THREATLOCKER

THREATLOCKER-GTT
Data as of 2026-07-26
BGP inherited
Cluster stats
Netblocks9 · 1,024 IPv4 addresses
IPv6 5 prefixes (largest 2001:668:1f:fc9e::/64)
Registered in United Kingdom (2) · United States (2)
Cluster ID216393031
RegistryRIPE
Customersfind customers using this network →
Evidence & provenance ?
Attribution BGP parent (inherited)
Shared handles clustered on 3 shared RIR contact/maintainer handles
Registry names 2 distinct registrant names across these blocks
full provenance (JSON) → · how attribution works · report an issue

Footprint over time

6 weekly snapshots · JSON
9 0 netblocks since 2026-07-05
2026-07-05 peak 9 2026-07-26

IP Ranges (9)

⬇ export CSV
CIDR Org name Registry Status Confidence
87.119.103.0/24 THREATLOCKER-GTT RIPE ASSIGNED PA ● low
212.168.0.0/24 THREATLOCKER-GTT RIPE ASSIGNED PA ● low
213.228.209.0/24 THREATLOCKER-GTT RIPE ASSIGNED PA ● low
213.235.34.0/24 THREATLOCKER-GTT RIPE ASSIGNED PA ● low
2001:668:1f:fc9e::/64 THREATLOCKER-GTT RIPE ASSIGNED ● low
2001:668:1f:fc9f::/64 THREATLOCKER-GTT RIPE ASSIGNED ● low
2001:668:1f:fca0::/64 THREATLOCKER-GTT RIPE ASSIGNED ● low
2001:668:1f:fca1::/64 THREATLOCKER-GTT RIPE ASSIGNED ● low
2001:668:1f:fcaf::/64 THREATLOCKER-INC-GTT RIPE ASSIGNED ● low

IPv6 ranges (5)

Network trust

what's this?
RPKI hygiene: C how networks compare →
77.8% of checked blocks have valid RPKI ROA coverage (7 of 9)
Possible discrepancies (1)

These blocks are registered to THREATLOCKER-GTT but cryptographically authorized for a different, unrelated network (1 distinct holder) — often M&A history, multi-homing, or outsourced/managed hosting, occasionally worth a closer look.

87.119.103.0/24 /24 authorized for AS47771 — Vivacom Bulgaria EAD

NIC Handles

AS3257-IPAM-MNT DUMY-RIPE DUMY-RIPE