This IP was reported 12 times. Confidence of
Abuse
is 15%: ?
15%
Important Note: Public IPv6 addresses may implement the SLAAC
privacy extension. With this, the interface identifier is randomly generated. The SLAAC
privacy extension also implements a time out, which is configurable, so that the IPv6
interface addresses will be discarded and a new interface identifier is generated.
This IP address has been reported a total of
12
times from
3 distinct
sources.
2a02:6c8:8000:16::2 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-09-15T19:18:32.276968+02:00 mx1 sshd-session[1401331]: Unable to negotiate with 2a02:6c8:8000:1 ...
show more2026-09-15T19:18:32.276968+02:00 mx1 sshd-session[1401331]: Unable to negotiate with 2a02:6c8:8000:16::2 port 6266: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
show less
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
Anonymous
2026-09-12T19:51:31.879892+02:00 mx1 sshd-session[3390911]: Unable to negotiate with 2a02:6c8:8000:1 ...
show more2026-09-12T19:51:31.879892+02:00 mx1 sshd-session[3390911]: Unable to negotiate with 2a02:6c8:8000:16::2 port 23046: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
show less
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
Anonymous
2026-08-27T10:48:09.331704+02:00 mx1 sshd-session[42525]: Unable to negotiate with 2a02:6c8:8000:16: ...
show more2026-08-27T10:48:09.331704+02:00 mx1 sshd-session[42525]: Unable to negotiate with 2a02:6c8:8000:16::2 port 64890: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
show less
Brute-Force
SSH
Anonymous
2026-08-24T02:33:39.062657+02:00 mx1 sshd-session[1376208]: Unable to negotiate with 2a02:6c8:8000:1 ...
show more2026-08-24T02:33:39.062657+02:00 mx1 sshd-session[1376208]: Unable to negotiate with 2a02:6c8:8000:16::2 port 17555: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
show less
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
Anonymous
2026-08-19T16:13:58.627745+02:00 mx1 sshd-session[373430]: error: kex_exchange_identification: read: ...
show more2026-08-19T16:13:58.627745+02:00 mx1 sshd-session[373430]: error: kex_exchange_identification: read: Connection reset by peer
2026-08-19T16:13:58.627760+02:00 mx1 sshd-session[373430]: Connection reset by 2a02:6c8:8000:16::2 port 59615
show less
2a02:6c8:8000:16::2 - - [13/Aug/2025:00:11:47 +1000] "GET /RDWeb/Pages/ HTTP/1.1" 404 1140 "https:// ...
show more2a02:6c8:8000:16::2 - - [13/Aug/2025:00:11:47 +1000] "GET /RDWeb/Pages/ HTTP/1.1" 404 1140 "https://203.132.94.196/RDWeb/Pages/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15"
2a02:6c8:8000:16::2 - - [13/Aug/2025:00:11:47 +1000] "GET /RDWeb/Pages/ HTTP/1.1" 404 1140 "https://203.132.94.196/RDWeb/Pages/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15"
2a02:6c8:8000:16::2 - - [13/Aug/2025:00:11:47 +1000] "GET /RDWeb/Pages/ HTTP/1.1" 404 1140 "https://203.132.94.196/RDWeb/Pages/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15"
2a02:6c8:8000:16::2 - - [13/Aug/2025:00:11:47 +1000] "GET /RDWeb/Pages/ HTTP/1.1" 404 1140 "https://203.132.94.196/RDWeb/Pages/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15"
2a02
...
show less
Bad Web Bot
Anonymous
Mar 20 15:52:48 mx1 postfix/submission/smtpd[1904180]: improper command pipelining after CONNECT fro ...
show moreMar 20 15:52:48 mx1 postfix/submission/smtpd[1904180]: improper command pipelining after CONNECT from unknown[2a02:6c8:8000:16::2]: \003\000\000,'\340\000\000\000\000\000Cookie: mstshash=Domain\r\n\001\000\b\000\003\000\000\000
show less
Email Spam
Brute-Force
Anonymous
Mar 19 09:37:13 mx1 postfix/submission/smtpd[293349]: improper command pipelining after CONNECT from ...
show moreMar 19 09:37:13 mx1 postfix/submission/smtpd[293349]: improper command pipelining after CONNECT from unknown[2a02:6c8:8000:16::2]: \003\000\000,'\340\000\000\000\000\000Cookie: mstshash=Domain\r\n\001\000\b\000\003\000\000\000
show less
Email Spam
Brute-Force
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩