Data as of Nov 9, 2026
5.
Anonymizer- Proxy activity
- Not seen in 30 days
- Type
- Datacenter proxyHosting network
- Risk
- 85 / 100 · CriticalRecently moved · Proxy exits nearby
- Recent change
- Announced by AS215365 since Aug 202611 wk ago
- Announced by
- AS215365Tom Gewiesethreatoff.euHosting
- Announcement
- 5.231.117.0/24RPKI valid
- Location
- Kirchberg, Bavaria, GermanyAn anonymizer's exit: its user may be anywhere.
Network & registry
The block's full lineage, from registry to use, is on its prefix page.
Announced by
Announcement
- Prefix
- 5.231.117.0/24
- Announced by
- AS215365 Tom Gewiese
- Type
- Datacenter proxy
- Anonymizer addresses
- allVPN
- Proxy exits
- 57
- Always-on exits
- 4
- RPKI
- RPKI valid
Origin network
AS215365
DE
- Name
- Tom Gewiese
- Type
- Hosting
- Registered
- Mar 6, 2024
- Domain
- threatoff.eu
- Website
- threatoff.eu
- Spamhaus ASN-DROP
- not listed
Routing timeline
Who has announced 5.231.117.0/24
5.231.117.0/24
Routing history
- Pattern
- Rotating
- First seen
- Apr 2025
- Current origin since
- Aug 2026 · 3 mo
- Origin networks
- 4
- Last change of origin
- Aug 2026
Recorded history
History
- Handoffs
- 3
RPKI
Route origin authorizations
| ROA prefix | ASN | Max len | Anchor | Verdict |
|---|---|---|---|---|
| 5.231.117.0/24 | AS215365 | /24 | RIPE | RPKI valid |
| 5.230.0.0/15 | AS12586 | /32 | RIPE | Another network |
IRR
Route objects on 5.231.117.0/24
| Origin | Registry | Description | Maintainer | Modified |
|---|---|---|---|---|
| AS215365 | RIPE | GHOSTNET-MNT | Aug 22, 2026 |
Whois
Registration for this address
- Range
- 5.
230. 0. 0/ 15 - Netname
- DE-GHOSTNET-20120911
- Registrant
- GHOSTnet GmbH
- Registrant country
- DE
- Organization
- GHOSTnet GmbH (ORG-GG3-RIPE)
- Org country
- DE
- Type
- ALLOCATED PA
- Created
- Sep 11, 2012
- Updated
- Apr 11, 2025
- Maintainer
- RIPE-NCC-HM-MNT
- RIR
- RIPE NCC
- Country
- DE
- Delegated
- Sep 11, 2012
- Status
- assigned
Report abuse
Abuse contact
- abuse@
ghostnet. de - Name
- GHOSTnet GmbH
- Handle
- GN-RIPE