FraudGuard

Top Hosting Providers

FraudGuard ACE (Attack Correlation Engine) correlates global attack telemetry across multiple threat classifications to show where attacker infrastructure concentrates. This leaderboard is built from a nightly cache of the last 30 days and links directly into detailed provider intel pages.

Interested in exploring or leveraging data like this across your own applications and infrastructure? Start a free trial to access our threat intelligence APIs.

Data source: FraudGuard ACE (Attack Correlation Engine) • Refresh: nightly cache • Last refreshed: 2026-07-21 04:00:06

Top Hosting Providers

Learn more about FraudGuard risk levels and threat types →
anonymous_tracker botnet_tracker honeypot_tracker abuse_tracker spam_tracker

# Provider Attacker IPs ASNs Countries Threat Breakdown
1 NordVPN 288,736 1 55
2 Amazon Web Services 143,468 2 34
3 M247 71,429 3 102
4 Cyberzone 52,672 1 64
5 Digital Ocean 26,690 1 8
6 Google Cloud 24,058 1 54
7 Cloudie 15,948 0 8
8 Datacamp 15,280 2 91
9 Alibaba Cloud 12,661 2 15
10 ProtonVPN 11,604 26 111
11 Microsoft Azure 10,825 1 33
12 rainbow network 10,507 1 4
13 Heng Tong 8,701 1 2
14 ExpressVPN 6,854 5 13
15 Tencent Cloud 6,485 1 12
16 IPXO 5,576 7 43
17 Ace Data Centers II 4,400 8 27
18 Cloudflare 4,115 1 67
19 Partner Hosting 4,109 1 8
20 Leaseweb 3,908 12 10
21 ColoCrossing 3,841 1 5
22 Hydra Communications 3,455 1 7
23 ServerMania 3,413 1 7
24 3xK Tech 3,058 1 9
25 Mullvad VPN 3,051 1 5
26 Akamai 2,826 1 15
27 HostRoyale Technologies Pvt 2,723 5 67
28 Clouvider 2,699 1 28
29 OVH 2,545 1 16
30 Contabo 2,460 2 9
31 Purevoltage Enterprises 2,409 1 7
32 Tunnelbear 2,256 1 1 —
33 Hetzner 2,058 1 4
34 Alex Largman 2,051 1 13
35 Airu 2,048 0 1
36 Eonix Corporation 1,950 0 4
37 Cox Communications 1,939 2 6
38 GSL Networks 1,928 1 45
39 Fast Servers (Pty) 1,870 2 13
40 Cogent Communications 1,761 2 12
41 China Telecom 1,555 1 1
42 1&1 Versatel 1,511 0 1
43 Onehostplanet s.r.o. 1,494 0 3
44 Latitude-sh 1,488 1 14
45 Vultr 1,485 1 23
46 Web2Objects LLC 1,385 3 4
47 Oracle Cloud 1,367 1 25
48 Perimeter 81 1,315 1 2 —
49 GTHost 1,216 2 8
50 Huawei Cloud 1,203 1 13

Start a free trial

Get access to IP reputation lookups, bulk enrichment, threat intelligence APIs, and downloadable threat feeds.

Create free account →

Need threat intel offline?

Download a continuously updated Offline Threat Database (CSV + SQLite) built from FraudGuard ACE. Perfect for SIEM enrichment, warehousing, air-gapped environments, and local scoring.

Explore Offline Threat Database →