Data as of Nov 14, 2026
5.231.123.0/24
21 residential-proxy exits · 30 daysTom Gewiese · space held by GHOSTnet GmbH
Announcement
this exact prefix
RPKI valid
Announced by
Type
Hosting
Risk
50 / 100 · Medium
Recently moved
Recent change
New origin Jun 2026
from AS62904 Eonix Corporation
Residential-proxy exits
Proxy exits
21
8.2% of its addresses · 30 days
Providers
54
selling exits here
Oct 15, 2026 – Nov 13, 2026
Exits seen per day
2.0K observations
Proxy providers listing exits
- 2Extract
- 711Proxy
- 9Proxy
- ASHBURNPROXIES
- Ake.net
- B2Proxy
- BirdProxies
- BottingTools
- BuyingProxy
- ByteProxies
- Byteful
- CliProxy
- EnigmaProxy
- Evomi
- FastProxy
- FlexyProxies
- GSocks
- Geonix
- Geonode
- GloryCloud
- GonzoProxy
- HideProxy
- HydraProxy
- IPFly
- IPMUSK
- IPPeak
- Infatica
- InfiniteProxies
- LightningProxies
- LudaxProxy
- MangoProxy
- NodeMaven
- NodeProxy
- NovaProxy
- PROXYSCRAPE
- ProxiesVision
- Proxiware
- Proxy-Seller
- ProxyEmpire
- ProxyGeo
- ProxyHat
- ProxyStyler
- Proxyma
- PuraRoute
- RainProxy
- ResiProxies
- SPYDERPROXY_BASIC
- Shifter
- VantageProxies
- VitalData
- VitalExclusive
- VitalProxy
- ZENPROXY_LITE
- ZENPROXY_PREMIUM
Announcements
Less specific
Covering announcements
| Prefix | Origin | Type | Proxy exits | Holder | RPKI |
|---|---|---|---|---|---|
| 5.230.0.0/15 since Sep 2012 | AS12586 | Hosting | 554 68 always on | GHOSTnet GmbH |
Registrations in this block
The registry's network records over the announcement: those covering it, widest first, then every record inside it, under its parent.
| Range | Addresses | Netname | Holder | Type | Created | Abuse contact |
|---|---|---|---|---|---|---|
| 5.230.0.0/15 | 131,072 | DE-GHOSTNET-20120911 | GHOSTnet GmbH (ORG-GG3-RIPE) · DE | ALLOCATED PA | Sep 11, 2012 | abuse@ |
| └ 5.231.123.200/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.201/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.202/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.203/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.204/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Aug 18, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.205/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Sep 23, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.206/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Sep 23, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.207/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Aug 18, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.208/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Aug 20, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.209/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.210/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Aug 18, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.211/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.212/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.213/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.214/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Aug 18, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.215/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.216/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.217/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.218/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Aug 18, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.219/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.220/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.221/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.222/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Aug 18, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.223/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Aug 18, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.224/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.225/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.226/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Sep 18, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.227/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.228/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.229/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.230/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.231/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.232/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.233/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.234/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.235/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.236/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.237/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.238/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.239/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.240/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Aug 19, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.241/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Aug 19, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.242/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Aug 19, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.243/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Aug 19, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.244/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.245/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.246/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.247/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.248/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Aug 19, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.249/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.250/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Sep 23, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.251/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.252/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.253/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.254/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
| └ 5.231.123.255/32 | 1 | Threatoff | Threatoff (ORG-TA1862-RIPE) · DE | ASSIGNED PA | Jun 26, 2026 | abuse@ via DE-GHOSTNET-20120911 |
A contact marked “via” is the registry's: the record names none of its own, so the registry hands down its parent's.
Network & registry
Origin network
AS215365
DE
- Name
- Tom Gewiese
- Type
- Hosting
- Registered
- Mar 6, 2024
- Domain
- threatoff.eu
- Website
- threatoff.eu
- Spamhaus ASN-DROP
- not listed
- Tor exits
- 1
Routing timeline
Covering aggregate above, the prefix's own history below
Summary
Routing history
- Pattern
- Rotating
- First seen
- Apr 2025
- Current origin since
- Jun 2026 · 5 mo
- Origin networks
- 6
- Last change of origin
- Jun 2026
Recorded history
History
- Handoffs
- 5
RPKI
Route origin authorizations
| ROA prefix | ASN | Max len | Anchor | Verdict |
|---|---|---|---|---|
| 5.231.123.0/24 | AS215365 | /24 | RIPE | RPKI valid |
| 5.230.0.0/15 | AS12586 | /32 | RIPE | Another network |
IRR
Route objects on the exact prefix
| Origin | Registry | Description | Maintainer | Modified |
|---|---|---|---|---|
| AS215365 | RIPE | GHOSTNET-MNT | Jun 25, 2026 |
Whois
Registration for this announcement
- Range
- 5.
230. 0. 0/ 15 - Netname
- DE-GHOSTNET-20120911
- Registrant
- GHOSTnet GmbH
- Registrant country
- DE
- Organization
- GHOSTnet GmbH (ORG-GG3-RIPE)
- Org country
- DE
- Type
- ALLOCATED PA
- Created
- Sep 11, 2012
- Updated
- Apr 11, 2025
- Maintainer
- RIPE-NCC-HM-MNT
- RIR
- RIPE NCC
- Country
- DE
- Delegated
- Sep 11, 2012
- Status
- assigned
Report abuse
Abuse contact
- abuse@
ghostnet. de - Name
- GHOSTnet GmbH
- Handle
- GN-RIPE