You saw AS9009 on an IP and want to know what it is. AS9009 is operated by M247, a hosting and connectivity provider whose network is heavily used by commercial VPN services. If you are scoring traffic for fraud, this is an ASN worth knowing.
What is AS9009?
AS9009 is the Autonomous System Number operated by M247, a global hosting and network provider. A route from AS9009 belongs to M247's address space. For the concept, see what an ASN is.
- ASN: AS9009
- Operator: M247 Ltd
- Type: Hosting / data center
- Notable: widely used to host commercial VPN exit nodes
Who is M247?
M247 is a hosting and connectivity company with data centers worldwide. It is best known in fraud circles because many popular consumer VPN providers run their exit servers on M247 infrastructure, so a large share of AS9009 traffic is VPN traffic reaching the wider internet.
Why you see AS9009 in your logs
When a user connects through a commercial VPN whose servers sit on M247, their traffic reaches you from AS9009. That makes this ASN a strong VPN and bot signal: it is a data-center network, and much of what it carries is people or scripts deliberately hiding their real location.
Should you block AS9009?
Depends on your tolerance for VPN traffic. Plenty of legitimate, privacy-conscious users use VPNs, so a blanket block can hurt real customers. The usual approach is to flag AS9009 as VPN/hosting and apply extra verification on risky actions rather than blocking outright.
How to check an IP against AS9009
Look up the IP's ASN with Abstract's free ASN Lookup tool, or call the IP Intelligence API to get the ASN together with is_vpn, is_proxy, and is_hosting flags in one request, so M247 VPN traffic is flagged automatically at signup, checkout, or login.
Frequently Asked Questions
What is AS9009?
AS9009 is the Autonomous System Number operated by M247, a global hosting provider whose network hosts many commercial VPN exit nodes.
Why is AS9009 associated with VPNs?
Many consumer VPN providers run their exit servers on M247 infrastructure, so a large share of traffic leaving AS9009 is VPN traffic.
Should I block AS9009?
Not necessarily. Legitimate users use VPNs, so most teams flag AS9009 as VPN/hosting and add verification on sensitive actions rather than blocking it outright.
Is all AS9009 traffic a VPN?
No. M247 is a general hosting provider, so it also carries ordinary servers and services. The is_vpn flag from an IP lookup distinguishes VPN exit nodes from other hosts.
How do I check if an IP is M247?
Enter it into Abstract's ASN Lookup tool or call the IP Intelligence API to confirm whether the ASN is AS9009.
Get your free
IP Geolocation
key now
See why the best developers build on Abstract
get started for free
