Autonomous system
AS11845 Vox-Telecom
Residential APNIC Cable/DSL/ISP
Summary
Vox Telecom Ltd
isp enterprise legacy
AS11845 is Vox Telecom, one of South Africa's longest-established ISPs (founded in the late 1990s) and today a converged provider selling fibre, LTE, satellite, voice and cloud services to homes and businesses.
What it's used for
- Eyeball access, primarily. RIS observes 187 IPv4 prefixes carrying roughly 249,000 addresses, one IPv6
/29, and 38 observed neighbours. A quarter of a million addresses against a few dozen neighbours is an access network, not a wholesale carrier: transit sellers show hundreds or thousands of neighbours at this size. - The reverse DNS confirms it. Sampled addresses resolve to
vox.co.zaandvoxdsl.co.zasubscriber-style names, including explicitdsl-pool hosts. Those are customer lines, anddslhere names the access technology, nothing more. - The inventory is AFRINIC space in large aggregates:
41.193.0.0/16,102.39.0.0/16and197.245.0.0/16, each deaggregated down to/17s,/18s and/19s for internal routing, plus209.203.0.0/18and196.41.0.0/19.
Notable
- The RDAP registrant comes back as a role contact ("NOC Hostmaster") rather than a company name. That is an AFRINIC quirk, not a leasing tell: the ranges are Vox's own, contiguous, and carry Vox's own rDNS.
- Vox sits on both sides of the South African market, selling business-grade connectivity and managed ICT alongside consumer fibre, so the space carries a genuine mix even though the residential pools dominate what is visible here.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 6 exchanges in 1 country, largest first.
| Exchange | Location | Their address |
|---|---|---|
| NAPAfrica IX Johannesburg | Johannesburg, South Africa | 196.60.8.146 |
| NAPAfrica IX Cape Town | Cape Town, South Africa | 196.60.70.17 |
| Johannesburg Internet Exchange | Johannesburg, South Africa | 196.60.96.20 |
| NAPAfrica IX Durban | Durban, South Africa | 196.10.141.78 |
| Cape Town Internet Exchange | Cape Town, South Africa | 196.223.22.21 |
| Durban Internet eXchange | Durban, South Africa | 196.223.30.21 |
Transit providers
7 upstream, 12 downstream and 31 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-10, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 169 prefixes · 248K addresses IPv6 1 prefixes
| Country | Name | Prefixes |
|---|---|---|
| ZA | South Africa | 170 |
Registry
Allocation record
- Registry
- APNIC
- Handle
AS11845- Registry name
- ORG-DPBO1-AFRINIC
- Registrant
- Vox Telecom Ltd
- Registered
- 2005-02-21
- Last changed
- 2025-05-27
- Allocation
- allocated
Declared
PeeringDB profile
- Name
- Vox Telecom
- Also known as
- Vox
- Network type
- Cable/DSL/ISP
- Scope
- Regional
- Traffic ratio
- Balanced
- Peering policy
- Selective
- IRR as-set
AS-VOXTELECOM- Present at
- 6 exchanges
- Facilities
- 5 facilities
- Website
- https://www.vox.co.za
PeeringDB records are maintained by the network operator and are not independently verified. Treat them as a statement of intent rather than of fact. For the observed and recorded view, see peering, which lists the exchanges Packet Clearing House has a port on file for.
Routing security
RPKI and IRR
- RPKI
- 100% valid · 189 valid, 0 with no ROA
- ROAs
- 19 authorising AS11845
- ASPA
- no ASPA record
- IRR
- 100% registered · 189 of 189 announcements
- Route objects
- 319 naming AS11845
Reputation
Classification and threat
Residential Fixed-line consumer ISP. Addresses here are homes.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,775 prefixes, as published 2026-10-11. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere