshd[3787780]: Invalid user nginx from 167.99.37.1 port 40142 ... show less

Jan 24 14:36:56 instance-20241026-2018 sshd[2736214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.37.1 Jan 24 14:36:57 instance-20241026-2018 sshd[2736214]: Failed password for invalid user nginx fr ... show more Jan 24 14:36:56 instance-20241026-2018 sshd[2736214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.37.1 Jan 24 14:36:57 instance-20241026-2018 sshd[2736214]: Failed password for invalid user nginx from 167.99.37.1 port 51552 ssh2 Jan 24 14:37:25 instance-20241026-2018 sshd[2736271]: Invalid user nginx from 167.99.37.1 port 36104 Jan 24 14:37:25 instance-20241026-2018 sshd[2736271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.37.1 Jan 24 14:37:27 instance-20241026-2018 sshd[2736271]: Failed password for invalid user nginx from 167.99.37.1 port 36104 ssh2 ... show less