IP Prefix
IPv4
109.90.0.0/15
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Origin AS
AS3209
RPKI
1 ROAs
Open IPs
2,435
last 90 d
Country
DE
Germany
Routing
Origin AS
Holder
Vodafone Germany
Prefix Length
/15
Multi-Origin
No
Last refresh
2026-07-21 19:59:50
RPKI Validity
max-len 16
valid
ripe
RIR Allocation
Registry
RIPE NCC
Country
Status
Allocated
Allocated
2009-09-10
Delegated block
109.90.0.0 + 131,072 addrs
Geographic Announcement
GeoIP attribution from MaxMind GeoLite2 (CC-BY-SA). The starting address of the prefix maps to:
| Country | Continent | Ranges |
|---|---|---|
| DE Germany | EU | 1 |
Sample IPs in this Prefix
| IP | Open ports | Last scan |
|---|---|---|
| 109.90.15.6 | 48 | 2026-07-21 14:52:41.000 |
| 109.90.123.50 | 47 | 2026-07-21 17:32:29.000 |
| 109.90.15.5 | 44 | 2026-07-21 09:02:02.000 |
| 109.90.15.2 | 39 | 2026-07-21 10:01:22.000 |
| 109.90.15.3 | 34 | 2026-07-21 17:42:38.000 |
| 109.90.123.58 | 30 | 2026-07-21 18:05:34.000 |
| 109.90.189.105 | 7 | 2026-07-19 03:17:34.000 |
| 109.91.204.25 | 6 | 2026-07-21 10:38:35.000 |
| 109.90.127.130 | 6 | 2026-07-21 05:17:07.000 |
| 109.90.138.46 | 6 | 2026-07-21 02:29:35.000 |
| 109.90.88.223 | 6 | 2026-07-20 04:09:24.000 |
| 109.90.110.187 | 6 | 2026-07-20 00:43:00.000 |
| 109.91.155.177 | 6 | 2026-07-17 06:50:42.000 |
| 109.90.111.123 | 6 | 2026-06-20 12:29:11.000 |
| 109.90.161.124 | 6 | 2026-06-13 12:07:15.000 |
| 109.91.24.193 | 5 | 2026-07-21 20:23:21.000 |
| 109.90.37.4 | 5 | 2026-07-21 12:59:44.000 |
| 109.91.236.153 | 5 | 2026-07-19 02:36:39.000 |
| 109.90.112.3 | 5 | 2026-07-18 17:58:04.000 |
| 109.90.155.209 | 5 | 2026-07-18 04:11:31.000 |
| 109.90.201.45 | 5 | 2026-07-17 01:35:52.000 |
| 109.90.81.238 | 5 | 2026-06-21 10:19:24.000 |
| 109.90.60.145 | 4 | 2026-07-21 21:50:28.000 |
| 109.91.202.81 | 4 | 2026-07-21 19:36:38.000 |
| 109.90.36.246 | 4 | 2026-07-21 12:55:33.000 |
Cert Subjects in this Prefix
| Subject | Hosts | Last seen |
|---|---|---|
| Fireware web CA | 19 | 2026-07-20 22:41:11.115 |
| TRAEFIK DEFAULT CERT | 13 | 2026-07-17 00:24:06.020 |
| Vigor Router | 11 | 2026-07-21 09:23:16.540 |
| synology | 10 | 2026-07-19 16:10:08.033 |
| 192.168.178.20 | 5 | 2026-07-17 01:45:05.965 |
| UniFi | 4 | 2026-06-22 03:50:54.600 |
| localhost | 3 | 2026-07-19 16:40:08.279 |
| 192.168.178.21 | 3 | 2026-07-18 14:30:07.335 |
| Zoraxy Self-host | 3 | 2026-07-17 09:34:06.399 |
| synology.com | 3 | 2026-07-17 00:01:06.379 |
| QNAP NAS | 3 | 2026-06-21 04:39:31.606 |
| *.achalm.net | 3 | 2026-05-27 04:15:30.485 |
| *.agoform.de | 3 | 2026-05-27 03:09:44.854 |
| nextcloud.paedml.lokal | 3 | 2026-05-27 02:50:53.514 |
| 192.168.178.24 | 2 | 2026-07-21 03:22:10.524 |
| firewall.foo.local | 2 | 2026-07-21 01:31:10.343 |
| FortiGate | 2 | 2026-07-20 19:27:12.322 |
| *.schmid-baltringen.de | 2 | 2026-07-19 17:35:09.318 |
| *.steinel.com | 2 | 2026-07-17 20:15:05.877 |
| vpndestlr.vertigis.com | 2 | 2026-07-17 15:46:05.914 |
Hosted Domains
Domains that resolve to any address in this prefix — aggregated across the whole subnet. 2,865 distinct domains seen; top by span shown.
History
Prefix-event history pending
Origin AS changes, ROA add/drop events, multi-origin episodes and withdrawals require snapshot-diffing across BGP crawls. The data accumulates as the archive grows — full ReplacingMergeTree compaction makes point-in-time event extraction unavailable for now.