Autonomous system
AS11845 Vox-Telecom
Residential
Summary
Vox Telecom Ltd
isp enterprise legacy
AS11845 is Vox Telecom, one of South Africa's longest-established ISPs (founded
in the late 1990s) and today a converged provider selling fibre, LTE, satellite,
voice and cloud services to homes and businesses.
What it's used for
- Eyeball access, primarily. RIS observes 187 IPv4 prefixes carrying roughly 249,000 addresses, one IPv6
/29, and 38 observed neighbours. A quarter of a million addresses against a few dozen neighbours is an access network, not a wholesale carrier: transit sellers show hundreds or thousands of neighbours at this size. - The reverse DNS confirms it. Sampled addresses resolve to
vox.co.zaandvoxdsl.co.zasubscriber-style names, including explicitdsl-pool hosts. Those are customer lines, anddslhere names the access technology, nothing more. - The inventory is AFRINIC space in large aggregates:
41.193.0.0/16,102.39.0.0/16and197.245.0.0/16, each deaggregated down to/17s,/18s and/19s for internal routing, plus209.203.0.0/18and196.41.0.0/19.
Notable
- The RDAP registrant comes back as a role contact ("NOC Hostmaster") rather than a company name. That is an AFRINIC quirk, not a leasing tell: the ranges are Vox's own, contiguous, and carry Vox's own rDNS.
- Vox sits on both sides of the South African market, selling business-grade connectivity and managed ICT alongside consumer fibre, so the space carries a genuine mix even though the residential pools dominate what is visible here.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Address space
Summary
| Country | Name | Prefixes |
|---|---|---|
| ZA | South Africa | 166 |
Reputation
Classification and threat
Residential Fixed-line consumer ISP. Addresses here are homes.
No IC3 indicators Nothing from the FBI IC3 feed.
Threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere