196.3.171.138

Classification: Malicious

196.3.171.138 is a malicious IP address. Reported by 11 threat sources, last seen 2026-09-10. Network: AS11845 Vox Telecom.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mail Spammer Barracuda 2026-09-10 04:19:11 2026-09-10 04:19:11 attacker malicious-activity
Proxy FireHOL 2023-01-02 23:49:27 2025-01-07 09:08:48 anonymization
HTTP Spammer StopForumSpam.com 2018-11-12 09:47:36 2021-04-29 07:32:58 malicious-activity
Anonymizer Maltiverse Research Team 2020-11-22 09:46:34 2021-03-29 17:14:05 anonymizer
DDoS Attacker Blocklist.net.ua 2020-12-30 04:14:46 2021-02-27 10:59:22 malicious-activity
Mail Spammer Blocklist.de 2018-11-03 06:59:09 2021-01-26 05:11:55 malicious-activity
HTTP Spammer Sblam 2019-12-29 08:30:53 2021-01-16 00:50:02 malicious-activity
IMAP Attacker Blocklist.de 2019-02-08 07:08:34 2020-12-24 02:41:32 malicious-activity
Malicious Host HoneyDB 2020-02-07 00:00:00 2020-11-03 00:00:00
HTTP Attacker Blocklist.de 2020-04-13 00:10:03 2020-05-08 07:37:49
Bruteforce login attacker Blocklist.de 2020-04-13 00:14:28 2020-05-08 01:15:48
Malicious host Darklist 2019-09-20 07:34:04 2019-09-20 07:34:04
HTTP Spammer GPF DNS Blocklist 2019-03-23 08:25:19 2019-03-23 08:25:19
Anonymizer Maltiverse 2018-07-30 08:27:23 2018-07-30 08:27:23

Tags

anonymization anonymizer mail spam bot abuse attacker imap pop3 sasl apache ddos rfi login bruteforce joomla wordpress

Whois information

AS name
AS11845 Vox Telecom
AS registry
afrinic
AS date
1995-09-01 00:00:00
AS CIDR
196.3.168.0/21
CIDR
196.3.171.0/24
Registrant
Vox Telecom
Address
Vox Telecom (Pty) Ltd Block B Rutherford Estate 1 Scott Street, Waverley Gauteng 2090 Waverley 2090 South Africa
City
Johannesburg
Postal code
2001
Country
ZA — South Africa 🇿🇦
First indexed
2018-07-30 08:27:23
Last updated
2026-09-10 04:19:12

Malicious IPs in the same CIDR

196.3.171.138