Threatoff

Data as of 2026-08-16
Registry
Cluster stats
Netblocks3,536 · 3,533 IPv4 addresses
IPv6 3 prefixes (largest 2a14:7c0:1000::/48)
Cluster ID222316333
RegistryRIPE
Customersfind customers using this network →
Evidence & provenance ?
Attribution Registry record
Shared handles clustered on 6 shared RIR contact/maintainer handles
Registry names 1 distinct registrant name across these blocks
full provenance (JSON) → · how attribution works · report an issue

Footprint over time

8 weekly snapshots · JSON
3,536 +34 netblocks since 2026-07-05
2026-07-05 peak 3,547 2026-08-16

IP Ranges (3,536)

showing 50 of 3,536 — see all — ⬇ export CSV (free export limited to 500 rows — subscribe for the full export)
CIDR Org name Registry Status Confidence
5.231.118.0/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.1/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.2/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.3/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.4/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.5/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.6/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.7/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.8/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.9/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.10/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.11/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.12/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.13/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.17/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.18/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.19/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.20/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.21/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.22/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.23/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.24/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.25/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.26/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.27/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.28/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.29/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.30/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.31/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.32/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.33/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.34/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.35/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.36/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.37/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.38/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.39/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.40/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.41/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.42/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.43/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.44/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.45/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.46/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.47/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.48/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.49/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.50/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.51/32 Threatoff RIPE ASSIGNED PA ● high
5.231.118.52/32 Threatoff RIPE ASSIGNED PA ● high

IPv6 ranges (3)

CIDR
2a14:7c0:1000::/48
2a14:7c0:1001::/48
2a14:7c0:1009::/48

Network trust

what's this?
RPKI hygiene: A how networks compare →
100.0% of checked blocks have valid RPKI ROA coverage (2,000 of 2,000, sampled from 3,536)
Possible discrepancies (2)

These blocks are registered to Threatoff but cryptographically authorized for a different, unrelated network (1 distinct holder) — often M&A history, multi-homing, or outsourced/managed hosting, occasionally worth a closer look.

2a14:7c0:1000::/48 /48 authorized for AS215365 — Tom Gewiese
2a14:7c0:1001::/48 /48 authorized for AS215365 — Tom Gewiese

NIC Handles

DUMY-RIPE DUMY-RIPE ETG-MNT GHOSTNET-MNT ORG-DA1474-RIPE ORG-TA1862-RIPE