FraudGuard

Top Hosting Providers

FraudGuard ACE (Attack Correlation Engine) correlates global attack telemetry across multiple threat classifications to show where attacker infrastructure concentrates. This leaderboard is built from a nightly cache of the last 30 days and links directly into detailed provider intel pages.

Interested in exploring or leveraging data like this across your own applications and infrastructure? Start a free trial to access our threat intelligence APIs.

Data source: FraudGuard ACE (Attack Correlation Engine) • Refresh: nightly cache • Last refreshed: 2026-08-10 04:00:14

Top Hosting Providers

Learn more about FraudGuard risk levels and threat types →
anonymous_tracker botnet_tracker honeypot_tracker abuse_tracker spam_tracker

# Provider Attacker IPs ASNs Countries Threat Breakdown
1 NordVPN 288,742 1 55
2 Amazon Web Services 166,663 2 37
3 M247 72,154 3 107
4 Cyberzone 52,694 1 64
5 Digital Ocean 34,153 1 8
6 Google Cloud 31,499 0 51
7 Datacamp 16,520 2 96
8 Cloudie 15,972 0 8
9 Alibaba Cloud 13,648 2 15
10 Microsoft Azure 13,276 1 33
11 ProtonVPN 11,624 26 111
12 rainbow network 10,511 1 4
13 Heng Tong 8,716 1 2
14 Tencent Cloud 7,171 1 12
15 IPXO 6,937 6 45
16 ExpressVPN 6,857 5 13
17 Cloudflare 4,829 1 70
18 Ace Data Centers II 4,751 5 29
19 Leaseweb 4,549 11 10
20 ColoCrossing 4,366 1 6
21 Partner Hosting 4,112 1 8
22 3xK Tech 3,999 1 9
23 ServerMania 3,981 1 7
24 Hydra Communications 3,541 1 7
25 Akamai 3,297 1 16
26 Clouvider 3,235 1 29
27 OVH 3,200 1 16
28 Mullvad VPN 3,050 1 5
29 Purevoltage Enterprises 2,925 1 7
30 Cox Communications 2,868 2 6
31 HostRoyale Technologies Pvt 2,823 4 67
32 Contabo 2,754 2 9
33 Hetzner 2,481 1 4
34 Alex Largman 2,410 1 13
35 GSL Networks 2,298 1 45
36 Tunnelbear 2,256 1 1 —
37 Fast Servers (Pty) 2,161 2 13
38 Airu 2,048 0 1
39 Latitude-sh 2,048 1 14
40 Eonix Corporation 2,028 0 4
41 Cogent Communications 1,976 2 14
42 China Telecom 1,962 1 1
43 1&1 Versatel 1,793 0 1
44 Vultr 1,711 1 23
45 Web2Objects LLC 1,539 3 4
46 Oracle Cloud 1,524 1 25
47 Onehostplanet s.r.o. 1,494 0 3
48 GHOSTnet 1,454 0 4
49 GTHost 1,321 2 8
50 Perimeter 81 1,315 1 2 —

Start a free trial

Get access to IP reputation lookups, bulk enrichment, threat intelligence APIs, and downloadable threat feeds.

Create free account →

Need threat intel offline?

Download a continuously updated Offline Threat Database (CSV + SQLite) built from FraudGuard ACE. Perfect for SIEM enrichment, warehousing, air-gapped environments, and local scoring.

Explore Offline Threat Database →