Autonomous system
AS20473 AS-VULTR
Hosting ARIN NSP
Summary
Vultr (Constant / Choopa)
hosting cloud compute
Vultr (AS-VULTR, operated by Constant, formerly Choopa) — a developer-focused cloud provider offering low-cost virtual machines across many global locations.
What it's used for
- Spinning up affordable cloud VMs for websites, APIs, game servers, VPNs, and side projects.
Notable
- A self-service cloud: an IP here identifies Vultr as the host, not the operator of the workload.
- Like other cheap, instant-signup clouds, its address space carries a wide range of reputations, from production apps to short-lived abusive instances.
Interesting
- Vultr competes closely with DigitalOcean and Linode on simple, flat-priced VMs and a large choice of data-center regions.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 54 exchanges in 19 countries, largest first.
| Exchange | Location | Their address |
|---|---|---|
| IX.br (PTT.br) São Paulo | São Paulo, Brazil | 187.16.214.112 |
| DE-CIX Frankfurt | Frankfurt, Germany | 80.81.196.21 |
| LINX LON1 | London, United Kingdom | 195.66.226.176 |
| AMS-IX Amsterdam | Amsterdam, Netherlands | 80.249.212.38 |
| NAPAfrica IX Johannesburg | Johannesburg, South Africa | 196.60.10.191 |
| France-IX Paris | Paris, France | 37.49.237.90 |
| Equinix Internet Exchange Singapore | Singapore, Singapore | 27.111.229.119 |
| Milan Internet Exchange | Milan, Italy | 217.29.67.8 |
Transit providers
89 upstream, 1,443 downstream and 1,256 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-18, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 761 prefixes · 1.48M addresses IPv6 281 prefixes
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 1,042 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS20473- Registry name
- AS-VULTR
- Registrant
- The Constant Company, LLC
- Abuse contact
- abuse@constant.com
- Registered
- 2001-05-11
- Last changed
- 2024-09-17
- Allocation
- assigned
Declared
PeeringDB profile
- Name
- The Constant Company
- Also known as
- Vultr, Choopa
- Network type
- NSP
- Scope
- Global
- Traffic ratio
- Mostly Outbound
- Peering policy
- Selective
- IRR as-set
AS20473:AS-CONE- Present at
- 65 exchanges
- Facilities
- 38 facilities
- Website
- http://www.vultr.com/
PeeringDB records are maintained by the network operator and are not independently verified. Treat them as a statement of intent rather than of fact. For the observed and recorded view, see peering, which lists the exchanges Packet Clearing House has a port on file for.
Routing security
RPKI and IRR
- RPKI
- 83% valid · 1,841 valid, 383 with no ROA 2 RPKI-invalid
- ROAs
- 1,675 authorising AS20473
- ASPA
- no ASPA record
- IRR
- 99.9% registered · 2,224 of 2,226 announcements 1 other origin
- Route objects
- 4,758 naming AS20473
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,784 prefixes, as published 2026-10-19. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
104 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.
| Prefix | Advisory | Published |
|---|---|---|
104.156.231.98 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
104.238.149.146 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
104.238.152.209 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
104.238.182.153 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
108.61.177.81 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
108.61.181.104 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
137.220.34.137 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
137.220.36.87 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
137.220.39.222 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
137.220.43.47 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
Showing the first 10 of 104.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere