🇿🇦 South Africa: live cyber threat activity

Malicious IPs, malware and ransomware victims in South Africa.

557Malicious IPs listed#20 of 182 countries · 0.84% of the world
179New in the last 24hfirst seen by any feed
149Reported by 2+ feedsindependent sources agree
9Ransomware victimsposted in the last 30 days

View South Africa on the live map →All listed IPs in South AfricaRansomware victims in South Africa

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C23
  2. Malware218
  3. Phishing0
  4. Attacker336

By state or region

  1. Gauteng358
  2. Western Cape64
  3. Free State48
  4. KwaZulu-Natal35
  5. Eastern Cape31
  6. Northern Cape6
  7. North West6
  8. Limpopo5
  9. Mpumalanga4

By city

  1. Vanderbijlpark142
  2. Sasolburg40
  3. Meyerton35
  4. Johannesburg25
  5. Centurion25
  6. Randburg18
  7. Pretoria16
  8. Benoni15
  9. Tokoza14
  10. Port Elizabeth13
  11. Paarl13
  12. Evaton11
  13. Cape Town10
  14. Century City8
  15. Riverlea8

Networks hosting the most

NetworkIPs
AS327991 Megasurf Wireless Internet CC 226
AS37457 Telkom SA Ltd. 189
AS327782 Metrofibre Networx 16
AS37611 AFRIHOST SP (PTY) LTD 12
AS37049 SADV (Pty) Ltd 11
AS36994 Vodacom 8
AS214209 Internet Magnate (Pty) Ltd 6
AS20011 Dimension Data 6
AS328471 HERO TELECOMS (PTY) LTD 5
AS8075 Microsoft Corporation 5
AS11845 Vox Telecom Ltd 5
AS329184 Host Africa (Pty) Ltd 4
AS329126 IIP1 Pty Ltd 3
AS16637 MTN SA 3
AS37100 SEACOM Limited 3

Malware families served from South Africa

  1. Emotet2
  2. Mozi2
  3. Mirai1
  4. W97m1
  5. Expiro1
  6. Loki1
  7. Dacic1
  8. Shiz1
  9. Variadic1
  10. Cobalt Strike1
  11. Pswdump1
  12. AdaptixC21
  13. Zard1
  14. VShell1
  15. SSHDoor1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
102.129.56[.]200AttackerAttacking hostVanderbijlpark, GautengAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 08:20
102.129.60[.]160AttackerAttacking hostSasolburg, Free StateAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 08:20
197.234.201[.]189AttackerAttacking hostKroonstad, Free StateAS37317 AccessGlobal Communication (Pty) Ltd1 feed2026-10-12 08:20
41.193.162[.]227AttackerAttacking hostPort Elizabeth, Eastern CapeAS11845 Vox Telecom Ltd1 feed2026-10-12 08:20
105.224.11[.]212MalwareMalware downloadPort Elizabeth, Eastern CapeAS37457 Telkom SA Ltd.aggregated list2026-10-12 07:20
102.129.53[.]110AttackerAttacking hostSasolburg, Free StateAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 07:15
102.129.55[.]69AttackerAttacking hostMeyerton, GautengAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 07:15
102.129.56[.]114AttackerAttacking hostVanderbijlpark, GautengAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 07:15
102.129.59[.]23AttackerAttacking hostVanderbijlpark, GautengAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 07:15
102.64.32[.]101AttackerAttacking hostVanderbijlpark, GautengAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 07:15
102.64.47[.]130AttackerAttacking hostVanderbijlpark, GautengAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 07:15
102.64.47[.]54AttackerAttacking hostVanderbijlpark, GautengAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 07:15
102.129.55[.]9AttackerAttacking hostVanderbijlpark, GautengAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 06:41
102.129.59[.]145AttackerAttacking hostVanderbijlpark, GautengAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 06:41
102.64.35[.]185AttackerAttacking hostSasolburg, Free StateAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 06:41
102.64.38[.]157AttackerAttacking hostVanderbijlpark, GautengAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 06:41
41.203.59[.]246AttackerAttacking hostRandburg, GautengAS36968 Electronic Communications Network (PTY) LTD1 feed2026-10-12 06:10
102.129.53[.]40AttackerAttacking hostSasolburg, Free StateAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 06:10
102.165.122[.]140AttackerAttacking hostHermanus, Western CapeAS328275 BDC Wireless Solutions CC1 feed2026-10-12 06:10
102.64.42[.]50AttackerAttacking hostEvaton, GautengAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 05:35
102.64.46[.]235AttackerAttacking hostMeyerton, GautengAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 05:35
129.232.161[.]134AttackerAttacking hostJohannesburg, GautengAS37153 Xneelo (Pty) Ltd1 feed2026-10-12 05:35
150.171.109[.]74MalwareLokiJohannesburg, GautengAS8075 Microsoft Corporation1 feed · 67 sandbox samples2026-10-12 05:00
102.64.45[.]152AttackerAttacking hostVanderbijlpark, GautengAS327991 Megasurf Wireless Internet CC1 feed2026-10-12 05:00
102.129.51[.]187AttackerAttacking hostSasolburg, Free StateAS327991 Megasurf Wireless Internet CC2 feeds2026-10-12 04:35

See every listed IP in South Africa →

Ransomware victims in South Africa

9 posted in the last 30 days, 26 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-07 08:23TharisaUmBraManufacturing
2026-09-30 03:40LegalWisethegentlemenProfessional Services
2026-09-30 03:40EdconthegentlemenManufacturing
2026-09-29 12:32bcx.co.zaincransomTechnology
2026-09-26 17:07ARCA UNLIMITED ArchitectsBlackLocksProfessional Services
2026-09-26 08:50Apollo 21 – Quality Truck, Bus & Trailer Spare Parts South AfricaBlackLocksTransportation
2026-09-26 08:48GuardriskthegentlemenFinancial Services
2026-09-25 16:28Morula IVFeverestHealthcare
2026-09-12 10:31capricornlogistics.comkrybitTransportation
2026-09-07 21:56Hollard Insurance GroupthegentlemenFinancial Services
2026-09-07 21:34vsbattorneys.co.zalockbit5Professional Services
2026-09-02 17:53Cartrack HoldingsdirewolfTransportation
2026-08-27 14:31Rohloff GroupincransomManufacturing
2026-08-24 21:21FBCDeadlock—
2026-08-20 08:56Trends And ConceptsqilinOther

All ransomware victims in South Africa →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378🇵🇭 Philippines 351All countries →