Autonomous system
AS20473 AS-VULTR
Hosting ARIN
Summary
Vultr (Constant / Choopa)
hosting cloud compute
Vultr (AS-VULTR, operated by Constant, formerly Choopa) — a developer-focused cloud provider offering low-cost virtual machines across many global locations.
What it's used for
- Spinning up affordable cloud VMs for websites, APIs, game servers, VPNs, and side projects.
Notable
- A self-service cloud: an IP here identifies Vultr as the host, not the operator of the workload.
- Like other cheap, instant-signup clouds, its address space carries a wide range of reputations, from production apps to short-lived abusive instances.
Interesting
- Vultr competes closely with DigitalOcean and Linode on simple, flat-priced VMs and a large choice of data-center regions.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 54 exchanges in 19 countries, largest first.
| Exchange | Location | Their address |
|---|---|---|
| IX.br (PTT.br) São Paulo | São Paulo, Brazil | 187.16.214.112 |
| DE-CIX Frankfurt | Frankfurt, Germany | 80.81.196.21 |
| LINX LON1 | London, United Kingdom | 195.66.226.176 |
| AMS-IX Amsterdam | Amsterdam, Netherlands | 80.249.212.38 |
| NAPAfrica IX Johannesburg | Johannesburg, South Africa | 196.60.10.191 |
| France-IX Paris | Paris, France | 37.49.237.90 |
| Equinix Internet Exchange Singapore | Singapore, Singapore | 27.111.229.119 |
| Milan Internet Exchange | Milan, Italy | 217.29.67.8 |
Transit providers
89 upstream, 1,445 downstream and 1,260 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-17, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 761 prefixes · 1.48M addresses IPv6 366 prefixes
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 1,127 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS20473- Registry name
- AS-VULTR
- Registrant
- The Constant Company, LLC
- Abuse contact
- abuse@constant.com
- Registered
- 2001-05-11
- Last changed
- 2024-09-17
- Allocation
- assigned
Routing security
RPKI and IRR
- RPKI
- 83% valid · 1,883 valid, 387 with no ROA 2 RPKI-invalid
- ROAs
- 1,676 authorising AS20473
- ASPA
- no ASPA record
- IRR
- 99.9% registered · 2,270 of 2,272 announcements 1 other origin
- Route objects
- 4,760 naming AS20473
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,783 prefixes, as published 2026-10-17. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
104 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.
| Prefix | Advisory | Published |
|---|---|---|
104.156.231.98 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
104.238.149.146 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
104.238.152.209 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
104.238.182.153 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
108.61.177.81 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
108.61.181.104 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
137.220.34.137 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
137.220.36.87 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
137.220.39.222 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
137.220.43.47 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
Showing the first 10 of 104.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere