Data as of Nov 3, 2026
5.231.3.0/24
1 anonymizer address · 0.39% · Tor exitGHOSTnet GmbH
Announcement
this exact prefix
RPKI valid
Announced by
Type
Hosting
>99% of it
Recent change
New origin Jul 2026
from AS12586 GHOSTnet GmbH
IPv4 market
Path
Announced by AS12586 since Jul 2026 · 4 mo ago
2 · Leased from
not leased
Operators, sellers and brokers
Tor
| Name | Parent | In 5.231.3.0/24 | /24s |
|---|---|---|---|
| Tor | The Tor Project (volunteer exits) | 10.39% | 1 |
Lineage
How this block came to its use, oldest first. The whole IPv4 market →
5.231.3.0/24
From the registry to its use
- Sep 5, 2012– Nov 2, 2026
- Sep 11, 2012Registry recordGHOSTnet GmbHALLOCATED PA5.230.0.0/15
- Sep 12, 2012AssignedGHOSTnet Network used for VPS Hosting ServicesASSIGNED PA5.231.3.0/24
- Oct 24, 2013Route objectAS12586 GHOSTnet GmbHRIPE route object for AS12586 GHOSTnet GmbH, maintainer GHOSTNET-MNT
- Apr 30, 2025– Jun 28, 2025
- Jan 31, 2026– Mar 7, 2026
- Jul 18, 2026– Nov 2, 2026
- todayUsedTorTor
Announcements
Less specific
Covering announcements
| Prefix | Origin | Type | Anonymizer addresses | Operator | Proxy exits | Holder | RPKI |
|---|---|---|---|---|---|---|---|
| 5.230.0.0/15 since Sep 2012 | AS12586 | Hosting | 5120.39%Datacenter proxy | Proxy providersoperated by Sprious | 516 77 always on | GHOSTnet GmbH |
Registrations in this block
The registry's network records over the announcement: those covering it, widest first, then every record inside it, under its parent.
| Range | Addresses | Netname | Holder | Type | Created | Abuse contact |
|---|---|---|---|---|---|---|
| 5.230.0.0/15 | 131,072 | DE-GHOSTNET-20120911 | GHOSTnet GmbH (ORG-GG3-RIPE) · DE | ALLOCATED PA | Sep 11, 2012 | [email protected] |
| └ 5.231.3.0/24 | 256 | DE-GHOSTNET-FRA-GN-HOSTING-VPS | GHOSTnet Network used for VPS Hosting Services | ASSIGNED PA | Sep 12, 2012 | [email protected] via DE-GHOSTNET-20120911 |
A contact marked “via” is the registry's: the record names none of its own, so the registry hands down its parent's.
Composition
The types across the prefix's announced space, by addresses.
Announced space
Address share
Announced space
Types across the prefix
256 addresses
| Type | Addresses | Share | Ranges | |
|---|---|---|---|---|
| Hosting | 255 | >99% | 2 | |
| Tor exitanonymizer | 1 | 0.39% | 1 |
Network & registry
IPv4 market
Holder
- Organization
- GHOSTnet GmbH
- Handle
- ORG-GG3-RIPE
- Range
- 5.230.0.0/15
- Registration type
- ALLOCATED PA
- Record created
- Sep 11, 2012
Origin network
AS12586
DE
- Name
- GHOSTnet GmbH
- Type
- Hosting
- Registered
- Aug 5, 1999
- Domain
- ghostnet.de
- Website
- www.ghostnet.de
- Industry
- Internet Service Provider (ISP)
- Spamhaus ASN-DROP
- not listed
- Tor exits
- 1
Routing timeline
Covering aggregate above, the prefix's own history below
Summary
Routing history
- Pattern
- Stable
- First seen
- Apr 2025
- Current origin since
- Jul 2026 · 4 mo
- Origin networks
- 1
RPKI
Route origin authorizations
| ROA prefix | ASN | Max len | Anchor | Verdict |
|---|---|---|---|---|
| 5.230.0.0/15 | AS12586 | /32 | RIPE | RPKI valid |
IRR
Route objects on the exact prefix
| Origin | Registry | Description | Maintainer | Modified |
|---|---|---|---|---|
| AS12586 | RIPE | GHOSTnet GmbH IP Space | GHOSTNET-MNT | Oct 24, 2013 |
Whois
Registration for this announcement
- Range
- 5.231.3.0/24
- Netname
- DE-GHOSTNET-FRA-GN-HOSTING-VPS
- Registrant
- GHOSTnet Network used for VPS Hosting Services
- Registrant country
- DE
- Organization
- GHOSTnet Network used for VPS Hosting Services
- Org country
- DE
- Type
- ASSIGNED PA
- Created
- Sep 12, 2012
- Updated
- Dec 7, 2023
- Maintainer
- GHOSTNET-MNT
- RIR
- RIPE NCC
- Country
- DE
- Delegated
- Sep 11, 2012
- Status
- assigned