Ghana (GH) Threat Intelligence

GH

Ghana has 3,330 malicious IP addresses with 137,953 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, ssh bruteforce, high threat. Top attacking networks: Scancom Limited (1,396 IPs), VODAFONE GHANA AS INTERNATIONAL TRANSIT (685 IPs), Teledata, Ghana (410 IPs). Data collected since 2025-05-05, last activity 2026-09-06.

Threat Assessment: Ghana exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by Scancom Limited and VODAFONE GHANA AS INTERNATIONAL TRANSIT.

Total Reports
137,953
Unique IPs
3,330
First Seen
2025-05-05
Last Activity
2026-09-06

Top Threat Categories

Suspicious Activity 2,694
Severe Abuse 2,118
Moderate Threat 480
Ssh Bruteforce 309
High Threat 73

Top Attacking Networks

AS30986 Scancom Limited
1,396 IPs
AS29614 VODAFONE GHANA AS INTERNATIONAL TRANSIT
685 IPs
AS35091 Teledata, Ghana
410 IPs

Most Reported IPs in Ghana

41.242.115.84 809 reports
41.242.115.83 801 reports
41.204.63.118 786 reports
102.223.92.101 745 reports
80.87.83.229 727 reports

Access this data via API

Get Ghana threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/GH

View full API documentation

See how we classify and verify threats →

Check any IP from Ghana

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS30986 Intelligence AS29614 Intelligence AS35091 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...