On Sat, Apr 17, 2021 at 08:59:28AM +0100, Klaus Ethgen wrote:

do any of you know just one legit service that is hosted by OVH?

I use them as a DNSSEC registrar. A friend had a cache which took fire.

They own massive amount of /16 networks and many of them are already in my blocklist as I have seen massive server attacks from that OVH networks.

Last year, I did some statistics about attacks while reporting them first to the block's abuse, then to abuseipdb.com.

Most of the problems I had came from China, where the abuse addresses never worked. I informed the registry, they started an abuse e-mail verification campaign (like RIPE does regularly), but after a few months problems restarted.

Then, most of the other attacks came from Online (which was a pity, because they don't have an usable e-mail address, you can only report through a web interface with a CAPTCHA, they simply forward the request to the end user and if he does not reply they close the account: and you can't even interact with the end user: I got so many "What should I do? I don't know what's the problem" ...). I even once had to send them postal mail when their report form was broken, and they replied with a non-repliable e-mail address.

Then it's Microsoft, then Google, then many others.

OVH: not a lot of attacks came from them at least last year.

I have stopped sending abuse e-mails and I am only reporting to abuseipdb.com now, which I use to filter access to some services.