AS3257
GTT
Flagged of observed
62%
high risk
- IPs observed
- 93,101
- Flagged abusive
- 57,788
- Share flagged
- 62%
- Proxy or VPN
- 46%
Observed means the addresses FFraud holds data on in this network, not every address it announces. The share is of those.
What we see
Of the 93,101 IP addresses FFraud has observed in GTT (AS3257), 57,788 — 62% — are flagged as abusive. That is an extraordinarily high concentration. Ordinary end-user networks sit in the low single digits. On a dedicated hosting network a rate this high is the classic bulletproof-hosting or proxy-operation signature, where abuse is the business model. On a large shared platform or CDN it instead reflects abusive tenants riding otherwise-legitimate infrastructure. Either way, unfiltered traffic from this network carries real risk. On top of that, 46% of the flagged IPs resolve as proxies or VPN infrastructure — a strong sign the network is being used to launder traffic and hide origin.
AS3257, answered.
No. AS3257 is high-risk: 62% of the IPs we observe there are abusive. Traffic from this network should be treated with heavy suspicion.
Of the 93,101 IP addresses FFraud has observed in GTT (AS3257), 57,788 — 62% — are flagged as abusive. That is an extraordinarily high concentration. Ordinary end-user networks sit in the low single digits. On a dedicated hosting network a rate this high is the classic bulletproof-hosting or proxy-operation signature, where abuse is the business model. On a large shared platform or CDN it instead reflects abusive tenants riding otherwise-legitimate infrastructure. Either way, unfiltered traffic from this network carries real risk. On top of that, 46% of the flagged IPs resolve as proxies or VPN infrastructure — a strong sign the network is being used to launder traffic and hide origin.
The rate is the share of GTT's IPs that FFraud has independently confirmed as abusive, each verified at least twice by our honeypot sensors and community reports. It is a measurement of observed traffic, not a legal judgment of the operator. See how we score at https://ffraud.com/docs/methodology.