Ghana (GH) Threat Intelligence

GH

Ghana has 3,698 malicious IP addresses with 150,519 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, severe abuse. Top attacking networks: Scancom Limited (1,599 IPs), VODAFONE GHANA AS INTERNATIONAL TRANSIT (827 IPs), Teledata, Ghana (414 IPs). Data collected since 2025-05-05, last activity 2026-10-13.

Threat Assessment: Ghana exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Scancom Limited and VODAFONE GHANA AS INTERNATIONAL TRANSIT.

Total Reports
150,519
Unique IPs
3,698
First Seen
2025-05-05
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 15,763
Suspicious Activity 8,612
High Threat 6,346
Malware Distribution 3,741
Severe Abuse 2,118

Top Attacking Networks

AS30986 Scancom Limited
1,599 IPs
AS29614 VODAFONE GHANA AS INTERNATIONAL TRANSIT
827 IPs
AS35091 Teledata, Ghana
414 IPs

Most Reported IPs in Ghana

41.242.115.84 1,607 reports
41.242.115.83 1,598 reports
41.204.63.118 1,486 reports
102.223.92.101 1,329 reports
80.87.83.229 1,172 reports

Access this data via API

Get Ghana threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/GH

View full API documentation

See how we classify and verify threats →

Check any IP from Ghana

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS30986 Intelligence AS29614 Intelligence AS35091 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...