196.22.221.2
Classification: Malicious
196.22.221.2 is a malicious IP address. Reported by 11 threat sources, last seen 2026-09-01. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2022-12-28 09:00:26 | 2026-09-01 08:51:59 | attacker malicious-activity | |
| DNS Server | Public-dns.info | 2021-11-15 05:37:14 | 2026-09-01 02:00:29 | benign | |
| Proxy | FireHOL | 2023-01-02 23:57:19 | 2024-12-29 01:01:11 | anonymization | |
| IMAP Attacker | Blocklist.de | 2020-11-25 08:42:45 | 2021-08-29 04:57:53 | malicious-activity | |
| HTTP Spammer | Sblam | 2020-12-18 12:06:16 | 2021-05-25 08:39:44 | malicious-activity | |
| HTTP Spammer | StopForumSpam.com | 2019-12-18 02:26:06 | 2021-05-12 08:40:17 | malicious-activity | |
| Parasite SEO | Blocklist.net.ua | 2020-11-28 17:25:03 | 2021-04-27 10:02:49 | malicious-activity | |
| Parasite traffic on site sporte.co. | Blocklist.net.ua | 2021-04-25 09:42:57 | 2021-04-25 14:39:11 | malicious-activity | |
| Mail Spammer | Blocklist.de | 2020-04-10 07:27:00 | 2021-04-09 09:18:14 | malicious-activity | |
| Anonymizer | Maltiverse Research Team | 2020-11-22 09:48:47 | 2021-03-29 17:19:12 | anonymizer | |
| DDoS attack | Blocklist.net.ua | 2020-10-16 01:44:01 | 2021-02-02 11:11:48 | malicious-activity | |
| Malicious Host | HoneyDB | 2020-04-03 00:00:00 | 2020-11-03 00:00:00 | ||
| HTTP Spammer | Cleantalk.org | 2020-09-30 03:30:41 | 2020-09-30 10:46:48 | ||
| DDoS Attacker | Blocklist.net.ua | 2020-01-16 01:08:23 | 2020-04-16 07:47:56 | ||
| DDoS attack on site otzyvy.pro | Blocklist.net.ua | 2019-11-30 01:00:01 | 2020-01-10 07:26:47 | ||
| Anonymizer | Maltiverse | 2019-11-16 02:19:06 | 2019-11-16 02:19:06 |
Tags
dns reflection anonymization anonymizer abuse bot mail spam attacker imap pop3 saslWhois information
- AS name
- AS11845 Cape Town Lease Line and Hosting Zone VLAN Customer Ranges
- AS registry
- afrinic
- AS date
- 2011-01-14 00:00:00
- AS CIDR
- 196.22.192.0/19
- CIDR
- 196.22.220.0/22
- Registrant
- Cape Town Lease Line and Hosting Zone VLAN Customer Ranges
- Address
- Vox Telecom (Pty) Ltd Block B Rutherford Estate 1 Scott Street, Waverley Gauteng 2090 Waverley 2090 South Africa
- City
- Cape Town
- Postal code
- 8001
- Country
- ZA — South Africa 🇿🇦
- First indexed
- 2019-11-16 02:19:06
- Last updated
- 2026-09-01 08:52:00