Vultr IP ranges

Hosting and VPS providers

Vultr uses 1,786 IPv4 blocks, covering about 1.5 million unique IPv4 addresses, announced from AS20473. IPDebrief has analysed 462 addresses in these ranges; 23 (5%) currently carry a higher risk score.

IPv4 blocks
1,786
Unique IPv4 addresses
1,483,776
Analysed addresses
462
Higher risk
5%

Range data updated 2026-11-07

About Vultr

Vultr provides cloud compute, bare-metal servers and GPU instances from data centres on six continents. Hourly billing and many locations make it a common choice for globally distributed services, game servers and VPN endpoints.

What traffic from Vultr addresses usually means

Hosting and VPS addresses run websites, game servers, VPN endpoints and personal projects. Low prices and quick provisioning make them popular for legitimate self-hosting and, equally, for scanners, proxies and short-lived abuse infrastructure. Traffic from these ranges to a consumer-facing site is usually automated or routed through a VPN or proxy rather than coming from a home connection.

Largest Vultr IPv4 ranges

Vultr networks (ASNs)

Recently analysed Vultr addresses

23 higher risk53 moderate386 lower risk

Frequently asked questions

How many IP addresses does Vultr have?

Vultr uses 1,786 IPv4 address blocks. After merging overlapping ranges, the IPv4 blocks cover about 1.5 million unique addresses. Counts change as the provider adds, retires or transfers address space.

How can I check if an IP address belongs to Vultr?

Enter the address in the IPDebrief IP lookup. If it falls inside one of Vultr's ranges, the profile names the provider alongside the announcing network, location and risk signals.

Which ASN does Vultr use?

Vultr announces its address space from AS20473. An autonomous system number identifies the network that routes the addresses on the internet; each ASN page lists the analysed addresses observed in that network.

Is traffic from Vultr IP addresses safe?

Hosting and VPS addresses run websites, game servers, VPN endpoints and personal projects. Low prices and quick provisioning make them popular for legitimate self-hosting and, equally, for scanners, proxies and short-lived abuse infrastructure. Traffic from these ranges to a consumer-facing site is usually automated or routed through a VPN or proxy rather than coming from a home connection. Of the 462 Vultr addresses IPDebrief has analysed, 23 (5%) currently score as higher risk, so judge each address on its own profile.

Where does this IP range data come from?

Ranges are compiled from address lists the operator publishes and from global routing data, refreshed regularly. Address-level risk comes from independent observations of each address, recomputed in the background.

Related providers