asn.dev

Autonomous system

AS199524 GCORE

Hosting RIPE

IPv4 addresses 122K 326 prefixes
IPv6 prefixes 55 counted as prefixes, not addresses
Countries 1 mostly LU
Flagged prefixes 9 see address space

Summary

Gcore (G-Core Labs)

Global · AI-generated

cdn edge cloud

Gcore's primary global Autonomous System (GCORE, G-Core Labs S.A., based in

Luxembourg). Gcore runs a worldwide CDN, edge, and cloud platform for content

delivery, streaming, hosting, and security.

What it's used for

  • CDN caching and edge delivery, plus public cloud and hosting, from a large globally distributed points-of-presence network.

Notable

  • An IP here is typically a Gcore edge or cloud node, not the origin or tenant behind it.
  • Gcore runs several ASNs; see the regional sibling AS202422.

Interesting

  • Gcore is known for high-capacity streaming and gaming CDN delivery and reports one of the larger global PoP footprints among independent CDNs.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Address space

Summary

Full explorer
CountryNamePrefixes
LULuxembourg381

Registry

Allocation record

via RIPE RDAP
Registry
RIPE
Handle
AS199524
Registry name
GCORE
Registrant
GCL1-MNT
Abuse contact
abuse@gcore.lu
Registered
2012-12-10
Last changed
2024-03-13
Status
active

Reputation

Classification and threat

Hosting Datacenter or cloud provider. Addresses are servers, not people.

6 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.

PrefixAdvisoryPublished
92.223.66.103"First VPN Service" Used by Ransomware Actors to Compromise Systems2026-05-21
92.38.162.11"First VPN Service" Used by Ransomware Actors to Compromise Systems2026-05-21
92.38.162.4"First VPN Service" Used by Ransomware Actors to Compromise Systems2026-05-21
92.38.186.86"First VPN Service" Used by Ransomware Actors to Compromise Systems2026-05-21
93.113.36.137"First VPN Service" Used by Ransomware Actors to Compromise Systems2026-05-21
93.113.36.142"First VPN Service" Used by Ransomware Actors to Compromise Systems2026-05-21

Threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check