Autonomous system
AS16276 OVH
Hosting RIPE
Summary
OVH SAS
hosting dedicated cloud
OVHcloud is a large European hosting and cloud provider, known for inexpensive dedicated servers and a big international data center footprint.
What it's used for
- Dedicated servers, VPS, public and private cloud, and domain/web hosting.
- A common home for game servers, VPNs, and self-hosted infrastructure thanks to low prices and included DDoS protection.
Notable
- Like other budget hosts, OVH space contains a broad mix of legitimate and abusive traffic; reputation should be judged per-IP, not per-ASN.
- OVH is one of the largest hosting providers in Europe by server count.
Interesting
- A March 2021 fire destroyed part of OVH's Strasbourg (SBG2) data center, taking many customer sites offline and becoming a widely cited lesson in backup and multi-region resilience.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 87 exchanges in 25 countries, largest first.
| Exchange | Location | Their address |
|---|---|---|
| DE-CIX Frankfurt | Frankfurt, Germany | 80.81.192.209 |
| LINX LON1 | London, United Kingdom | 195.66.225.6 |
| AMS-IX Amsterdam | Amsterdam, Netherlands | 80.249.209.231 |
| Neutral Internet Exchange | Amsterdam, Netherlands | 193.239.118.128 |
| France-IX Paris | Paris, France | 37.49.236.100 |
| Equinix Internet Exchange Singapore | Singapore, Singapore | 27.111.228.106 |
| TPIX - Internet Exchange | Warsaw, Poland | 195.149.232.99 |
| Milan Internet Exchange | Milan, Italy | 217.29.66.67 |
Transit providers
87 upstream, 249 downstream and 386 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-10, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 687 prefixes · 4.65M addresses IPv6 71 prefixes
| Country | Name | Prefixes |
|---|---|---|
| FR | France | 758 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS16276- Registry name
- OVH
- Registrant
- OVH SAS
- Abuse contact
- abuse@ovh.net
- Registered
- 1970-01-01
- Last changed
- 2026-10-09
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 88% valid · 667 valid, 90 with no ROA 5 RPKI-invalid
- ROAs
- 683 authorising AS16276
- ASPA
- no ASPA record
- IRR
- 99% registered · 753 of 762 announcements 4 other origin
- Route objects
- 1,255 naming AS16276
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,775 prefixes, as published 2026-10-11. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
32 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.
| Prefix | Advisory | Published |
|---|---|---|
198.50.168.176 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
198.50.168.182 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
198.50.168.185 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
198.50.168.189 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
139.99.122.162 | "First VPN Service" Used by Ransomware Actors to Compromise Systems | 2026-05-21 |
139.99.149.85 | "First VPN Service" Used by Ransomware Actors to Compromise Systems | 2026-05-21 |
139.99.255.144 | "First VPN Service" Used by Ransomware Actors to Compromise Systems | 2026-05-21 |
139.99.68.157 | "First VPN Service" Used by Ransomware Actors to Compromise Systems | 2026-05-21 |
145.239.5.30 | "First VPN Service" Used by Ransomware Actors to Compromise Systems | 2026-05-21 |
147.135.11.223 | "First VPN Service" Used by Ransomware Actors to Compromise Systems | 2026-05-21 |
Showing the first 10 of 32.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere