FraudGuard

Top Hosting Providers

FraudGuard ACE (Attack Correlation Engine) correlates global attack telemetry across multiple threat classifications to show where attacker infrastructure concentrates. This leaderboard is built from a nightly cache of the last 30 days and links directly into detailed provider intel pages.

Interested in exploring or leveraging data like this across your own applications and infrastructure? Start a free trial to access our threat intelligence APIs.

Data source: FraudGuard ACE (Attack Correlation Engine) • Refresh: nightly cache • Last refreshed: 2026-10-09 04:00:04
anonymous_tracker botnet_tracker honeypot_tracker abuse_tracker spam_tracker

# Provider Attacker IPs ASNs Countries Threat Breakdown
1 NordVPN 288,135 1 53
2 Amazon Web Services 86,552 1 35
3 Cyberzone 53,080 1 64
4 M247 47,896 2 118
5 Digital Ocean 47,092 1 9
6 Google Cloud 45,155 0 54
7 Datacamp 18,046 2 97
8 Microsoft Azure 12,824 1 33
9 ProtonVPN 11,399 25 111
10 Alibaba Cloud 7,938 0 15
11 IPXO 7,290 6 38
12 ExpressVPN 6,876 5 13
13 Cloudflare 6,462 0 67
14 Purevoltage Enterprises 5,809 1 7
15 Windstream Communications 5,766 0 3
16 3xK Tech 5,465 1 10
17 Arisk-communications-inc 5,459 0 16
18 Ace Data Centers II 5,291 1 28
19 OVH 4,638 0 19
20 Tencent Cloud 4,343 1 12
21 Leaseweb 4,327 1 16
22 ServerMania 4,096 0 8
23 Web2Objects LLC 3,689 0 4
24 Hetzner 3,673 0 4
25 Akamai 3,605 0 17
26 Clouvider 3,101 1 41
27 Mullvad VPN 3,060 1 5
28 Fast Servers (Pty) 2,856 2 13
29 HostRoyale Technologies Pvt 2,778 1 60
30 Contabo 2,713 0 9
31 Cox Communications 2,583 1 8
32 Latitude-sh 2,558 1 15
33 IT_HOST_BLSYNC 2,454 0 38
34 ColoCrossing 2,447 0 7
35 Tunnelbear 2,256 1 1 —
36 Biterika Group 2,254 0 1
37 Alex Largman 2,198 1 15
38 Astound Broadband 2,131 0 2
39 GSL Networks 2,080 1 55
40 Oracle Cloud 1,885 0 27
41 China Telecom 1,831 0 1
42 SOLLUTIUM EU Sp z.o.o. 1,658 0 5
43 Colocation America Corporation 1,653 2 4
44 Vultr 1,623 0 25
45 SPDNet Telekomunikasyon Hizmetleri Bilgi Teknoloji 1,541 0 3
46 1&1 Versatel 1,488 0 2
47 Latitude.sh 1,474 1 19
48 WS Telecom 1,398 0 40
49 PENTECH BILISIM TEKNOLOJILERI SANAYI VE TICARET SI 1,321 0 4
50 Perimeter 81 1,315 1 2 —

Start a free trial

Get access to IP reputation lookups, bulk enrichment, threat intelligence APIs, and downloadable threat feeds.

Create free account →

Need threat intel offline?

Download a continuously updated Offline Threat Database (CSV + SQLite) built from FraudGuard ACE. Perfect for SIEM enrichment, warehousing, air-gapped environments, and local scoring.

Explore Offline Threat Database →