AS16276 — OVH
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 10 minutes ago · first observed 2026-09-25 (29 days ago)
1,850,419
Attacks
783
Distinct source IPs
Attacks from this network most often target T1110 Brute Force.
OffSeq honeypot sensors recorded 1,850,419 attacks from 783 distinct hosts within AS16276in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force1,377,379
- T1657 Financial Theft359,398
- T1021.005 VNC35,354
- T1190 Exploit Public-Facing Application32,920
- T1595 Active Scanning4,661
- T1046 Network Service Discovery2,268
- T1595.002 Vulnerability Scanning190
- T1552.001 Credentials In Files101
- T1105 Ingress Tool Transfer64
- T1078 Valid Accounts62
- T1071.003 Mail Protocols52
- T1552 Unsecured Credentials38
Top countries
- France1,435,355
- United States246,701
- Canada79,014
- Belgium48,135
- Singapore23,730
- Australia9,019
- United Kingdom1,566
- Spain1,500
- Germany1,070
- The Netherlands518
- Poland225
- Ukraine128