FraudGuard

Top Hosting Providers

FraudGuard ACE (Attack Correlation Engine) correlates global attack telemetry across multiple threat classifications to show where attacker infrastructure concentrates. This leaderboard is built from a nightly cache of the last 30 days and links directly into detailed provider intel pages.

Interested in exploring or leveraging data like this across your own applications and infrastructure? Start a free trial to access our threat intelligence APIs.

Data source: FraudGuard ACE (Attack Correlation Engine) • Refresh: nightly cache • Last refreshed: 2026-07-22 04:00:06

Top Hosting Providers

Learn more about FraudGuard risk levels and threat types →
anonymous_tracker botnet_tracker honeypot_tracker abuse_tracker spam_tracker

# Provider Attacker IPs ASNs Countries Threat Breakdown
1 NordVPN 288,735 1 55
2 Amazon Web Services 144,961 2 34
3 M247 71,455 3 102
4 Cyberzone 52,671 1 64
5 Digital Ocean 26,944 1 8
6 Google Cloud 24,444 1 53
7 Cloudie 15,949 0 8
8 Datacamp 15,314 2 92
9 Alibaba Cloud 12,701 2 15
10 ProtonVPN 11,602 26 111
11 Microsoft Azure 10,962 1 33
12 rainbow network 10,507 1 4
13 Heng Tong 8,702 1 2
14 ExpressVPN 6,854 5 13
15 Tencent Cloud 6,553 1 12
16 IPXO 5,618 7 44
17 Ace Data Centers II 4,415 8 27
18 Cloudflare 4,132 1 67
19 Partner Hosting 4,109 1 8
20 Leaseweb 3,925 12 10
21 ColoCrossing 3,869 1 6
22 Hydra Communications 3,456 1 7
23 ServerMania 3,422 1 7
24 3xK Tech 3,097 1 9
25 Mullvad VPN 3,051 1 5
26 Akamai 2,862 1 15
27 Clouvider 2,750 1 28
28 HostRoyale Technologies Pvt 2,725 5 67
29 OVH 2,565 1 16
30 Contabo 2,477 2 9
31 Purevoltage Enterprises 2,438 1 7
32 Tunnelbear 2,256 1 1 —
33 Hetzner 2,074 1 4
34 Alex Largman 2,068 1 13
35 Cox Communications 2,053 2 6
36 Airu 2,048 0 1
37 Eonix Corporation 1,957 0 4
38 GSL Networks 1,949 1 45
39 Fast Servers (Pty) 1,884 2 13
40 Cogent Communications 1,769 2 13
41 China Telecom 1,576 1 1
42 1&1 Versatel 1,543 0 1
43 Latitude-sh 1,511 1 14
44 Onehostplanet s.r.o. 1,494 0 3
45 Vultr 1,487 1 23
46 Web2Objects LLC 1,388 3 4
47 Oracle Cloud 1,375 1 25
48 Perimeter 81 1,315 1 2 —
49 GTHost 1,222 2 8
50 Huawei Cloud 1,197 1 14

Start a free trial

Get access to IP reputation lookups, bulk enrichment, threat intelligence APIs, and downloadable threat feeds.

Create free account →

Need threat intel offline?

Download a continuously updated Offline Threat Database (CSV + SQLite) built from FraudGuard ACE. Perfect for SIEM enrichment, warehousing, air-gapped environments, and local scoring.

Explore Offline Threat Database →