Network Report

AS63023 — GTHost

What Predax has observed across this network's address space, and what it means for traffic screening.

Addresses observed
27
89% carried a flag

About this network

GTHost (AS63023) is commercial hosting space — servers rented by whoever pays for them, not connections an ISP assigns to homes. Traffic from the 27 addresses we have observed here is almost always software: monitors, API clients, scrapers, and services someone deployed.

Of those addresses, 89% carry the datacenter flag, and 0 (0%) carried a notable risk score of 40 or higher when last checked. Hosting space is neutral in itself — the same racks hold uptime monitors and credential-stuffing scripts — so the risk share, not the datacenter flag, is the number to read.

Observed
27
distinct addresses checked
Flagged
89%
24 with any threat flag
Notable risk
0%
0 scoring 40+
Countries
7
where addresses geolocate

Flag composition

Share of observed addresses carrying each classification when last checked.

VPN00%
Proxy00%
Tor00%
Datacenter2489%

Geography

United States
10
Switzerland
6
Germany
4
Spain
2
United Kingdom
2
Netherlands
2
Most-seen cities

Zurich (CH) · Frankfurt am Main (DE) · Seattle (US) · Amsterdam (NL) · Madrid (ES) · New York (US)

Observation window

Addresses on this network have been looked up through Predax between January 27, 2026 and August 31, 2026. Each figure on this page reflects an address's most recent check, not a permanent record.

Geographically, the observed addresses span 7 countries, with the largest share (10 of 27) geolocating to United States.

Should you screen traffic from this network?

Traffic from hosting space is rarely a person on a browser, so friction here is cheap: rate limits, bot checks and challenges cost you almost no real visitors. Nothing we have observed on this network has scored notably yet, so there is no case for blocking it outright.

Before blocking an address here, check whether it belongs to a service you actually rely on — uptime monitors, payment webhooks and integrations all live in networks like this one.

Addresses observed on this network

A sample of the most-looked-up addresses — each links to its full report. Capped at 12.

Check Another IP