Top 20 Hostile Web Hosting & Cloud Services for August 2020

Because some people ask, we are not talking only about spammers trying to register and login, we are talking about xss attacks, brute force attempts, sql injections, scrapers, crazy/rogue bots, you name it.

Attacks for hours, very coordinated, same type of attacks (mostly against WordPress and WP plugins) and same targets from different IP every 2-3 seconds.

The Top offender for this month is Huawei’s AspiegelBot (PetalBot), taking around 25% of hits. But this abusing bot did actually respect robots.txt and stopped a few days after we blocked it (Deny). This is also a very STUPID bot (even more stupid that Microsoft’s Bing bot), trying to index everything that looks like a link.

ISP/Cloud/Hosting ServiceCountry
1HUAWEI CLOUDSSG
2WebNX, IncUS
3Eonix CorporationUS
4AzureUS
5OVH SystemsCA
6KVCHOSTING.COM LLCUS
7DediPathLV
8ColoCrossingUS
9Hetzner Online GmbHDE
101&1 Internet SEDE
11MediaServicePlus LLCRU
12Enzu IncUS
13Digital Ocean, IncUS
14Alibaba AdvertisingCN
15LeasewebUS
16Shenzhen TencentCN
17QuadraNet, IncUS
18B2 Net SolutionsCA
19ZwiebelfreundeDE
20zColoUS