France (FR) Threat Intelligence

FR

France has 39,985 malicious IP addresses with 1,433,078 abuse reports. Top threat categories include ssh bruteforce, web attack, generic bruteforce, mail bruteforce, web scanner. Top attacking networks: Contabo GmbH (5,995 IPs), OVH SAS (5,498 IPs), Orange (1,733 IPs). Data collected since 2022-12-27, last activity 2026-04-16.

Threat Assessment: France shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, web attack, generic bruteforce. The majority of threats originate from networks operated by Contabo GmbH and OVH SAS.

Total Reports
1,433,078
Unique IPs
39,985
First Seen
2022-12-27
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 2,331
Web Attack 951
Generic Bruteforce 309
Mail Bruteforce 128
Web Scanner 72

Top Attacking Networks

AS51167 Contabo GmbH
5,995 IPs
AS16276 OVH SAS
5,498 IPs
AS3215 Orange
1,733 IPs

Most Reported IPs in France

51.91.252.38 272 reports
4.211.84.189 270 reports
51.158.120.121 268 reports
51.75.194.10 267 reports
173.249.52.138 267 reports

Access this data via API

Get France threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/FR

View full API documentation

See how we classify and verify threats →

Check any IP from France

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS51167 Intelligence AS16276 Intelligence AS3215 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...