FraudGuard

Top Hosting Providers

FraudGuard ACE (Attack Correlation Engine) correlates global attack telemetry across multiple threat classifications to show where attacker infrastructure concentrates. This leaderboard is built from a nightly cache of the last 30 days and links directly into detailed provider intel pages.

Interested in exploring or leveraging data like this across your own applications and infrastructure? Start a free trial to access our threat intelligence APIs.

Data source: FraudGuard ACE (Attack Correlation Engine) • Refresh: nightly cache • Last refreshed: 2026-06-05 04:00:10

Top Hosting Providers

Learn more about FraudGuard risk levels and threat types →
anonymous_tracker botnet_tracker honeypot_tracker abuse_tracker spam_tracker

# Provider Attacker IPs ASNs Countries Threat Breakdown
1 NordVPN 289,839 1 55
2 Amazon Web Services 155,778 2 35
3 Digital Ocean 89,567 1 8
4 M247 61,324 5 110
5 Cyberzone 52,765 1 63
6 Octopus Web Services 25,316 2 6
7 Datacamp 18,152 2 113
8 Google Cloud 18,037 2 61
9 Alibaba Cloud 14,944 2 15
10 Microsoft Azure 13,232 1 33
11 ProtonVPN 12,191 27 111
12 Madgenius.com 11,053 1 2
13 Tencent Cloud 10,478 2 12
14 3xK Tech 10,211 1 11
15 Heng Tong 8,605 1 2
16 Leaseweb 7,773 15 13
17 IPXO 7,234 9 45
18 Ace Data Centers II 6,946 16 31
19 ExpressVPN 6,912 5 13
20 ColoCrossing 5,501 2 6
21 ServerMania 5,334 2 7
22 HostRoyale Technologies Pvt 5,049 7 69
23 Cloudie 4,731 1 8
24 Akamai 4,668 1 15
25 OVH 4,470 1 16
26 Shinjiru Technology Sdn Bhd 4,367 1 1
27 Partner Hosting 4,114 1 9
28 Rinnai Korea 4,096 0 1
29 Clouvider 3,626 2 32
30 NTT-DATA 3,488 4 18
31 Hetzner 3,455 3 4
32 Contabo 3,435 2 9
33 Dynanode 3,348 1 6
34 Huawei Cloud 3,193 1 15
35 Purevoltage Enterprises 3,140 1 7
36 Oracle Cloud 3,073 2 28
37 Mullvad VPN 3,072 1 5
38 Windstream Communications 3,028 2 3
39 Byteplus Pte. 2,978 1 4
40 Hydra Communications 2,876 2 11
41 Cogent Communications 2,851 4 17
42 Fast Servers (Pty) 2,804 2 13
43 Cloudflare 2,729 1 52
44 Multacom Corporation 2,386 3 12
45 Code 200, UAB 2,367 0 4
46 GSL Networks 2,292 1 42
47 Tunnelbear 2,256 1 1 —
48 Alex Largman 2,235 1 13
49 Latitude-sh 2,205 1 12
50 Cox Communications 2,106 3 6

Start a free trial

Get access to IP reputation lookups, bulk enrichment, threat intelligence APIs, and downloadable threat feeds.

Create free account →

Need threat intel offline?

Download a continuously updated Offline Threat Database (CSV + SQLite) built from FraudGuard ACE. Perfect for SIEM enrichment, warehousing, air-gapped environments, and local scoring.

Explore Offline Threat Database →