Ghostnet B.V.

GHOSTnet GmbH
GLEIF verified
LEI
724500BIX9ZRE5UMRZ96
Registered name
Ghostnet B.V.
Jurisdiction
NL
Ultimate parent
No parent on file in GLEIF
Cluster stats
Netblocks4,206 · 672,910 IPv4 addresses
Registered in Germany (2,999) · United Arab Emirates (1)
All fragments 4,207 blocks across 2 clusters
Cluster ID213230625
RegistryBGP
Owner jurisdictionNL
Customersfind customers using this network →
Evidence & provenance ?
Attribution GLEIF legal-entity match
Legal identityLEI 724500BIX9ZRE5UMRZ96
Shared handles clustered on 32 shared RIR contact/maintainer handles
Registry names 6 distinct registrant names across these blocks
full provenance (JSON) → · how attribution works

Footprint over time

6 weekly snapshots · JSON
4,206 +2,570 netblocks since 2026-07-05
2026-07-05 peak 4,206 2026-07-26

IP Ranges (4,206)

showing 50 of 4,206 — see all — ⬇ export CSV (free export limited to 500 rows — subscribe for the full export)
CIDR Org name Registry Status Confidence
5.83.133.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● high
5.83.146.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● high
5.230.200.0/24 GHOSTnet GmbH BGP ANNOUNCED ● high
5.231.24.0/24 GHOSTnet RIPE ASSIGNED PA ● high
5.231.39.0/24 GHOSTnet GmbH BGP ANNOUNCED ● high
5.231.120.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● high
5.231.253.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● high
85.93.0.0/19 GHOSTnet GmbH BGP ANNOUNCED ● high
85.93.5.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● high
89.106.65.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● high
89.144.0.0/18 GHOSTnet GmbH BGP ANNOUNCED ● high
94.249.182.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● high
94.249.252.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● high
185.129.87.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● high
193.189.82.1/32 GHOSTnet PEERINGDB ASSIGNED ● high
193.189.82.2/32 GHOSTnet PEERINGDB ASSIGNED ● high
193.189.82.8/32 GHOSTnet PEERINGDB ASSIGNED ● high
193.189.83.3/32 GHOSTnet PEERINGDB ASSIGNED ● high
2001:7f8:33::a101:2586:1/128 GHOSTnet PEERINGDB ASSIGNED ● high
2001:7f8:33::a101:2586:2/128 GHOSTnet PEERINGDB ASSIGNED ● high
2001:7f8:33::a101:2586:3/128 GHOSTnet PEERINGDB ASSIGNED ● high
2001:7f8:33::a101:2586:4/128 GHOSTnet PEERINGDB ASSIGNED ● high
5.83.137.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● medium
5.175.170.0/24 GHOSTnet GmbH BGP ANNOUNCED ● medium
5.175.183.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● medium
5.175.188.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● medium
5.231.56.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● medium
5.231.106.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● medium
77.90.36.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● medium
77.90.40.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● medium
85.93.1.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● medium
85.93.2.0/24 GHOSTnet GmbH BGP ANNOUNCED ● medium
85.118.165.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● medium
89.144.47.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● medium
94.249.205.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● medium
94.249.207.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● medium
95.215.33.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● medium
5.83.128.0/20 GHOSTnet GmbH BGP ANNOUNCED ● low
5.83.128.0/19 GHOSTnet GmbH RIPE ALLOCATED PA ● low
5.83.130.0/24 GHOSTnet GmbH BGP ANNOUNCED ● low
5.83.132.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● low
5.83.138.0/24 GHOSTNET-FRA RIPE ASSIGNED PA ● low
5.83.139.0/24 GHOSTnet GmbH BGP ANNOUNCED ● low
5.83.139.0/24 GHOSTNET-FRA RIPE ASSIGNED PA ● low
5.83.142.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● low
5.83.148.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● low
5.83.148.0/24 GHOSTnet GmbH BGP ANNOUNCED ● low
5.83.149.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● low
5.83.151.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● low
5.83.153.0/24 GHOSTnet GmbH RIPE ASSIGNED PA ● low

Domains hosted in this network

what's this?
okiloveyoupleasedonttouchme.net thespacemachines.st imsowiwiwiwiwi.com plsleavemealone.com bwajeffwashere.buzz ilikecircumcised.com aaronweintraubfromcogent.com iloveyourweewee.bz aaronweintraubwantstobecyberpolice.com dontworry.su iloveusomuch.to sdkconnecter.com sdkconnect121.st ntp.org knigalit.ru foreskin.cc gebraucht-server.com

Network trust

what's this?
RPKI hygiene: A how networks compare →
99.3% of checked blocks have valid RPKI ROA coverage (1,987 of 2,000, sampled from 4,206)
Wholesale/transit re-announcements (201)

These blocks are registered to GHOSTnet GmbH but cryptographically authorized across 78 different networks — typical for a large wholesale or transit carrier whose address space is substantially re-announced by downstream customers under their own ASNs, not individually noteworthy.

2a02:2fc1:1::/48 /48 authorized for AS60461 — intercolo GmbH
2a02:2fc0:17::/48 /48 authorized for AS203446 — SMARTNET LIMITED
2a02:2fc0:2b::/48 /48 authorized for AS219365 — Kateryna Maznichenko
45.146.136.0/22 /22 authorized for AS59592 — intercolo GmbH
185.129.84.0/22 /22 authorized for AS215365 — Tom Gewiese
185.119.16.0/22 /22 authorized for AS207252 — Felix Gassan
5.175.135.0/24 /24 authorized for AS214019 — FlixHost GmbH
77.90.18.0/24 /24 authorized for AS48314 — Michael Sebastian Schinzel trading as IP-Projects GmbH & Co. KG
89.144.8.0/24 /24 authorized for AS214902 — Philip Fjaera trading as PFWeb Solutions
5.231.76.0/24 /24 authorized for AS150716 — AP Network Communication & Technology Sole CO.,LTD
89.144.34.0/24 /24 authorized for AS215649 — Noel David Georg trading as SN-TUX
5.231.124.0/24 /24 authorized for AS62904 — Eonix Corporation
94.103.169.0/24 /24 authorized for AS215439 — PLAY2GO INTERNATIONAL LIMITED
5.231.73.0/24 /24 authorized for AS63473 — HostHatch, LLC
5.175.212.0/24 /24 authorized for AS62904 — Eonix Corporation
+186 more — see the REST API

NIC Handles

AS12586 AS12586 AS197549 AS206264 AS213449 AS34899 AS59580 DUMY-RIPE DUMY-RIPE GHOSTNET-MNT GHOSTNET-MNT GN-RIPE +20 more