LAYER3 INTEL
Get started
TripwireIntel APIIP IntelPricingBlogDocsContactSign in
Data as of Nov 3, 2026

5.231.3.63

Anonymizer
Proxy activity
Not seen in 30 days
Type
Tor exitHosting network
Risk
95 / 100 · Critical
Operator
operated by Tor
Recent change
Announced by AS12586 since Jul 2026
4 mo ago
Announced by
AS12586GHOSTnet GmbHHosting
Announcement
5.231.3.0/24RPKI valid
Company
GHOSTnet Network used for VPS Hosting Services · ghostnet.de
Location
Königstein im Taunus, Hesse, Germany
An anonymizer's exit: its user may be anywhere.
© OpenStreetMap

Network & registry

The block's full lineage, from registry to use, is on its prefix page.

AnnouncementRouting historyRPKI & IRRWhois & abuseLocation
Announced by

Announcement

Prefix
5.231.3.0/24
Announced by
AS12586 GHOSTnet GmbH
Type
Hosting
Anonymizer addresses
1 addresses · 0.39%Tor exit
RPKI
RPKI valid
IPv4 market

Holder

Holder in the market →
Organization
GHOSTnet GmbH
Handle
ORG-GG3-RIPE
Range
5.230.0.0/15
Registration type
ALLOCATED PA
Record created
Sep 11, 2012
Origin network

AS12586

DE
Name
GHOSTnet GmbH
Type
Hosting
Registered
Aug 5, 1999
Domain
ghostnet.de
Website
www.ghostnet.de
Industry
Internet Service Provider (ISP)
Spamhaus ASN-DROP
not listed
Tor exits
1