Network Report

AS3257 — GTT Communications Inc.

What Predax has observed across this network's address space, and what it means for traffic screening.

Addresses observed
545
86% carried a flag

About this network

GTT Communications Inc. (AS3257) is commercial hosting space — servers rented by whoever pays for them, not connections an ISP assigns to homes. Traffic from the 545 addresses we have observed here is almost always software: monitors, API clients, scrapers, and services someone deployed.

Of those addresses, 86% carry the datacenter flag and 6% are known VPN endpoints, and 34 (6%) carried a notable risk score of 40 or higher when last checked. Hosting space is neutral in itself — the same racks hold uptime monitors and credential-stuffing scripts — so the risk share, not the datacenter flag, is the number to read.

Observed
545
distinct addresses checked
Flagged
86%
468 with any threat flag
Notable risk
6%
34 scoring 40+
Countries
13
where addresses geolocate

Flag composition

Share of observed addresses carrying each classification when last checked.

VPN346%
Proxy00%
Tor00%
Datacenter46886%

Geography

United States
468
Mexico
27
United Kingdom
19
Canada
10
Spain
7
Germany
4
Most-seen cities

Ashburn (US) · Dallas (US) · Santa Clara (US) · Queretaro City (MX) · New York (US) · Madrid (ES)

Observation window

Addresses on this network have been looked up through Predax between February 10, 2026 and August 31, 2026. Each figure on this page reflects an address's most recent check, not a permanent record.

Geographically, the observed addresses span 13 countries, with the largest share (468 of 545) geolocating to United States.

Should you screen traffic from this network?

Traffic from hosting space is rarely a person on a browser, so friction here is cheap: rate limits, bot checks and challenges cost you almost no real visitors. Reserve outright blocks for addresses whose individual score justifies it.

Before blocking an address here, check whether it belongs to a service you actually rely on — uptime monitors, payment webhooks and integrations all live in networks like this one.

Addresses observed on this network

A sample of the most-looked-up addresses — each links to its full report. Capped at 12.

Check Another IP