IP Prefix
IPv4
109.84.0.0/15
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Origin AS
AS3209
RPKI
2 ROAs
Open IPs
261
last 90 d
Country
DE
Germany
Routing
Origin AS
Holder
Vodafone Germany
Prefix Length
/15
Multi-Origin
No
Last refresh
2026-07-21 19:59:50
RIR Allocation
Registry
RIPE NCC
Country
Status
Allocated
Allocated
2009-08-17
Delegated block
109.84.0.0 + 131,072 addrs
Geographic Announcement
GeoIP attribution from MaxMind GeoLite2 (CC-BY-SA). The starting address of the prefix maps to:
| Country | Continent | Ranges |
|---|---|---|
| DE Germany | EU | 1 |
Sample IPs in this Prefix
| IP | Open ports | Last scan |
|---|---|---|
| 109.85.78.153 | 19 | 2026-07-21 12:19:09.000 |
| 109.85.232.173 | 15 | 2026-07-21 11:13:04.000 |
| 109.85.178.253 | 5 | 2026-07-20 07:36:29.000 |
| 109.85.49.1 | 5 | 2026-07-20 01:55:08.000 |
| 109.85.133.221 | 5 | 2026-07-18 03:56:56.000 |
| 109.85.250.169 | 5 | 2026-07-16 18:33:17.000 |
| 109.85.199.209 | 4 | 2026-07-20 09:31:05.000 |
| 109.85.15.161 | 4 | 2026-07-19 16:14:57.000 |
| 109.85.166.249 | 4 | 2026-07-19 00:01:24.000 |
| 109.85.51.49 | 4 | 2026-07-18 08:26:19.000 |
| 109.85.166.201 | 4 | 2026-07-17 09:39:31.000 |
| 109.85.129.85 | 4 | 2026-06-06 13:03:52.000 |
| 109.85.34.149 | 4 | 2026-05-27 02:28:37.000 |
| 109.85.38.113 | 3 | 2026-07-21 07:29:34.000 |
| 109.85.201.249 | 3 | 2026-07-19 10:45:55.000 |
| 109.85.191.113 | 3 | 2026-06-22 00:56:35.000 |
| 109.85.250.185 | 3 | 2026-06-15 07:40:07.000 |
| 109.85.37.17 | 3 | 2026-06-07 14:27:37.000 |
| 109.85.23.165 | 2 | 2026-07-20 21:06:47.000 |
| 109.85.46.109 | 2 | 2026-07-20 12:28:45.000 |
| 109.85.181.77 | 2 | 2026-07-20 03:16:41.000 |
| 109.85.76.121 | 2 | 2026-07-18 12:58:33.000 |
| 109.85.8.105 | 2 | 2026-07-17 12:28:02.000 |
| 109.85.157.73 | 2 | 2026-07-17 11:45:28.000 |
| 109.85.216.105 | 2 | 2026-07-17 06:58:13.000 |
Cert Subjects in this Prefix
| Subject | Hosts | Last seen |
|---|---|---|
| Fireware web CA | 3 | 2026-06-23 15:34:44.383 |
| localhost | 2 | 2026-07-19 11:59:09.698 |
| glammhome.de | 1 | 2026-07-21 02:03:09.288 |
| *.activeminds.net | 1 | 2026-07-20 09:32:06.963 |
| 109.85.212.77 | 1 | 2026-07-18 20:24:15.717 |
| unifi.local | 1 | 2026-07-18 08:50:06.458 |
| UniFi | 1 | 2026-07-17 12:29:15.279 |
| architekt-stueven.de | 1 | 2026-07-17 11:46:06.088 |
| ex-2016.schaumberger.local | 1 | 2026-07-17 11:17:05.940 |
| files.ipr-bau.de | 1 | 2026-07-17 06:59:06.006 |
| zeybek.synology.me | 1 | 2026-07-16 19:12:05.920 |
| autodiscover.bec-berlin.de | 1 | 2026-07-16 15:44:06.056 |
| hattric.myqnapcloud.com | 1 | 2026-07-16 03:10:04.162 |
| kgs.diakonie-doll.de | 1 | 2026-06-22 05:31:54.555 |
| 192.168.178.21 | 1 | 2026-06-21 06:58:31.452 |
| rt01 | 1 | 2026-06-17 19:06:40.431 |
| nas.transpal.net | 1 | 2026-06-17 07:37:40.650 |
| japp-app.de | 1 | 2026-06-17 00:59:40.324 |
| alsonext.de | 1 | 2026-06-15 17:37:40.504 |
| 192.168.0.254 | 1 | 2026-06-15 12:35:40.535 |
Hosted Domains
Domains that resolve to any address in this prefix — aggregated across the whole subnet. 302 distinct domains seen; top by span shown.
History
Prefix-event history pending
Origin AS changes, ROA add/drop events, multi-origin episodes and withdrawals require snapshot-diffing across BGP crawls. The data accumulates as the archive grows — full ReplacingMergeTree compaction makes point-in-time event extraction unavailable for now.