Networks

Connectivity terrain for South Africa. ccTLD, telephony, broadband, and broadcast posture from the most recent Factbook update. ASN and IP-range tables remain a TODO.

ccTLD	.za
Internet users	percent of population: 76% (2023 est.)
Mobile cellular	total subscriptions: 115 million (2024 est.); subscriptions per 100 inhabitants: 167 (2024 est.)
Fixed lines	total subscriptions: 1.353 million (2023 est.); subscriptions per 100 inhabitants: 2 (2023 est.)
Broadband fixed	total: 2.15 million (2023 est.); subscriptions per 100 inhabitants: 3 (2023 est.)

Broadcast

the South African Broadcasting Corporation (SABC) operates 6 free-to-air TV stations; 1 private TV station; multiple subscription TV services with mix of local and international channels; mix of public and private radio stations at the national, regional, and local levels; state-owned SABC radio network has 18 stations, including one for each of the 11 official languages, 4 community stations, and 3 commercial stations; over 100 community stations with rural coverage

IP ranges

TODO. ASNs and CIDR blocks, sourced from the regional registry.

Online devices

Exposed services and device counts from internet-wide scans (Shodan, Censys, Quake, FOFA). Operator uses this to scope target discovery, attribute observed activity, and pre-stage payloads. Refresh against live facets before relying on the numbers.

Type	Service	Count
to be filled	to be filled	to be filled

VPN

Commercial VPN providers with servers (points of presence) inside the country. Operators use these for in-country egress, to appear local to defended infrastructure, or to hop into adjacent jurisdictions. Cross-check provider server lists before relying on the entry; vendors add and drop POPs frequently.

Provider	Site	Servers in country	Notes
to be filled	to be filled	to be filled	to be filled

Telecom

Top telecom operators in the country, ranked by subscriber base or revenue. Note state ownership, foreign parents, and the share of the backbone each carrier controls. Operators use this to identify lawful-intercept routing, blocked transit, and the carriers worth pre-staging redirectors against.

Operator	Site	Ownership	Services	Notes
to be filled	to be filled	to be filled	to be filled	to be filled

Data centers

Commercial data centers and major carrier-neutral facilities inside the country. Operators map these to locate target hosting, hyperscaler regions, peering fabric, and submarine-cable landing proximity. Cross-reference DataCenterMap and Cloudscene before relying on the entry.

Facility	Operator	Location	Notes
to be filled	to be filled	to be filled	to be filled

Mobiles

Top mobile device makes, models, and types in the country. Operators use this to scope mobile-implant compatibility, plan device-class lures, and predict baseband, OS, and security-patch posture on target. Cross-reference StatCounter, Kantar, and Counterpoint before relying on the entry.

Make	Model	Type	Share	Notes
to be filled	to be filled	to be filled	to be filled	to be filled

Apps

Mobile and web apps with material user base in the country. Covers messaging, payments, ride-hailing, delivery, banking, government, and ID apps. Operators use this for pretext design, lure infrastructure, implant compatibility, and pattern-of-life inference. Cross-reference Sensor Tower, data.ai, AppMagic, and the country’s app-store top charts.

App	Category	Platforms	Users	Notes
to be filled	to be filled	to be filled	to be filled	to be filled

Keyboards

Standard keyboard layouts the operator encounters on Windows endpoints in the country. KLID is the Windows layout identifier; DLL is the driver shipped with Windows 10/11. Operators use this to predict input behaviour (AZERTY / QWERTY / QWERTZ), build plausible pretexts, and tune implant input handling. Cross- reference kbdlayout.info for full layout maps and dead-key behaviour.

Layout	Tag	KLID	Driver
United Kingdom	en-GB	00000809	kbduk.dll
Sesotho sa Leboa	nso	0000046c	kbdnso.dll