AS16276 — OVH SAS Threat Intelligence

Network Threat Summary

AS16276 (OVH SAS) has 114,708 malicious IP addresses with 1,946,308 abuse reports across 27 countries. First activity recorded 2022-08-21, most recent activity 2026-10-04.

Threat Profile: The primary attack categories observed from this network are reconnaissance, reputation low, aggregated threat. This autonomous system is among the most prolific threat sources globally, with an exceptionally high concentration of malicious IP addresses. Affected countries include FR, CA, GB.

Risk Assessment: CRITICAL - This autonomous system is a major source of malicious activity, ranking in the top 1% of threat networks globally. Consider blocking the entire ASN or implementing strict rate limiting.

Top Attack Categories

• Reconnaissance 521,465 reports
• Reputation Low 330,932 reports
• Aggregated Threat 51,897 reports
• Malware Infrastructure 51,538 reports
• Attacks 24,152 reports

Top Affected Countries

• FR 753,046 reports
• CA 327,846 reports
• GB 121,177 reports

Most Reported IPs

• 51.77.158.34 1,405 reports
• 51.75.247.232 1,370 reports
• 54.38.52.18 1,369 reports
• 54.38.241.200 1,308 reports
• 54.38.109.115 1,236 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS16276 threat data into your security stack with our REST API.

See how we classify and verify threats →